Commit Graph
12736 Commits
Author SHA1 Message Date
Travis Nielsen e7a9f2013d Merge pull request #16440 from rook/dependabot/go_modules/golang.org/x/sync-0.17.0
build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0
2025-09-09 08:59:00 -06:00
Travis Nielsen 327d45ec50 Merge pull request #16441 from rook/dependabot/github_actions/aws-actions/configure-aws-credentials-5.0.0
build(deps): bump aws-actions/configure-aws-credentials from 4.3.1 to 5.0.0
2025-09-09 08:58:37 -06:00
Travis Nielsen 99f64dc1d9 Merge pull request #16433 from rubentsirunyan/master
Fix secret values in import-external-cluster script
2025-09-08 11:19:55 -06:00
dependabot[bot] 25dbd916c3 build(deps): bump aws-actions/configure-aws-credentials
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 4.3.1 to 5.0.0.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/7474bc4690e29a8392af63c5b98e7449536d5c3a...a03048d87541d1d9fcf2ecf528a4a65ba9bd7838)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-08 12:30:47 +00:00
dependabot[bot] bb7b58894d build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.16.0 to 0.17.0.
- [Commits](https://github.com/golang/sync/compare/v0.16.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-08 12:25:49 +00:00
Ruben Tsirunyan 2169a3e784 external: fixing secret values in import-external-cluster script
The import-external-cluster.sh script uses $CSI_CEPHFS_NODE_SECRET as the value of userKey when patching the secrets of RBD node, RBD provisioner, CephFS node and CephFS provisioner.
Updated the patch data to use $CSI_RBD_NODE_SECRET, $CSI_RBD_PROVISIONER_SECRET, $CSI_CEPHFS_NODE_SECRET, $CSI_CEPHFS_PROVISIONER_SECRET respectively.

Signed-off-by: Ruben Tsirunyan <rubentsirunyan@gmail.com>
2025-09-08 13:09:42 +04:00
Blaine Gardner f90fa269f0 Merge pull request #16421 from parth-gr/cephx-osd-bootstrap
osd: remove the osd bootstrap keyring
2025-09-04 09:41:42 -06:00
parth-gr 794a232835 osd: remove the osd bootstrap keyring
when the osd is created there is no need for
osd bootstrap keyring, so remove the keyring
and keyring file,

New keyring will be created if
new osd need to be provisoned

Signed-off-by: parth-gr <partharora1010@gmail.com>
2025-09-03 21:41:52 +05:30
Blaine Gardner 982b2fe632 Merge pull request #16372 from sp98/delete-bootstrap-keys
core: delete bootstrap keys
2025-09-02 12:16:59 -06:00
Blaine Gardner ff3ef88c61 Merge pull request #16409 from sp98/rotate-lockbox-keys
osd: rotate lockbox keys for encrypted osd
2025-09-02 12:16:06 -06:00
Travis Nielsen 805ae6ec89 Merge pull request #16375 from morgaesis/master
docs: fix `authKeystone` usage in Object Storage CRD docs
2025-09-02 11:16:14 -06:00
Travis Nielsen ea35bebd8a Merge pull request #16415 from travisn/obsolete-exec
core: Remove unused translate command executor
2025-09-02 10:13:47 -06:00
Travis Nielsen 6950bc28e4 Merge pull request #16383 from parth-gr/fix-helm-blocker-1.18
helm: Do not upgrade storage class with helm upgrade
2025-09-02 07:35:29 -06:00
parth-gr d9aee27b00 helm: do not upgrade sc with helm upgrade
sc are immutable, so do not upgrade them
with helm upgrades

closes: https://github.com/rook/rook/issues/11398

Signed-off-by: parth-gr <partharora1010@gmail.com>
2025-09-02 17:07:09 +05:30
Santosh Pillai 4cdba0df54 core: delete bootstrap keys
Delete the client.boostrap.* keys. These keys are not created by rook so
it can't rotate them. This PR just delete these keys in the
postMonStartUpAction.

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-09-01 08:55:23 +05:30
Santosh Pillai b4e1c1720d osd: rotate lockbox keys for encrypted osd
ceph-volume creates osd-lockbox keys for the encryted osds. This PR
rotates those keys along with the OSD keys.

