feedc0de/my-rook-config
1
0 Fork 0
forked from rook/rook
Code Pull Requests Activity
5,278 Commits 38 Branches 289 Tags
a3d30edb64ff486efd54d6ae8b103cb65330cf5b
Commit Graph
5278 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Sébastien Han a3d30edb64 Merge pull request #5916 from travisn/reduce-stale-pr-timeout 
ci: Reduce the PR stale time to 90 days
 2020-07-29 09:15:08 +02:00
Travis Nielsen fd29a8691e Merge pull request #4868 from nizamial09/file_permission 
rook: Changing the file and directory permissions to most narrow poss…
 2020-07-28 21:45:12 -06:00
Travis Nielsen 998b3f29ea ceph: reduce the file permissions to fix gosec errors 
File permissions need to be reduced to the minimum to avoid config
files from being accessed. While a connection to the pod would be
required to access the files, min privileges are set just as
another layer of security. This fixes gosec error G306.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
 2020-07-28 15:46:24 -06:00
Nizamudeen 041618dacb ceph: change the file and directory permissions to most narrow possible 
This commit fixes where there are areas in which files and directories are
written and created with statically defined permissions. Many of these
permissions are rather open, potentially allowing other system tenants to
view and interact with their contents, which may be sensitive.

Fixed G303: Poor file permissions used for directory by using the most narrow permission

Resoves: https://github.com/rook/rook/issues/4580

Signed-off-by: Nizamudeen <nia@redhat.com>
 2020-07-28 15:46:12 -06:00
Travis Nielsen 785e866dd2 ci: reduce the PR stale time to 90 days 
The stalebot has not been closing PRs that are stale.
Reducing the timeout from 6 months to 3 months.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
 2020-07-28 15:31:15 -06:00
Travis Nielsen da142be079 Merge pull request #5894 from subhamkrai/gosec-error-G104 
ceph: handling gosec errors code g104  and g404
v1.4.0-alpha.0 		2020-07-28 14:35:59 -06:00
subhamkrai de8e93274d ceph: handling gosec errors code g104 
this commit handles all the gosec g104
(i.e Audit errors not checked) error.

Signed-off-by: subhamkrai <subhamkumarrai03@gmail.com>
 2020-07-28 23:52:23 +05:30
Travis Nielsen 704e80d1b5 Merge pull request #5912 from rohantmp/rohantmp-patch-1 
Core: Add comment warning to keep k8sutil hashing consistent for name…
 2020-07-28 10:41:47 -06:00
Travis Nielsen 1ee29b9c63 Merge pull request #5895 from subhamkrai/nosec-error 
ceph: suppress gosec errors for g204,g304,g101
 2020-07-28 08:25:58 -06:00
Travis Nielsen 9e6429b4c8 Merge pull request #5893 from subhamkrai/gosec-error-G601 
ceph: handling gosec error code g601
 2020-07-28 08:25:00 -06:00
Travis Nielsen f6b7aac3b6 Merge pull request #5908 from leseb/split-osd-files 
ceph: split osd code in files
 2020-07-28 07:37:46 -06:00
Rohan Joseph 82b062f91d core: add comment warning to keep k8sutil hashing consistent 
The name generation utils need to provide consistent outputs across
versions so that names generated based on values are consistent and
older generated keys are not lost.

Signed-off-by: Rohan CJ <rohantmp@gmail.com>
 2020-07-28 12:51:54 +05:30
Sébastien Han c2db463eb2 Merge pull request #5907 from aruniiird/rgw_endpoint_validations_optional 
ceph: make 'rgw_endpoint' check/validation also optional
 2020-07-28 08:42:52 +02:00
subhamkrai 465a0f0aec ceph: handling gosec error code g601 
this commit handles all the gosec g601
error code (i.e Implicit memory aliasing
of items from a range statement).

