Joshua Hoblitt
3ef0c90ef8
object: add ObjectStoreUserSpec.OpMask field
...
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2026-02-10 15:10:28 -07:00
Joshua Hoblitt
3a15255583
nfs: add CephNFS.spec.server.{image,imagePullPolicy} fields
...
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2026-01-29 13:18:05 -07:00
Oded Viner
88a9bf5c7f
nvmeof: add nvme-of gateway crd support
...
adds CephNVMeOFGateway crd for managing ceph nvme-of gateways.
supports configurable instances, placement, resources,
and networking options.
Signed-off-by: Oded Viner <oviner@redhat.com >
2026-01-20 13:19:18 +02:00
Santosh
c42032f6f8
doc: set useAllNodes to false
...
Update docs to reflect that useAllNodes should be set to false when
providing configuration for individual nodes.
Signed-off-by: Santosh <sapillai@redhat.com >
2026-01-14 11:10:16 +05:30
Travis Nielsen and Sahil Lakhwani
b8d647c4e0
docs: update ceph-client-crd.md
...
remove extra quote at the end of step 4 shell command
Co-authored-by: Sahil Lakhwani <sahilakhwani@gmail.com >
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-01-12 13:16:35 -07:00
dependabot[bot]
3c51e808f2
build(deps): bump the k8s-dependencies group with 6 updates
...
Bumps the k8s-dependencies group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api ) | `0.34.2` | `0.34.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ) | `0.34.2` | `0.34.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) | `0.34.2` | `0.34.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) | `0.34.2` | `0.34.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go ) | `0.34.2` | `0.34.3` |
| [k8s.io/cloud-provider](https://github.com/kubernetes/cloud-provider ) | `0.34.2` | `0.34.3` |
Updates `k8s.io/api` from 0.34.2 to 0.34.3
- [Commits](https://github.com/kubernetes/api/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/apiextensions-apiserver` from 0.34.2 to 0.34.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/apimachinery` from 0.34.2 to 0.34.3
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/cli-runtime` from 0.34.2 to 0.34.3
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/client-go` from 0.34.2 to 0.34.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/cloud-provider` from 0.34.2 to 0.34.3
- [Commits](https://github.com/kubernetes/cloud-provider/compare/v0.34.2...v0.34.3 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/cli-runtime
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/cloud-provider
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-07 07:59:21 -07:00
Mörgæsis
d8a809cddb
docs: anchor for #enable-tls heading
...
Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is >
2025-12-30 17:36:46 +00:00
Mörgæsis
2497940603
docs: link to Ceph docs with incorrect heading link
...
Found that `#set-*` doesn't exist on the linked pages, but `#setting-*`
does.
Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is >
2025-12-28 12:51:49 +00:00
Artem Torubarov
7ee062bc06
rgw: support all S3 notification events in CRD validation
...
Signed-off-by: Artem Torubarov <artem.torubarov@sap.com >
2025-12-08 11:08:24 +01:00
Travis Nielsen
c05768feb3
docs: add pool parameter for erasure code optimizations
...
Ceph Tentacle v20 comes with erasure coding optimizations
that must be enabled explicitly with a setting on the pool.
Add this setting to the docs and examples.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2025-12-04 11:42:07 -07:00
subhamkrai
304cdc8c83
core: remove support for reef v18 in Rook v1.19
...
For Rook v1.19,removing support for Ceph Reef. It is at end of life.
Users on Reef can continue to use Rook v1.18.x or older.
The latest two Ceph versions Squid and Tentacle are supported.
Signed-off-by: subhamkrai <srai@redhat.com >
2025-12-04 13:11:35 +05:30
Travis Nielsen
a1c87c6188
mds: remove mds standby if disabled
...
The activeStandby property was being ignored when deciding
how many mds daemons to start. 2x the active count of mds
daemons were always being created. If the standby is not
desired, the standby can be removed, and it was unexpected
that it was not removed.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2025-11-19 10:55:12 -07:00
Travis Nielsen
a5180adb92
Merge pull request #16617 from Nordix/Sunnatillo/add-networkHost-field-cephMgr
...
mgr: add hostNetwork field to Manager spec
2025-11-06 09:28:19 -07:00
Sunnatillo
b9a4685f65
mgr: add hostNetwork field to Manager spec
...
