chore(deps): update ghcr.io/containeroo/agent-forge-operator docker tag to v1.2.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ghcr.io/containeroo/agent-forge-operator	Kustomization	minor	v1.1.4 → v1.2.3

---

Release Notes

containeroo/agent-forge-operator (ghcr.io/containeroo/agent-forge-operator)

v1.2.3

Compare Source

Fix ISO cache verification during rolling worker replacement.

• When the image service confirms the source is unchanged and a pool VM still references the cached ISO, defer datastore checksum verification until ejection. Preserve the cached identity and verification timestamp, and expose VerificationDeferred explicitly.
• Keep changed-source and forced refresh behavior, checksum verification of unmounted files, and real error alerts.
• Record cache verification failures in logs and Kubernetes warning events so diagnostics survive recovery.

Validation: unit tests, lint, and vSphere simulator tests passed, including deferred verification followed by verification after ejection.

No CRD or configuration changes are required. A live rolling replacement is still needed to confirm the mounted-media path on ESXi.

v1.2.2

Compare Source

Changelog

• 60fff4d chore(release): prepare v1.2.2
• 7ee4371 fix: revalidate ISO cache using source modification dates

Stable ISO cache revalidation

Use the image service Last-Modified date for conditional requests. An unchanged source reuses the SHA-256-verified datastore ISO rather than creating versions for regenerated token signatures. Changed URLs, changed cache locations, and explicit force-refresh annotations bypass the conditional request. Missing or corrupt cached files are repaired; sources without valid modification dates continue to use full downloads.

Apply the updated VsphereAgentPool CRD before the controller so status.iso.lastModified is persisted. Existing caches need one initial full download to establish the validator. ISO retention and ejection opt-in settings are unchanged.

Validation: unit tests, lint, vSphere simulator revalidation/repair tests, component renders, and a read-only live image-service 304 response check passed.

v1.2.1

Compare Source

Changelog

• ac301ad chore(release): prepare v1.2.1
• 9aa876e fix: recognize vSphere CD-lock affirmative button identifier

CD-lock handling fix

Recognizes the vSphere button.yes choice identifier when answering the verified msg.cdromdisconnect.locked question. In v1.2.0 this response was rejected as unexpected and could leave the VM waiting on a CD-lock prompt. The answer key is read from the response; unrelated questions and changed operation identities remain rejected.

ISO ejection remains disabled by default. Regression tests cover the observed vSphere response, localized summaries, recovery, and rejection of unrelated or negative choices. Unit tests, lint, and vSphere simulator tests passed. A fresh live installation canary remains to be performed before broader opt-in.

v1.2.0

Compare Source

Changelog

• a7fbb9d chore(release): prepare v1.2.0
• a8726d1 feat: add opt-in discovery ISO ejection with restart recovery
• f35462e chore: merge PR #​49 (fix(deps): update module github.com/onsi/ginkgo/v2 to v2.33.0)
• 5f2e27d chore: merge PR #​48 (fix(deps): update module github.com/onsi/gomega to v1.43.1)
• 9e31e49 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.33.0
• e2738d7 fix(deps): update module github.com/onsi/gomega to v1.43.1
• 3fa2692 Merge branch 'renovate-pr-47'
• 23eae57 fix(deps): update module sigs.k8s.io/controller-runtime to v0.25.1
• 964b5b2 test: keep vcsim datastore helper test-only
• 18f6c37 Merge remote-tracking branch 'refs/remotes/origin/pr-46'
• 7b1cafa chore(deps): update ghcr.io/containeroo/agent-forge-operator docker tag to v1.1.4

Upgrade notes

This release adds per-pool opt-in discovery ISO ejection after Assisted Installer reports Installed=True, including existing installed workers. Ejection verifies VM identity, handles the specific guest CD-lock question, and persists operation state for restart recovery.

Automatic ejection defaults to disabled. Enable it only on a canary VsphereAgentPool first:

spec:
  iso:
    ejectAfterInstall: true

Disabling the flag stops new ejections but completes recorded in-progress operations. Validate live locked-drive ejection, reboot, and scale-down before enabling other pools; automated tests include lifecycle, recovery, and vSphere simulator coverage, but no live cluster rollout has been performed.

Apply updated CRDs before upgrading the controller. Helm does not update crds/ during a normal upgrade. Both the opt-in field and VsphereAgent.status.isoEjection recovery fields are required:

kubectl apply -f https://github.com/containeroo/agent-forge-operator/releases/download/v1.2.0/crds.yaml

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.