Commit Graph
13292 Commits
Author SHA1 Message Date
Patryk Rostkowski 45b0ef2104 operator: specify ceph config via secret
Adds .spec.cephConfigFromSecret to CephCluster for loading
Ceph config parameters from a Kubernetes Secret.

Signed-off-by: Patryk Rostkowski <patrostkowski@gmail.com>
2025-04-23 07:51:22 +02:00
Blaine Gardner 7a2e65f288 Merge pull request #15764 from BlaineEXE/notification-log-level-change
object: lower retry log verbosity in notification OBC controller
2025-04-22 10:54:00 -06:00
Blaine Gardner 08233d5b6d object: lower retry log verbosity in notification OBC controller
Lower the verbosity of a message in the notification controller's OBC
label watcher. If the OBC controller is having issues provisioning the
OBC, this log will spam every 10 seconds. Reduce the message verbosity
level to debug.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-04-22 10:06:27 -06:00
Oded Viner 5d143d990c test: update Prometheus Operator to v0.82.0
this PR updates the Prometheus Operator URL references from
version v0.71.1 to the latest release v0.81.0 in documentation
and integration test scripts. This ensures we are aligned with
the latest features and improvements from
the Prometheus Operator project.

Signed-off-by: Oded Viner <oviner@redhat.com>
2025-04-22 15:37:56 +03:00
Santosh Pillai 1e9da0766e osd: fix osd disk cleanup for mpath setups
ceph-volume raw list will return the main disk instead of the mpath
setup. `ceph-volume lvm zap` on the main disks fails. This PR uses
`lsblk /mnt/<diskreference> ` to fetch the actual mapath disk and use it
for cleaning

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-04-22 12:40:08 +05:30
Travis Nielsen 279b6c30fb Merge pull request #15759 from travisn/publish-images
build: Push arch specific images to the registries
2025-04-21 14:57:10 -06:00
Travis Nielsen 63e13868ea build: push arch specific images to the registries
The arch specific images were not be pushed since the make
target was missing.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-21 14:37:19 -06:00
Travis Nielsen bc7fba92ef Merge pull request #15742 from travisn/no-publish
build: Stop publishing release artifacts for non-released builds
2025-04-21 13:26:41 -06:00
Travis Nielsen e4e6008555 Merge pull request #15758 from travisn/pending-relnotes-reset
docs: Reset pending release notes
2025-04-21 12:07:46 -06:00
Travis Nielsen 75307a4f1b docs: reset pending release notes
For the upcoming 1.18 release in a few months, reset
the pending release notes for that release.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-21 11:57:32 -06:00
Travis Nielsen e9e131690e Merge pull request #15747 from travisn/object-logfail
object: Log all reconcile errors during object store creation
2025-04-21 10:13:40 -06:00
Travis Nielsen 95a5920bef object: log all reconcile errors during object store creation
The object store controller was swallowing errors of the
type not found, assuming a certain category of errors
when ceph may still be initializing. But some of these
errors could be user error and they need to troubleshoot
the details of the error, so we need to log the specific
error instead of swallowing it.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-18 11:35:09 -06:00
Travis Nielsen 7d908d0a5e build: stop publishing charts in master branch
The helm charts will now only be published when it is
an officially tagged release build.

The images will only be published to all repos for
dockerhub, quay, and ghcr when it is a tagged release.

The images will be published only to dockerhub for all
master and interim release branch builds.

Remove obsolete makefile option for images.
Ceph is the only image Rook ever expects to build.
Simplify the makefile by removing the legacy option
to select which image to build.

Also included are other small improvements to clean up
the release scripts.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-18 10:40:29 -06:00
Travis Nielsen df537124f9 Merge pull request #15521 from jhoblitt/feature/cephbuckettopic-creds
object: add CephBucketTopic .spec.endpoint.kafka.{user,password}SecretRef
2025-04-16 12:24:44 -06:00
Joshua Hoblitt 7887f03c5c object: add CephBucketTopic .spec.endpoint.kafka.{user,password}SecretRef
userSecretRef and passwordSecretRef fields are added to allow the Kafka
endpoint username and password to be supplied from a Kubernetes Secret,
rather than exposed as plaintext as part of the endpoint URI. If the
endpoint URI has HTTP basic auth user-id and user-pass components, they
are overridden by userSecretRef and passwordSecretRef.

