Commit Graph
11496 Commits
Author SHA1 Message Date
Praveen M ca9e893bcb docs: update docs for vault KMS key rotation support
Signed-off-by: Praveen M <m.praveen@ibm.com>
(cherry picked from commit 01ccb5e20a)
2024-10-24 17:39:18 +00:00
Praveen M a467f57350 security: key rotation support for vault kms
Signed-off-by: Praveen M <m.praveen@ibm.com>
(cherry picked from commit d8c0242c29)
2024-10-24 17:39:18 +00:00
subham rai 5bbfd2d9c3 Merge pull request #14892 from rook/mergify/bp/release-1.15/pr-14891
Revert "docs: add documentation for rbd volumegroupsnapshot" (backport #14891)
2024-10-23 15:17:43 +05:30
Niraj Yadav bef1e160e3 Revert "docs: add documentation for rbd volumegroupsnapshot"
This reverts commit 524b6071d2.

Signed-off-by: Niraj Yadav <niryadav@redhat.com>
(cherry picked from commit b040a02336)
2024-10-23 07:52:25 +00:00
Travis Nielsen ce17de6d4b Merge pull request #14887 from rook/mergify/bp/release-1.15/pr-14886
ci: remove incorrect comment from codegen workflow (backport #14886)
2024-10-22 11:22:30 -06:00
Michael Adam 44993687f2 ci: remove incorrect comment from codegen workflow
PR #14883 fixed the codegen workflow but introduced a comment
that is simply wrong.

This change rectifies this mistake by removing the comment.

Signed-off-by: Michael Adam <obnox@samba.org>
(cherry picked from commit 714f80a80a)
2024-10-22 17:18:16 +00:00
Travis Nielsen 68e2bf6933 Merge pull request #14885 from rook/mergify/bp/release-1.15/pr-14883
ci: fix the codegen workflow (backport #14883)
2024-10-22 10:41:15 -06:00
Travis Nielsen 37f7a81e98 ci: update code for exporter changes
A recent ceph exporter change missed the codegen updates

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2024-10-22 10:09:30 -06:00
Michael Adam 04af4bb93c ci: fix the codegen workflow
The codegen workflow recently sometimes failed to detect files modified
by codegen. This has been analysed in a test PR:
https://github.com/rook/rook/pull/14723

The result of the analysis is the insight that the codegen tooling did not work
as expcted because the git checkout was not located in the src/github.com
directory under the GOPATH.

This change fixes the codegen workflow by post-processing the git checkout
action by copying the git checkout directory to the expected location.

Co-authored-by: Travis Nielsen <tnielsen@redhat.com>
Signed-off-by: Michael Adam <obnox@samba.org>
(cherry picked from commit f32d3df995)
2024-10-22 15:51:56 +00:00
Travis Nielsen 58ad7dceb9 Merge pull request #14873 from rook/mergify/bp/release-1.15/pr-14872
test: fix ceph image tag used by most canary tests (backport #14872)
2024-10-21 11:38:09 -06:00
mergify[bot] e956fd6bc5 Merge pull request #14879 from rook/mergify/bp/release-1.15/pr-14827
object: set obc user quota(s) in one SetUserQuota() call (backport #14827)
2024-10-21 15:28:46 +00:00
Joshua Hoblitt 241a68c21d object: set obc user quota(s) in one SetUserQuota() call
Previously, up to 3 calls to SetUserQuota() could be made. This has been
consolidated into a single call. Additionally, the `addtionalConfigSpec`
struct is introduced to centralize handling of `.spec.additionalConfig`
keys and as foundational work to support new keys in the future.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 9243764359)
2024-10-21 14:53:17 +00:00
mergify[bot] 5e72edbd84 Merge pull request #14876 from rook/mergify/bp/release-1.15/pr-14875
csi: fix typo in image version (backport #14875)
2024-10-21 14:51:26 +00:00
Madhu Rajanna 3a020c66e5 csi: fix typo in image version
add missing `v` in the cephcsi
image version

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
(cherry picked from commit 55441ee408)
2024-10-21 10:28:13 +00:00
Joshua Hoblitt 251c7b432b test: fix ceph image tag used by most canary tests
Fix ceph image tag string passed to replica_ceph_image.  Previously, the
result was "" was being passed in most cases.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 84694397bc)
2024-10-18 20:43:25 +00:00
Joshua Hoblitt 987a3110dc test: require ceph tag param to replace_ceph_image
To prevent silent failures where the ceph image tag is not updated.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 100c8bd7a9)
2024-10-18 20:43:25 +00:00
Travis Nielsen 0a1dd5e9e6 Merge pull request #14871 from rook/mergify/bp/release-1.15/pr-14870
ci: macos-12 will EOL soon, let's use latest tag (backport #14870)
2024-10-18 08:58:11 -06:00
subhamkrai 230d142d45 ci: macos-12 will EOL soon, let's use latest tag
Signed-off-by: subhamkrai <srai@redhat.com>
(cherry picked from commit febfa5acbc)
2024-10-18 13:44:12 +00:00
Travis Nielsen e924f96043 Merge pull request #14866 from travisn/release-1.15.4
build: Set the release version to v1.15.4
v1.15.4
2024-10-17 14:44:30 -06:00
Travis Nielsen e0edea90a1 build: set the release version to v1.15.4
For the patch release update the docs and examples
to v1.15.4

