Update KubeVirt to v1.5.0 and CDI to v1.62.0

- Update KubeVirt to version v1.5.0 - Update CDI to version v1.62.0 - Update KubeVirt using auto-generated helm charts - Update CDI using auto-generated helm charts - Update the base image of the init container in the virt-operator KubeVirt pod - Commit code was auto-generated Test Plan: PASS: Launch and login to a test VM PASS: Importing a qcow image using CDI and login to the console PASS: App upload, apply, remove, and delete PASS: Updated from Kubevirt v1.1.0 and CDI v1.58.0 Story: 2011402 Task: 51967 Change-Id: I22da91953adb0993c4bef1e109006c34dc7ef390 Signed-off-by: Gleb Aronsky <gleb.aronsky@windriver.com>
2025-04-11 18:08:12 +00:00
parent 599ea2fa9f
commit 05d761cd28
23 changed files with 6692 additions and 6128 deletions
--- a/python3-k8sapp-kubevirt/k8sapp_kubevirt/k8sapp_kubevirt/common/constants.py
+++ b/python3-k8sapp-kubevirt/k8sapp_kubevirt/k8sapp_kubevirt/common/constants.py
@@ -1,9 +1,11 @@
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
 # All Rights Reserved.
 #
+#    - Auto Updated Contents 2025-04-11 18:08:12 -
+
 """  Kubevirt application predefined constants """

 HELM_APP_KUBEVIRT = 'kubevirt-app'
@@ -26,7 +28,7 @@ HELM_APP_CDI_CRD = 'cdis.cdi.kubevirt.io'
 HELM_NS_CDI = 'cdi'

 HELM_VIRTCTL_DIR = '/var/opt/kubevirt/'
-HELM_VIRTCTL_FILE_NAME = 'virtctl-v1.1.0-linux-amd64'
+HELM_VIRTCTL_FILE_NAME = 'virtctl-v1.5.0-linux-amd64'
 HELM_VIRTCTL_LINK_NAME = 'virtctl'
 HELM_VIRTCTL_PATH = HELM_VIRTCTL_DIR + HELM_VIRTCTL_FILE_NAME
 HELM_VIRTCTL_LINK_PATH = HELM_VIRTCTL_DIR + HELM_VIRTCTL_LINK_NAME
--- a/stx-kubevirt-app-helm/docker/Dockerfile
+++ b/stx-kubevirt-app-helm/docker/Dockerfile
@@ -1,11 +1,13 @@
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
 # All Rights Reserved.
 #
+#    - Auto Updated Contents 2025-04-11 18:08:12 -
+
 ARG BASE
 FROM ${BASE}
-ADD https://github.com/kubevirt/kubevirt/releases/download/v1.1.0/virtctl-v1.1.0-linux-amd64 .
-RUN chmod a+rwx ./virtctl-v1.1.0-linux-amd64
+ADD https://github.com/kubevirt/kubevirt/releases/download/v1.5.0/virtctl-v1.5.0-linux-amd64 .
+RUN chmod a+rwx ./virtctl-v1.5.0-linux-amd64
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/fluxcd-manifests/kubevirt-app/helmrelease.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/fluxcd-manifests/kubevirt-app/helmrelease.yaml
@@ -1,8 +1,10 @@
 #
-## Copyright (c) 2024 Wind River Systems, Inc.
+## Copyright (c) 2025 Wind River Systems, Inc.
