JankySolutions/infra
2
0
Fork 0
Code Issues Pull requests 9 Projects Releases Packages 12 Wiki Activity Actions

chore(deps): update helm release rook-ceph to v1.17.0 #149

Open
renovatebot wants to merge 1 commit from renovate/rook-ceph-1.x into main
pull from: renovate/rook-ceph-1.x
merge into: JankySolutions:main
Conversation 0 Commits 1 Files changed 2 +324 -36
renovatebot commented 2025-03-21 19:03:59 +00:00
Member
Copy link

This PR contains the following updates:

Package Type Update Change
rook-ceph HelmChart minor v1.16.3 -> v1.17.0

Release Notes

rook/rook (rook-ceph)

v1.17.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes

  • Kubernetes v1.28 is now the minimum version supported by Rook through the soon-to-be K8s release v1.33.
  • Several ObjectBucketClaim options were added previously in Rook v1.16 that allowed more control over buckets. These controls allow users to self-serve their own S3 policies. Administrators may consider this flexibility a risk, depending on their environment. Rook now disables these options by default to ensure the safest off-the-shelf configurations. To enable the full range of OBC configurations, the new setting ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS must be set to enable users to set all of these options. For more details, see the OBC additionalConfig documentation.
  • First-class credential management added to CephObjectStoreUser resources, allowing multiple credentials and declarative credential rotation. For more details, see Managing User S3 Credentials. As a result, existing S3 users provisioned via CephObjectStoreUser resources no longer allow multiple credentials to exist on underlying S3 users, unless explicitly managed by Rook. Rook will purge all but one of the undeclared credentials. This could be a user observable regression for administrators who manually edited/rotated S3 user credentials for CephObjectStoreUsers, and affected users can make use of the new credential management feature as an alternative.
  • Kafka notifications configured via CephBucketTopic resources will now default to setting the Kafka authentication mechanism to PLAIN. Previously, no auth mechanism was specified by default. It was possible to set the auth mechanism via CephBucketTopic.spec.endpoint.kafka.opaqueData. However, setting &mechanism=<auth type> via opaqueData is no longer possible. If any auth mechanism other than PLAIN is in use, modification to CephBucketTopic resources is required.

Features

  • The name of a pre-existing Ceph RGW user account can be set as the bucket owner on an ObjectBucketClaim (OBC), rather than a unique RGW user being created for every bucket. A CephObjectStoreUser resource may be used to create the Ceph RGW user account which will be specified on the OBC. If the bucket owner is set on a bucket that already exists and is owned by a different user, the bucket will be re-linked to the specified user.
  • The Ceph CSI 3.14 release has a number of features and improvements for RBD and CephFS volumes, volume snapshots, and many more areas. See the Ceph CSI 3.14 release notes for more details.
  • External mons: In some two-datacenter clusters, there is no option to start an arbiter mon in an independent K8s node to configure a proper stretch cluster. The external mons now allow a mon to be configured outside the Kubernetes cluster, while Rook manages everything else inside the cluster. For more details, see the External Mon documentation. This feature is in currently in experimental mode.
  • DNS resolution for mons: Allows clients outside the K8s cluster to resolve mon endpoints via DNS without requiring manual updates to the list of mon endpoints. This helps in scenarios such as virtual machine live migration. The Ceph client can connect to rook-ceph-active-mons..svc.cluster.local to dynamically resolve mon endpoints and receive automatic updates when mon IPs change. To configure this DNS resolution, see Tracking Mon Endpoints.
  • Node-specific ceph.conf overrides: The ceph.conf overrides can now be customized per-node. This may be helpful for some ceph.conf settings that need to be unique per node depending on the hardware. This can be configured by creating a node-specific configmap that will be loaded for all OSDs and OSD prepare jobs on that node, instead of the default settings that are loaded from the rook-config-override configmap.