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2024-10-17 14:14:49 -06:00
mergify[bot] d22f4206f3 Merge pull request #14867 from rook/mergify/bp/release-1.15/pr-14823
core: define empty securityContext for pods to fix CIS 5.7.3 (backport #14823)
2024-10-17 18:16:21 +00:00
Peter Razumovsky c55756cf73 core: define empty securityContext for pods to fix CIS 5.7.3
Resolves CIS benchmark rule 5.7.3, Pods part. SecurityContext
should be explicitly defined in pod level of Pod spec section.
It is sufficient to specify empty securityContext to satisfy
CIS 5.7.3 rule.

5.7.3 Apply Security Context to Your Pods and Containers

When designing your containers and pods, make sure
that you configure the security context for your pods,
containers, and volumes.

Signed-off-by: Peter Razumovsky <prazumovsky@mirantis.com>
(cherry picked from commit 516eab4d8a)
2024-10-17 17:47:21 +00:00
mergify[bot] bf7f9eb7f9 Merge pull request #14863 from rook/mergify/bp/release-1.15/pr-14862
core: fix deletion of the osd-replace-config cm (backport #14862)
2024-10-16 14:19:06 +00:00
Santosh Pillai f43e088fda core: fix deletion of the osd-replace-config cm
MustDelete DeleteOption was set to `true` when deleting
osd-repalce-config configMap.  This cm won't existing after
all the OSDs get migrated. So deletion of the non-existent
cm will result in error. This PR removes `mustDelete: true` from
the DeletionOption when deleting osd-replace-config configmap

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
(cherry picked from commit 8dd237b460)
2024-10-16 13:50:55 +00:00
subham rai 1686b1a3df Merge pull request #14857 from rook/mergify/bp/release-1.15/pr-14854
core: Skip counting exporter pods as a ceph pod (backport #14854)
2024-10-16 11:57:59 +05:30
Travis Nielsen a4aea241b5 core: skip counting exporter pods as a ceph pod
The exporter pods were being counted as a ceph pod,
so once an exporter pod was added to a node, it would never
be removed since the controller thinks the exporter pod
itself is a ceph pod for which the exporter must be present.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit a71078b733)
2024-10-15 16:10:38 +00:00
mergify[bot] 3fd226bc43 Merge pull request #14856 from rook/mergify/bp/release-1.15/pr-14845
docs: Add documentation for RBD VolumeGroupSnapshot (backport #14845)
2024-10-15 14:20:19 +00:00
Niraj Yadav 0e720ff47a docs: add documentation for rbd volumegroupsnapshot
This PR adds the sample YAMLs and documentation
for the RBD VolumeGroupSnapshot.

