Sonny Sasaka
dff04494fe
csi: fix swapped provisionerPriorityClassName with pluginPriorityClassName
...
Previously provisionerPriorityClassName config is applied to node plugin
but pluginPriorityClassName is applied to controller plugin. This causes
a misconfiguration since the default values for
provisionerPriorityClassName is system-cluster-critical and
pluginPriorityClassName is system-node-critical.
The default priority for node plugin ought to be system-node-critical so
we can leverage this information to kill the pods in this priority last,
allowing other pods that may mount RBD-backed volume to unmount cleanly
first, otherwise the shutdown sequence may hang due to failure
unmounting RBD-backed volume when the node plugin pod is already killed.
Signed-off-by: Sonny Sasaka <sonnysasaka@gmail.com >
2026-04-16 08:30:28 -07:00
Travis Nielsen
f14fd9df18
Merge pull request #17320 from travisn/osd-ver-logging
...
osd: Add logging when detecting osd versions
2026-04-08 11:06:41 -06:00
Travis Nielsen
a80ca49855
osd: add logging when detecting osd versions
...
When osd versions are being detected, log more info
about the versions to understand better if the
require-osd-version release is being set as
expected.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-04-07 13:13:54 -06:00
Blaine Gardner
bf3adcb464
Merge pull request #17319 from OdedViner/aws_v2_upgrade_delete_bucket
...
object: add support for aws sdk v2 in s3agent DeleteBucket
2026-04-07 11:52:32 -06:00
Oded Viner
f5b73f12c6
object: add support for aws sdk v2 in s3agent DeleteBucket
...
update createbucket to use sdk v2 while keeping
all other methods on sdk v1.
Signed-off-by: Oded Viner <oviner@redhat.com >
2026-04-07 18:35:41 +03:00
Santosh
c6836c474a
rgw: support SSE-S3 with vault agent
...
Support using SSE-S3 encryption with RGW using vault Agent auth.
RGW sends requests to the agent instead of directly to Vault, and the agent transparently injects the authentication token. This eliminates using and managing a static token
Signed-off-by: Santosh <sapillai@redhat.com >
2026-04-07 12:18:29 +05:30
dependabot[bot]
7feeafe9b5
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
...
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-version: 4.1.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: subhamkrai <srai@redhat.com >
2026-04-06 21:19:45 +05:30
Travis Nielsen
cc626020ba
Merge pull request #17250 from sp98/implement-cosuser-accounts
...
rgw: add accountRef to CephObjectStoreUser CR
2026-04-02 15:56:30 -06:00
Joshua Hoblitt
0139637e34
test: add integration tests for CephObjectStoreUser capabilities
...
Signed-off-by: Joshua Hoblitt <josh@hoblitt.com >
2026-04-02 09:44:28 -07:00
Travis Nielsen
e4b68e0a19
Merge pull request #17149 from hjk068/user-caps
...
object: call generateUserCaps after AdminOpsClient calls
2026-04-02 09:14:34 -06:00
hjk068
b113e37dae
object: call generateUserCaps after AdminOpsClient calls
...
This prevents overwriting the user-specified capabilities
and correctly copies the Capabilities into UserCapabilities
after the AdminOpsClient calls.
Signed-off-by: hjk068 <hello.hyunjin@gmail.com >
2026-04-01 19:54:39 -04:00
Blaine Gardner
9a89a96cea
Merge pull request #16875 from OdedViner/aws_v2_upgrade
...
object: add support for aws sdk v2 in s3agent createbucket
2026-04-01 11:42:50 -06:00
Tarun Gupta Akirala
9803964d03
cosi: update default sidecar image version
...
Encountered this bug in current image kubernetes-sigs/container-object-storage-interface#173
which is fixed in recent release via kubernetes-sigs/container-object-storage-interface#197
Signed-off-by: Tarun Gupta Akirala <tarun.akirala@nutanix.com >
2026-03-31 14:23:20 -07:00
Oded Viner
86c920fa79
object: add support for aws sdk v2 in s3agent createbucket
...
initialize both aws sdk v1 and v2 clients in s3agent.
update createbucket to use sdk v2 while keeping all
other methods on sdk v1.
Signed-off-by: Oded Viner <oviner@redhat.com >
2026-03-31 17:41:51 +03:00
Santosh
3798b00b39
rgw: add accountRef to CephObjectStoreUser CR
...
