diff --git a/ci-operator/config/openshift/bpfman-operator/OWNERS b/ci-operator/config/openshift/bpfman-operator/OWNERS
new file mode 100644
index 000000000000..c10224e228cd
--- /dev/null
+++ b/ci-operator/config/openshift/bpfman-operator/OWNERS
@@ -0,0 +1,19 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman-operator root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
diff --git a/ci-operator/config/openshift/bpfman-operator/openshift-bpfman-operator-main.yaml b/ci-operator/config/openshift/bpfman-operator/openshift-bpfman-operator-main.yaml
new file mode 100644
index 000000000000..2b538e6c1484
--- /dev/null
+++ b/ci-operator/config/openshift/bpfman-operator/openshift-bpfman-operator-main.yaml
@@ -0,0 +1,93 @@
+base_images:
+  bpfman:
+    name: "4.18"
+    namespace: ocp
+    tag: bpfman
+  kube-rbac-proxy:
+    name: "4.18"
+    namespace: ocp
+    tag: kube-rbac-proxy
+  ocp_builder_rhel-9-base-openshift-4.18:
+    name: builder
+    namespace: ocp
+    tag: rhel-9-base-openshift-4.18
+  ocp_builder_rhel-9-golang-1.22-openshift-4.18:
+    name: builder
+    namespace: ocp
+    tag: rhel-9-golang-1.22-openshift-4.18
+  operator-sdk:
+    name: "4.18"
+    namespace: origin
+    tag: operator-sdk
+build_root:
+  from_repository: true
+images:
+- dockerfile_path: Containerfile.bpfman-operator.openshift
+  inputs:
+    ocp_builder_rhel-9-base-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-base-openshift-4.18
+    ocp_builder_rhel-9-golang-1.22-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.22-openshift-4.18
+  to: bpfman-operator
+- dockerfile_path: Containerfile.bpfman-agent.openshift
+  inputs:
+    ocp_builder_rhel-9-base-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-base-openshift-4.18
+    ocp_builder_rhel-9-golang-1.22-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.22-openshift-4.18
+  to: bpfman-agent
+- dockerfile_path: Containerfile.bundle.openshift
+  to: bpfman-operator-bundle
+operator:
+  bundles:
+  - as: operatorbundle
+    dockerfile_path: Containerfile.bundle.openshift
+    skip_building_index: true
+  substitutions:
+  - pullspec: quay.io/openshift/origin-bpfman:4.18
+    with: pipeline:bpfman
+  - pullspec: quay.io/openshift/origin-bpfman-operator:4.18
+    with: pipeline:bpfman-operator
+  - pullspec: quay.io/openshift/origin-bpfman-agent:4.18
+    with: pipeline:bpfman-agent
+  - pullspec: quay.io/openshift/origin-kube-rbac-proxy:4.17
+    with: pipeline:kube-rbac-proxy
+promotion:
+  to:
+  - name: bpfman-4.18
+    namespace: origin
+  - name: "4.18"
+    namespace: ocp
+releases:
+  initial:
+    integration:
+      name: "4.18"
+      namespace: ocp
+  latest:
+    integration:
+      include_built_images: true
+      name: "4.18"
+      namespace: ocp
+resources:
+  '*':
+    limits:
+      memory: 4Gi
+    requests:
+      cpu: 100m
+      memory: 200Mi
+tests:
+- as: security
+  optional: true
+  steps:
+    env:
+      PROJECT_NAME: bpfman-operator
+      SNYK_CODE_ADDITIONAL_ARGS: --severity-threshold=high --policy-path=.snyk
+    workflow: openshift-ci-security
+zz_generated_metadata:
+  branch: main
+  org: openshift
+  repo: bpfman-operator
diff --git a/ci-operator/config/openshift/bpfman/OWNERS b/ci-operator/config/openshift/bpfman/OWNERS
new file mode 100644
index 000000000000..ad31a9b0b2e4
--- /dev/null
+++ b/ci-operator/config/openshift/bpfman/OWNERS
@@ -0,0 +1,19 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
diff --git a/ci-operator/config/openshift/bpfman/openshift-bpfman-main.yaml b/ci-operator/config/openshift/bpfman/openshift-bpfman-main.yaml
new file mode 100644
index 000000000000..db65744ae321
--- /dev/null
+++ b/ci-operator/config/openshift/bpfman/openshift-bpfman-main.yaml
@@ -0,0 +1,49 @@
+base_images:
+  ocp_builder_rhel-9-base-openshift-4.18:
+    name: builder
+    namespace: ocp
+    tag: rhel-9-base-openshift-4.18
+build_root:
+  from_repository: true
+images:
+- dockerfile_path: Containerfile.bpfman.openshift
+  inputs:
+    ocp_builder_rhel-9-base-openshift-4.18:
+      as:
+      - registry.ci.openshift.org/ocp/builder:rhel-9-base-openshift-4.18
+  to: bpfman
+promotion:
+  to:
+  - name: bpfman-4.18
+    namespace: origin
+  - name: "4.18"
+    namespace: ocp
+releases:
+  initial:
+    integration:
+      name: "4.18"
+      namespace: ocp
+  latest:
+    integration:
+      include_built_images: true
+      name: "4.18"
+      namespace: ocp
+resources:
+  '*':
+    limits:
+      memory: 4Gi
+    requests:
+      cpu: 100m
+      memory: 200Mi
+tests:
+- as: security
+  optional: true
+  steps:
+    env:
+      PROJECT_NAME: bpfman
+      SNYK_CODE_ADDITIONAL_ARGS: --severity-threshold=high --policy-path=.snyk
+    workflow: openshift-ci-security
+zz_generated_metadata:
+  branch: main
+  org: openshift
+  repo: bpfman
diff --git a/ci-operator/jobs/openshift/bpfman-operator/OWNERS b/ci-operator/jobs/openshift/bpfman-operator/OWNERS
new file mode 100644
index 000000000000..f320ad635e9b
--- /dev/null
+++ b/ci-operator/jobs/openshift/bpfman-operator/OWNERS
@@ -0,0 +1,20 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+
diff --git a/ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-postsubmits.yaml b/ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-postsubmits.yaml
new file mode 100644
index 000000000000..f8ca9139f3ad
--- /dev/null
+++ b/ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-postsubmits.yaml
@@ -0,0 +1,60 @@
+postsubmits:
+  openshift/bpfman-operator:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    cluster: build03
+    decorate: true
+    labels:
+      ci-operator.openshift.io/is-promotion: "true"
+      ci.openshift.io/generator: prowgen
+    max_concurrency: 1
+    name: branch-ci-openshift-bpfman-operator-main-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson
+        - --promote
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/push-secret
+          name: push-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: push-secret
+        secret:
+          secretName: registry-push-credentials-ci-central
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
diff --git a/ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-presubmits.yaml b/ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-presubmits.yaml
new file mode 100644
index 000000000000..35384c1ac6ef
--- /dev/null
+++ b/ci-operator/jobs/openshift/bpfman-operator/openshift-bpfman-operator-main-presubmits.yaml
@@ -0,0 +1,170 @@
+presubmits:
+  openshift/bpfman-operator:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build03
+    context: ci/prow/ci-bundle-operatorbundle
+    decorate: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-bpfman-operator-main-ci-bundle-operatorbundle
+    rerun_command: /test ci-bundle-operatorbundle
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --target=operatorbundle
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )ci-bundle-operatorbundle,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build03
+    context: ci/prow/images
+    decorate: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-bpfman-operator-main-images
+    rerun_command: /test images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        - --target=[release:latest]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )images,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build03
+    context: ci/prow/security
+    decorate: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-bpfman-operator-main-security
+    optional: true
+    rerun_command: /test security
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --secret-dir=/secrets/ci-pull-credentials
+        - --target=security
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/ci-pull-credentials
+          name: ci-pull-credentials
+          readOnly: true
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: ci-pull-credentials
+        secret:
+          secretName: ci-pull-credentials
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )security,?($|\s.*)
diff --git a/ci-operator/jobs/openshift/bpfman/OWNERS b/ci-operator/jobs/openshift/bpfman/OWNERS
new file mode 100644
index 000000000000..f320ad635e9b
--- /dev/null
+++ b/ci-operator/jobs/openshift/bpfman/OWNERS
@@ -0,0 +1,20 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+
diff --git a/ci-operator/jobs/openshift/bpfman/openshift-bpfman-main-postsubmits.yaml b/ci-operator/jobs/openshift/bpfman/openshift-bpfman-main-postsubmits.yaml
new file mode 100644
index 000000000000..ff86376a1203
--- /dev/null
+++ b/ci-operator/jobs/openshift/bpfman/openshift-bpfman-main-postsubmits.yaml
@@ -0,0 +1,60 @@
+postsubmits:
+  openshift/bpfman:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    cluster: build03