Add optinal hostnetwork field for Ceph Mgr to control whether the
mgr pods to run in host network. If unset, this defaults to
cluster level Network.HostNetwork value. This particulary useful
when user wants to restrict ceph mgr pod from exposing metrics
port in all host interfaces.
Signed-off-by: Sunnatillo <sunnat.samadov@est.tech >
2025-11-05 21:52:49 +02:00
Parth Arora
1c1bd6957d
Merge pull request #16673 from parth-gr/fix-external-csi-doc
...
doc: add csi operator creation step for external mode
2025-11-05 21:22:55 +05:30
parth-gr
31d410822d
doc: add csi operator creation step for external mode
...
Rook has started using csi operator by default,
so with every new rook external mode install,
we need to use create the csi operator
closes: https://github.com/rook/rook/issues/16620
Signed-off-by: parth-gr <partharora1010@gmail.com >
2025-11-05 17:25:17 +05:30
Travis Nielsen
b89af41df4
Merge pull request #16655 from jhoblitt/feature/OSDMaxUpdatesInParallel
...
osd: add CephCluster.spec.storage.OSDMaxUpdatesInParallel
2025-11-04 10:36:05 -07:00
AlienAscension
520e7f959f
docs: fix typo in 'Advance Options' heading
...
Signed-off-by: AlienAscension <linus.breitenberger@gmail.com >
2025-11-04 17:55:26 +01:00
Joshua Hoblitt
43f26534ed
osd: add CephCluster.spec.storage.OSDMaxUpdatesInParallel
...
Configures the maximum number of OSDs to update in parallel.
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2025-11-03 12:10:28 -07:00
Blaine Gardner
c08a7742b0
Merge pull request #14821 from sp98/rgw-hpa
...
rgw: add scale subresource to CephObjectStore CR
2025-10-27 09:54:11 -06:00
Travis Nielsen
f81ecdc89c
Merge pull request #16593 from parth-gr/fix-topology-doc
...
doc: add recovery steps for topology based pools
2025-10-14 10:38:54 -06:00
parth-gr
17fd9ba1e1
doc: add recovery steps for topology based pools
...
Added a recovery steps for replica-1 pool
if the osd went down
Signed-off-by: parth-gr <partharora1010@gmail.com >
2025-10-14 17:33:50 +05:30
Tim Buchwaldt
8db5274703
operator: allow overriding MDS cache memory limit
...
This change introduces support for setting the ceph cache memory limit
ratios that were previously hardcoded.
Codegen was drivey-by updated as the current version errored.
Resolves #16551
Signed-off-by: Tim Buchwaldt <tim.buchwaldt@deepl.com >
2025-10-07 09:15:56 +02:00
SantoshPillai
67b44b47df
rgw: make hpa update rgw resource
...
Signed-off-by: Santosh Pillai <sapillai@redhat.com >
2025-09-19 12:22:30 +05:30
subham rai
68e0dfbb8b
Merge pull request #16496 from jhoblitt/maint/fix-zonegroup-and-zone-field-desc
...
core: fix ObjectZoneSpec.ZoneGroup and ObjectZoneGroupSpec.Realm field descriptions
2025-09-17 17:16:25 +05:30
Travis Nielsen
18b20ebd03
Merge pull request #16497 from jhoblitt/maint/cephobjectrealm.spec.defaultrealm-example
...
docs: add cephobjectrealm.spec.defaultrealm field to examples
2025-09-16 16:24:33 -06:00
Joshua Hoblitt
39691e3e06
docs: add cephobjectrealm.spec.defaultrealm field to examples
...
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2025-09-16 11:42:53 -07:00
dependabot[bot]
5a980c8b7a
build(deps): bump the k8s-dependencies group with 8 updates
...
