Commit Graph
253 Commits
Author SHA1 Message Date
Praveen M 1ad4c04f14 csi: update ceph-csi image to 3.16.1
Signed-off-by: Praveen M <m.praveen@ibm.com>
2026-02-10 20:11:44 +05:30
Travis Nielsen 62de41aa49 Merge pull request #17038 from onno204/patch-1
Documentation: Fix metadata and data pool names for 'us' region
2026-02-06 09:06:28 -07:00
Onno204 6255fae113 docs: fix metadata and data pool names for 'us' region
this fixes a typo in the object-storage-rg documentation.

Signed-off-by: Onno204 <onno@perdonit.nl>
2026-02-06 15:34:19 +00:00
Travis Nielsen 002f33898a Merge pull request #17019 from OdedViner/nvmeof_provisioner_images
nvmeof: update expansion fields and sidecar images
2026-02-06 07:14:24 -07:00
Oded Viner 83c0b98418 nvmeof: update expansion fields and sidecar images
add expand secrets and set volume expansion in examples
update provisioner and resizer images to canary

Signed-off-by: Oded Viner <oviner@redhat.com>
2026-02-05 20:41:52 +02:00
subham rai fa4557a93b Merge pull request #16922 from subhamkrai/remove-fencing-obsolete-code
csi: remove automated node fencing code
2026-02-05 13:22:07 +05:30
Joshua Hoblitt 3a15255583 nfs: add CephNFS.spec.server.{image,imagePullPolicy} fields
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2026-01-29 13:18:05 -07:00
subhamkrai ae33d23053 csi: remove rbd wording from node loss doc
since ceph-csi driver now handles both rbd and cephfs
volume node loss case, let's remove rbd specific
wording from the node loss doc in rook.

Signed-off-by: subhamkrai <srai@redhat.com>
2026-01-23 13:56:38 +05:30
Travis Nielsen 219710f25d Merge pull request #16689 from OdedViner/nmveof_new2
nvmeof: add nvme-of gateway crd support
2026-01-20 08:38:29 -07:00
Oded Viner 88a9bf5c7f nvmeof: add nvme-of gateway crd support
adds CephNVMeOFGateway crd for managing ceph nvme-of gateways.
supports configurable instances, placement, resources,
and networking options.

Signed-off-by: Oded Viner <oviner@redhat.com>
2026-01-20 13:19:18 +02:00
Praveen M 8ebf07bbfe csi: update csi-addons to v0.14.0
Signed-off-by: Praveen M <m.praveen@ibm.com>
2026-01-16 11:50:18 +05:30
Praveen M 31c7592d03 csi: update external sidecar images
Below sidecars are updated with latest available versions

csi-attacher: v4.10.0
csi-snapshotter: v8.4.0
csi-resizer: v2.0.0
csi-provisioner: v6.0.0
csi-node-driver-registrar: v2.15.0

Signed-off-by: Praveen M <m.praveen@ibm.com>
2026-01-14 14:47:11 +05:30
Praveen M e30d1f7649 csi: update ceph-csi image to 3.16.0
Signed-off-by: Praveen M <m.praveen@ibm.com>
2026-01-14 14:39:44 +05:30
Jade Bilkey df0aa9c1a7 docs: update cosi controller to new github repo
The cosi controller has moved to a new repo and added versioning. 0.2 is the last expected minor release before v1alpha2 which will need more updating.

Signed-off-by: Jade Bilkey <herself@thefumon.com>
2026-01-11 12:28:32 -05:00
Travis Nielsen c05768feb3 docs: add pool parameter for erasure code optimizations
Ceph Tentacle v20 comes with erasure coding optimizations
that must be enabled explicitly with a setting on the pool.
Add this setting to the docs and examples.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-12-04 11:42:07 -07:00
Santosh a87a3fb766 rgw: update scaledObject resource
Update ScaledObject Resource to use correct metric.
ceph_rgw_put is not availabe. Using ceph_rgw_op_put_obj_ops instead.

Signed-off-by: Santosh <sapillai@redhat.com>
2025-12-02 21:03:36 +05:30
Travis Nielsen 7fe438b5cb Merge pull request #16659 from travisn/app-migration
docs: Example of application migration between clusters
2025-11-06 15:21:29 -07:00
Travis Nielsen 4cd6416dab docs: example of application migration with dynamic pv
Document how to migrate an application with a dynamic
PV rather than a static PV, since static PVs have limitations
such as not supporting snapshots and clones.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-11-06 12:00:46 -07:00
Richard Goodman f833c549bb doc: fix typos and yaml formatting
Noticed two small typos when reading the documentation on object stores.
I also noticed that the lack of a whitespace in the creating a user
example affects the syntax highlighting.