v1.16.7

Compare Source

Improvements

Rook v1.16.7 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.16.6

Compare Source

Improvements

Rook v1.16.6 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.16.5

Compare Source

Improvements

Rook v1.16.5 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.16.4

Compare Source

Improvements

Rook v1.16.4 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [rook-ceph](https://github.com/rook/rook) | HelmChart | minor | `v1.16.3` -> `v1.17.0` | --- ### Release Notes <details> <summary>rook/rook (rook-ceph)</summary> ### [`v1.17.0`](https://github.com/rook/rook/releases/tag/v1.17.0) [Compare Source](https://github.com/rook/rook/compare/v1.16.7...v1.17.0) #### Upgrade Guide To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.17/Upgrade/rook-upgrade/). #### Breaking Changes - Kubernetes v1.28 is now the minimum version supported by Rook through the soon-to-be K8s release v1.33. - Several ObjectBucketClaim options were added previously in Rook v1.16 that allowed more control over buckets. These controls allow users to self-serve their own S3 policies. Administrators may consider this flexibility a risk, depending on their environment. Rook now disables these options by default to ensure the safest off-the-shelf configurations. To enable the full range of OBC configurations, the new setting `ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS` must be set to enable users to set all of these options. For more details, see the [OBC additionalConfig documentation](https://rook.io/docs/rook/v1.17/Storage-Configuration/Object-Storage-RGW/ceph-object-bucket-claim/#obc-custom-resource). - First-class credential management added to CephObjectStoreUser resources, allowing multiple credentials and declarative credential rotation. For more details, see [Managing User S3 Credentials](https://rook.io/docs/rook/v1.17/Storage-Configuration/Object-Storage-RGW/object-storage/#managing-user-s3-credentials). As a result, existing S3 users provisioned via CephObjectStoreUser resources no longer allow multiple credentials to exist on underlying S3 users, unless explicitly managed by Rook. Rook will purge all but one of the undeclared credentials. This could be a user observable regression for administrators who manually edited/rotated S3 user credentials for CephObjectStoreUsers, and affected users can make use of the new credential management feature as an alternative. - Kafka notifications configured via CephBucketTopic resources will now default to setting the Kafka authentication mechanism to `PLAIN`. Previously, no auth mechanism was specified by default. It was possible to set the auth mechanism via `CephBucketTopic.spec.endpoint.kafka.opaqueData`. However, setting `&mechanism=<auth type>` via `opaqueData` is no longer possible. If any auth mechanism other than `PLAIN` is in use, modification to `CephBucketTopic` resources is required. #### Features - The name of a pre-existing Ceph RGW user account can be set as the bucket owner on an ObjectBucketClaim (OBC), rather than a unique RGW user being created for every bucket. A CephObjectStoreUser resource may be used to create the Ceph RGW user account which will be specified on the OBC. If the bucket owner is set on a bucket that already exists and is owned by a different user, the bucket will be re-linked to the specified user. - The Ceph CSI 3.14 release has a number of features and improvements for RBD and CephFS volumes, volume snapshots, and many more areas. See the [Ceph CSI 3.14 release notes](https://github.com/ceph/ceph-csi/releases/tag/v3.14.0) for more details. - External mons: In some two-datacenter clusters, there is no option to start an arbiter mon in an independent K8s node to configure a proper [stretch cluster](https://rook.io/docs/rook/v1.17/CRDs/Cluster/stretch-cluster/). The external mons now allow a mon to be configured outside the Kubernetes cluster, while Rook manages everything else inside the cluster. For more details, see the [External Mon documentation](https://rook.io/docs/rook/v1.17/Storage-Configuration/Advanced/ceph-mon-health/#external-monitors). This feature is in currently in experimental mode. - DNS resolution for mons: Allows clients outside the K8s cluster to resolve mon endpoints via DNS without requiring manual updates to the list of mon endpoints. This helps in scenarios such as virtual machine live migration. The Ceph client can connect to rook-ceph-active-mons.