Because the NFS CSI driver is optional and rarely deployed, make RBAC
for this driver an optional example that is generated by the helm chart.
Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
Create the ".nfs" config pool by default so that users aren't required
to create it via CephBlockPool.
Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
Built in Ceph pools (device_health_metrics, .mgr, .nfs) must be
replicated and not erasure coded.
Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
Adds support for valid arbitrary NodeAffinity JSON input by the user while
maintaining backward compatibility with the older parsing code.
Signed-off-by: Pranshu Srivastava <rexagod@gmail.com>
This new integration test will deploy a cluster with multus enabled. It
will be comprised of two network interfaces for ceph public and cluster
communications.
For now, it only deploys a Ceph cluster up to the OSDs.
Closes: https://github.com/rook/rook/issues/9784
Signed-off-by: Sébastien Han <seb@redhat.com>
This is the latest version of the design to mitigate the bug encountered
when restarting the `csi-plugin` pod.
Signed-off-by: Sébastien Han <seb@redhat.com>
The titles for the CRD documentation pages in the table
of contents were not consistent. The full name for the CRD
can be included in the full doc page, but in the TOC
we abbreviate the names for simplicity and readability.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
There is a corner case where an env variable populated with the prepare
job could influence and trigger some encryption code. We have an env
variable to discover whether the prepare job will encrypt a drive or not
so let's use that instead of running code as a noop and sometimes
trigger a corner case. In this scenario, the prepare job had an "IBM_"
env variable present in the OS image (IBM OS) so the setKEKinEnv()
function would get called for no reason.
Signed-off-by: Sébastien Han <seb@redhat.com>
finally, admission controller will be enabled default
without any script/manual step. But it still requires cert-manager
to be installed which I believe is already installed in clusters.
**Note**
Code doesn't return error it just logs the error since
we don't want to stop reconciling if the admission controller fails.
We can work on this once the admission controller is stable.
Signed-off-by: subhamkrai <srai@redhat.com>
The default replica count for test clusters should be 1.
This was causing the rgw-multisite integration test to
fail because the PGs were attempting to use the default
replication instead of the replication of 1 expected
for test clusters.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
When the prometheus rules are created, if external settings
were not specified, the helm chart would fail due to a nil ref
in the external settings. Now we check both for the existence
of external settings and whether the external settings are enabled.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
The script to get the branch name was not being imported
on several doc pages, causing any links using
{{ branchName }} to be broken on those pages.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
The bluestore_fsck_quick_fix_on_mount fix was only needed when upgrading to
versions of Ceph older than v16.2.6. Everyone on pacific should now be
on v16.2.7, so we can remove this section from the v1.9 upgrade guide.
Also cleaning up a few other small issues in the guide.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
The cross build container is not used anymore since the conversion
to github actions. Now the obsolete scripts and makefiles are
cleaned up to remove some confusing leftovers from the
cross container.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
The CSI driver pods dont need to update the node objects for
its operations. This commit remove the unwanted access to node
object update in the RBAC of CSI pods.
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
Update upgrade and supporting docs for release of Rook v1.9.
Include pending release notes as part of this update.
Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
Removed v3.4.0 as its deprecated in cephcsi
and updated the templates to point to latest
v3.6.0 release.
Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
In the `object-openshift.yaml` details about exposing `Routes` for RGW
service, currently it exposes both ports if they are available. This is
very difficult to manage via same route like adding termination policy
etc.
Signed-off-by: Jiffin Tony Thottan <thottanjiffin@gmail.com>
Corrected RGW_ADMIN_OPS_USER_ACCESS_KEY and
RGW_ADMIN_OPS_USER_SECRET_KEY so it should be
output correctely when called script with
bash format output
Signed-off-by: parth-gr <paarora@redhat.com>
Blaine Gardner
Travis Nielsen
Sébastien Han
Pranshu Srivastava
subhamkrai
Rakshith R
parth-gr
Humble Chirammal
Madhu Rajanna
Jiffin Tony Thottan