Signed-off-by: Richard Goodman <richardg@brandwatch.com>
2025-11-06 17:13:23 +00:00
Travis Nielsen dba69aab0a docs: example of application migration between clusters
Applications can be migrated between clusters that are
connecting to the same external Ceph cluster.
This is done with a static PV that can be mounted
by the application across the clusters.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-11-06 09:37:39 -07:00
Blaine Gardner 55a4c63d31 doc: update broken link in NFS docs
Update a broken link due to the Kubernetes in-tree NFS driver being
archived/deprecated. Update the link to refer to the latest NFS CSI
driver.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-11-03 08:52:19 -07:00
Mathieu Parent d9109fb3b9 docs: fix storageclass ec link
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2025-10-24 16:57:57 +02:00
subhamkrai 1d4efa9392 csi: csi-addon no longer needed for network fence
with latest design for networkFence, no need for
csi-addons to be installed as the implementation
is moved to csi-drivers.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-09-24 21:08:44 +05:30
Joshua Hoblitt 39691e3e06 docs: add cephobjectrealm.spec.defaultrealm field to examples
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-09-16 11:42:53 -07:00
Blaine Gardner 7c33186e72 core: admin cephx key rotation
Implement CephX key rotation for Rook's client.admin user.

Admin user rotation is risky, so this has been tested extensively both
in unit tests as well as by manually injecting failures during runtime.
In testing, all failures were able to be recovered by the recovery
routine.

A mutex is also added to help ensure that two simultaneous admin key
rotation processes cannot be running simultaneously for any given
namespace. The mutex is tested in unit tests, and it was verified during
runtime via  manual testing.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-08-27 14:47:45 -06:00
Blaine Gardner 37b6d41d04 Merge pull request #16346 from BlaineEXE/key-rotation-1.18-cleanup
CephX key rotation 1.18 cleanup
2025-08-19 14:55:05 -06:00
Blaine Gardner 52255e314c doc: add advanced cephx key rotation doc
Add a minimally useful document explaining how to initiate CephX key
rotation for users.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-08-19 12:19:46 -06:00
Praveen M 5fc4e15bb1 csi: update ceph-csi to v3.15.0
We have new release for Ceph-CSI v3.15.0 -
https://github.com/ceph/ceph-csi/releases/tag/v3.15.0

Signed-off-by: Praveen M <m.praveen@ibm.com>
2025-08-19 20:56:00 +05:30
Madhu Rajanna 3d024ce3c7 csi: update the csi-operator API
updating the csi operator API version
to latest version.

Adding the cephFS and RBD controllerPublish
secret that are required for the fencing
operation that is supported by ceph-csi
with csi-operator.

Updated the storageclass to include the
secrets incase if user wants to override
the defaults in the clientProfile for
new PVC's.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2025-08-13 09:30:50 +02:00
Travis Nielsen 3ea967df70 Merge pull request #16294 from nixpanic/csi-addons/v0.13.0
csi: update Kubernetes CSI-Addons sidecar to version 0.13.0
2025-08-12 11:26:27 -06:00
Niels de Vos 17d53ed16b csi: update Kubernetes CSI-Addons sidecar to version 0.13.0
Signed-off-by: Niels de Vos <ndevos@ibm.com>
2025-08-12 17:56:37 +02:00
Madhu Rajanna cb89f351ed csi: update cephfs user and key in secret
cephCSI already deprecated the adminID and
adminKey keys in the secrets and to be backward
compatible it still supports the adminID and
adminKey but it logs the warning, updating the
secrets created by Rook to use userID and userKey
instead of adminID and adminKey.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2025-08-12 09:53:55 +02:00
Madhu Rajanna 052fe4a9af csi: update ceph-csi to 3.14.2
Updating the ceph-csi image to 3.14.2
release.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2025-07-21 11:24:05 +02:00
Madhu Rajanna aa8fd61986 csi: update csi version to 3.14.1
Updating the cephcsi version to v3.14.1
release.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2025-06-24 11:46:14 +02:00
Niels de Vos a168c40008 csi: update Kubernetes CSI sidecar images to current versions
The Kubernetes CSI sidecars have had several releases that were not
included in deployments by Rook yet, update them to the versions that
are available today:

- csi-attacher:v4.8.1
- csi-provisioner:v5.2.0
- csi-resizer:v1.13.2
- csi-snapshotter:v8.2.1

This change is important, because Ceph-CSI will implement the new
Controller.GetSnapshot CSI procedure. A bug in csi-lib-utils causes a
panic when a ControllerCapability is provided, but not (yet) known to
the CSI sidecars. The updated sidecars consume a version of
csi-lib-utils with a fix for that panic.

See-also: kubernetes-csi/csi-lib-utils#188
Signed-off-by: Niels de Vos <ndevos@ibm.com>
2025-05-20 14:24:02 +02:00
Oded Viner 86a8adab12 doc: fix missing crds.yaml in multi-namespace install docs
Add the missing crds.yaml apply step to the multi-namespace
deployment instructions.

