Commit Graph
1135 Commits
Author SHA1 Message Date
Mudit Agarwal 40081cbcd2 Revert "csi: remove attacher sidecar from CephFS rook deployment"
This reverts commit 4bfd88dc4d.

Signed-off-by: Mudit Agarwal <muagarwa@redhat.com>
2022-08-10 13:04:14 +05:30
Blaine Gardner 97129d8a0b Merge pull request #10673 from BlaineEXE/sssd-design
docs: SSSD-NFS design
2022-08-08 14:35:41 -06:00
Sébastien Masset 4427c85845 manifest: fix example RoleBindings
This enables deployment of CephClusters in multiple namespaces in clusters where PSPs are enforced.

Missing bindings:
 * rook-ceph-cmd-reporter-psp
 * rook-ceph-default-psp
 * rook-ceph-mgr-psp
 * rook-ceph-mgr-system
 * rook-ceph-osd-psp
 * rook-ceph-purge-osd-psp
 * rook-ceph-rgw-psp

Signed-off-by: Sébastien Masset <sebastien.masset@orange.com>
2022-08-08 17:47:27 +02:00
Blaine Gardner 7787699bab docs: add SSSD to nfs design doc
Signed-off-by: Blaine Gardner <blaine.gardner@redhat.com>
2022-08-05 10:21:11 -06:00
parth-gr c1a16d300e external: fix cluster id naming in import-external-cluster script
Cluster_ID variable that we export from python script was different
from what we going to use in import script so changed it

Signed-off-by: parth-gr <paarora@redhat.com>
2022-08-05 17:30:39 +05:30
yati1998 4bfd88dc4d csi: remove attacher sidecar from CephFS rook deployment
CephFS CSI driver dont have/advertise controller publish/unpublish
capabilities, thus dont need attacher sidecar for its operations.
The presence of external-attacher adds on overhead and issues wrt
attachment in various scenarios. One of them would be the lack of
performance on syncing volumeattachment from api server..etc.
More or less we don't have controller publish and unpublish capabilities,
so we should not make use of this sidecar and cause
unnecessary addon here thus other issues.

similar changes have been added to CSI
https://github.com/ceph/ceph-csi/pull/3149

Signed-off-by: yati1998 <ypadia@redhat.com>
2022-08-03 19:56:39 +05:30
Travis Nielsen 0b257dabfd Merge pull request #10639 from yati1998/log-level
csi: introduce new log level for sidecars
2022-08-02 14:10:59 -06:00
Travis Nielsen 56b28df5f1 Merge pull request #10654 from solacelost/fix/localrules-indent
Correct indentation level for pool rules
2022-08-02 09:24:20 -06:00
yati1998 ecc67faa5c csi: introduce new log level for sidecars
This commit introduces new log level called csidecarLogLevel
for the sidecars which are not maintained by the csi-driver.
This will allow to have different configuration options
for the sidecars like snapshotter, resizer, attacher and
provisioner containers which will help to avoid the
spamming of logs to an extent.

Signed-off-by: yati1998 <ypadia@redhat.com>
2022-08-02 12:09:43 +05:30
Travis Nielsen e78714c21b Merge pull request #10204 from thotz/rgw-sse-s3-vault
object: adding support for sse s3 for RGW
2022-08-01 16:31:50 -06:00
Travis Nielsen 388ec24089 Merge pull request #10528 from subhamkrai/log-collecto-max-size
core: add support to rotate log based on logfile size
2022-08-01 15:23:03 -06:00
Travis Nielsen 0fac38c33d Merge pull request #10647 from Madhu-1/fix-8783
csi: disable liveness sidecar by default
2022-08-01 12:58:53 -06:00
subhamkrai c4742278d1 Revert "ci: use ceph v17.2.1 instead of latest v17"
This reverts commit 3279cb91870e59eccabb9b5eff903d71beb31594.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-08-01 21:05:48 +05:30
James Harmison 2ae305749a monitoring: fix localrule indent
Indentation level for the rule array for pools was inconsistent, leading to a broken YAML array.
This commit corrects indentation level for pool rules to align with the rest of the array.

Closes: https://github.com/rook/rook/issues/10653
Signed-off-by: James Harmison <jharmison@gmail.com>
2022-07-31 12:31:58 -04:00
Madhu Rajanna 187bea6701 csi: disable liveness sidecar by default
A Liveness sidecar container that is deployed
with the CSI pods will be helpful to check
csi driver is properly responding or not.
and there is no liveness or readiness
kubernetes probe added for this one.
Providing an option to enable this
sidecar deployment and disabling it by default.

fixes #8783

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2022-07-28 14:01:26 +05:30
Jiffin Tony Thottan 5c8ca01bd0 object: adding support for sse s3 for RGW
The RGW support server side encryption with help of s3 protocol, till
now the `sse:kms` was support in which keys will be provided by the user
and but it will be saved in external management service like vault. Now
the support for `sse:s3` is added so the entire encryption key
management is performed by RGW itsels.