<namespace>.svc.cluster.local to dynamically resolve mon endpoints and receive automatic updates when mon IPs change. To configure this DNS resolution, see [Tracking Mon Endpoints](https://rook.io/docs/rook/v1.17/Storage-Configuration/Advanced/ceph-mon-health/#tracking-mon-endpoints). - Node-specific ceph.conf overrides: The [ceph.conf overrides](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-configuration/#custom-cephconf-settings) can now be customized per-node. This may be helpful for some ceph.conf settings that need to be unique per node depending on the hardware. This can be configured by creating a node-specific configmap that will be loaded for all OSDs and OSD prepare jobs on that node, instead of the default settings that are loaded from the rook-config-override configmap. ### [`v1.16.7`](https://github.com/rook/rook/releases/tag/v1.16.7) [Compare Source](https://github.com/rook/rook/compare/v1.16.6...v1.16.7) ### Improvements Rook v1.16.7 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator. - core: Set default Ceph version to v19.2.2 ([#&#8203;15704](https://github.com/rook/rook/issues/15704), [@&#8203;travisn](https://github.com/travisn)) - mon: Ensure mon canary pods are cleaned up for multicluster service ([#&#8203;15718](https://github.com/rook/rook/issues/15718), [@&#8203;sp98](https://github.com/sp98)) - core: Print correct OSD ID in key rotation logs ([#&#8203;15727](https://github.com/rook/rook/issues/15727), [@&#8203;sp98](https://github.com/sp98)) - helm: Add labels to ingress resource ([#&#8203;15719](https://github.com/rook/rook/issues/15719), [@&#8203;chkpwd](https://github.com/chkpwd)) - core: Update cephstatus fsmap gid type to uint64 ([#&#8203;15690](https://github.com/rook/rook/issues/15690), [@&#8203;BlaineEXE](https://github.com/BlaineEXE)) - pool: Retry status update on fail ([#&#8203;15593](https://github.com/rook/rook/issues/15593), [@&#8203;prazumovsky](https://github.com/prazumovsky)) - helm: Allow specifying an ingress object store port to override default ([#&#8203;15669](https://github.com/rook/rook/issues/15669), [@&#8203;travisn](https://github.com/travisn)) - rbdmirror: Fix the rados namespace health checkup ([#&#8203;15677](https://github.com/rook/rook/issues/15677), [@&#8203;parth-gr](https://github.com/parth-gr)) - osd: Stabilize oscillating maxUnavailable in pdbs in case of node drain ([#&#8203;15634](https://github.com/rook/rook/issues/15634), [@&#8203;sp98](https://github.com/sp98)) - ci: Update x/net version to fix snyk report ([#&#8203;15659](https://github.com/rook/rook/issues/15659), [@&#8203;subhamkrai](https://github.com/subhamkrai)) - nfs: Set allow_set_io_flusher_fail=true in config ([#&#8203;15652](https://github.com/rook/rook/issues/15652), [@&#8203;BlaineEXE](https://github.com/BlaineEXE)) ### [`v1.16.6`](https://github.com/rook/rook/releases/tag/v1.16.6) [Compare Source](https://github.com/rook/rook/compare/v1.16.5...v1.16.6) ### Improvements Rook v1.16.6 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator. - ci: Publish the Helm charts to OCI repos ([#&#8203;15542](https://github.com/rook/rook/issues/15542), [@&#8203;a1994sc](https://github.com/a1994sc)) - osd: Adjust OSD PDBs if they are down but PGs are clean ([#&#8203;15408](https://github.com/rook/rook/issues/15408), [@&#8203;sp98](https://github.com/sp98)) - build: bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 ([#&#8203;15561](https://github.com/rook/rook/issues/15561), [@&#8203;dependabot](https://github.com/dependabot)\[bot]) - csi: Update ceph csi release version to v3.13.1 ([#&#8203;15510](https://github.com/rook/rook/issues/15510), [@&#8203;yati1998](https://github.com/yati1998)) - object: All CephBucketTopic reconcile errors set .status.phase ([#&#8203;15562](https://github.com/rook/rook/issues/15562), [@&#8203;jhoblitt](https://github.com/jhoblitt)) - operator: Set dns policy for host network if needed ([#&#8203;15553](https://github.com/rook/rook/issues/15553), [@&#8203;travisn](https://github.com/travisn)) - core: Improve error messages from ceph commands ([#&#8203;15528](https://github.com/rook/rook/issues/15528), [@&#8203;Madhu-1](https://github.com/Madhu-1)) - docs: Update commands for [zapping devices](https://rook.io/docs/rook/latest-release/Getting-Started/ceph-teardown/#zapping-devices) during cluster cleanup ([#&#8203;15565](https://github.com/rook/rook/issues/15565), [@&#8203;puskunalis](https://github.com/puskunalis)) ### [`v1.16.5`](https://github.com/rook/rook/releases/tag/v1.16.5) [Compare Source](https://github.com/rook/rook/compare/v1.16.4...v1.16.5) ### Improvements Rook v1.16.5 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator. - ci: Push rook image to repositories quay.io and ghcr.io ([#&#8203;15274](https://github.com/rook/rook/issues/15274), [@&#8203;subhamkrai](https://github.com/subhamkrai)) - object: Allow overriding rgw config value from secret ([#&#8203;15426](https://github.com/rook/rook/issues/15426), [@&#8203;arttor](https://github.com/arttor)) - exporter: Add missing rook-ceph-exporter container port definition ([#&#8203;15496](https://github.com/rook/rook/issues/15496), [@&#8203;patrostkowski](https://github.com/patrostkowski)) - mgr: Wait for builtin