adding missing doc step for csi-operator deployment
in the example configuration step.
Signed-off-by: subhamkrai <srai@redhat.com>
(cherry picked from commit 1cc30bddc8)
It has only been used by the flex driver which is long gone.
This removes the nodes/proxy RBAC grant from the helm chart, the example
YAMl and the security design docs.
Signed-off-by: Tobias Florek <me@ibotty.net>
(cherry picked from commit db814dcd4b)
The image pull policy was expected to be set in the cephcluster
CR or else the helm deployment would fail. Now we set the expected
default to pull if not present.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit 090fc3c369)
Update the CA bundle volume mount permissions to read-all (o444). RGW
runs as 'ceph', but the volume mount defaults to 'root'. o444 ensures
the RGW can read the bundle.
Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
(cherry picked from commit 5e3f7f8bc0)
into a single combined integration-test-setup-cluster-resources
workflow. This ensures that the same gha runner preparation, go version,
etc. is used for both the canary and integration tests.
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit c5bfe3a806)
In CI, lock the minikube version. This is important to ensure that when
release branches are created from master, the minikube version is locked
to a version that will forever support the desired k8s version. If the
latest minikube version is used, CI for older releases will eventually
break when the latest minikube no longer supports the older k8s version.
Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
(cherry picked from commit 68a688946e)
The do-not-reconcile label on the mon deployments was
causing the mon reconcile to be skipped for all mons,
even if the label was only on a single mon. Now, the
skipping of reconcile will only be scoped to a single
mon.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit d315d0ce46)
Add ceph version check to determine CA bundle configuration method.
Ceph Tentacle+ supports CURL_CA_BUNDLE environment variable, while older
versions require system CA trust update via init container.
Signed-off-by: Sunnatillo <sunnat.samadov@est.tech>
(cherry picked from commit a97233102d)
This mounts custom CA bundle directly to the RGW container at
/etc/ceph/rgw-ca-bundle/ and CURL_CA_BUNDLE points to the certificate
file. Ceph changes regarding CURL_CA_BUNDLE variable is in this PR:
https://github.com/ceph/ceph/pull/44283
This change simplifies the CA bundle handling by:
- Removing the update-ca-trust init container and related volumes
- Mounting the CA bundle secret directly to the RGW pod
Signed-off-by: Sunnatillo <sunnat.samadov@est.tech>
(cherry picked from commit 0189e2fd9a)
Update docs to reflect that useAllNodes should be set to false when
providing configuration for individual nodes.
Signed-off-by: Santosh <sapillai@redhat.com>
(cherry picked from commit c42032f6f8)
updating the ci to use latest k8s version
1.35.0 and also update patch version of older
k8s version.
Signed-off-by: subhamkrai <srai@redhat.com>
(cherry picked from commit 810d2b0218)
The setting for concurrent clusters is now available in the
helm chart, instead of only as an env var on the operator
deployment. reconcileConcurrentClusters will be applied to the
env var ROOK_RECONCILE_CONCURRENT_CLUSTERS.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit 52393923d1)
using github action for minikube will avoid
unwanted errors and probably will be more stable
than manual install. But both script and action
both uses almost same time for installation so
there we don't have preference.
Signed-off-by: subhamkrai <srai@redhat.com>
(cherry picked from commit 6c4d8205b6)
The two-object-one-zone canary test is not waiting
long enough for the cluster to be created. The default
timeout is 120s, and it frequently hits that timeout.
When the test passes, it commonly takes between 100-120
seconds to complete, so we just need to increase the
timeout.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit 993e7b2f01)
Read affinity in Ceph v20.2.0 can cause corruption.
Disable this feature for this version of Ceph to
avoid hitting any corruption in this case. When the next
patch release is out for tentacle, this issue will be
resolved and when upgrading to it, read affinity would
automatically be re-enabled if needed.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit 76e9c04b36)
The cosi controller has moved to a new repo and added versioning. 0.2 is the last expected minor release before v1alpha2 which will need more updating.
Signed-off-by: Jade Bilkey <herself@thefumon.com>
(cherry picked from commit df0aa9c1a7)
Travis Nielsen
subhamkrai
Satoru Takeuchi
subham rai
Blaine Gardner
Joshua Hoblitt
Tobias Florek
Michael Adam
Oded Viner
Sunnatillo
Praveen M
Santosh
mergify[bot]
Jade Bilkey