Commit Graph
12734 Commits
Author SHA1 Message Date
subham rai c83cf896fe Merge pull request #16500 from rook/mergify/bp/release-1.18/pr-16497
docs: add cephobjectrealm.spec.defaultrealm field to examples (backport #16497)
2025-09-17 17:16:56 +05:30
subham rai e73a0039ce Merge pull request #16498 from rook/mergify/bp/release-1.18/pr-16418
ci: update latest k8s version to v1.34 (backport #16418)
2025-09-17 17:04:10 +05:30
Joshua Hoblitt 47d8824525 docs: add cephobjectrealm.spec.defaultrealm field to examples
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 39691e3e06)
2025-09-16 22:25:21 +00:00
Michael Adam 61674b8977 ci: move minikube to a better location
In the deb package's location of /usr/bin/minilube, a wrong version seems to be
reported but from /usr/local/bin it reports correctly.

Signed-off-by: Michael Adam <obnox@samba.org>
(cherry picked from commit 605e820fc8)
2025-09-16 17:12:37 +00:00
Michael Adam 4941d02bdc ci: update latest k8s version to 1.34
this change updates the k8s version to 1.34 and also updates
the  cri-ctl version for minikube.

Signed-off-by: Michael Adam <obnox@samba.org>
Co-authored-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit 40427d5c0d)
2025-09-16 17:12:37 +00:00
Travis Nielsen ccbac6de98 Merge pull request #16490 from rook/mergify/bp/release-1.18/pr-16468
external: fix ipv6 monitoring endpoint reconcile (backport #16468)
2025-09-15 13:47:43 -06:00
Travis Nielsen 460f73ba7e Merge pull request #16491 from rook/mergify/bp/release-1.18/pr-16478
pool: Allow enableCrushUpdates to be nil (backport #16478)
2025-09-15 13:45:53 -06:00
Travis Nielsen 44e8bf2778 pool: allow enablecrushupdates to be nil
Enabling crush updates is false by default, and can be enabled
if set to true. The setting needs to be nullable in case
we need to differentiate between the value being set
to false or just not set, to know if the default should be
different. This is necessary for rook consumers who are
refererencing the pool struct and want to change the default,
rather than using rook's default value of false.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit df49ca1247)
2025-09-15 18:34:59 +00:00
parth-gr 0249d2b6a5 external: fix ipv6 monitoring endpoint reconcile
currently the extraction ipv6 was not correct
used the net package to extract the host ip from
the ipadress

Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit e1873cb2e7)
2025-09-15 16:46:41 +00:00
subham rai 98ba1335cb Merge pull request #16487 from rook/mergify/bp/release-1.18/pr-16484
mon: fix mon health nil pointer exception with mons on PVC (backport #16484)
2025-09-15 21:15:44 +05:30
Santosh Pillai 508658f797 mon: fix mon health nil pointer exception
shouldFailoverMonImmediately has a nil pointer exception with mons on
PVC. Rook-ceph-mon-endpoint does not store node information of the mons
on PVC. So `mapping.Hostname` throws nill pointer

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
(cherry picked from commit d399615bdc)
2025-09-15 14:00:10 +00:00
Travis Nielsen 79d961d45e Merge pull request #16477 from rook/mergify/bp/release-1.18/pr-16112
osd: exclude down OSDs from main PDB when cluster is clean (backport #16112)
2025-09-11 14:58:55 -06:00
Travis Nielsen c6dbff9596 Merge pull request #16465 from rook/mergify/bp/release-1.18/pr-16457
helm: refactoring of rook-ceph's configmap to be easier to read and maintain (backport #16457)
2025-09-11 14:58:27 -06:00
Elias Carter 4c31c51ddb osd: exclude down OSDs from main PDB when cluster is clean
Currently, when there are down OSDs but all PGs are clean we add the
number of downed OSDs ot the main PDB maxUnavailable. For example if
OSDs 1,3,5 are down and all PGs are clean we create the following PDB:
```yaml
  maxUnavailable: 4
  selector:
    matchLabels:
      app: rook-ceph-osd
```

