Commit Graph
11997 Commits
Author SHA1 Message Date
Travis Nielsen 4eed2a644f Merge pull request #15433 from SkalaNetworks/master
fix(csi-addons): bind cephfs and rbd provisionners on non-colliding p…
2025-02-24 12:06:57 -07:00
Blaine Gardner 84fc8afade Merge pull request #15443 from FabianPonce/patch-2
helm: quote object store ingress hostname
2025-02-24 11:32:47 -07:00
subham rai 258de8c8cd Merge pull request #15447 from rook/dependabot/github_actions/actions/upload-artifact-4.6.1
build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
2025-02-24 21:49:13 +05:30
subham rai c6b46e10b0 Merge pull request #15448 from rook/dependabot/github_actions/azure/setup-helm-4.3.0
build(deps): bump azure/setup-helm from 4.2.0 to 4.3.0
2025-02-24 21:42:35 +05:30
subham rai 52ff9484e7 Merge pull request #15449 from rook/dependabot/github_actions/github/codeql-action-3.28.10
build(deps): bump github/codeql-action from 3.28.9 to 3.28.10
2025-02-24 21:41:53 +05:30
subham rai 567fa44e45 Merge pull request #15450 from rook/dependabot/github_actions/ossf/scorecard-action-2.4.1
build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
2025-02-24 21:41:24 +05:30
dependabot[bot] d6028eefea build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/62b2cac7ed8198b15735ed49ab1e5cf35480ba46...f49aabe0b5af0936a0987cfb85d86b75731b0186)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 13:33:20 +00:00
dependabot[bot] 24d93a6744 build(deps): bump github/codeql-action from 3.28.9 to 3.28.10
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.9 to 3.28.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0...b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 13:33:16 +00:00
dependabot[bot] d2c041901d build(deps): bump azure/setup-helm from 4.2.0 to 4.3.0
Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 4.2.0 to 4.3.0.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](https://github.com/azure/setup-helm/compare/fe7b79cd5ee1e45176fcad797de68ecaf3ca4814...b9e51907a09c216f16ebe8536097933489208112)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 13:33:12 +00:00
dependabot[bot] 99f8a77960 build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-24 13:33:08 +00:00
Skala Networks d3c3d25c60 csi: bind cephfs and rbd provisionners on non-colliding ports for hostNetwork setups
Signed-off-by: Skala Networks <contact@skala.network>
2025-02-23 06:31:43 -05:00
Travis Nielsen 81d9159c2d Merge pull request #15441 from VirajJadhav/patch-1
doc: Authenticated Container Registry | Typo for imagePullSecrets
2025-02-22 12:27:13 -07:00
Viraj Jadhav 659d574633 doc: typo for imagePullSecrets
Signed-off-by: Viraj Jadhav <vjadhav7@slb.com>
2025-02-22 18:25:51 +05:30
Fabian Ponce 7467f19c23 helm: quote object store ingress hostname
Kubernetes permits wildcards as leading members of this field, but if it is not quoted, then there will be a YAML parsing error.