 ##
 ## SPDX-License-Identifier: Apache-2.0
 #
+#    - Auto Updated Contents 2025-04-11 18:08:12 -
+
 ---
 apiVersion: "helm.toolkit.fluxcd.io/v2"
 kind: HelmRelease
@@ -16,7 +18,7 @@ spec:
  chart:
    spec:
      chart: kubevirt-app
-      version: 1.1.0
+      version: 1.5.0
      sourceRef:
        kind: HelmRepository
        name: stx-platform-kubevirt
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/Chart.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/Chart.yaml
@@ -1,11 +1,13 @@
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
+#    - Auto Updated Contents 2025-04-11 18:08:12 -
+
 ---
 apiVersion: v2
-appVersion: 1.1.0
+appVersion: 1.5.0
 description: A Helm chart for KubeVirt
 name: kubevirt-app
 type: application
-version: 1.1.0
+version: 1.5.0
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/crds/cdi-customresourcedefinition.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/crds/cdi-customresourcedefinition.yaml
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/crds/kubevirt-customresourcedefinition.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/crds/kubevirt-customresourcedefinition.yaml
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-clusterrole.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-clusterrole.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -94,6 +94,7 @@ rules:
  - admissionregistration.k8s.io
  resourceNames:
  - cdi-api-datavolume-mutate
+  - cdi-api-pvc-mutate
  resources:
  - mutatingwebhookconfigurations
  verbs:
@@ -131,6 +132,24 @@ rules:
  - persistentvolumeclaims
  verbs:
  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
  - ''
  resources:
@@ -143,6 +162,8 @@ rules:
  - volumesnapshots
  verbs:
  - get
+  - list
+  - watch
 - apiGroups:
  - cdi.kubevirt.io
  resources:
@@ -156,12 +177,38 @@ rules:
  - datasources
  verbs:
  - get
+- apiGroups:
+  - cdi.kubevirt.io
+  resources:
+  - volumeclonesources
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - cdi.kubevirt.io
+  resources:
+  - storageprofiles
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
  - cdi.kubevirt.io
  resources:
  - cdis
  verbs:
  - get
+  - list
+  - watch
+- apiGroups:
+  - cdi.kubevirt.io
+  resources:
+  - cdiconfigs
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
  - cdi.kubevirt.io
  resources:
@@ -235,10 +282,17 @@ rules:
  - config.openshift.io
  resources:
  - proxies
+  - infrastructures
  verbs:
  - get
  - list
  - watch
+- apiGroups:
+  - config.openshift.io
+  resources:
+  - clusterversions
+  verbs:
+  - get
 - apiGroups:
  - cdi.kubevirt.io
  resources:
@@ -300,6 +354,15 @@ rules:
  - virtualmachines/finalizers
  verbs:
  - update
+- apiGroups:
+  - forklift.cdi.kubevirt.io
+  resources:
+  - ovirtvolumepopulators
+  - openstackvolumepopulators
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
  - ''
  resources:
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-clusterrolebinding.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-clusterrolebinding.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-deployment.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-deployment.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -23,6 +23,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
  labels:
+    cdi.kubevirt.io: cdi-operator
    name: cdi-operator
    operator.cdi.kubevirt.io: ''
    prometheus.cdi.kubevirt.io: 'true'
@@ -37,23 +38,40 @@ spec:
  strategy: {}
  template:
    metadata:
+      annotations:
+        openshift.io/required-scc: restricted-v2
      labels:
+        cdi.kubevirt.io: cdi-operator
        name: cdi-operator
        operator.cdi.kubevirt.io: ''
        prometheus.cdi.kubevirt.io: 'true'
    spec:
+      affinity:
+        podAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - podAffinityTerm:
+              labelSelector:
+                matchExpressions:
+                - key: cdi.kubevirt.io
+                  operator: In
+                  values:
+                  - cdi-operator
+              topologyKey: kubernetes.io/hostname
+            weight: 1
      containers:
      - env:
        - name: DEPLOY_CLUSTER_RESOURCES
          value: 'true'
        - name: OPERATOR_VERSION
-          value: v1.58.0
+          value: v1.62.0
        - name: CONTROLLER_IMAGE
-          value: {{ .Values.cdi.images.tags.cdiControlerImage }}
+          value: {{ .Values.cdi.images.tags.cdiControllerImage }}
        - name: IMPORTER_IMAGE
          value: {{ .Values.cdi.images.tags.cdiImporterImage }}
        - name: CLONER_IMAGE
          value: {{ .Values.cdi.images.tags.cdiClonerImage }}
+        - name: OVIRT_POPULATOR_IMAGE
+          value: {{ .Values.cdi.images.tags.cdiImporterImage }}
        - name: APISERVER_IMAGE
          value: {{ .Values.cdi.images.tags.cdiApiServerImage }}
        - name: UPLOAD_SERVER_IMAGE
@@ -83,6 +101,8 @@ spec:
          runAsNonRoot: true
          seccompProfile:
            type: RuntimeDefault
+        terminationMessagePath: /dev/termination-log