Signed-off-by: Oded Viner <oviner@redhat.com>
2025-05-05 17:43:53 +03:00
Oded Viner ed66b7d2d9 doc: update COSI controller link to new repository location
The old COSI controller link pointed to
container-object-storage-interface-controller, which has been moved.
This PR updates the link to container-object-storage-interface.

Signed-off-by: Oded Viner <oviner@redhat.com>
2025-04-27 16:15:23 +03:00
Blaine Gardner 8d0ed0e66f Merge pull request #15696 from patrostkowski/feature/ceph-config-secret-ref-15678
operator: specify ceph config via secret
2025-04-23 11:48:24 -06:00
Travis Nielsen ae895770e2 Merge pull request #15750 from OdedViner/update_prometheus_version
test: update Prometheus Operator to v0.82.0
2025-04-23 11:44:14 -06:00
Oded Viner 63acf76871 doc: fix indentation and add enabled: true in dashboard config example
This PR corrects the indentation of the dashboard block
and adds the missing enabled: true field in the YAML example.

Signed-off-by: Oded Viner <oviner@redhat.com>
2025-04-23 19:18:01 +03:00
Patryk Rostkowski 45b0ef2104 operator: specify ceph config via secret
Adds .spec.cephConfigFromSecret to CephCluster for loading
Ceph config parameters from a Kubernetes Secret.

Signed-off-by: Patryk Rostkowski <patrostkowski@gmail.com>
2025-04-23 07:51:22 +02:00
Oded Viner 5d143d990c test: update Prometheus Operator to v0.82.0
this PR updates the Prometheus Operator URL references from
version v0.71.1 to the latest release v0.81.0 in documentation
and integration test scripts. This ensures we are aligned with
the latest features and improvements from
the Prometheus Operator project.

Signed-off-by: Oded Viner <oviner@redhat.com>
2025-04-22 15:37:56 +03:00
Joshua Hoblitt 7887f03c5c object: add CephBucketTopic .spec.endpoint.kafka.{user,password}SecretRef
userSecretRef and passwordSecretRef fields are added to allow the Kafka
endpoint username and password to be supplied from a Kubernetes Secret,
rather than exposed as plaintext as part of the endpoint URI. If the
endpoint URI has HTTP basic auth user-id and user-pass components, they
are overridden by userSecretRef and passwordSecretRef.

Squid added bucket topic attributes for configuring the user-name and
password for pushing notifications to Kafka as an alternative to
encoding credentials into the URI. However, these attributes are not
supported under Reef. Thus, this initial implementation relies on URI
mangling for compatible with both Reef and Squid. Future work could
using Ceph version detection and switch to the new attributes to be used
with Squid and/or the implementation could be converted exclusively to
use the new attributes once Rook has dropped support for Reef.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-04-16 10:53:11 -07:00
Travis Nielsen 874eb1f7f2 osd: document the ceph conf overrides per node
Recently the feature was implemented for osd node-specific
ceph.conf overrides in https://github.com/rook/rook/pull/15293.
Now the documentation is added for the feature.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-16 09:50:57 -06:00
Joshua Hoblitt a01c861b07 docs: fix typos in CephObjectStoreUser.spec.keys example
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-04-14 10:13:31 -07:00
Rakshith R a555885a5f csi: update cephcsi to latest release
This commit updates cephcsi version to 3.14.0
in rook.

Signed-off-by: Rakshith R <rar@redhat.com>
2025-04-11 18:05:44 +05:30
Joshua Hoblitt 6b2c357871 object: add CephObjectStoreUser.spec.keys
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-04-03 09:09:01 -07:00
Blaine Gardner 85440169dd Merge pull request #15554 from ragnard/kafka-topic-params
rgw: Support Kafka auth mechanism parameter
2025-04-01 10:44:36 -06:00
Patryk Rostkowski 08199b27c9 mon: manage endpoints containing set of mon ip addresses
The change creates and manages an Endpoints resource
with the current Ceph monitor (mon) IPs, allowing
clients to resolve mon IPs via DNS without relying
on the rook-ceph-mon-endpoints ConfigMap.

Signed-off-by: Patryk Rostkowski <patrostkowski@gmail.com>
2025-03-31 18:05:37 +02:00
Ragnar Dahlén 8bf7c679bb rgw: support kafka auth mechanism parameter
Ceph has support [1,2] for configuring which authentication
mechanism to use for bucket notifications using Kafka topics.

This commit adds the corresponding support to rook.

[1]: https://github.com/ceph/ceph/pull/48181/commits/d5dce601f65974a21c83c4b1add036030a75c3c4
[2]: https://tracker.ceph.com/issues/57608

Signed-off-by: Ragnar Dahlén <r.dahlen@gmail.com>
2025-03-24 21:53:49 +01:00