Signed-off-by: Fabian Ponce <me@fabianponce.com>
2025-02-21 22:26:58 -05:00
Travis Nielsen 2181170811 Merge pull request #15370 from travisn/osd-upgrade-checks
osd: Enable osd ok-to-stop checks on single node where there are at least three OSDs
2025-02-20 12:52:03 -07:00
Travis Nielsen 24b14601f8 Merge pull request #15410 from rook/dependabot/github_actions/golangci/golangci-lint-action-6.5.0
build(deps): bump golangci/golangci-lint-action from 6.3.1 to 6.5.0
2025-02-20 12:33:28 -07:00
Travis Nielsen 8f79b58edc Merge pull request #15392 from subhamkrai/update-ceph-v19.2.1
manifest: Update default ceph version to v19.2.1
2025-02-20 11:41:06 -07:00
subhamkrai 0e395f0a67 manifest: update default ceph version to v19.2.1
with ceph release v19.2.1 updating it to be dafult version
in rook.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-02-20 23:24:54 +05:30
Travis Nielsen 272deabdd8 Merge pull request #15431 from subhamkrai/fix-keystone-ci
ci: wait for pod before exec into pod
2025-02-20 10:28:56 -07:00
subhamkrai 45e76204bf ci: wait for pod before exec into pod
keystone integration test has recentally starting to fail
as pod with lable osc-admin-admin was not in running status
and we're trying to exec into the pod.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-02-20 12:25:07 +05:30
Blaine Gardner 26d5441844 Merge pull request #15429 from BlaineEXE/pend-release-note
doc: add obc allow list to pending release notes
2025-02-19 12:54:32 -07:00
Blaine Gardner 88bf8dd475 doc: add obc allow list to pending release notes
Add a note about the upcoming potentially-breaking change to OBCs to the
v1.17 release notes. This covers usage of
`ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS` for OBC fields that some
admins might not want exposed to users.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-02-19 12:10:06 -07:00
Blaine Gardner 73c931fc0a Merge pull request #15376 from BlaineEXE/obc-allow-list-obc-fields
object: disallow unsafe OBC fields by default
2025-02-19 12:00:54 -07:00
subham rai 63335dbf69 Merge pull request #15409 from rook/dependabot/github_actions/aws-actions/configure-aws-credentials-4.1.0
build(deps): bump aws-actions/configure-aws-credentials from 4.0.3 to 4.1.0
2025-02-19 13:34:09 +05:30
Travis Nielsen 42454bd80e Merge pull request #15421 from nixpanic/roadmap/ceph-csi-v3.14
docs: update link to Ceph-CSI v3.14 milestone
2025-02-18 10:14:46 -07:00
Niels de Vos bc8cc83852 docs: update link to Ceph-CSI v3.14 milestone
Signed-off-by: Niels de Vos <ndevos@ibm.com>
2025-02-18 15:52:38 +01:00
Travis Nielsen 3e52c6a59e Merge pull request #15399 from black-dragon74/add-csiaddonsnode-watcher-rbacs
manifest: Add list and watch capabilities to provisioners
2025-02-18 07:29:02 -07:00
Travis Nielsen 2e3c8c1f2a Merge pull request #15372 from hans-fischer/operator-podlabels
helm: add support for custom pod labels in operator deployment config…
2025-02-18 06:55:49 -07:00
Travis Nielsen c6c4ec2e87 Merge pull request #15402 from KarolGongola/fix_helm_chart_hardcoded_namespace_in_cephecblockpool
helm: Fix hardcoded namespace in cephECBlockPool StorageClass
2025-02-17 16:14:00 -07:00
Hans Fischer 1d37ac02c5 helm: add support for custom pod labels in operator deployment configuration
This adds a podLabel to the values yaml that will be
propagated to the rook-ceph-operator pod.

Signed-off-by: Hans Fischer <mail@hans-fischer.com>
2025-02-17 15:16:41 -07:00
Karol Gongola cf67cc26db helm: fix hardcoded namespace in cephecblockpool storageclass
I have realised that in cephECBlockPool is hardcocded 'rook-ceph' namespace, so this chart is not working if cluster has been created in different namespace. This change replaces hardcoded namespace with templated one.

Signed-off-by: Karol Gongola <karol.gongola@gmail.com>
2025-02-17 23:08:23 +01:00
Travis Nielsen 87e4092792 Merge pull request #15385 from ulagbulag/helm/add-support-for-ingress-path-type
helm: add support for ingress path type
2025-02-17 14:40:24 -07:00
Travis Nielsen f67b1ad240 Merge pull request #15404 from jcookin/helm-notes-docs-link
helm: Fix deploy notes documentation link to CRDs
2025-02-17 13:46:07 -07:00
dependabot[bot] 278f45b0bc build(deps): bump golangci/golangci-lint-action from 6.3.1 to 6.5.0
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.3.1 to 6.5.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/2e788936b09dd82dc280e845628a40d2ba6b204c...2226d7cb06a077cd73e56eedd38eecad18e5d837)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-17 13:00:51 +00:00
dependabot[bot] c898875de8 build(deps): bump aws-actions/configure-aws-credentials
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 4.0.3 to 4.1.0.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/4fc4975a852c8cd99761e2de1f4ba73402e44dd9...ececac1a45f3b08a01d2dd070d28d111c5fe6722)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-02-17 13:00:47 +00:00
Niraj Yadav ece302f35b manifest: add list and watch capabilities to provisioners
This patch adds `list` and `watch` verbs to cephfs and rbd
provisioner roles for CSIAddonNode objects.