Bumps the k8s-dependencies group with 8 updates:
| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api ) | `0.33.4` | `0.34.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ) | `0.33.4` | `0.34.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) | `0.33.4` | `0.34.0` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) | `0.33.4` | `0.34.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go ) | `0.33.4` | `0.34.0` |
| [k8s.io/cloud-provider](https://github.com/kubernetes/cloud-provider ) | `0.33.4` | `0.34.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime ) | `0.21.0` | `0.22.0` |
| [sigs.k8s.io/mcs-api](https://github.com/kubernetes-sigs/mcs-api ) | `0.2.0` | `0.3.0` |
Updates `k8s.io/api` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/api/compare/v0.33.4...v0.34.0 )
Updates `k8s.io/apiextensions-apiserver` from 0.33.4 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.33.4...v0.34.0 )
Updates `k8s.io/apimachinery` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.33.4...v0.34.0 )
Updates `k8s.io/cli-runtime` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.33.4...v0.34.0 )
Updates `k8s.io/client-go` from 0.33.4 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.33.4...v0.34.0 )
Updates `k8s.io/cloud-provider` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/cloud-provider/compare/v0.33.4...v0.34.0 )
Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases )
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.21.0...v0.22.0 )
Updates `sigs.k8s.io/mcs-api` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/kubernetes-sigs/mcs-api/releases )
- [Changelog](https://github.com/kubernetes-sigs/mcs-api/blob/master/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/mcs-api/compare/v0.2.0...v0.3.0 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: k8s.io/cli-runtime
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: k8s.io/cloud-provider
dependency-version: 0.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
dependency-version: 0.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/mcs-api
dependency-version: 0.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: k8s-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: subhamkrai <srai@redhat.com >
2025-09-16 10:30:46 -06:00
Joshua Hoblitt
8b58d68592
core: fix ObjectZoneSpec.ZoneGroup field description
...
Resolves this incorrect field description:
~ $ k explain cephobjectzone.spec.zoneGroup
GROUP: ceph.rook.io
KIND: CephObjectZone
VERSION: v1
FIELD: zoneGroup <string>
DESCRIPTION:
The display name for the ceph users
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2025-09-16 09:12:20 -07:00
Joshua Hoblitt
1a1478a342
core: fix ObjectZoneGroupSpec.Realm field description
...
Resolves this incorrect field description:
~ $ k explain cephobjectzonegroup.spec.realm
GROUP: ceph.rook.io
KIND: CephObjectZoneGroup
VERSION: v1
FIELD: realm <string>
DESCRIPTION:
The display name for the ceph users
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2025-09-16 09:08:50 -07:00
subhamkrai
5e21d43365
nfs: rotate nfs cephx key
...
Signed-off-by: subhamkrai <srai@redhat.com >
2025-09-11 16:10:46 +05:30
Travis Nielsen
805ae6ec89
Merge pull request #16375 from morgaesis/master
...
docs: fix `authKeystone` usage in Object Storage CRD docs
2025-09-02 11:16:14 -06:00
Mörgæsis
65427d8cd1
docs: fix usage of undefined attribute
...
Update ceph-object-store-crd.md to use known attribute.
Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is >
2025-08-31 10:28:56 +00:00
Blaine Gardner
7c33186e72
core: admin cephx key rotation
...
Implement CephX key rotation for Rook's client.admin user.
Admin user rotation is risky, so this has been tested extensively both
in unit tests as well as by manually injecting failures during runtime.
In testing, all failures were able to be recovered by the recovery
routine.
A mutex is also added to help ensure that two simultaneous admin key
rotation processes cannot be running simultaneously for any given
namespace. The mutex is tested in unit tests, and it was verified during
runtime via manual testing.
Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com >
2025-08-27 14:47:45 -06:00
Blaine Gardner
37b6d41d04
Merge pull request #16346 from BlaineEXE/key-rotation-1.18-cleanup
...
CephX key rotation 1.18 cleanup
2025-08-19 14:55:05 -06:00
Travis Nielsen
f7d2e208c8
Merge pull request #16313 from sp98/fs-mirror-key-rotation
...
core: rotate fs mirror daemon cephx key
2025-08-18 15:17:06 -06:00
Blaine Gardner
2fd9c9a88c
core: finalize CephCluster CephX status handling
...
Cleanup up overall usage of CephX statuses in CephCluster.