Adds AccountRef to the CephObjectStoreUser CR. This helps associate the
user with a RGW account
Signed-off-by: Santosh <sapillai@redhat.com >
2026-03-31 12:47:51 +05:30
Blaine Gardner
3dfc3caf93
Merge pull request #17238 from majiayu000/fix/issue-17235-objectstore-service-labels
...
ceph: add labels support to CephObjectStore RGW service
2026-03-30 10:37:19 -06:00
subham rai
d1b2399ac5
Merge pull request #17272 from rook/dependabot/go_modules/github-dependencies-f8deea9d98
...
build(deps): bump the github-dependencies group with 6 updates
2026-03-30 21:47:29 +05:30
dependabot[bot]
d5de7b7e96
build(deps): bump the github-dependencies group with 6 updates
...
Bumps the github-dependencies group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) | `1.32.12` | `1.32.13` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2 ) | `1.19.12` | `1.19.13` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2 ) | `1.39.14` | `1.39.15` |
| [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) | `1.22.0` | `1.23.0` |
| [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator ) | `0.90.0` | `0.90.1` |
| [github.com/prometheus-operator/prometheus-operator/pkg/client](https://github.com/prometheus-operator/prometheus-operator ) | `0.90.0` | `0.90.1` |
Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.12 to 1.32.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.12...config/v1.32.13 )
Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.12 to 1.19.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/sqs/v1.19.12...credentials/v1.19.13 )
Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.39.14 to 1.39.15
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/sns/v1.39.14...service/sns/v1.39.15 )
Updates `github.com/hashicorp/vault/api` from 1.22.0 to 1.23.0
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md )
- [Commits](https://github.com/hashicorp/vault/compare/api/v1.22.0...api/v1.23.0 )
Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.90.0 to 0.90.1
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases )
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus-operator/prometheus-operator/compare/v0.90.0...v0.90.1 )
Updates `github.com/prometheus-operator/prometheus-operator/pkg/client` from 0.90.0 to 0.90.1
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases )
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus-operator/prometheus-operator/compare/v0.90.0...v0.90.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
dependency-version: 1.19.13
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
dependency-version: 1.39.15
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-dependencies
- dependency-name: github.com/hashicorp/vault/api
dependency-version: 1.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-dependencies
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring
dependency-version: 0.90.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-dependencies
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/client
dependency-version: 0.90.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: subhamkrai <srai@redhat.com >
2026-03-30 21:10:09 +05:30
subhamkrai
833be6bc76
mon: add floating mon api changes and implementation
...
for tnf, adding initial api changes and implementation for floating mon.
The current pr follow embeded yaml approach for creating floating mon
deploymen instead of configmap approach.
Signed-off-by: subhamkrai <srai@redhat.com >
2026-03-30 15:45:16 +05:30
majiayu000
ac6ec79865
object: add labels field to CephObjectStore RGW service spec
...
Allow users to configure custom labels on CephObjectStore RGW services
by adding a Labels field to the RGWServiceSpec, following the existing
pattern used for Annotations. This enables use cases such as service
mesh integration and monitoring discovery that require specific labels
on Kubernetes services.
Fixes : #17235
Signed-off-by: majiayu000 <1835304752@qq.com >
2026-03-28 17:46:28 +08:00
Blaine Gardner
170077bdfe
Merge pull request #17225 from sp98/forceful-osd-cleanup
...
osd: zap disks for forceful OSD installation
2026-03-26 12:45:38 -06:00
Santosh
92324588ba
osd: zap disks for forceful OSD installation
...
When cephCluster is resinstalled and WipeDevicesFromOtherClusters is set
to true, then Rook cleans up the OSD disks using ceph-volum lvm zap, so
that new OSD can created on this disk. This PR removes the dependencies
of the "ceph-volume lvm zap" and provides implements the entry disk
"ceph-volume lvm zap" logic within rook
Signed-off-by: Santosh <sapillai@redhat.com >
2026-03-26 11:28:43 +05:30
Travis Nielsen
51adb471f3
osd: remove obsolete osd methods
...
Remove helper methods for querying and configuring
various osd settings that are no longer in use anywhere
in Rook
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-03-24 11:09:42 -06:00
dependabot[bot]
6cba82515f
build(deps): bump the k8s-dependencies group with 6 updates
...