Squid added bucket topic attributes for configuring the user-name and
password for pushing notifications to Kafka as an alternative to
encoding credentials into the URI. However, these attributes are not
supported under Reef. Thus, this initial implementation relies on URI
mangling for compatible with both Reef and Squid. Future work could
using Ceph version detection and switch to the new attributes to be used
with Squid and/or the implementation could be converted exclusively to
use the new attributes once Rook has dropped support for Reef.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-04-16 10:53:11 -07:00
Blaine Gardner 18bfab7ee3 Merge pull request #15733 from BlaineEXE/ci-clean-some-disk-space
ci: run selective disk cleanups in go CI tests
2025-04-16 11:10:27 -06:00
Blaine Gardner ca30d4d0f3 Merge pull request #15621 from Termibg22/update-ceph-cluster-crd-docs
Update mon and placement docs for clarity
2025-04-16 10:53:04 -06:00
Blaine Gardner e97103d859 ci: run selective disk cleanups in go CI tests
The Ceph upgrade tests have been flaky or reliably failing for various
Ceph/Rook versions due to mon out of space issues. Reinstate the disk
cleanup action, but do not clean up items that rely on the package
manager for removal. Package manager takes 2-4 minutes to operate and is
likely not worth it, even for saving 15+ GB of space.

From testing with this configuration, we can save 11GB of space in about
8 seconds of runtime. This should (hopefully) be plenty of space to keep
total disk usage below 95% and keep mons healthy, and the time needed is
negligible.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-04-16 10:24:30 -06:00
Travis Nielsen c560f94569 Merge pull request #15709 from travisn/node-override-conf
osd: Document the ceph conf overrides per node
2025-04-16 09:58:20 -06:00
Travis Nielsen 874eb1f7f2 osd: document the ceph conf overrides per node
Recently the feature was implemented for osd node-specific
ceph.conf overrides in https://github.com/rook/rook/pull/15293.
Now the documentation is added for the feature.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-16 09:50:57 -06:00
Santosh Pillai 051956a08b Merge pull request #15718 from sp98/delete-mon-canary
mon: always delete mon canary pods
2025-04-16 20:03:11 +05:30
Travis Nielsen 0928e0422f Merge pull request #15727 from sp98/fix-logs
core: fix logs to print correct OSD ID
2025-04-16 07:38:12 -06:00
Santosh Pillai e0d2275c8b core: fix logs to print correct OSD ID
use %d to print integer osd.ID

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-04-16 12:42:05 +05:30
Santosh Pillai 75c6bb8cd2 mon: always delete mon canary pods
In case of multicluster service, we need to always delete the mon-canary
pods even if there is any failure while exporting the service, else
multiple mon canary pods will get created.

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-04-16 10:49:39 +05:30
Travis Nielsen 15f92d154f Merge pull request #15719 from chkpwd/feat/modify-ingress-resource
feat: add labels to ingress resource
2025-04-15 13:21:52 -06:00
Travis Nielsen a67a357425 Merge pull request #15710 from travisn/tests-mon-space
tests: Lower threshold for mon free space
2025-04-15 12:19:06 -06:00
Bryan Jones 04cc4ee3e4 helm: add info comments to the chart values
Signed-off-by: Bryan Jones <unix.chkpwd@gmail.com>
2025-04-15 13:21:18 -04:00
Bryan Jones 41884a19bf helm: add labels to ingress resource
Signed-off-by: Bryan Jones <unix.chkpwd@gmail.com>
2025-04-15 13:21:14 -04:00
Travis Nielsen 72f0e414d4 Merge pull request #15699 from rook/dependabot/github_actions/github/codeql-action-3.28.15
build(deps): bump github/codeql-action from 3.28.14 to 3.28.15
2025-04-15 11:20:11 -06:00
Blaine Gardner 7ee9ac7475 Merge pull request #15686 from jhoblitt/plumbing/cephbuckettopic-kafka-upgrade-docs
doc: add CephBucketTopic kafka mechanism field to upgrade docs
2025-04-15 09:56:53 -06:00
Joshua Hoblitt 02c65b832e doc: add CephBucketTopic kafka mechanism field to upgrade docs
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-04-14 16:08:58 -07:00
Travis Nielsen ca1d2ed3e3 tests: lower threshold for mon free space
The tests sometimes see that the mons run out of space
in the CI, therefore, we reduce the space required
from 30% down to 10%.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-14 16:06:03 -06:00
Travis Nielsen c59eb9a3df Merge pull request #15704 from travisn/ceph-19.2.2
core: Set default ceph version to v19.2.2
2025-04-14 13:40:46 -06:00
Blaine Gardner 651080d66f Merge pull request #15705 from BlaineEXE/test-update-exec-cmd-w-timeout
test: update ExecuteCommandWithTimeout unit test
2025-04-14 13:35:48 -06:00
Travis Nielsen f62e6d9cc2 core: set default ceph version to v19.2.2
Update the examples and docs and operator base image to
the latest ceph release v19.2.2.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-04-14 12:59:39 -06:00
Blaine Gardner 137b627737 test: update ExecuteCommandWithTimeout unit test
Update the unit test for ExecuteCommandWithTimeout(). This unit failed a
CI run. This seems to have been a race condition where the previous
`cat` command was returning quickly enough that it was available to the
`select` statment at the same time as the timeout.