This is potentially dangerous as there can be race conditions which can
break the cluster, for example:
1. A new node is added to the cluster with 4 OSDs
2. Those OSDs are down as they have not started up and joined the cluster yet
3. All PGs are healthy as the new OSDs haven't started yet and they are new
4. The rook operator sets maxUnavailable to 5 on the OSD PDB
5. The new OSDs move from down to up as they start
6. Something in the cluster starts a disruption (eviction request)
7. Any 5 OSDs can be disrupted as maxUnavilable is still 5 and the downed OSDs are now up
8. If the 5 disrupted OSDs contain all the replicas of a PG it will cause the PG to go down

To better protect from this scenario, we can instead exclude the downed
OSDs from the main PDB instead of adding to maxUnavailable.
```yaml
  maxUnavailable: 1
  selector:
    matchExpressions:
    - key: app
      operator: In
      values: ["rook-ceph-osd"]
    - key: osd
      operator: NotIn
      values: ["1", "3", "5"]
```

This allows drains to still process when there are downed OSDs and PGs
are clean without allowing the non-downed OSDs to be disrupted.

Signed-off-by: Elias Carter <elias@dropbox.com>
(cherry picked from commit 60a15306e9)
2025-09-11 18:47:12 +00:00
Blaine Gardner 4d6a1d15a0 Merge pull request #16476 from rook/mergify/bp/release-1.18/pr-16456
nfs: rotate nfs cephx key (backport #16456)
2025-09-11 11:18:20 -06:00
subhamkrai 5b30ead7c1 nfs: rotate nfs cephx key
Signed-off-by: subhamkrai <srai@redhat.com>
(cherry picked from commit 5e21d43365)
2025-09-11 16:44:12 +00:00
Travis Nielsen 966f11ad96 Merge pull request #16475 from rook/mergify/bp/release-1.18/pr-16474
external: fixing rbd provisioner secret in import-external-cluster script (backport #16474)
2025-09-11 10:00:21 -06:00
Ruben Tsirunyan f201d34fd1 external: fixing a typo in import-external-cluster script
The value of userKey in CSI RBD provisioner secret was set to $CSI_RBD_PROVISIONER_SECRET_NAME because of a typo.
Fixed it by setting it to $CSI_RBD_PROVISIONER_SECRET.

Signed-off-by: Ruben Tsirunyan <rubentsirunyan@gmail.com>
(cherry picked from commit 4ab4cdc0de)
2025-09-11 15:17:06 +00:00
Erik Sundell de34958e5b helm: consistently quote configmap values (must be strings)
ConfigMap's data are key value pairs where the values must be strings,
so by using the quote function we guarantee that even though the
rendered content would be something like 1.1.

Signed-off-by: Erik Sundell <erik@sundellopensource.se>
(cherry picked from commit 3c964608bf)
2025-09-10 21:13:08 +00:00
Erik Sundell 2a3262dbf1 helm: additional refactor to reduce repetition, use with instead of if
A `with` block won't render if the argument is falsy, so it behaves like
an `if` block that redefines the `.` context. Using `with` instead of
`if` can help reduce repetition, making things more readable in the
process.

Signed-off-by: Erik Sundell <erik@sundellopensource.se>
(cherry picked from commit 6e09888951)
2025-09-10 21:13:08 +00:00
Erik Sundell 880538270f helm: fix edge case detail
The content wasn't within the `if .Values.csi` block but should be,
however if `.Values.csi` would be falsy, other things in the chart would
break so this shouldn't have affected anyone.

