v2.3.0
This release brings a few existing new features.
First of all, DRBD 9.2.6 gained support for encrypting traffic with TLS. This needs a user space component to set up. This can now automatically be set up by setting .spec.internalTLS.tlsHandshakeDaemon: true
in the LinstorSatelliteConfiguration
.
Next, sometimes you may want to disable specific components such as the HA Controller. This can be achieved by setting .spec.highAvailabilityController.enabled: false
in the LinstorCluster
resource. This also works for the controller
, csiController´ and
csiNode` components.
There is also now an easy way to update the Pod Template used for all components. See the various podTemplate:
values in the API reference. This works the same as creating a patch manually, but should be much more user friendly.
Next, we ripped out the NetworkPolicy
from the default deployment: This caused users trouble when using some CNIs. There is now a specific guide.
Talking about guides, there are guides on how to set up basic monitoring with Prometheus.
Added
- Add a new option
.spec.internalTLS.tlsHandshakeDaemon
to enable deployment oftlshd
alongside the LINSTOR
Satellite. - Shortcuts to configure specific components. Components can be disabled by setting
enabled: false
, and the deployed
workload can be influenced using thepodTemplate
value. Available components:LinstorCluster.spec.controller
LinstorCluster.spec.csiController
LinstorCluster.spec.csiNode
LinstorCluster.spec.highAvailabilityController
- Shortcut to modify the pod of a satellite by adding a
LinstorSatelliteConfiguration.spec.podTemplate
, which is
a shortcut for creating a.spec.patches
patch.
Changed
- Fixed service resources relying on default protocol version.
- Moved NetworkPolicy for DRBD out of default deployed resources.
- Updated images:
- LINSTOR 1.25.1
- LINSTOR CSI 1.3.0
- DRBD Reactor 1.4.0
- Latest CSI sidecars
- Add a default toleration for the HA Controller taints to the operator.