Commit Graph
123 Commits
Author SHA1 Message Date
Matej Feder 8521286ce3 monitoring: fix CephPoolGrowthWarning expression
Prometheus found duplicate series for the match group `pool_id`
and `instance` when evaluating the CephPoolGrowthWarning alert
expression. This alert has an evaluation interval of 2 days and
did not consider the changing POD names during the Rook migration process.

This commit adds the `pod` label to the set of considered labels.

Signed-off-by: Matej Feder <matej.feder@dnation.cloud>
(cherry picked from commit 6ba084f35a)
2024-06-17 18:24:50 +00:00
Peter Dahlberg ed89e36c9f helm: allow custom labels and annotations for storage classes
Storage classes were missing the possilbilty to attach custom labels and
annotations. This change brings it on par with VolumeSnapshotClass
objects.

Signed-off-by: Peter Dahlberg <catdog2@tuxzone.org>
(cherry picked from commit de82481d80)
2024-06-12 13:34:29 +00:00
Matej Feder 4253a04ea1 monitoring: update to the latest ceph prometheus rules
Pick up the latest ceph prometheus rules from the ceph repo
found at https://github.com/ceph/ceph/blob/master/monitoring/ceph-mixin/prometheus_alerts.yml.

The updates include new rules for monitoring of ceph as well as
adjustments related to the Rook ceph deployment.
List of main adjustments:
- Alerts related to cephadm are excluded
- The PrometheusJobMissing alert is adjusted for the rook-ceph-mgr job, and the PrometheusJobExporterMissing alert is added

Signed-off-by: Matej Feder <matej.feder@dnation.cloud>
(cherry picked from commit c0a0a3c7b2)
2024-06-10 21:18:12 +00:00
NymanRobin 276c2cd087 docs: fix broken link to network config
Signed-off-by: NymanRobin <robin.nyman@est.tech>
(cherry picked from commit 30e6a7349b)
2024-05-22 13:56:11 +00:00
Steven Fackler a60dfda70f operator: support custom dashboard service labels and annotations
Unlike other components, the Ceph dashboard Service object could not be
configured with custom labels and annotations. This can be useful when
integrating Rook into a cluster with custom controllers similarly to how
the RGW service is customized.

Signed-off-by: Steven Fackler <sfackler@gmail.com>
(cherry picked from commit 0c38dd81c2)
2024-04-23 20:22:54 +00:00
Travis Nielsen a420ffa913 helm: use correct metadata and data ec block pool
The metadata and data block pools for an EC block pool
were switched, causing issues with the EC configuration.
Now the metadata and data pool settings are correct
in the helm chart.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
(cherry picked from commit bbfa4f21ad)
2024-04-18 20:31:29 +00:00
mmaoyu 4c18227cd9 osd: add option upgradeOSDRequiresHealthyPGs
For check if cluster PGs are healthy before osd updates
Which helps gainning more confidence in the osd upgrades

Signed-off-by: mmaoyu <wupiaoyu61@gmail.com>
(cherry picked from commit 6d4afe23e5)
2024-04-11 20:14:32 +00:00
Travis Nielsen 3e54055ae9 security: operator and toolbox scc for default service account
The default service account access is needed for the operator
and the toolbox to run on openshift. This is a follow-up from
PR 13362 that created a new default service account to use with
all ceph or rook components that were relying on the default
service account.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2024-03-18 11:40:32 -06:00
Redouane Kachach 4b9e77af1e monitoring: set metrics scraping interval to 10s in examples files
Signed-off-by: Redouane Kachach <rkachach@redhat.com>
2024-03-14 16:17:08 +01:00
Travis Nielsen 026d745f8a core: set default ceph version to v18.2.2
With the release of Reef v18.2.2 we update the default
recommended version of Ceph to fix the prometheus issues
seen with v18.2.1

