Patch OraOperator, fix version

Author: gotsysdba

.github/workflows/releases.yml

@@ -39,10 +39,10 @@ jobs:
           echo "Tag validated: $TAG_NAME"
           echo "VERSION=$VERSION" >> $GITHUB_OUTPUT
 
-      - name: Inject Static Version into _version.py and version.tf
+      - name: Inject Static Version into _version.py and versions.tf
         run: |
           echo "__version__ = \"$VERSION\"" > src/common/_version.py
-          sed -i "s/app_version = \".*\"/app_version = \"$VERSION\"/" opentofu/versions.tf
+          sed -i "s/app_version[[:space:]]*=[[:space:]]*\".*\"/app_version    = \"$VERSION\"/" opentofu/versions.tf
           echo "Injected version:"
           cat src/common/_version.py
           cat opentofu/versions.tf

opentofu/cfgmgt/apply.py

@@ -124,6 +124,35 @@ def apply_manifest():
     retry(apply_manifest_inner)
 
 
+def patch_oracle_operator_inner():
+    """Patch Oracle Database Operator deployment to disable readOnlyRootFilesystem"""
+    print("🔧 Patching oracle-database-operator deployment...")
+    cmd = [
+        "kubectl",
+        "-n",
+        "oracle-database-operator-system",
+        "patch",
+        "deployment",
+        "oracle-database-operator-controller-manager",
+        "--type",
+        "json",
+        "-p",
+        '[{"op": "replace", "path": "/spec/template/spec/containers/0/securityContext/readOnlyRootFilesystem", "value": false}]',
+    ]
+    _, stderr, rc = run_cmd(cmd, capture_output=False)
+    if rc == 0:
+        print("✅ Oracle operator patched.\n")
+        return True
+    else:
+        print(f"❌ Failed to patch operator:\n{stderr}")
+        return False
+
+
+def patch_oracle_operator():
+    """Retry Enabled Patch Oracle Operator"""
+    retry(patch_oracle_operator_inner)
+
+
 # --- Entry Point ---
 if __name__ == "__main__":
     parser = argparse.ArgumentParser(description="Apply a Helm chart and a Kubernetes manifest.")
@@ -132,4 +161,5 @@ def apply_manifest():
     args = parser.parse_args()
 
     apply_manifest()
+    patch_oracle_operator()
     apply_helm_chart(args.release_name, args.namespace)