feat(helm): update rook-ceph group to v1.13.0 (minor) #6564
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![bot-ross[bot]](https://avatars.githubusercontent.com/in/165748?s=60&v=4){kind=small}
bot-ross
bot
added
area/kubernetes
--- kubernetes/main/apps/rook-ceph/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
+++ kubernetes/main/apps/rook-ceph/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
@@ -13,13 +13,13 @@
spec:
chart: rook-ceph
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.12.9
+ version: v1.13.0
dependsOn:
- name: snapshot-controller
namespace: kube-system
install:
remediation:
retries: 3
--- kubernetes/main/apps/rook-ceph/rook-ceph/cluster Kustomization: flux-system/rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster
+++ kubernetes/main/apps/rook-ceph/rook-ceph/cluster Kustomization: flux-system/rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster
@@ -13,13 +13,13 @@
spec:
chart: rook-ceph-cluster
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.12.9
+ version: v1.13.0
dependsOn:
- name: rook-ceph-operator
namespace: rook-ceph
- name: snapshot-controller
namespace: kube-system
install: |
--- kubernetes/main HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools
+++ kubernetes/main HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools
@@ -87,12 +87,19 @@
write_endpoints
# continuously update the mon endpoints if they fail over
watch_endpoints
imagePullPolicy: IfNotPresent
tty: true
+ securityContext:
+ capabilities:
+ drop:
+ - ALL
+ runAsGroup: 2016
+ runAsNonRoot: true
+ runAsUser: 2016
env:
- name: ROOK_CEPH_USERNAME
valueFrom:
secretKeyRef:
name: rook-ceph-mon
key: ceph-username
--- kubernetes/main HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi
+++ kubernetes/main HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi
@@ -0,0 +1,12 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephFilesystemSubVolumeGroup
+metadata:
+ name: ceph-filesystem-csi
+ namespace: rook-ceph
+spec:
+ name: csi
+ filesystemName: ceph-filesystem
+ pinning:
+ distributed: 1
+
--- kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
+++ kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
@@ -6,13 +6,12 @@
namespace: rook-ceph
data:
ROOK_LOG_LEVEL: INFO
ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: '15'
ROOK_OBC_WATCH_OPERATOR_NAMESPACE: 'true'
ROOK_CEPH_ALLOW_LOOP_DEVICES: 'false'
- ROOK_DISABLE_ADMISSION_CONTROLLER: 'true'
ROOK_ENABLE_DISCOVERY_DAEMON: 'false'
ROOK_CSI_ENABLE_RBD: 'true'
ROOK_CSI_ENABLE_CEPHFS: 'true'
CSI_ENABLE_CEPHFS_SNAPSHOTTER: 'true'
CSI_ENABLE_NFS_SNAPSHOTTER: 'true'
CSI_ENABLE_RBD_SNAPSHOTTER: 'true'
@@ -24,13 +23,12 @@
CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
CSI_RBD_FSGROUPPOLICY: File
CSI_CEPHFS_FSGROUPPOLICY: File
CSI_NFS_FSGROUPPOLICY: File
CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=secure
- ROOK_CSI_ENABLE_GRPC_METRICS: 'false'
ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
CSI_ENABLE_CSIADDONS: 'false'
ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.7.0
CSI_ENABLE_TOPOLOGY: 'false'
CSI_ENABLE_READ_AFFINITY: 'false'
ROOK_CSI_ENABLE_NFS: 'false'
--- kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-system
+++ kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-system
@@ -22,21 +22,12 @@
- ''
resources:
- pods/exec
verbs:
- create
- apiGroups:
- - admissionregistration.k8s.io
- resources:
- - validatingwebhookconfigurations
- verbs:
- - create
- - get
- - delete
- - update
-- apiGroups:
- csiaddons.openshift.io
resources:
- networkfences
verbs:
- create
- get
--- kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
+++ kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
@@ -13,13 +13,12 @@
- apiGroups:
- ''
resources:
- pods
- nodes
- nodes/proxy
- - services
- secrets
- configmaps
verbs:
- get
- list
- watch
@@ -27,12 +26,13 @@
- ''
resources:
- events
- persistentvolumes
- persistentvolumeclaims
- endpoints
+ - services
verbs:
- get
- list
- watch
- patch
- create
--- kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
+++ kubernetes/main HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
@@ -19,34 +19,36 @@
type: Recreate
template:
metadata:
labels:
app: rook-ceph-operator
spec:
+ tolerations:
+ - effect: NoExecute
+ key: node.kubernetes.io/unreachable
+ operator: Exists
+ tolerationSeconds: 5
containers:
- name: rook-ceph-operator
- image: rook/ceph:v1.12.9
+ image: rook/ceph:v1.13.0
imagePullPolicy: IfNotPresent
args:
- ceph
- operator
securityContext:
+ capabilities:
+ drop:
+ - ALL
+ runAsGroup: 2016
runAsNonRoot: true
runAsUser: 2016
- runAsGroup: 2016
volumeMounts:
- mountPath: /var/lib/rook
name: rook-config
- mountPath: /etc/ceph
name: default-config-dir
- - mountPath: /etc/webhook
- name: webhook-cert
- ports:
- - containerPort: 9443
- name: https-webhook
- protocol: TCP
env:
- name: ROOK_CURRENT_NAMESPACE_ONLY
value: 'false'
- name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
value: 'false'
- name: ROOK_DISABLE_DEVICE_HOTPLUG
@@ -75,9 +77,7 @@
serviceAccountName: rook-ceph-system
volumes:
- name: rook-config
emptyDir: {}
- name: default-config-dir
emptyDir: {}
- - name: webhook-cert
- emptyDir: {}
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.12.9->v1.13.0v1.12.9->v1.13.0Release Notes
rook/rook (rook-ceph)
v1.13.0Compare Source
Upgrade Guide
To upgrade from previous versions of Rook, see the Rook upgrade guide.
Breaking Changes
Features
cephConfigto the CephCluster CR to allow setting Ceph config options in the Ceph MON config store via the CRD. These settings supersede the ceph.conf override settings.ceph.rook.io/do-not-reconcilefor all Ceph daemons. This is helpful when using the debug command in the kubectl rook-ceph plugin.v1.12.10Compare Source
Improvements
Rook v1.12.10 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.