Commit Graph
2381 Commits
Author SHA1 Message Date
Mörgæsis d8a809cddb docs: anchor for #enable-tls heading
Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is>
2025-12-30 17:36:46 +00:00
Mörgæsis 2497940603 docs: link to Ceph docs with incorrect heading link
Found that `#set-*` doesn't exist on the linked pages, but `#setting-*`
does.

Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is>
2025-12-28 12:51:49 +00:00
Artem Torubarov 7ee062bc06 rgw: support all S3 notification events in CRD validation
Signed-off-by: Artem Torubarov <artem.torubarov@sap.com>
2025-12-08 11:08:24 +01:00
Travis Nielsen c05768feb3 docs: add pool parameter for erasure code optimizations
Ceph Tentacle v20 comes with erasure coding optimizations
that must be enabled explicitly with a setting on the pool.
Add this setting to the docs and examples.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-12-04 11:42:07 -07:00
Travis Nielsen eaf5e4a21f Merge pull request #16783 from subhamkrai/remove-ceph-reef
core: remove support for reef v18 in Rook v1.19
2025-12-04 09:52:08 -07:00
subhamkrai 304cdc8c83 core: remove support for reef v18 in Rook v1.19
For Rook v1.19,removing support for Ceph Reef. It is at end of life.
Users on Reef can continue to use Rook v1.18.x or older.
The latest two Ceph versions Squid and Tentacle are supported.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-12-04 13:11:35 +05:30
Santosh a87a3fb766 rgw: update scaledObject resource
Update ScaledObject Resource to use correct metric.
ceph_rgw_put is not availabe. Using ceph_rgw_op_put_obj_ops instead.

Signed-off-by: Santosh <sapillai@redhat.com>
2025-12-02 21:03:36 +05:30
Travis Nielsen a1c87c6188 mds: remove mds standby if disabled
The activeStandby property was being ignored when deciding
how many mds daemons to start. 2x the active count of mds
daemons were always being created. If the standby is not
desired, the standby can be removed, and it was unexpected
that it was not removed.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-11-19 10:55:12 -07:00
Travis Nielsen 7fe438b5cb Merge pull request #16659 from travisn/app-migration
docs: Example of application migration between clusters
2025-11-06 15:21:29 -07:00
Travis Nielsen 4cd6416dab docs: example of application migration with dynamic pv
Document how to migrate an application with a dynamic
PV rather than a static PV, since static PVs have limitations
such as not supporting snapshots and clones.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-11-06 12:00:46 -07:00
Travis Nielsen 12a6278836 Merge pull request #16681 from richardbadman/fix-some-typos-and-yaml-formatting
doc: Fix typos and yaml formatting
2025-11-06 11:32:02 -07:00
Richard Goodman f833c549bb doc: fix typos and yaml formatting
Noticed two small typos when reading the documentation on object stores.
I also noticed that the lack of a whitespace in the creating a user
example affects the syntax highlighting.

Signed-off-by: Richard Goodman <richardg@brandwatch.com>
2025-11-06 17:13:23 +00:00
Travis Nielsen dba69aab0a docs: example of application migration between clusters
Applications can be migrated between clusters that are
connecting to the same external Ceph cluster.
This is done with a static PV that can be mounted
by the application across the clusters.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-11-06 09:37:39 -07:00
Travis Nielsen a5180adb92 Merge pull request #16617 from Nordix/Sunnatillo/add-networkHost-field-cephMgr
mgr: add hostNetwork field to Manager spec
2025-11-06 09:28:19 -07:00
Sunnatillo b9a4685f65 mgr: add hostNetwork field to Manager spec
Add optinal hostnetwork field for Ceph Mgr to control whether the
mgr pods to run in host network. If unset, this defaults to
cluster level Network.HostNetwork value. This particulary useful
when user wants to restrict ceph mgr pod from exposing metrics
port in all host interfaces.

Signed-off-by: Sunnatillo <sunnat.samadov@est.tech>
2025-11-05 21:52:49 +02:00
Parth Arora 1c1bd6957d Merge pull request #16673 from parth-gr/fix-external-csi-doc
doc: add csi operator creation step for external mode
2025-11-05 21:22:55 +05:30
parth-gr 31d410822d doc: add csi operator creation step for external mode
Rook has started using csi operator by default,
so with every new rook external mode install,
we need to use create the csi operator

closes: https://github.com/rook/rook/issues/16620

Signed-off-by: parth-gr <partharora1010@gmail.com>
2025-11-05 17:25:17 +05:30
Travis Nielsen b89af41df4 Merge pull request #16655 from jhoblitt/feature/OSDMaxUpdatesInParallel
osd: add CephCluster.spec.storage.OSDMaxUpdatesInParallel
2025-11-04 10:36:05 -07:00
AlienAscension 520e7f959f docs: fix typo in 'Advance Options' heading
Signed-off-by: AlienAscension <linus.breitenberger@gmail.com>
2025-11-04 17:55:26 +01:00
Joshua Hoblitt 43f26534ed osd: add CephCluster.spec.storage.OSDMaxUpdatesInParallel
Configures the maximum number of OSDs to update in parallel.