Convert all CephX statuses to non-pointer types. There is no specific
need for pointer types, and keeping these as non-pointers means there is
not a risk of nil pointer exceptions in all the various Rook controllers
for upgraded clusters.
Move initialization of CephCluster CephX status items to
`preMonStartupActions()`. This helps resolve 2 issues:
1. 'Uninitialized' state was being set for external CephClusters where
CephX statuses are not relevant.
2. 'Uninitialized' state was being set for upgraded clusters whose key
status cannot be determined.
Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com >
2025-08-18 14:53:08 -06:00
Travis Nielsen
36a47ac01a
Merge pull request #16176 from sp98/mon-key-rotation
...
mon: rotate cephx key
2025-08-15 11:06:31 -06:00
Santosh Pillai
8df6b8d0d0
core: rotate fs mirror daemon cephx key
...
Rotate fs mirror daemon cephx keys based on the cephXconfig in the
cephcluster spec and also update the fs mirror status with the latest
cephxStatus
Signed-off-by: Santosh Pillai <sapillai@redhat.com >
2025-08-14 16:16:51 +05:30
Jack Henschel
d8651f33ea
docs: minor syntax fixes for CephCluster CRD documentation
...
Signed-off-by: Jack Henschel <jhensche@redhat.com >
2025-08-14 11:37:09 +02:00
Santosh Pillai
fe42fe102f
mon: rotate keys
...
rotate mon daemon keys and update the cephx status for mons in the
cephcluster resource.
Signed-off-by: Santosh Pillai <sapillai@redhat.com >
2025-08-14 11:16:39 +05:30
Blaine Gardner
59ca78229d
Merge pull request #16075 from sp98/mirror-key-rotation
...
rbd mirror peer key rotation
2025-08-11 10:54:20 -06:00
Santosh Pillai
ee0b137d75
core: rotate rbd mirror peer key
...
rotate the client.rbd-mirror-peer key based on the cephxconfig.
Also update the cephxStatus in the cephcluster as well as the
mirrored cephblockpool.
Signed-off-by: Santosh Pillai <sapillai@redhat.com >
2025-08-11 21:53:14 +05:30
Blaine Gardner
517f519c23
Merge pull request #16227 from sp98/mirror-daemon-key-rotation
...
core: rotate mirror daemon keys
2025-08-08 09:45:48 -06:00
Santosh Pillai
d0fbf6c424
core: rotate mirror daemon keys
...
rotate RBD mirror daemon keys, add secret resource version to the mirror
deployment and update the mirror resource status after the key is
rotated
Signed-off-by: Santosh Pillai <sapillai@redhat.com >
2025-08-08 10:23:49 +05:30
Blaine Gardner
9be45d949b
Merge pull request #16069 from OdedViner/default_realm
...
object: mark realm as default to avoid zone creation
2025-08-07 10:33:11 -06:00
Oded Viner
182cd211ca
object: mark realm as default to avoid zone creation
...
add defaultRealm field to cephobjectstore to allow rook to mark the
created realm as default. this prevents ceph from auto-creating a
"default" zonegroup and zone when the default is not explicitly set.
affects only non-multisite setups.
Signed-off-by: Oded Viner <oviner@redhat.com >
2025-08-07 14:48:21 +03:00
Benoît Knecht
0b423a30f9
core: only support isa and jerasure algorithms on ec pools
...
The `CephBlockPool` CR allowed any algorithm to be specified in
`spec.erasureCoded.algorithm`, but in practice only `isa` or `jerasure`
would work.
Make that restriction explicit by restricting this field to `isa` or
`jerasure` in the CRD.
Signed-off-by: Benoît Knecht <bknecht@protonmail.ch >
2025-08-04 16:10:33 -06:00
Travis Nielsen
4d0834f605
Merge pull request #16210 from parth-gr/cephx-exporter
...
exporter: automate rotate exporter cephx keys
2025-08-01 10:09:39 -06:00
Travis Nielsen
cef47087dd
Merge pull request #16029 from BlaineEXE/osd-automatic-rotation
...
OSD: implement automated cephx key rotation for osds
2025-08-01 10:08:39 -06:00