Signed-off-by: Jiffin Tony Thottan <thottanjiffin@gmail.com>
2022-07-28 11:50:48 +05:30
Travis Nielsen 3b6cc45113 Merge pull request #10626 from anthonyeleven/anthonyeleven/prom-localrules-tweaks
Improve descriptions in localrules.yaml
2022-07-27 11:40:23 -06:00
Travis Nielsen c2991de238 Merge pull request #10580 from gauravsitlani/cephfs-mirroring-test
docs: CephFS mirroring updates around Peer Tokens
2022-07-27 10:25:24 -06:00
Gaurav Sitlani 27f2098ad9 docs: cephfs mirroring updates around peer tokens
This commit updates the CephFS mirroring documentation
around Peer tokens to get the token created correctly.

Signed-off-by: Gaurav Sitlani <gauravsitlani@riseup.net>
2022-07-27 21:52:21 +05:30
Anthony D'Atri dc53497d37 docs: improve descriptions in localrules.yaml
Parallel upstream changes via https://github.com/ceph/ceph/pull/47284

Signed-off-by: Anthony D'Atri <anthonyeleven@users.noreply.github.com>
2022-07-26 16:32:29 -07:00
subhamkrai 62f73dcd98 core: add support to rotate log based on logfile size
this commits add new field `MaxLogSize` inside `LogCollectorSpec` of
cephCluster cr which will take max size of log after which we want to
rotate the log.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-07-26 13:06:39 +00:00
Travis Nielsen 41fcdcc28d Merge pull request #10583 from sathieu/helm_prometheusrule_labels_annotations
helm: add labels and annotations to PrometheusRule
2022-07-25 13:08:23 -06:00
subhamkrai 4501cc25c6 ci: use ceph v17.2.1 instead of latest v17
there could be something breaking with latest ceph.
So, let's stick to v17.2.1.

Signed-off-by: subhamkrai <srai@redhat.com>
2022-07-25 20:14:52 +05:30
Mathieu Parent 44b43557f9 helm: add labels and annotations to PrometheusRule
Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2022-07-21 10:26:31 +02:00
Travis Nielsen fc541764f1 Merge pull request #10484 from jsoref/spelling
core: fix spelling
2022-07-15 08:31:41 -06:00
Travis Nielsen 37a4d9e959 Merge pull request #10491 from zhucan/feat-10451
object: network mode can be set separately for cephcluster and rgw
2022-07-14 11:21:26 -06:00
Ali, Akil 25265bc9c2 external: fix secrets naming
The secrets are being created with "rook-" prefix, but used without it.
Signed-off-by: Ali, Akil <ali-akil@gmx.de>
2022-07-14 16:55:45 +02:00
Blaine Gardner 7cbda4d814 Merge pull request #10563 from parth-gr/rbac-wildcard
core: remove all wildcard permissions in rbac definations
2022-07-08 11:36:54 -06:00
parth-gr 50daeb29e5 core: remove all wildcard permissions in rbac definations
Reduce the RBAC scope to the minimum necessary
permissions for rook to operator

Signed-off-by: parth-gr <paarora@redhat.com>
2022-07-08 20:50:59 +05:30
Travis Nielsen 5b6d9cc172 Merge pull request #10569 from subhamkrai/helm-webhook-port
helm: add missing port for webhook in helm
2022-07-08 08:34:38 -06:00
subhamkrai 94f0c0dc25 helm: add missing port for webhook in helm
adding port which was missing from helm rook-ceph chart
which is used by webhook due to which it was failing with
```
failed to run operator: gave up to run the operator manager: failed to
run the controller-runtime manager: listen tcp :9443: bind: address
already in use
```

Signed-off-by: subhamkrai <srai@redhat.com>
2022-07-08 17:39:46 +05:30
Josh Soref 6e7b8767f3 core: fix spelling
* another
* are
* availability
* available
* bootstrap
* boundaries
* ceph
* certificate
* class
* codifies
* consuming
* corrupted
* createor
* csi
* deployments
* exceeded
* execute
* filesystem
* healthiness
* heuristics
* immediately
* insecure
* installed
* isolated
* maintained
* maximum
* minute
* monitor
* new
* nginx
* nonexistent
* not
* occurs
* omitempty
* operator
* orchestration
* persistentvolumes
* placement
* preexisting
* prometheus
* protecting
* provisioner
* purposes
* reconcile
* regex
* related
* requests
* returns
* rubbish
* running
* schedulable
* schedule
* serviceaccount
* simulating
* snapshots
* statement
* static
* tenants
* the
* unavailable
* volumeattachment
* waiting
* with
* wrapper
* zonegroup

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
2022-07-07 18:10:47 -04:00
Travis Nielsen dad97f3425 core: remove support for ceph octopus
With octopus coming to end of life, we remove support from
Rook for deploying Ceph Octopus and assume a min version of
Pacific v16. Any checks for octopus or earlier are removed
from the reconciles since they are obsolete.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2022-07-07 15:03:26 -06:00
Alexander Trost 455508ea14 helm: use recommended value for helm managed-by label
This changes the `app.kubernetes.io/managed-by` label to use the helm
`{{ .Release.Service }}` for it's value.
This is recommended by the Helm labels and annotations standard labels
doc page, see https://helm.sh/docs/chart_best_practices/labels/#standard-labels