Signed-off-by: Erik Sundell <erik@sundellopensource.se>
(cherry picked from commit 158ee71f7f)
2025-09-10 21:13:08 +00:00
Erik Sundell a2e0e0ebd3 helm: refactor to reduce repetition, use with instead of if
A `with` block won't render if the argument is falsy, so it behaves like
an `if` block that redefines the `.` context. Using `with` instead of
`if` can help reduce repetition, making things more readable in the
process.

Signed-off-by: Erik Sundell <erik@sundellopensource.se>
(cherry picked from commit 8f60b33f31)
2025-09-10 21:13:08 +00:00
Erik Sundell fafe8fd747 helm: refactor indentation, conditional at content level
Instead of having an if block at zero indentation, put it at the level
where its content will be emitted. This is a more modern helm template
practice.

Signed-off-by: Erik Sundell <erik@sundellopensource.se>
(cherry picked from commit 71463151f3)
2025-09-10 21:13:07 +00:00
Travis Nielsen ce4291a5c5 Merge pull request #16464 from travisn/release-1.18.2
build: Set release version to v1.18.2
v1.18.2
2025-09-10 14:46:05 -06:00
Travis Nielsen fc4093227e build: set release version to v1.18.2
For the patch release update the docs and examples to
v1.18.2

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-09-10 14:14:23 -06:00
Travis Nielsen 940a062cb7 Merge pull request #16463 from rook/mergify/bp/release-1.18/pr-16462
csi: Set host networking on the csi controller pod if host networking is enforced (backport #16462)
2025-09-10 14:10:16 -06:00
Travis Nielsen 8a8e1eddef csi: allow csi controller pod to set host networking
The ceph csi controller plugin did not have the capability to
set host networking, in case the host networking is being enforced
with ROOK_ENFORCE_HOST_NETWORK: true.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit e294c280ed)
2025-09-10 19:42:40 +00:00
Travis Nielsen cf6b1e75c9 Merge pull request #16461 from rook/mergify/bp/release-1.18/pr-16454
helm: revert helm lookup and hook fixes (backport #16454)
2025-09-10 11:03:28 -06:00
Blaine Gardner c729d02dc7 Merge pull request #16460 from rook/mergify/bp/release-1.18/pr-16452
csi: fix prior cephx key deletion logic (backport #16452)
2025-09-10 10:48:51 -06:00
Travis Nielsen 599d2766dd Merge pull request #16459 from rook/mergify/bp/release-1.18/pr-16448
csi: add multus network annotation to csi-operator (backport #16448)
2025-09-10 10:44:05 -06:00
parth-gr a9e2fd2268 doc: update the upgrade doc with the helm breaking change
Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit 473b69eff3)
2025-09-10 16:29:47 +00:00
parth-gr 46338f9f29 helm: do not upgrade sc with helm upgrade
This reverts commit d9aee27b00.

Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit 91b36cfc35)
2025-09-10 16:29:47 +00:00
parth-gr 96a55a05e4 helm: recreate sc with helm upgrades
This reverts commit c8003bfef7.

Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit d7ac48fab6)
2025-09-10 16:29:47 +00:00
Blaine Gardner 9b71f192ed csi: fix prior cephx key deletion logic
Fix an issue where keepPriorKeyCountMax would be counted differently
when rotation was currently in progress, versus when rotation was not in
progress.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
(cherry picked from commit 7911469016)
2025-09-10 16:02:44 +00:00
subhamkrai 649489c504 csi: add multus network annotation to csi-operator
this commit adds multus network annotation to the
csi-operator node plugin and controller plugin pods
when multus is enabled in the ceph cluster.

Signed-off-by: subhamkrai <srai@redhat.com>
(cherry picked from commit d2a1286606)
2025-09-10 15:57:40 +00:00
Travis Nielsen c5c7c0332d Merge pull request #16450 from rook/mergify/bp/release-1.18/pr-16388
build: add support for golang v1.25 (backport #16388)
2025-09-10 09:41:15 -06:00
Michael Adam f01e603f94 build: bump controller-gen to v1.19.0
Co-Authored-by: Travis Nielsen <tnielsen@redhat.com>
Signed-off-by: Michael Adam <obnox@samba.org>
(cherry picked from commit e268c09c4e)
2025-09-10 13:36:27 +00:00
Michael Adam 7112b69397 build: add support for golang v1.25
With this change, rook supports the two most recent versions of golang,
v1.24 and v1.25.