+        terminationMessagePolicy: File
      imagePullSecrets:
      - name: {{ .Values.cdi.imagePullSecrets }}
      nodeSelector:
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-role.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-role.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -23,6 +23,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
  labels:
+    app: containerized-data-importer
    app.kubernetes.io/component: storage
    app.kubernetes.io/managed-by: cdi-operator
    cdi.kubevirt.io: ''
@@ -148,14 +149,14 @@ rules:
  - watch
  - create
  - update
-  - delete
+  - deletecollection
 - apiGroups:
  - batch
  resources:
  - jobs
  verbs:
  - create
-  - delete
+  - deletecollection
  - list
  - watch
 - apiGroups:
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-rolebinding.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-rolebinding.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -37,6 +37,7 @@ apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
  labels:
+    app: containerized-data-importer
    app.kubernetes.io/component: storage
    app.kubernetes.io/managed-by: cdi-operator
    cdi.kubevirt.io: ''
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-serviceaccount.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi-serviceaccount.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/cdi.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-clusterrole.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-clusterrole.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -197,6 +197,8 @@ rules:
  resources:
  - validatingwebhookconfigurations
  - mutatingwebhookconfigurations
+  - validatingadmissionpolicybindings
+  - validatingadmissionpolicies
  verbs:
  - get
  - list
@@ -373,14 +375,6 @@ rules:
  - create
  - list
  - get
- apiGroups:
-  - ''
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
  - ''
  resources:
@@ -490,15 +484,36 @@ rules:
 - apiGroups:
  - snapshot.kubevirt.io
  resources:
-  - '*'
+  - virtualmachinesnapshots
+  - virtualmachinesnapshots/status
+  - virtualmachinesnapshots/finalizers
+  - virtualmachinesnapshotcontents
+  - virtualmachinesnapshotcontents/status
+  - virtualmachinesnapshotcontents/finalizers
+  - virtualmachinerestores
+  - virtualmachinerestores/status
  verbs:
-  - '*'
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - delete
+  - patch
 - apiGroups:
  - export.kubevirt.io
  resources:
-  - '*'
+  - virtualmachineexports
+  - virtualmachineexports/status
+  - virtualmachineexports/finalizers
  verbs:
-  - '*'
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - delete
+  - patch
 - apiGroups:
  - pool.kubevirt.io
  resources:
@@ -520,13 +535,22 @@ rules:
  - '*'
  verbs:
  - '*'
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - virtualmachines/finalizers
+  - virtualmachineinstances/finalizers
+  verbs:
+  - update
 - apiGroups:
  - subresources.kubevirt.io
  resources:
+  - virtualmachines/stop
  - virtualmachineinstances/addvolume
  - virtualmachineinstances/removevolume
  - virtualmachineinstances/freeze
  - virtualmachineinstances/unfreeze
+  - virtualmachineinstances/reset
  - virtualmachineinstances/softreboot
  - virtualmachineinstances/sev/setupsession
  - virtualmachineinstances/sev/injectlaunchsecret
@@ -631,41 +655,13 @@ rules:
  - list
  - watch
 - apiGroups:
-  - route.openshift.io
+  - batch
  resources:
-  - routes
+  - jobs
  verbs:
-  - list
-  - get
-  - watch
- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - list
-  - get
-  - watch
- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses
-  verbs:
-  - list
-  - get
-  - watch
- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - get
-  - list
-  - watch
-  - delete
-  - update
  - create
-  - patch
+  - get
+  - delete
 - apiGroups:
  - kubevirt.io
  resources:
@@ -722,14 +718,6 @@ rules:
  - get
  - list
  - watch
- apiGroups:
-  - ''
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - list
-  - watch
 - apiGroups:
  - export.kubevirt.io
  resources:
@@ -746,15 +734,12 @@ rules:
  - list
  - watch
 - apiGroups:
-  - ''
-  resourceNames:
-  - kubevirt-export-ca
+  - kubevirt.io
  resources:
-  - configmaps
+  - kubevirts
  verbs:
  - get
  - list
-  - watch
 - apiGroups:
  - subresources.kubevirt.io
  resources:
@@ -775,6 +760,7 @@ rules:
  - virtualmachineinstances/userlist
  - virtualmachineinstances/sev/fetchcertchain
  - virtualmachineinstances/sev/querylaunchmeasurement
+  - virtualmachineinstances/usbredir
  verbs:
  - get
 - apiGroups:
@@ -787,6 +773,7 @@ rules:
  - virtualmachineinstances/freeze
  - virtualmachineinstances/unfreeze
  - virtualmachineinstances/softreboot
+  - virtualmachineinstances/reset
  - virtualmachineinstances/sev/setupsession
  - virtualmachineinstances/sev/injectlaunchsecret
  verbs:
@@ -806,7 +793,6 @@ rules:
  - virtualmachines/restart
  - virtualmachines/addvolume
  - virtualmachines/removevolume
-  - virtualmachines/migrate
  - virtualmachines/memorydump
  verbs:
  - update
@@ -823,7 +809,6 @@ rules:
  - virtualmachineinstances
  - virtualmachineinstancepresets
  - virtualmachineinstancereplicasets
-  - virtualmachineinstancemigrations
  verbs:
  - get
  - delete
@@ -833,6 +818,14 @@ rules:
  - list
  - watch
  - deletecollection
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - virtualmachineinstancemigrations
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
  - snapshot.kubevirt.io
  resources:
@@ -923,6 +916,7 @@ rules:
  - virtualmachineinstances/userlist
  - virtualmachineinstances/sev/fetchcertchain
  - virtualmachineinstances/sev/querylaunchmeasurement
+  - virtualmachineinstances/usbredir
  verbs:
  - get
 - apiGroups:
@@ -935,6 +929,7 @@ rules:
  - virtualmachineinstances/freeze
  - virtualmachineinstances/unfreeze
  - virtualmachineinstances/softreboot
+  - virtualmachineinstances/reset
  - virtualmachineinstances/sev/setupsession
  - virtualmachineinstances/sev/injectlaunchsecret
  verbs:
@@ -954,7 +949,6 @@ rules:
  - virtualmachines/restart
  - virtualmachines/addvolume
  - virtualmachines/removevolume
-  - virtualmachines/migrate
  - virtualmachines/memorydump
  verbs:
  - update
@@ -971,7 +965,6 @@ rules:
  - virtualmachineinstances
  - virtualmachineinstancepresets
  - virtualmachineinstancereplicasets
-  - virtualmachineinstancemigrations
  verbs:
  - get
  - delete
@@ -980,6 +973,14 @@ rules:
  - patch
  - list
  - watch
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - virtualmachineinstancemigrations
+  verbs:
+  - get
+  - list
+  - watch
 - apiGroups:
  - snapshot.kubevirt.io
  resources:
@@ -1060,6 +1061,13 @@ rules:
  - get
  - list
  - watch
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - kubevirts
+  verbs:
+  - get
+  - list
 - apiGroups:
  - subresources.kubevirt.io
  resources:
@@ -1151,6 +1159,25 @@ rules:
  - get
  - list
  - watch
+- apiGroups:
+  - subresources.kubevirt.io
+  resources:
+  - virtualmachines/migrate
+  verbs:
+  - update
+- apiGroups:
+  - kubevirt.io
+  resources:
+  - virtualmachineinstancemigrations
+  verbs:
+  - get
+  - delete
+  - create
+  - update
+  - patch
+  - list
+  - watch
+  - deletecollection
 - apiGroups:
  - authentication.k8s.io
  resources:
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-clusterrolebinding.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-clusterrolebinding.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-daemonset.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-daemonset.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-deployment.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-deployment.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -35,6 +35,8 @@ spec:
    type: RollingUpdate
  template:
    metadata:
+      annotations:
+        openshift.io/required-scc: restricted-v2
      labels:
        kubevirt.io: virt-operator
        name: virt-operator
@@ -69,7 +71,7 @@ spec:
            fieldRef:
              fieldPath: metadata.annotations['olm.targetNamespaces']
        - name: KUBEVIRT_VERSION
-          value: v1.1.0
+          value: v1.5.0
        image: {{ .Values.kubevirt.images.tags.virtOperatorImage }}
        imagePullPolicy: IfNotPresent
        name: virt-operator
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-priorityclass.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-priorityclass.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-role.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-role.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
@@ -87,3 +87,65 @@ rules:
  - update
  - create
  - patch
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - route.openshift.io
+  resources:
+  - routes
+  verbs:
+  - list
+  - get
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - list
+  - get
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses
+  verbs:
+  - list
+  - get
+  - watch
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - delete
+  - update
+  - create
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resourceNames:
+  - kubevirt-export-ca
+  resources:
+  - configmaps
+  verbs:
+  - get
+  - list
+  - watch
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-rolebinding.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-rolebinding.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-serviceaccount.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt-serviceaccount.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/templates/kubevirt.yaml
@@ -10,7 +10,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 #
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
--- a/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/values.yaml
+++ b/stx-kubevirt-app-helm/stx-kubevirt-app-helm/helm-charts/kubevirt-app/values.yaml
@@ -1,17 +1,27 @@
-# Copyright (c) 2024 Wind River Systems, Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# Copyright (c) 2025 Wind River Systems, Inc.
 #
 # SPDX-License-Identifier: Apache-2.0
 #
+#
+#  [This file was auto-generated]
+#
+#

-# Default values for kubevirt-app.