Bumps the k8s-dependencies group with 6 updates:
| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api ) | `0.35.2` | `0.35.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver ) | `0.35.2` | `0.35.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) | `0.35.2` | `0.35.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime ) | `0.35.2` | `0.35.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go ) | `0.35.2` | `0.35.3` |
| [k8s.io/cloud-provider](https://github.com/kubernetes/cloud-provider ) | `0.35.2` | `0.35.3` |
Updates `k8s.io/api` from 0.35.2 to 0.35.3
- [Commits](https://github.com/kubernetes/api/compare/v0.35.2...v0.35.3 )
Updates `k8s.io/apiextensions-apiserver` from 0.35.2 to 0.35.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases )
- [Commits](https://github.com/kubernetes/apiextensions-apiserver/compare/v0.35.2...v0.35.3 )
Updates `k8s.io/apimachinery` from 0.35.2 to 0.35.3
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.2...v0.35.3 )
Updates `k8s.io/cli-runtime` from 0.35.2 to 0.35.3
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.35.2...v0.35.3 )
Updates `k8s.io/client-go` from 0.35.2 to 0.35.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.35.2...v0.35.3 )
Updates `k8s.io/cloud-provider` from 0.35.2 to 0.35.3
- [Commits](https://github.com/kubernetes/cloud-provider/compare/v0.35.2...v0.35.3 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/apiextensions-apiserver
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/cli-runtime
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/client-go
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
- dependency-name: k8s.io/cloud-provider
dependency-version: 0.35.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: subhamkrai <srai@redhat.com >
2026-03-23 21:42:27 +05:30
dependabot[bot]
de820e6dfe
build(deps): bump the github-dependencies group with 2 updates
...
Bumps the github-dependencies group with 2 updates: [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator ) and [github.com/prometheus-operator/prometheus-operator/pkg/client](https://github.com/prometheus-operator/prometheus-operator ).
Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.89.0 to 0.90.0
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases )
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus-operator/prometheus-operator/compare/v0.89.0...v0.90.0 )
Updates `github.com/prometheus-operator/prometheus-operator/pkg/client` from 0.89.0 to 0.90.0
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases )
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus-operator/prometheus-operator/compare/v0.89.0...v0.90.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring
dependency-version: 0.90.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-dependencies
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/client
dependency-version: 0.90.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-dependencies
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: subhamkrai <srai@redhat.com >
2026-03-23 20:03:19 +05:30
Santosh Pillai
8e1e6e5510
Merge pull request #17188 from sp98/rgw-account-root-user
...
rgw: create account root user
2026-03-20 21:04:53 +05:30
Santosh
fad2f6d793
rgw: create account root user
...
This PR creates the account root user by default when
CephObjectStoreAccount CR is created and skips it if
`spec.rootuser.skipCreate` is true.
Signed-off-by: Santosh <sapillai@redhat.com >
2026-03-20 10:45:28 +05:30
Travis Nielsen
f6309dfc8d
Merge pull request #17208 from OdedViner/ec_remove
...
pool: clean up erasure code profile on pool deletion
2026-03-19 10:03:53 -06:00
Oded Viner
3f63676ce3
pool: add tests for ec pool ready status
...
add unit and integration tests to verify that erasure
coded cephblockpool status transitions to ready and
does not remain stuck in progressing.
Signed-off-by: Oded Viner <oviner@redhat.com >
2026-03-19 16:02:03 +02:00
Oded Viner
b88648d10f
pool: clean up erasure code profile on pool deletion
...
deleting an erasure coded CephBlockPool left the ec profile
orphaned. recreating with different settings failed because
the old profile could not be overridden.
- delete ec profile during CephBlockPool deletion
- disable --format json on ec profile set command
- fix ec profile name mismatch in CephObjectStore deletion
Signed-off-by: Oded Viner <oviner@redhat.com >
2026-03-18 23:53:57 +02:00
Oded Viner
ba9fad77a0
pool: set ec pool status to ready after reconcile
...
ec pools skip the mirroring configuration path where
the status is set to ready, leaving them stuck in
progressing state forever. add status update to ready
in the else branch when mirroring is skipped.
Signed-off-by: Oded Viner <oviner@redhat.com >
2026-03-17 19:05:56 +02:00
Santosh Pillai
7a0afce65f
Merge pull request #17041 from sp98/rgw-account-controller
...
rgw: controller for account management
2026-03-13 21:37:02 +05:30
Niraj Yadav
c5613a3320
csi: update ceph-csi image to v3.16.2
...
This patch updates the ceph-csi image version
to v3.16.2
Signed-off-by: Niraj Yadav <niryadav@redhat.com >
2026-03-13 15:35:34 +05:30
Santosh
c4ec7faee5
rgw: controller for account management
...
PR only focuses on account creation, deletion and update.