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2024-03-11 11:06:59 -06:00
Alexander Trost 6f61f4600e build: fix master version helm values replacement
Signed-off-by: Alexander Trost <galexrt@googlemail.com>
2024-03-05 17:29:51 +01:00
parth-gr f7a9d8ff7b core: added rook-ceph-default service account
When a private docker registry is used and an
image pull secret is specified in the chart,
the pods with default Service Account fail to pull
the image due to authentication issues.
Added rook-ceph-default service account and modify the pods
specifications by adding the serviceAccountName

closes: https://github.com/rook/rook/issues/12786

Closes: https://github.com/rook/rook/issues/6673
Co-authored-by: Tareq Sharafy <tareq.sha@gmail.com>
Signed-off-by: parth-gr <partharora1010@gmail.com>
(cherry picked from commit 737fb099fe)
Signed-off-by: parth-gr <partharora1010@gmail.com>
2024-02-28 13:32:55 +05:30
travisn ef13dd3edc mgr: remove remaining pg_autoscaler examples
The pg_autoscaler is always enabled by ceph and cannot be disabled.
In a previous PR the pg_autoscaler config was removed from the main example.
Now the remaining config for the pg_autoscaler is removed as well.

Signed-off-by: travisn <tnielsen@redhat.com>
2024-02-14 11:13:29 -07:00
travisn 27265ff279 helm: remove cpu limits from all pods
When CPU requests and limits are assigned to a pod,
the pod will be guaranteed the requests, up to the limits.
Even if there are spare CPU cycles, the pod cannot use
them. Thus, pods can be unnecessarily denied compute
when they need to burst if the limits are set.

Therefore, it is not recommended to set CPU limits
since the CPU requests are already guaranteeing that
no pod will be starved at least for its requests.

Signed-off-by: travisn <tnielsen@redhat.com>
2024-02-07 17:36:59 -07:00
Javier 95ae42c2bd helm: allow defining multiple cephEcStorageClass
This update modifies the Helm chart rook-ceph-cluster
to allow define cephStorageClass as part of the blokpool
also the documentation was updated for cephECBlockPool definition

Signed-off-by: Javier <sjavierlopez@gmail.com>
2024-01-29 19:23:18 -06:00
Madhu Rajanna c35a8532aa csi: option to customize csi driver name prefix
For now we are using the operator namespace name
as the prefix for the csi driver, This PR provides
an option for the users if someone wants to have
their own prefix for the csi driver, if someone tries
to change the prefix for existing csi driver rook
operator will fail to reconcile the csi driver.

Signed-off-by: Madhu Rajanna <madhupr007@gmail.com>
2024-01-29 10:54:25 +01:00
Erik Berg 2a225ac718 helm: remove duplicate key for toolbox keyring
We set `ceph_secret=${ROOK_CEPH_SECRET}` just a couple lines above,
and this duplicate is probably just an oversight.

This duplicate key is not present in the similar scripts in
  examples/toolbox.yaml
  examples/toolbox-operator-image.yaml

Signed-off-by: Erik Berg <erikberg@usit.uio.no>
2024-01-23 11:54:00 +01:00
Erik Berg 9a2d8505e7 helm: fix indentation/whitespace
Removing whitespace for consistency and wrong indentation level.
There's one actual "oopsie-fix" in here for CSI_ENABLE_READ_AFFINITY

Signed-off-by: Erik Berg <erikberg@usit.uio.no>
2024-01-23 11:53:46 +01:00
travisn 5f60d2dfac helm: update default ceph version to v18.2.1
In the cluster chart, set the default ceph version
to v18.2.1.

Signed-off-by: travisn <tnielsen@redhat.com>
2024-01-03 14:35:17 -07:00
Charlie Haley 0768eb125b helm: allow configuring monitoring interval
Signed-off-by: Charlie Haley <charlie.haley@hotmail.com>
2023-12-15 14:56:09 +00:00
parth-gr c9fd382c13 subvolumegroup: add pinning spec in subvolumegroup CRD
subvolumegroup can be pinned by pintype and pinsetting
So adding the spec to enhance its functionality

Closes: https://github.com/rook/rook/issues/12607

Signed-off-by: parth-gr <paarora@redhat.com>
2023-12-11 21:54:25 +05:30
parth-gr 31bd3bcf96 subvolumegroup: add default csi svg CR to filesystem CR
Add the default csi svg cr to exmaples.yaml and helm

Closes: https://github.com/rook/rook/issues/13040

Signed-off-by: parth-gr <paarora@redhat.com>
2023-12-11 14:11:23 +05:30
Cyril Jouve d65c5b6dff helm: fix namespace for objstore ingress
Signed-off-by: Cyril Jouve <jv.cyril@gmail.com>
2023-12-02 11:20:24 +01:00
travisn b4e51f6d12 helm: add namespace to all resource templates
The helm templates assumed that the resources would be installed
to the given namespace for the helm install or upgrade. This works
perfectly until there is a desire to extract the manifests from
the helm chart and instead install with those. Thus, the namespace
is added to all the resources in the chart where they were
missing.