Signed-off-by: subhamkrai <subhamkumarrai03@gmail.com>
 2020-07-28 11:34:49 +05:30
subhamkrai bcd7faed4e ceph: suppress gosec errors for g204, g304, g101 
this commit suppress the gosec errors for

g204: Audit use of command execution.
g304: File path provided as taint input.
g101: Look for hard coded credentials.

Signed-off-by: subhamkrai <subhamkumarrai03@gmail.com>
 2020-07-28 11:10:48 +05:30
Sébastien Han 71dff530d3 ceph: split osd code in files 
Makes the code more readable and decoupled into files.

Signed-off-by: Sébastien Han <seb@redhat.com>
 2020-07-27 23:21:14 +02:00
Travis Nielsen 22ba4591f3 Merge pull request #5888 from Madhu-1/csi-v3.0.0 
ceph: update ceph-csi to v3.0.0 release
 2020-07-27 14:05:29 -06:00
Arun Kumar Mohan 59a3be6d75 ceph: make 'rgw_endpoint' check/validation also optional 
As 'rgw_endpoint' argument itself is optional, making it's check / validation also optional

Signed-off-by: Arun Kumar Mohan <amohan@redhat.com>
 2020-07-27 22:31:31 +05:30
Madhu Rajanna 0204bac9d1 ceph: add documentation for rbd volume cloning 
added new documentation for rbd volume cloning

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-27 20:51:42 +05:30
Madhu Rajanna 2c524550f3 ceph: move rbd snapshot to new document 
moved the rbd snapshot content to a new
document.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-27 20:51:38 +05:30
Sébastien Han d5aee01ee3 Merge pull request #5901 from leseb/validate-prefix-rgw-pool 
ceph: validate pools with prefix
 2020-07-27 17:19:45 +02:00
Travis Nielsen d6b81c9151 Merge pull request #5899 from leseb/optinal-rgw 
ceph: make rgw option on external script
 2020-07-27 09:10:15 -06:00
Sébastien Han c964998fa3 Merge pull request #5903 from anmolsachan/telemeter 
Added rules for PVC requested and used capacity for telemeter and updated PV count query
 2020-07-27 17:01:46 +02:00
Anmol Sachan a42616967d ceph: updated the PV count query for telemeter 
Signed-off-by: Anmol Sachan <anmol13694@gmail.com>
 2020-07-27 20:18:13 +05:30
Anmol Sachan f3eea6ebb7 ceph: added rules for PVC requested and used capacity for telemeter 
This commit adds recording rules to monitor aggregated (requested and used) capacity of the PVCs for block and file type PVCs, via the telemeter.

Signed-off-by: Anmol Sachan <anmol13694@gmail.com>
 2020-07-27 20:16:12 +05:30
Sébastien Han 5d02a29d76 Merge pull request #5900 from leseb/monitoring-rules-v15 
ceph: add monitoring rules for octopus
 2020-07-27 15:29:09 +02:00
Sébastien Han f5e77a2486 Merge pull request #5890 from hookak/patch-1 
[skip ci] Docs: update OSD_DATA_DIR path in script
 2020-07-27 15:04:55 +02:00
Sébastien Han cc9c9814d2 Merge pull request #5892 from travisn/gosec-errors 
Suppress gosec errors for closing files
 2020-07-27 15:04:07 +02:00
Sébastien Han b35c065db5 ceph: validate pools with prefix 
Now the rgw pool with a given prefix will also be checked by the script.

Signed-off-by: Sébastien Han <seb@redhat.com>
 2020-07-27 14:55:08 +02:00
Sébastien Han 44cd526fff Merge pull request #5883 from leseb/rm-sc-external 
ceph: remove storageclass-bucket-retain-external.yaml
 2020-07-27 11:50:58 +02:00
Sébastien Han 11df9994b5 Merge pull request #5891 from travisn/codegen-sync 
ceph: Update codegen for recent changes
 2020-07-27 11:38:06 +02:00
Sébastien Han 6a643e9522 ceph: add monitoring rules for octopus 
Add monitoring rules for octopus clusters.