Signed-off-by: Michael Adam <obnox@samba.org>
(cherry picked from commit ae3938d57d)
2025-09-10 13:36:27 +00:00
subham rai 137502b9d9 Merge pull request #16455 from rook/mergify/bp/release-1.18/pr-16449
ci: fix the ci canary vault tests (backport #16449)
2025-09-10 15:09:03 +05:30
parth-gr 34a617ffeb ci: fix the ci canary valut test
use the official way for helm installation
and not use the cdn installation

Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit b4fa906202)
2025-09-10 09:02:55 +00:00
Travis Nielsen 63fd3f18b4 Merge pull request #16444 from rook/mergify/bp/release-1.18/pr-16433
Fix secret values in import-external-cluster script (backport #16433)
2025-09-09 07:21:18 -06:00
Travis Nielsen 103033bd22 Merge pull request #16445 from rook/mergify/bp/release-1.18/pr-16383
helm: Do not upgrade storage class with helm upgrade (backport #16383)
2025-09-09 07:21:04 -06:00
parth-gr 6e8effaf14 helm: do not upgrade sc with helm upgrade
sc are immutable, so do not upgrade them
with helm upgrades

closes: https://github.com/rook/rook/issues/11398

Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit d9aee27b00)
2025-09-08 19:38:43 +00:00
Ruben Tsirunyan 7f6ad93298 external: fixing secret values in import-external-cluster script
The import-external-cluster.sh script uses $CSI_CEPHFS_NODE_SECRET as the value of userKey when patching the secrets of RBD node, RBD provisioner, CephFS node and CephFS provisioner.
Updated the patch data to use $CSI_RBD_NODE_SECRET, $CSI_RBD_PROVISIONER_SECRET, $CSI_CEPHFS_NODE_SECRET, $CSI_CEPHFS_PROVISIONER_SECRET respectively.

Signed-off-by: Ruben Tsirunyan <rubentsirunyan@gmail.com>
(cherry picked from commit 2169a3e784)
2025-09-08 17:20:46 +00:00
Blaine Gardner d8038f3a68 Merge pull request #16429 from rook/mergify/bp/release-1.18/pr-16421
osd: remove the osd bootstrap keyring (backport #16421)
2025-09-04 10:12:56 -06:00
parth-gr 171cb589e2 osd: remove the osd bootstrap keyring
when the osd is created there is no need for
osd bootstrap keyring, so remove the keyring
and keyring file,

New keyring will be created if
new osd need to be provisoned

Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit 794a232835)
2025-09-04 15:43:38 +00:00
Blaine Gardner 393722d6ff Merge pull request #16424 from rook/mergify/bp/release-1.18/pr-16372
core: delete bootstrap keys (backport #16372)
2025-09-02 15:08:53 -06:00
Blaine Gardner d2d69da654 Merge pull request #16398 from rook/mergify/bp/release-1.18/pr-16271
core: rotate client.admin cephx key (backport #16271)
2025-09-02 15:08:42 -06:00
Blaine Gardner 30db0f9b19 Merge pull request #16423 from rook/mergify/bp/release-1.18/pr-16409
osd: rotate lockbox keys for encrypted osd (backport #16409)
2025-09-02 15:08:21 -06:00
Santosh Pillai 76285baf24 core: delete bootstrap keys
Delete the client.boostrap.* keys. These keys are not created by rook so
it can't rotate them. This PR just delete these keys in the
postMonStartUpAction.

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
(cherry picked from commit 4cdba0df54)
2025-09-02 18:17:44 +00:00