+    decorate: true
+    labels:
+      ci-operator.openshift.io/is-promotion: "true"
+      ci.openshift.io/generator: prowgen
+    max_concurrency: 1
+    name: branch-ci-openshift-bpfman-main-images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --image-mirror-push-secret=/etc/push-secret/.dockerconfigjson
+        - --promote
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/push-secret
+          name: push-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: push-secret
+        secret:
+          secretName: registry-push-credentials-ci-central
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
diff --git a/ci-operator/jobs/openshift/bpfman/openshift-bpfman-main-presubmits.yaml b/ci-operator/jobs/openshift/bpfman/openshift-bpfman-main-presubmits.yaml
new file mode 100644
index 000000000000..2f91487e5500
--- /dev/null
+++ b/ci-operator/jobs/openshift/bpfman/openshift-bpfman-main-presubmits.yaml
@@ -0,0 +1,117 @@
+presubmits:
+  openshift/bpfman:
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build03
+    context: ci/prow/images
+    decorate: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-bpfman-main-images
+    rerun_command: /test images
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --target=[images]
+        - --target=[release:latest]
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )images,?($|\s.*)
+  - agent: kubernetes
+    always_run: true
+    branches:
+    - ^main$
+    - ^main-
+    cluster: build03
+    context: ci/prow/security
+    decorate: true
+    labels:
+      ci.openshift.io/generator: prowgen
+      pj-rehearse.openshift.io/can-be-rehearsed: "true"
+    name: pull-ci-openshift-bpfman-main-security
+    optional: true
+    rerun_command: /test security
+    spec:
+      containers:
+      - args:
+        - --gcs-upload-secret=/secrets/gcs/service-account.json
+        - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --report-credentials-file=/etc/report/credentials
+        - --secret-dir=/secrets/ci-pull-credentials
+        - --target=security
+        command:
+        - ci-operator
+        image: ci-operator:latest
+        imagePullPolicy: Always
+        name: ""
+        resources:
+          requests:
+            cpu: 10m
+        volumeMounts:
+        - mountPath: /secrets/ci-pull-credentials
+          name: ci-pull-credentials
+          readOnly: true
+        - mountPath: /secrets/gcs
+          name: gcs-credentials
+          readOnly: true
+        - mountPath: /secrets/manifest-tool
+          name: manifest-tool-local-pusher
+          readOnly: true
+        - mountPath: /etc/pull-secret
+          name: pull-secret
+          readOnly: true
+        - mountPath: /etc/report
+          name: result-aggregator
+          readOnly: true
+      serviceAccountName: ci-operator
+      volumes:
+      - name: ci-pull-credentials
+        secret:
+          secretName: ci-pull-credentials
+      - name: manifest-tool-local-pusher
+        secret:
+          secretName: manifest-tool-local-pusher
+      - name: pull-secret
+        secret:
+          secretName: registry-pull-credentials
+      - name: result-aggregator
+        secret:
+          secretName: result-aggregator
+    trigger: (?m)^/test( | .* )security,?($|\s.*)
diff --git a/core-services/prow/02_config/openshift/bpfman-operator/OWNERS b/core-services/prow/02_config/openshift/bpfman-operator/OWNERS
new file mode 100644
index 000000000000..c10224e228cd
--- /dev/null
+++ b/core-services/prow/02_config/openshift/bpfman-operator/OWNERS
@@ -0,0 +1,19 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman-operator root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
diff --git a/core-services/prow/02_config/openshift/bpfman-operator/_pluginconfig.yaml b/core-services/prow/02_config/openshift/bpfman-operator/_pluginconfig.yaml
new file mode 100644
index 000000000000..d98357e1827a
--- /dev/null
+++ b/core-services/prow/02_config/openshift/bpfman-operator/_pluginconfig.yaml
@@ -0,0 +1,28 @@
+approve:
+- commandHelpLink: ""
+  repos:
+  - openshift/bpfman-operator
+  require_self_approval: false
+label:
+  restricted_labels:
+    openshift/bpfman-operator:
+    - allowed_users:
+      - anfredette
+      - billy99
+      - dave-tucker
+      - frobware
+      - msherif1234
+      label: backport-risk-assessed
+    - allowed_users:
+      - anuragthehatter