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-11-03 12:10:28 -07:00
Blaine Gardner 55a4c63d31 doc: update broken link in NFS docs
Update a broken link due to the Kubernetes in-tree NFS driver being
archived/deprecated. Update the link to refer to the latest NFS CSI
driver.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-11-03 08:52:19 -07:00
Blaine Gardner c08a7742b0 Merge pull request #14821 from sp98/rgw-hpa
rgw: add scale subresource to CephObjectStore CR
2025-10-27 09:54:11 -06:00
Mathieu Parent d9109fb3b9 docs: fix storageclass ec link
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
2025-10-24 16:57:57 +02:00
Travis Nielsen 1417e22034 Merge pull request #16588 from raaizik/ra-16523
docs: discourage freezing default values in user values.yaml
2025-10-16 13:14:49 -06:00
raaizikandTravis Nielsen f6c734a576 docs: discourage freezing default values in user values.yaml (fix #16523)
Users sometimes copy‑paste the entire default `values.yaml` into their own configs, which “freezes” all defaults
and prevents them from inheriting new defaults in future chart versions.

This change enhances the Helm chart documentation to emphasize that:
- Only *overridden* fields should be declared by users.
- Avoid duplicating all default values.
- Leaving fields unset allows users to benefit from upstream default updates.

These adjustments help maintain upgrade compatibility, reduce config bloat, and make it easier to adopt new defaults.

Closes: #16523

Signed-off-by: raaizik <132667934+raaizik@users.noreply.github.com>
Co-Authored-By: Travis Nielsen <tnielsen@redhat.com>
2025-10-16 22:06:22 +03:00
Travis Nielsen f81ecdc89c Merge pull request #16593 from parth-gr/fix-topology-doc
doc: add recovery steps for topology based pools
2025-10-14 10:38:54 -06:00
parth-gr 17fd9ba1e1 doc: add recovery steps for topology based pools
Added a recovery steps for replica-1 pool
if the osd went down

Signed-off-by: parth-gr <partharora1010@gmail.com>
2025-10-14 17:33:50 +05:30
Travis Nielsen 2b9cec7400 Merge pull request #16582 from travisn/doc-helm-break-tag
doc: Add breaking helm change to upgrade guide for ceph image settings
2025-10-13 23:06:38 -06:00
Travis Nielsen 6a73afdc19 doc: add breaking helm change to upgrade guide for ceph image settings
The ceph image settings have moved outside the cephClusterSpec
section of the values overrides, to allow specifying the repository
or image tag that will be deployed. The cephVersion image settings
under the cephClusterSpec section of the values overrides must be
removed.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-10-07 14:59:59 -06:00
Tim Buchwaldt 8db5274703 operator: allow overriding MDS cache memory limit
This change introduces support for setting the ceph cache memory limit
ratios that were previously hardcoded.
Codegen was drivey-by updated as the current version errored.

Resolves #16551

Signed-off-by: Tim Buchwaldt <tim.buchwaldt@deepl.com>
2025-10-07 09:15:56 +02:00
Erik Sundell e7a704ccf1 helm: remove legacy PodSecurityPolicy resource
The helm charts allowed rendering a PodSecurityPolicy resource via the
configuration `pspEnable`. This option is removed and all references to
psp, PodSecurityPolicy, and Pod Security Policy have been cleaned up.

The PSP resource was only rendered if k8s version was lower than 1.25
when it was still supported. It has been deprecated since k8s 1.21.

Signed-off-by: Erik Sundell <erik@sundellopensource.se>
2025-09-30 18:25:35 +02:00
Travis Nielsen 005812b32a Merge pull request #16512 from travisn/helm-ceph-version
helm: Allow specifying the image tag and repository separately
2025-09-25 11:36:25 -05:00
subhamkrai 1d4efa9392 csi: csi-addon no longer needed for network fence
with latest design for networkFence, no need for
csi-addons to be installed as the implementation
is moved to csi-drivers.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-09-24 21:08:44 +05:30
Travis Nielsen 51cb22c791 helm: allow specifying the image tag and repository separately
The image repo and tag conveniently can be specified separately
so the release tag can be picked from the official chart, and
the repo can be customized in the values.yaml