Signed-off-by: travisn <tnielsen@redhat.com>
2023-11-29 15:13:13 -07:00
travisn 03d077aa6b core: remove support for ceph pacific
Pacific is end of life and no longer necessary to
support in Rook with v1.13.

Signed-off-by: travisn <tnielsen@redhat.com>
2023-11-14 17:07:03 -07:00
Micah Nagel 0ff224d453 helm: update docs to reflect reef support
some helm comments incorrectly indicate ceph v18 is not supported

Signed-off-by: Micah Nagel <micah.nagel@defenseunicorns.com>
2023-09-08 12:11:58 -06:00
test 330030e362 helm: container security context in helm charts
Allow setting container security context for operator and toolbox pods

Specify dropping capabilities for the operator and similar settings for the toolbox

Signed-off-by: test <bert@transtrend.com>
2023-08-25 08:59:25 +02:00
Rowan Ruseler 8f8f46dbd6 helm: replaced broken documentation references
Noticed that since the release of 1.9, the values.yaml file has some
old documentation references. Replaced them with the new locations.

Adjusted the link as requested by travisn
Placed extra line eof back as requested by path-gr

Signed-off-by: Rowan Ruseler <rowanruseler@gmail.com>
2023-08-18 10:21:37 +02:00
Travis Nielsen f3764cc7ad Merge pull request #12731 from cjyar/alert-for
monitoring: add "for" to CephOSDDownHigh alert
2023-08-16 14:11:54 -06:00
parth-gr 62e3ffb2ba helm: install rook in openshift cluster
The sccs were missing in the helm installation,
added it

Closes: https://github.com/rook/rook/issues/12280

Signed-off-by: parth-gr <paarora@redhat.com>
2023-08-16 14:43:36 +05:30
Chris Jones 9f1e5ec4ee monitoring: add "for" to CephOSDDownHigh alert
As part of a normal restart, an OSD can go down just as prometheus tries
to scrape it, causing this alert to fire. Alerts shouldn't fire as part
of normal operations. This change requires the OSD to be down for 5
consecutive minutes before the alert will fire.

Signed-off-by: Chris Jones <chris@cjones.org>
2023-08-15 19:37:46 -06:00
Marcel Lautenbach 9d335ad814 docs: replace deprecated ingress.class annotation
Documentation and examples used a deprecated annotation to set the Ingress class name. This commit replaces it with the correct version using spec.ingressClassName .

Signed-off-by: Marcel Lautenbach <mlautenb@gmail.com>
2023-06-23 19:31:54 +02:00
Travis Nielsen aa5fe08654 Merge pull request #12324 from Javlopez/feature/9179-Allow-for-EC-Block-Pool-configurations
helm: add EC Block Pool config in helm chart
2023-06-14 08:06:44 -06:00
Javier f6816abc97 helm: add EC Block Pool config in helm chart
allow for EC Block Pool configurations to be defined in the rook-ceph-cluster Helm chart

Signed-off-by: Javier <sjavierlopez@gmail.com>
2023-06-08 14:02:05 -06:00
Travis Nielsen f587fbc3b9 Merge pull request #12213 from parth-gr/external-docs-rgw
doc: update external cluster docs
2023-06-06 07:50:43 -06:00
parth-gr 56cd431377 docs: update external cluster docs
1) removed the supported version column

2) updated the doc with support for v2 port an helm installation

3) Add support for rgw objectuser creation

Signed-off-by: parth-gr <paarora@redhat.com>
2023-06-05 20:06:50 +05:30
Alexander Trost 178c916012 helm: add exporter resource entry to ceph cluster
This adds the new `exporter:` resource key to the Ceph cluster example
yaml. It also set some sane resource requests and limits for it in the
CephCluster section of the rook-ceph Helm chart.