Signed-off-by: Alexander Trost <galexrt@googlemail.com>
2022-07-06 13:53:24 +02:00
Santosh Pillai 693c2d9306 manifest: use Recreate strategy for operator upgrade
Use `Recreate` strategy instead of `RollingUpdate` for
rook-ceph-operator deployement upgrade

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2022-07-04 15:28:42 +05:30
zhucan 6f6c26009c object: generated code
Signed-off-by: zhucan <zhucan.k8s@gmail.com>
2022-06-30 10:55:24 +08:00
Travis Nielsen febce342b7 manifest: inline toolbox script for direct use of ceph image
The toolbox is really only used for ceph commands. The main reason
the rook image was being used in the toolbox pod was for the script
that generates the ceph.conf and updates it whenever the mons are
updated during mon failover.

Now the ceph image can be specified directly by moving the script
inline with the container definition instead of being required
in the image.

The rook image will still contain the script for backward compatibility
and for scenarios where the rook binary may still be needed

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2022-06-28 17:19:22 -06:00
Travis Nielsen 676884aab4 Merge pull request #10459 from parth-gr/subvolume-external
external: add support for subvolumegroup and rados namespace
2022-06-28 14:02:40 -06:00
parth-gr c9a864ccdb external: add support for subvolumegroup and rados namespace
Using subvolume group and rados namespace for external deployment
was complicated and not documented,
Automating the process for the users, so they just need to pass
the respective names by cli flag for creation

Closes: rook#10427

Signed-off-by: parth-gr <paarora@redhat.com>
2022-06-28 21:57:54 +05:30
Markus Schmidleitner 36a9374555 helm: use correct namespace for provisioner in cephobjectstore template (fixes #10153)
Signed-off-by: Markus Schmidleitner <markus.schmidleitner@ocilion.com>
2022-06-28 10:39:51 +02:00
Blaine Gardner 0efd2aa340 Merge pull request #10400 from subhamkrai/staticcheck-python
ci: add check for unused or dead code in py file
2022-06-27 11:25:28 -06:00
subhamkrai fa1eed1d4e core: fix lint issue in python files
Signed-off-by: subhamkrai <srai@redhat.com>
2022-06-27 16:53:01 +05:30
Travis Nielsen eb08b009ba build: update to latest quincy release 17.2.1
With the latest quincy release, we update the operator base image
and examples to use 17.2.1

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2022-06-24 15:57:19 -06:00
Humble Chirammal 58a2f66411 csi: change the fsgrouppolicy for CephFS driver to "File" mode
At present the CephFS CSI driver works with default mode ie,
`ReadWriteOncewithFsType`. However `File` type is more apt for
the CephFS CSI driver and this commit bring that change. The
similar change is also introduced in ceph csi driver here:

https://github.com/ceph/ceph-csi/pull/3204

considering the `File` mode has been GAd in 1.23 kubernetes version
and also we are lifting one of the problematic code path in this
area via Ceph CSI driver changes, it is good to move the
fsgrouppolicy to `File`.

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-06-24 11:43:23 +05:30
parth-gr bf1342b2b3 osd: increase memory of osd prepare pods
In helm charts default value of osd prepare pods
limit was less so increased it to 400Mi

closes: https://github.com/rook/rook/issues/10477

Signed-off-by: parth-gr <paarora@redhat.com>
2022-06-23 20:34:43 +05:30
Blaine Gardner c03f7c53b8 Merge pull request #10442 from Rakshith-R/csi-token-create-rbac
csi: add token create rbac for rbd csi clusterrole
2022-06-17 12:07:21 -06:00
Niels de Vos 5dbb9a919d csi: update CSI-Addons side-car to latest (v0.4.0) release
A new version of the CSI-Addons side-car has been released, fixing
several bugs and adding small enhancements.

See-also: https://github.com/csi-addons/kubernetes-csi-addons/releases/tag/v0.4.0
Signed-off-by: Niels de Vos <ndevos@redhat.com>
2022-06-16 09:58:54 +02:00
Rakshith R 623c5159d5 csi: add token create rbac for rbd csi clusterrole
This rbac is required to fetch serviceaccount
token for vault tenant sa encryption type on k8s 1.24+.
refer: https://github.com/ceph/ceph-csi/pull/3174

Signed-off-by: Rakshith R <rar@redhat.com>
2022-06-14 10:18:20 +05:30
Travis Nielsen a27a2aa4ca Merge pull request #10405 from humblec/master-label
mon: update node labels as per new key value
2022-06-10 08:03:43 -06:00
Humble Chirammal 750faa5747 mon: update node labels as per new key value
From kube v1.24 onwards, Kubeadm applies a "node-role" label to its
control plane Nodes.Currently this label key is node-role.kubernetes.io/master
and it will be renamed to node-role.kubernetes.io/control-plane. Kubeadm
also uses the same "node-role" as key for a taint it applies on control
plane Nodes. This taint key should also be renamed to
"node-role.kubernetes.io/control-plane".

Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-06-10 08:12:04 +05:30