Resolve this issue by replacing the `cat` command with `sleep`, which
will be guaranteed to take longer to return than the timeout, ensuring
this race doesn't happen.

While working on the test, I also notice that the 30 second timeouts for
other tests would be too long in the event the commands hang for any
reason, so lower these to help ensure the CI won't time out due to
unforeseen events.

Also add a missing unit test to ensure error returns (via `false`
command) without timeouts are properly returned.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-04-14 12:19:37 -06:00
Blaine Gardner 3a9c54edc2 Merge pull request #15702 from jhoblitt/bugfix/fix-CephObjectStoreUser-example
docs: fix typos in CephObjectStoreUser.spec.keys example
2025-04-14 11:52:46 -06:00
Joshua Hoblitt a01c861b07 docs: fix typos in CephObjectStoreUser.spec.keys example
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-04-14 10:13:31 -07:00
Travis Nielsen bb4f91b53b Merge pull request #15693 from Rakshith-R/upd-cephcsi-3.14
csi: update cephcsi to v3.14.0
2025-04-14 08:22:13 -06:00
dependabot[bot] 4a3d6ac45e build(deps): bump github/codeql-action from 3.28.14 to 3.28.15
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.14 to 3.28.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2...45775bd8235c68ba998cffa5171334d58593da47)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-14 12:36:44 +00:00
Rakshith R a555885a5f csi: update cephcsi to latest release
This commit updates cephcsi version to 3.14.0
in rook.

Signed-off-by: Rakshith R <rar@redhat.com>
2025-04-11 18:05:44 +05:30
Blaine Gardner f114fe1694 Merge pull request #15690 from BlaineEXE/cephclient-fsmap-uint64
core: update cephstatus fsmap gid type to uint64
2025-04-10 12:57:18 -06:00
Blaine Gardner 5b27189ac4 core: update cephstatus fsmap gid type to uint64
Ceph uses uint64 (unsigned long) type for CephFS GID. Rook was using
int, which was causing failures when the GID overflowed Rook's type.
Update Rook's type to match Ceph's.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-04-10 12:28:23 -06:00
Travis Nielsen c7b0b32d72 Merge pull request #15670 from subhamkrai/update-min-k8s-version
ci: update minimum k8s supported version to 1.28
2025-04-10 10:38:30 -06:00
Santosh Pillai 240208cdca Merge pull request #15687 from sp98/fix-cve-2025-22868
update oauth package Fix CVE 2025 22868
2025-04-10 21:29:25 +05:30
subhamkrai 13699226e4 ci: update minimum k8s supported version to 1.28
with this commit we are updating min supported k8s
version to 1.28 from 1.27 in docs and CI both.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-04-10 21:24:53 +05:30
7e21b6c1c2 docs: update CephCluster CRD documentation for mon and placement settings
This PR updates the CephCluster CRD documentation to clarify the behavior and interactions between mon settings and placement configuration.

Signed-off-by: Termibg22 <rbujan@protonmail.com>
Co-authored-by: Travis Nielsen <tnielsen@redhat.com>
Co-authored-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-04-10 11:37:27 +02:00
Santosh Pillai bdc1bf2089 build: update oauth to address cve 2025-22868
updates oauth package version to v0.27.0
Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-04-10 14:23:36 +05:30
Travis Nielsen 08c97bc752 Merge pull request #15593 from prazumovsky/retry-pool-status
pool: retry status update on fail
2025-04-09 11:14:13 -06:00
Travis Nielsen efbcdb4fd6 Merge pull request #15641 from travisn/reconcile-with-finalizer
core: Reconcile CRs only after the finalizer is added by Rook
2025-04-09 10:40:47 -06:00