-# This is a YAML-formatted file.
-# Declare variables to be passed into your templates.
+# Helm Values file for KubeVirt v1.5.0 and CDI v1.62.0
 ---
-
-# KubeVirt v1.1.0 configuration
-kubevirt:
-  replicas: 1
-  componentType: "platform"
+cdi:
  certificateRotate:
    ca:
      duration: 1440h
@@ -19,54 +29,51 @@ kubevirt:
    server:
      duration: 1440h
      renewBefore: 720h
+  componentType: platform
+  containerPorts:
+    metricsPort: 8080
  featureGates:
-    - Snapshot
+  - HonorWaitForFirstConsumer
+  imagePullSecrets: default-registry-key
  images:
    tags:
-      virtCtlImage: docker.io/starlingx/stx-kubevirt-app:stx.8.0-v1.1.0
-      virtOperatorImage: quay.io/kubevirt/virt-operator:v1.1.0
-      virtControllerImage: quay.io/kubevirt/virt-controller:v1.1.0
-      virtLauncherImage: quay.io/kubevirt/virt-launcher:v1.1.0
-      virtHandlerImage: quay.io/kubevirt/virt-handler:v1.1.0
-      virtApiImage: quay.io/kubevirt/virt-api:v1.1.0
-  version: "v1.1.0"
-  imagePullSecrets: default-registry-key
+      cdiApiServerImage: quay.io/kubevirt/cdi-apiserver:v1.62.0
+      cdiClonerImage: quay.io/kubevirt/cdi-cloner:v1.62.0
+      cdiControllerImage: quay.io/kubevirt/cdi-controller:v1.62.0
+      cdiImporterImage: quay.io/kubevirt/cdi-importer:v1.62.0
+      cdiOperatorImage: quay.io/kubevirt/cdi-operator:v1.62.0
+      cdiUploadProxyImage: quay.io/kubevirt/cdi-uploadproxy:v1.62.0
+      cdiUploadServerImage: quay.io/kubevirt/cdi-uploadserver:v1.62.0
+  replicas: 1
  resources:
    requests:
-      # This value for memory come from the upstream yaml
-      memory: 400Mi
+      memory: 150Mi
+kubevirt:
+  certificateRotate:
+    ca:
+      duration: 1440h
+      renewBefore: 720h
+    server:
+      duration: 1440h
+      renewBefore: 720h
+  componentType: platform
  containerPorts:
    metricsPort: 8443
    webhooksPort: 8444
-  readinessProbePort: 8443
-
-
-# CDI v1.58.0 (Containerized Data Importer) configuration
-cdi:
-  replicas: 1
-  componentType: "platform"
-  certificateRotate:
-    ca:
-      duration: 1440h
-      renewBefore: 720h
-    server:
-      duration: 1440h
-      renewBefore: 720h
  featureGates:
-    - HonorWaitForFirstConsumer
+  - Snapshot
+  imagePullSecrets: default-registry-key
  images:
    tags:
-      cdiOperatorImage: quay.io/kubevirt/cdi-operator:v1.58.0
-      cdiControlerImage: quay.io/kubevirt/cdi-controller:v1.58.0
-      cdiImporterImage: quay.io/kubevirt/cdi-importer:v1.58.0
-      cdiClonerImage: quay.io/kubevirt/cdi-cloner:v1.58.0
-      cdiApiServerImage: quay.io/kubevirt/cdi-apiserver:v1.58.0
-      cdiUploadServerImage: quay.io/kubevirt/cdi-uploadserver:v1.58.0
-      cdiUploadProxyImage: quay.io/kubevirt/cdi-uploadproxy:v1.58.0
-  imagePullSecrets: default-registry-key
+      virtApiImage: quay.io/kubevirt/virt-api:v1.5.0
+      virtControllerImage: quay.io/kubevirt/virt-controller:v1.5.0
+      virtCtlImage: docker.io/starlingx/stx-kubevirt-app:v1.5.0
+      virtHandlerImage: quay.io/kubevirt/virt-handler:v1.5.0
+      virtLauncherImage: quay.io/kubevirt/virt-launcher:v1.5.0
+      virtOperatorImage: quay.io/kubevirt/virt-operator:v1.5.0
+  readinessProbePort: 8443
+  replicas: 1
  resources:
    requests:
-      # The values for memory comes from the upstream yaml
-      memory: 150Mi
-  containerPorts:
-    metricsPort: 8080
+      memory: 400Mi
+  version: v1.5.0