Signed-off-by: Santosh <sapillai@redhat.com >
2026-03-13 11:21:46 +05:30
Travis Nielsen
f244f47eea
Merge pull request #17102 from cobaltcore-dev/pr2-new-pools
...
rgw: support new RGW pools in shared pools zone json config
2026-03-11 16:13:07 -06:00
Artem Torubarov
91086e5803
rgw: fix integration test to detect new zone pools
...
Signed-off-by: Artem Torubarov <artem.torubarov@sap.com >
2026-03-11 16:39:53 +01:00
Muhammad Adil Ghaffar
0b8ed65749
exporter: delete orphaned ceph-exporter deployments on reconcile
...
Clean up stale exporter deployments whose target node no longer exists.
This handles the case where the operator was down when a node was deleted,
so the deletion event was missed and the stale deployment was never removed.
Signed-off-by: Muhammad Adil Ghaffar <muhammad.adil.ghaffar@est.tech >
2026-03-10 22:52:14 +02:00
Travis Nielsen
4520230eb8
Merge pull request #17164 from travisn/exporter-cleanup
...
exporter: Reconcile as best effort during deletion, remove obsolete Ceph version checks, and ensure all clusters reconciled
2026-03-10 11:56:24 -06:00
dependabot[bot]
38096f762a
build(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0
...
Bumps [golang.org/x/sync](https://github.com/golang/sync ) from 0.19.0 to 0.20.0.
- [Commits](https://github.com/golang/sync/compare/v0.19.0...v0.20.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-version: 0.20.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Signed-off-by: subhamkrai <srai@redhat.com >
2026-03-10 15:51:18 +05:30
Artem Torubarov
3c0bfd8572
rgw: integration test to check new pools in zone.json
...
Signed-off-by: Artem Torubarov <artem.torubarov@sap.com >
2026-03-09 15:11:28 +01:00
Travis Nielsen
71e1dbffa4
exporter: continue reconciling all clusters when disabled in the first
...
When reconciling the crash collectors and exporters, if one cluster
has disabled them, they will be deleted, then the reconcile
will complete, thus skipping reconcile of the crash collectors
and exporters for the remaining clusters.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-03-06 16:26:32 -07:00
Travis Nielsen
256a338c14
exporter: remove exporter resources as best effort
...
Remove the exporter deployment when needed as best effort
in case the removal fails, there is no need to block other
reconcile.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-03-06 16:26:32 -07:00
Travis Nielsen
733406b175
exporter: remove obsolete version checking for ceph v18
...
Rook no longer supports earlier than Ceph v18, so remove the
obsolete version checking in the ceph exporter reconcile.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-03-06 16:26:32 -07:00
Travis Nielsen
84298df435
Merge pull request #17161 from parth-gr/external-user-fix
...
rgw: cephobjectstoreuser should create correct ipv6 formatted secret
2026-03-06 13:14:13 -07:00
Travis Nielsen
13ddabd990
Merge pull request #17143 from parth-gr/ec-disable-mirror
...
pool: skip miroring if the pool is ec
2026-03-06 07:41:20 -07:00
parth-gr
aa12b5c00c
rgw: cephobjectstoreuser should create correct ipv6 formatted secret
...
currently the ipv6 parsing was not done right,
so the ipv6 endpoint was skewed,
It was happening at multiple places for external mode
1) cephobjectstore status
2) cephobjectstoreuser secret
3) and more places where GetAdvertiseEndpointUrl is called
so fixed the GetAdvertiseEndpointUrl func to make use of ipv6 address
Signed-off-by: parth-gr <partharora1010@gmail.com >
2026-03-06 16:01:41 +05:30
parth-gr
9f932d477e
pool: skip miroring if the pool is ec
...
the ec pool doesnt support mirroring from ceph end
so skip if the mirroring spec is set on the ec pools
Signed-off-by: parth-gr <partharora1010@gmail.com >
2026-03-06 13:31:58 +05:30
Blaine Gardner
129b0f9524
Merge pull request #17116 from OdedViner/rgw_mon_param
...
exporter: add configurable port for ceph exporter
2026-03-05 10:11:10 -07:00
Travis Nielsen
96f4320a34
test: increase osd reconcile wait timeout
...
The osd unit tests periodically fail with a timing issue
when canceling an orchestration. Attempt to stabilize
the test with a longer timeout before canceling the
test.
Signed-off-by: Travis Nielsen <tnielsen@redhat.com >
2026-03-04 15:43:32 -07:00
Artem Torubarov
845293c3cd
rgw: not update shared pools if prev pool is not empty
...
Signed-off-by: Artem Torubarov <artem.torubarov@sap.com >
2026-03-04 14:36:38 +01:00