Closes: https://github.com/rook/rook/issues/5897
Signed-off-by: Sébastien Han <seb@redhat.com>
 2020-07-27 10:16:49 +02:00
Madhu Rajanna 6aef231896 ceph: add pvc-clone.yaml for rbd 
added pvc-clone.yaml for rbd pvc volume
cloning.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-27 13:46:39 +05:30
Madhu Rajanna cc3b4e6906 ceph: remove check for kubernetes version 
as we are going to deploy snapshotter by
default we are going to remove the kubernetes
version check.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-27 13:45:56 +05:30
Madhu Rajanna 4a1198ee12 ceph: add RBAC for alpha snapshot 
Added back the required RBAC to support
snapshot  Alpha version.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-27 13:42:32 +05:30
Sébastien Han faad0a45ac ceph: make rgw option on external script 
Some clusters do not have rgws deployed so let's make it optional.

Signed-off-by: Sébastien Han <seb@redhat.com>
 2020-07-27 10:06:31 +02:00
Madhu Rajanna 026c5ac28a ceph: update version check for v3.0.0 release 
added v3.0.0 as supported release of cephcsi.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-27 13:30:44 +05:30
jinhong.kim b6110f3128 docs: update OSD_DATA_DIR path in script 
Signed-off-by: jinhong.kim <jinhong_kim@tmax.co.kr>
 2020-07-27 10:23:05 +09:00
Travis Nielsen cf53467380 core: suppress gosec errors for closing files 
To ensure a file handle is closed, we defer the close command
so it is guaranteed to run when the method returns. The closing
of the file handle is not going to fail in our usage since we aren't
using the SetDeadline on the files that would cancel a request
and return an error.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
 2020-07-24 12:31:13 -06:00
Travis Nielsen 6f3582b651 ci: update codegen for recent changes 
make codegen hadn't been run for some recent changes,
now the generated code is in sync.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
 2020-07-24 12:21:51 -06:00
Travis Nielsen e68e52b917 Merge pull request #5866 from subhamkrai/gosec-error 
ceph: handling gosec errors that are not checked
 2020-07-24 10:13:50 -06:00
subhamkrai acc4ed5df9 ceph: handling gosec errors that are not checked 
this commit handles all the gosec g104
i.e audit errors not checked inside pkg.

Signed-off-by: subhamkrai <subhamkumarrai03@gmail.com>
 2020-07-24 20:02:06 +05:30
Travis Nielsen e1f296e34a Merge pull request #5880 from Madhu-1/fix-csi-ver 
ceph: skip csi version detect if allowunsupported is set
 2020-07-23 23:18:57 -06:00
Madhu Rajanna 031e3145a5 ceph: update cephcsi to v3.0.0 
update cephcsi to latest available release

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-24 10:21:59 +05:30
Travis Nielsen 195a241833 Merge pull request #5881 from Madhu-1/tol-for-csi-ver 
ceph: add provisioner toleration for csi version check job
 2020-07-23 12:44:34 -06:00
Jared Watts 52ef5ba81f Merge pull request #5854 from prksu/nfs-openshift-doc 
doc: update nfs openshift scc documentation
 2020-07-23 16:33:59 +02:00
Alexander Trost 0795204b1d Merge pull request #5872 from cloudical-io/cassandra_update 
cassandra: use latest 3.11.6 version in examples
 2020-07-23 15:26:36 +02:00
Sébastien Han dcadf10f0c Merge pull request #5837 from leseb/external-connection 
ceph: let the healthcheck set the status phase
 2020-07-23 09:24:58 +02:00
Sébastien Han cf28b16b68 Merge pull request #5836 from subhamkrai/objectstore-liveness 
ceph: ability to configure livenessprobe for cephobjectstore crd
 2020-07-23 09:14:34 +02:00
Madhu Rajanna d6b2ad142d ceph: add provisioner toleration for csi version check job 
Added a provisioner toleration to the csi version
check job, so that we can schedule the csi version
check on the node where the nodes are tainted.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
 2020-07-23 08:49:18 +05:30