Closes #11914

Signed-off-by: Alexander Trost <galexrt@googlemail.com>
2023-05-30 17:54:49 +02:00
parth-gr 060bd00281 docs: update ruleNamesapce to rulesNamespaceOverride
there were some places where rulenamesapce was present updated to rulesNamespaceOverride

Closes: rook#12163
Signed-off-by: parth-gr <paarora@redhat.com>
2023-05-11 17:26:04 +05:30
travisn db04b127b0 core: remove obsolete journal size config value
The journal size was only applicable to the filestore OSD
format which has not been supported by rook since v1.2.
Remove the remaining obsolete setting from the examples and
code.

Signed-off-by: travisn <tnielsen@redhat.com>
2023-04-24 15:54:53 -06:00
Cyril Jouve 100f8c1320 helm: add an ingress for ceph-objectores
Signed-off-by: Cyril Jouve <jv.cyril@gmail.com>
2023-04-22 14:45:20 +02:00
travisn 609ac91cb1 core: update default image to ceph v17.2.6
With the release of ceph v17.2.6, the examples and the base
image for the operator are updated to pick up the latest
and greatest.

Signed-off-by: travisn <tnielsen@redhat.com>
2023-04-11 14:07:11 -06:00
Mathieu Parent 1578d55b4d helm: drop snapshot.storage.k8s.io/v1beta1
v1 exists since k8s v1.20

Signed-off-by: Mathieu Parent <mathieu.parent@insee.fr>
2023-04-08 21:18:35 +02:00
Redouane Kachach 456a0c328c Revert "mgr: remove mgr sidecar"
This reverts commit ff75ec96b7.

Signed-off-by: Redouane Kachach <rkachach@redhat.com>
2023-03-07 13:12:50 +01:00
travisn fd25eeecf1 monitoring: remove alerts that don't apply to rook
When the alerts were updated from the ceph repo, the cephadm
alerts were removed, now we also remove two other alerts that
don't apply to rook clusters. The pool growth warning alert
and prometheus job missing alerts need to be removed
as also seen in https://github.com/rook/rook/pull/10109.

Signed-off-by: travisn <tnielsen@redhat.com>
2023-03-06 14:46:33 -07:00
Travis Nielsen 2abb8aa08c Merge pull request #11661 from rkachach/fix_issue_removing_sidecar
mgr: remove legacy mgr HA logic and watch-active sidecar
2023-02-21 22:19:30 -07:00
Redouane Kachach ff75ec96b7 mgr: remove mgr sidecar
With the new mgr HA implementation (based on readiness probe) we
don't need the mgr sidecar (live-watch) anymore. This commit is
intended to remove all the related code.

Signed-off-by: Redouane Kachach <rkachach@redhat.com>
2023-02-21 17:25:39 +01:00
ahgraber 568623d92b monitoring: remove cephadm ruleset
Remove cephadm ruleset, as they don't apply to rook

Signed-off-by: ahgraber <ahgraber@ninerealmlabs.com>
2023-02-20 21:04:30 -05:00
ahgraber ad2308d655 monitoring: align with ceph/ceph prometheus alerts
Update rook prometheus localrules files to align with ceph/ceph prometheus alerts

Signed-off-by: ahgraber <ahgraber@ninerealmlabs.com>
2023-02-20 13:30:21 -05:00
Brian Dunnigan b2f778edcc helm: support setting storageclass volumeBindingMode in rook-ceph-cluster helm chart
Signed-off-by: Brian Dunnigan <bdun1013dev@gmail.com>
2023-02-17 11:09:55 -07:00
Travis Nielsen a4f71baf8a core: option to require msgrv2 even without encryption
Enabling msgr v2 and disabling msgr v1 currently requires enabling
either encryption on the wire or compression on the wire.
As more clients are running on the latest kernel, allow
the clients to run on v2 even when encryption and compression
are not enabled. Clusters that are fully running on v2
will more easily be able to change configuration between
enabling or disabling msgr v2 features.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2023-02-10 09:45:57 -07:00