Signed-off-by: Niraj Yadav <niryadav@redhat.com>
2025-02-17 15:32:21 +05:30
jcookin 70afe3c97c helm: fix deploy notes documentation link to CRDs
Signed-off-by: jcookin <56096898+jcookin@users.noreply.github.com>
2025-02-15 20:49:39 -07:00
Blaine Gardner 13cf8f0996 Merge pull request #15393 from BlaineEXE/fix-broken-nfs
nfs: workaround broken nfs-ganesha config parser
2025-02-13 09:51:36 -07:00
Blaine Gardner 55d1a86755 nfs: workaround broken nfs-ganesha config parser
NFS-Ganesha introduced a breaking change in its config parser that no
longer accepts single quotes around values. This seems to be working for
most Ceph release images, but this was seen in at least one dev build of
Ceph.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-02-13 09:25:07 -07:00
Blaine Gardner 022d68e98b Merge pull request #15371 from jhoblitt/plumbing/user-controller-no-state
object: rm ReconcileObjectStoreUser.userConfig field
2025-02-13 08:53:31 -07:00
subham rai ed4a539ffd Merge pull request #15395 from bipuladh/fix-clr
csi: moves rbac for Tokenreview API from role to cluster role
2025-02-13 17:17:33 +05:30
Satoru Takeuchi 9ddab0165b Merge pull request #15377 from sfackler/lvs-deadlock
osd: avoid lvm device scan deadlock in activate
2025-02-13 18:47:40 +09:00
Bipul Adhikari d25b26e890 csi: moves rbac for Tokenreview API from role to cluster role
CSI addons sidecar requires clusterrole permission for Tokenreview
Tokenreview is a cluster scoped API

Signed-off-by: Bipul Adhikari <badhikar@redhat.com>
2025-02-13 14:44:48 +05:45
Blaine Gardner 0e33536539 object: disallow unsafe OBC fields by default
Implement an allow list mechanism that disables potentially unsafe OBC
fields by default. OBC fields beyond `maxObjects` and `maxSize` don't
neatly fit into the OBC framework as it was originally envisioned and
implemented.

Some of the newly added configs could allow users to cause confusion for
themselves. Others might allow users to hijack others buckets. Some
might allow bricking the entire S3 store.

Out of an abundance of safety, allow-list the known-safe options by
default, and require administrators to enable potentially troublesome
options via the new operator-level config
`ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS`.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-02-12 14:18:01 -07:00
Blaine Gardner e24b9f56e9 Merge pull request #15387 from subhamkrai/update-prometheus-pkg
build: update prometheus to latest version v0.80.0
2025-02-12 08:55:19 -07:00
Ho Kim 0ed667b806 helm: add support for ingress path type 2025-02-11 06:14:52 +00:00
subham rai e4c6acab54 Merge pull request #15380 from rook/dependabot/go_modules/golang.org/x/sync-0.11.0
build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0
2025-02-11 11:40:08 +05:30
subhamkrai e546bdb370 build: update prometheus to latest version v0.80.0
Signed-off-by: subhamkrai <srai@redhat.com>
2025-02-11 11:38:55 +05:30
subham rai 0d36985b99 Merge pull request #15381 from rook/dependabot/github_actions/github/codeql-action-3.28.9
build(deps): bump github/codeql-action from 3.28.8 to 3.28.9
2025-02-11 11:20:13 +05:30
subham rai 38ac23fa99 Merge pull request #15382 from rook/dependabot/github_actions/golangci/golangci-lint-action-6.3.1
build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.1
2025-02-11 11:19:28 +05:30