Signed-off-by: Niraj Yadav <niryadav@redhat.com>
(cherry picked from commit 524b6071d2)
2024-10-15 13:50:54 +00:00
mergify[bot] 01d82e85af Merge pull request #14851 from rook/mergify/bp/release-1.15/pr-14842
test: improve reliability of canary rgw-multisite-testing (backport #14842)
2024-10-14 18:40:41 +00:00
Joshua Hoblitt 32a6976046 test: improve reliability of canary rgw-multisite-testing
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 92d9f994c2)
2024-10-14 17:07:47 +00:00
Joshua Hoblitt f3468c7860 test: inline .github/workflows/rgw-multisite-test
Merge/inline.github/workflows/rgw-multisite-test/action.yml into
.github/workflows/canary-integration-test.yml as the step from the
"composite" action are not displayed in the console.  The absence of the
step names may make it difficult to determine where a failure is
occurring.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit b4ac943b62)
2024-10-14 17:07:45 +00:00
Travis Nielsen 5a335d5506 Merge pull request #14840 from rook/mergify/bp/release-1.15/pr-14831
csi: disable fencing in Rook (backport #14831)
2024-10-11 10:57:53 -06:00
Madhu Rajanna 34f81ec820 csi: disable fencing in Rook
Disabling the RBD and CephFS fencing
in Rook for now as its having bugs where
Rook is blocklisting wrong IP address
due to timing issues.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
(cherry picked from commit 1d1ed5e962)
2024-10-11 16:27:09 +00:00
mergify[bot] ad43974c3a Merge pull request #14828 from rook/mergify/bp/release-1.15/pr-14820
multus: do not force delete in validation cleanup (backport #14820)
2024-10-09 19:17:40 +00:00
Blaine Gardner fcc1bc20d7 multus: do not force delete in validation cleanup
Do not force delete resources in validation cleanup. Force deletion can
result in CNI IP address management (IPAM) addresses not being released
cleanly, exhausting them. This can then lead to Rook cluster deploy
failure if the CNI IPAM isn't able to garbage collect the IPs quickly.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
(cherry picked from commit 936fe60a76)
2024-10-09 18:05:51 +00:00
mergify[bot] 972731c12d Merge pull request #14814 from rook/mergify/bp/release-1.15/pr-14805
mon: Do not remove extra mon in middle of failover (backport #14805)
2024-10-07 14:35:30 +00:00
Travis Nielsen b8ea67f56e mon: do not remove extra mon in middle of failover
If the mon failover is in progress, ensure the removal
of an extra mon deployment is skipped since that code
path only has one mon in the list for the mon that was
just newly started. The extra mon was erroneously removing
a random mon in that case, followed immediately by the mon
failover completing and removing the expected failed mon,
and potentially causing mon quroum loss.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit e2cadab6fe)
2024-10-07 13:27:56 +00:00
mergify[bot] a043ee98fb Merge pull request #14807 from rook/mergify/bp/release-1.15/pr-14798
mds: fix liveness probe timeout (backport #14798)
2024-10-07 06:55:41 +00:00
Blaine Gardner 07884a3028 mds: fix liveness probe timeout
When the MDS liveness probe times out, it should not fail the probe. If
the cluster has a network partition or other issue that causes the Ceph
mon cluster to become unstable, `ceph ...` commands can hang and cause
a timeout. In this case, the MDS should not be restarted so as to not
cause cascading cluster disruption.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
(cherry picked from commit ad1bae9e1b)
2024-10-07 06:18:54 +00:00
Travis Nielsen cefb365f32 Merge pull request #14803 from travisn/release-1.15.3
build: Set the release version to v1.15.3
v1.15.3
2024-10-03 15:08:30 -06:00
Travis Nielsen 050a5dbfda build: set the release version to v1.15.3
For the patch release update the docs and manifests
to v1.15.3

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2024-10-03 14:34:04 -06:00
mergify[bot] 3014b23a28 Merge pull request #14802 from rook/mergify/bp/release-1.15/pr-14801
rgw: fix CephObjectZone failing with pre-existing pools (backport #14801)
2024-10-03 20:17:36 +00:00
Joshua Hoblitt 8ed15f773c rgw: change CephObjectZone.spec.{dataPool,metadataPool} to optional
These fields must be optional in order to allow usage of pre-existing
pools managed by CephBlockPool CR(s).

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 76fa776795)
2024-10-03 19:50:06 +00:00
Travis Nielsen 26f1ba5053 Merge pull request #14799 from rook/mergify/bp/release-1.15/pr-14772
rgw: fix CephObjectStore failing with pre-existing pools (backport #14772)
2024-10-03 13:48:27 -06:00
Joshua Hoblitt 121f8383fe test: convert all github-action-helper functs to $REPO_DIR
This allows all functions to be called in any order without concern for
the CWD.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 581fd5c197)
2024-10-03 17:51:32 +00:00
Joshua Hoblitt 4822dfc73c test: mv canary test specific resources out of deploy_cluster()
Factor out most of the CRs used by various canary tests to a new
deploy_cluster_full_of_cruft_please_stop_using_this() function.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 31d55b90fe)
2024-10-03 17:51:32 +00:00
Joshua Hoblitt 33b345f0a5 test: add object-with-cephblockpool canary test
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit ed8156017e)
2024-10-03 17:51:31 +00:00
Joshua Hoblitt 89a3eb5542 rgw: fix cephObjectStore failing with pre-existing pools
When attempting to use pre-existing (or cephBlockPool managed) pools and
the cephObjectStore.spec.{metadataPool,dataPool} fields are not
specified, rgw creation will fail with this error:

    2024-09-25 21:00:17.744358 E | ceph-object-controller: failed to reconcile CephObjectStore "rook-ceph/test1". failed to create object store deployments: failed to create object pools: failed to create metadata pools: failed to create pool "test1.rgw.control": pool "test1.rgw.control" type is not defined as replicated or erasure coded

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit 9b952e0a55)
2024-10-03 17:51:30 +00:00
Joshua Hoblitt dc4460cdec test: add github-action-helper toolbox functions
Added these functions for running commands in the toolbox pod:

- toolbox()
- ceph()
- rbd()
- radosgw-admin()

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
(cherry picked from commit cb1dd152ad)
2024-10-03 17:51:30 +00:00
mergify[bot] 704136c1d5 Merge pull request #14796 from rook/mergify/bp/release-1.15/pr-14791
helm: Add enforce host network setting (backport #14791)
2024-10-03 00:57:12 +00:00