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-09-23 17:01:51 -05:00
SantoshPillai 67b44b47df rgw: make hpa update rgw resource
Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-09-19 12:22:30 +05:30
subham rai 68e0dfbb8b Merge pull request #16496 from jhoblitt/maint/fix-zonegroup-and-zone-field-desc
core: fix ObjectZoneSpec.ZoneGroup and ObjectZoneGroupSpec.Realm field descriptions
2025-09-17 17:16:25 +05:30
Travis Nielsen 18b20ebd03 Merge pull request #16497 from jhoblitt/maint/cephobjectrealm.spec.defaultrealm-example
docs: add cephobjectrealm.spec.defaultrealm field to examples
2025-09-16 16:24:33 -06:00
Travis Nielsen 5236a8b297 Merge pull request #16437 from rook/dependabot/go_modules/k8s-dependencies-3d89866c01
build(deps): bump the k8s-dependencies group with 8 updates
2025-09-16 12:58:44 -06:00
Joshua Hoblitt 39691e3e06 docs: add cephobjectrealm.spec.defaultrealm field to examples
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-09-16 11:42:53 -07:00
dependabot[bot] 5a980c8b7a build(deps): bump the k8s-dependencies group with 8 updates
Bumps the k8s-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.4` | `0.34.0` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.33.4` | `0.34.0` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.4` | `0.34.0` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.33.4` | `0.34.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.4` | `0.34.0` |
| [k8s.io/cloud-provider](https://github.com/kubernetes/cloud-provider) | `0.33.4` | `0.34.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.21.0` | `0.22.0` |
| [sigs.k8s.io/mcs-api](https://github.com/kubernetes-sigs/mcs-api) | `0.2.0` | `0.3.0` |

Updates `k8s.io/api` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/api/compare/v0.33.4...v0.34.0)

Updates `k8s.io/apiextensions-apiserver` from 0.33.4 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.33.4...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.33.4...v0.34.0)

Updates `k8s.io/cli-runtime` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.33.4...v0.34.0)

Updates `k8s.io/client-go` from 0.33.4 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.33.4...v0.34.0)

Updates `k8s.io/cloud-provider` from 0.33.4 to 0.34.0
- [Commits](https://github.com/kubernetes/cloud-provider/compare/v0.33.4...v0.34.0)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.21.0...v0.22.0)

Updates `sigs.k8s.io/mcs-api` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/kubernetes-sigs/mcs-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/mcs-api/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/mcs-api/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: k8s.io/cloud-provider
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/mcs-api
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: subhamkrai <srai@redhat.com>
2025-09-16 10:30:46 -06:00
Joshua Hoblitt 8b58d68592 core: fix ObjectZoneSpec.ZoneGroup field description
Resolves this incorrect field description:

     ~ $ k explain cephobjectzone.spec.zoneGroup
    GROUP:      ceph.rook.io
    KIND:       CephObjectZone
    VERSION:    v1

    FIELD: zoneGroup <string>

    DESCRIPTION:
        The display name for the ceph users

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-09-16 09:12:20 -07:00
Joshua Hoblitt 1a1478a342 core: fix ObjectZoneGroupSpec.Realm field description
Resolves this incorrect field description:

     ~ $ k explain cephobjectzonegroup.spec.realm
    GROUP:      ceph.rook.io
    KIND:       CephObjectZoneGroup
    VERSION:    v1

    FIELD: realm <string>

    DESCRIPTION:
        The display name for the ceph users

Signed-off-by: Joshua Hoblitt <josh@hoblitt.com>
2025-09-16 09:08:50 -07:00
Michael AdamandTravis Nielsen 40427d5c0d ci: update latest k8s version to 1.34
this change updates the k8s version to 1.34 and also updates
the  cri-ctl version for minikube.

Signed-off-by: Michael Adam <obnox@samba.org>
Co-authored-by: Travis Nielsen <tnielsen@redhat.com>
2025-09-16 17:57:28 +02:00
Blaine Gardner 1c3ebbd01a Merge pull request #16456 from subhamkrai/rotate-nfs-keys
nfs: rotate nfs cephx key
2025-09-11 10:43:22 -06:00
subhamkrai 5e21d43365 nfs: rotate nfs cephx key
Signed-off-by: subhamkrai <srai@redhat.com>
2025-09-11 16:10:46 +05:30
parth-gr 473b69eff3 doc: update the upgrade doc with the helm breaking change
Signed-off-by: parth-gr <partharora1010@gmail.com>
2025-09-10 21:15:32 +05:30
Travis Nielsen 805ae6ec89 Merge pull request #16375 from morgaesis/master
docs: fix `authKeystone` usage in Object Storage CRD docs
2025-09-02 11:16:14 -06:00
Mörgæsis 65427d8cd1 docs: fix usage of undefined attribute
Update ceph-object-store-crd.md to use known attribute.

Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is>
2025-08-31 10:28:56 +00:00
Blaine Gardner 7c33186e72 core: admin cephx key rotation
Implement CephX key rotation for Rook's client.admin user.

Admin user rotation is risky, so this has been tested extensively both
in unit tests as well as by manually injecting failures during runtime.
In testing, all failures were able to be recovered by the recovery
routine.

A mutex is also added to help ensure that two simultaneous admin key
rotation processes cannot be running simultaneously for any given
namespace. The mutex is tested in unit tests, and it was verified during
runtime via  manual testing.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-08-27 14:47:45 -06:00
Blaine Gardner 37b6d41d04 Merge pull request #16346 from BlaineEXE/key-rotation-1.18-cleanup
CephX key rotation 1.18 cleanup
2025-08-19 14:55:05 -06:00