+      assign_on:
+      - label: backport-risk-assessed
+      label: cherry-pick-approved
+lgtm:
+- repos:
+  - openshift/bpfman-operator
+  review_acts_as_lgtm: true
+plugins:
+  openshift/bpfman-operator:
+    plugins:
+    - approve
diff --git a/core-services/prow/02_config/openshift/bpfman-operator/_prowconfig.yaml b/core-services/prow/02_config/openshift/bpfman-operator/_prowconfig.yaml
new file mode 100644
index 000000000000..ac85d6d0c0d6
--- /dev/null
+++ b/core-services/prow/02_config/openshift/bpfman-operator/_prowconfig.yaml
@@ -0,0 +1,66 @@
+tide:
+  queries:
+  - includedBranches:
+    - openshift-4.18
+    labels:
+    - approved
+    - backport-risk-assessed
+    - cherry-pick-approved
+    - jira/valid-bug
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift/bpfman-operator
+  - includedBranches:
+    - openshift-4.18
+    - release-4.18
+    labels:
+    - approved
+    - jira/valid-bug
+    - lgtm
+    - staff-eng-approved
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift/bpfman-operator
+  - includedBranches:
+    - main
+    labels:
+    - approved
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - keep-main-query-separate
+    - needs-rebase
+    repos:
+    - openshift/bpfman-operator
+  - excludedBranches:
+    - main
+    - openshift-4.18
+    labels:
+    - approved
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift/bpfman-operator
diff --git a/core-services/prow/02_config/openshift/bpfman/OWNERS b/core-services/prow/02_config/openshift/bpfman/OWNERS
new file mode 100644
index 000000000000..ad31a9b0b2e4
--- /dev/null
+++ b/core-services/prow/02_config/openshift/bpfman/OWNERS
@@ -0,0 +1,19 @@
+# DO NOT EDIT; this file is auto-generated using https://github.com/openshift/ci-tools.
+# Fetched from https://github.com/openshift/bpfman root OWNERS
+# If the repo had OWNERS_ALIASES then the aliases were expanded
+# Logins who are not members of 'openshift' organization were filtered out
+# See the OWNERS docs: https://git.k8s.io/community/contributors/guide/owners.md
+
+approvers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
+options: {}
+reviewers:
+- anfredette
+- billy99
+- dave-tucker
+- frobware
+- msherif1234
diff --git a/core-services/prow/02_config/openshift/bpfman/_pluginconfig.yaml b/core-services/prow/02_config/openshift/bpfman/_pluginconfig.yaml
new file mode 100644
index 000000000000..9090540c32f9
--- /dev/null
+++ b/core-services/prow/02_config/openshift/bpfman/_pluginconfig.yaml
@@ -0,0 +1,28 @@
+approve:
+- commandHelpLink: ""
+  repos:
+  - openshift/bpfman
+  require_self_approval: false
+label:
+  restricted_labels:
+    openshift/bpfman:
+    - allowed_users:
+      - anfredette
+      - billy99
+      - dave-tucker
+      - frobware
+      - msherif1234
+      label: backport-risk-assessed
+    - allowed_users:
+      - anuragthehatter
+      assign_on:
+      - label: backport-risk-assessed
+      label: cherry-pick-approved
+lgtm:
+- repos:
+  - openshift/bpfman
+  review_acts_as_lgtm: true
+plugins:
+  openshift/bpfman:
+    plugins:
+    - approve
diff --git a/core-services/prow/02_config/openshift/bpfman/_prowconfig.yaml b/core-services/prow/02_config/openshift/bpfman/_prowconfig.yaml
new file mode 100644
index 000000000000..500b2ae063b8
--- /dev/null
+++ b/core-services/prow/02_config/openshift/bpfman/_prowconfig.yaml
@@ -0,0 +1,66 @@
+tide:
+  queries:
+  - includedBranches:
+    - openshift-4.18
+    labels:
+    - approved
+    - backport-risk-assessed
+    - cherry-pick-approved
+    - jira/valid-bug
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift/bpfman
+  - includedBranches:
+    - openshift-4.18
+    - release-4.18
+    labels:
+    - approved
+    - jira/valid-bug
+    - lgtm
+    - staff-eng-approved
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift/bpfman
+  - includedBranches:
+    - main
+    labels:
+    - approved
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - keep-main-query-separate
+    - needs-rebase
+    repos:
+    - openshift/bpfman
+  - excludedBranches:
+    - main
+    - openshift-4.18
+    labels:
+    - approved
+    - lgtm
+    missingLabels:
+    - backports/unvalidated-commits
+    - do-not-merge/hold
+    - do-not-merge/invalid-owners-file
+    - do-not-merge/work-in-progress
+    - jira/invalid-bug
+    - needs-rebase
+    repos:
+    - openshift/bpfman