mgr pool to exist before enabling stretch ([#&#8203;15470](https://github.com/rook/rook/issues/15470), [@&#8203;travisn](https://github.com/travisn)) - security: bump go-jose package from 4.0.4 to 4.0.5 ([#&#8203;15456](https://github.com/rook/rook/issues/15456), [@&#8203;dependabot](https://github.com/dependabot)) - mds: Correct parameters to mds liveness probe ([#&#8203;15424](https://github.com/rook/rook/issues/15424), [@&#8203;parth-gr](https://github.com/parth-gr)) - docs: Add comprehensive Rook Ceph cluster maintenance guide ([#&#8203;15455](https://github.com/rook/rook/issues/15455), [@&#8203;patrostkowski](https://github.com/patrostkowski)) - core: Query env vars instead of polling the operator settings configmap ([#&#8203;15442](https://github.com/rook/rook/issues/15442), [@&#8203;travisn](https://github.com/travisn)) - csi-addons: Bind cephfs and rbd provisioners on non-colliding ports ([#&#8203;15433](https://github.com/rook/rook/issues/15433), [@&#8203;SkalaNetworks](https://github.com/SkalaNetworks)) - helm: Quote object store ingress hostname ([#&#8203;15443](https://github.com/rook/rook/issues/15443), [@&#8203;FabianPonce](https://github.com/FabianPonce)) ### [`v1.16.4`](https://github.com/rook/rook/releases/tag/v1.16.4) [Compare Source](https://github.com/rook/rook/compare/v1.16.3...v1.16.4) ### Improvements Rook v1.16.4 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator. - manifest: Update default Ceph version to v19.2.1 ([#&#8203;15392](https://github.com/rook/rook/issues/15392), [@&#8203;subhamkrai](https://github.com/subhamkrai)) - osd: Avoid lvm device scan deadlock in activate ([#&#8203;15377](https://github.com/rook/rook/issues/15377), [@&#8203;sfackler](https://github.com/sfackler)) - nfs: Workaround nfs-ganesha config parser for single quotes ([#&#8203;15393](https://github.com/rook/rook/issues/15393), [@&#8203;BlaineEXE](https://github.com/BlaineEXE)) - osd: Enable osd ok-to-stop checks on single node where there are at least three OSDs ([#&#8203;15370](https://github.com/rook/rook/issues/15370), [@&#8203;travisn](https://github.com/travisn)) - helm: Support for custom pod labels in operator deployment config ([#&#8203;15372](https://github.com/rook/rook/issues/15372), [@&#8203;hans-fischer](https://github.com/hans-fischer)) - helm: Fix hardcoded namespace in cephECBlockPool StorageClass ([#&#8203;15402](https://github.com/rook/rook/issues/15402), [@&#8203;KarolGongola](https://github.com/KarolGongola)) - helm: add support for ingress path type ([#&#8203;15385](https://github.com/rook/rook/issues/15385), [@&#8203;HoKim98](https://github.com/HoKim98)) - helm: Fix deploy notes documentation link to CRDs ([#&#8203;15404](https://github.com/rook/rook/issues/15404), [@&#8203;jcookin](https://github.com/jcookin)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xMS41IiwidXBkYXRlZEluVmVyIjoiMzkuMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovatebot added 1 commit 2025-03-21 19:03:59 +00:00
chore(deps): update helm release rook-ceph to v1.16.5
All checks were successful
/ render-helm (push) Successful in 26s
Details
b45a4b44fe
renovatebot force-pushed renovate/rook-ceph-1.x from b45a4b44fe to c3f5927384 2025-03-27 20:04:01 +00:00 Compare
renovatebot changed title from chore(deps): update helm release rook-ceph to v1.16.5 to chore(deps): update helm release rook-ceph to v1.16.6 2025-03-27 20:04:05 +00:00
renovatebot force-pushed renovate/rook-ceph-1.x from c3f5927384 to 8364aece1b 2025-04-16 19:03:32 +00:00 Compare
renovatebot changed title from chore(deps): update helm release rook-ceph to v1.16.6 to chore(deps): update helm release rook-ceph to v1.16.7 2025-04-16 19:03:35 +00:00
renovatebot force-pushed renovate/rook-ceph-1.x from 8364aece1b to fd88ca9308 2025-04-16 20:03:54 +00:00 Compare
renovatebot changed title from chore(deps): update helm release rook-ceph to v1.16.7 to chore(deps): update helm release rook-ceph to v1.17.0 2025-04-16 20:03:56 +00:00
All checks were successful
/ render-helm (push) Successful in 29s
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/rook-ceph-1.x:renovate/rook-ceph-1.x
git checkout renovate/rook-ceph-1.x

Merge

Merge the changes and update on Forgejo.
git checkout main
git merge --no-ff renovate/rook-ceph-1.x
git checkout renovate/rook-ceph-1.x
git rebase main
git checkout main
git merge --ff-only renovate/rook-ceph-1.x
git checkout renovate/rook-ceph-1.x
git rebase main
git checkout main
git merge --no-ff renovate/rook-ceph-1.x
git checkout main
git merge --squash renovate/rook-ceph-1.x
git checkout main
git merge --ff-only renovate/rook-ceph-1.x
git checkout main
git merge renovate/rook-ceph-1.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: JankySolutions/infra#149
No description provided.
Delete branch "renovate/rook-ceph-1.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?