Signed-off-by: Santosh Pillai <sapillai@redhat.com>
2025-09-01 08:44:14 +05:30
Mörgæsis 65427d8cd1 docs: fix usage of undefined attribute
Update ceph-object-store-crd.md to use known attribute.

Signed-off-by: Mörgæsis <morgaesis+git@morgaes.is>
2025-08-31 10:28:56 +00:00
Travis Nielsen 107bb8176e Merge pull request #16416 from travisn/release-notes-1.19
docs: Reset pending release notes for 1.19
2025-08-29 15:03:02 -06:00
Travis Nielsen 7b9d208dc2 docs: reset pending release notes for 1.19
Now that core feature development is completed for 1.18,
reset the pending release notes such that changes in
master will go out with 1.19

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-29 14:36:43 -06:00
Travis Nielsen 5d6378e5f6 core: remove unused translate command executor
The translate command executor is not used anywhere, thus
we can remove it

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-29 14:34:42 -06:00
Travis Nielsen 7ef6c250ed Merge pull request #16381 from subhamkrai/delete-csi-op-resource
csi: delete csi operator CR's when disabled
2025-08-29 08:32:31 -06:00
Travis Nielsen 92108d04f4 Merge pull request #16373 from parth-gr/fix-helm-1.18
helm: recreate storage class with helm upgrades only for v1.18.x
2025-08-29 08:26:51 -06:00
Travis Nielsen 12f1673385 Merge pull request #16382 from subhamkrai/add-cm-watcher
csi: add watcher for cm cluster controller
2025-08-29 08:24:17 -06:00
subhamkrai 3b7a7b8958 csi: delete csi operator CR's when disabled
this commit deletes csi operator CR's when
user wants to revert back to csi driver for
some reasons. This commits deletes CR's like
`clientProfile, cephConnection, driver,
operatorConfig, and clientProfileMapping`.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-08-29 15:38:20 +05:30
parth-gr c8003bfef7 helm: recreate sc with helm upgrades
during upgrade there can be change in sc paramaters,
as storageclass are immutable, we need to recreate them

closes: https://github.com/rook/rook/issues/16362
Signed-off-by: parth-gr <partharora1010@gmail.com>
2025-08-29 14:30:46 +05:30
subhamkrai dd6693ff97 csi: add watcher for cm cluster controller
this commit add watcher for cm `rook-ceph-operator-config`
to look for updated value of `ROOK_USE_CSI_OPERATOR` before
adding this watcher we had to restart rook operator pod
so that it reconciles and create cephConnection CR.

Signed-off-by: subhamkrai <srai@redhat.com>
2025-08-29 13:29:34 +05:30
subham rai 650a1f0127 Merge pull request #16405 from travisn/csi-cleanup
csi: Set csi operator as default if no settings found
2025-08-29 13:27:36 +05:30
Travis Nielsen 0a9262e73b csi: cleanup formatting of csi log statement
The csi key creation was not correctly logging params

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-28 14:07:18 -06:00
Travis Nielsen b2b28e1280 csi: set csi operator as default if no settings found
If the ROOK_USE_CSI_OPERATOR setting is not found in the
rook-ceph-operator-config configmap, the default now
is to use the csi operator instead of the previous
csi driver

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-28 12:26:28 -06:00
Travis Nielsen 3edbe6c550 Merge pull request #16402 from cuiweixie/reflect.TypeFor
operator: refactor to use reflect.TypeFor
2025-08-28 10:29:28 -06:00
Travis Nielsen 57bdd548e2 Merge pull request #16399 from travisn/update-client-profile
csi: Set the cephfs kernel mount options when network encryption is enabled
2025-08-28 10:27:02 -06:00
cuiweixie 20b3b9deef operator: refactor to use reflect.TypeFor
Signed-off-by: cuiweixie <cuiweixie@gmail.com>
2025-08-28 23:02:19 +08:00
Travis Nielsen 6309cd367e csi: default to secure kernel mount options if network encrypted
If the network is encrypted with msgr2, cephfs requires
the mount options to include ms_mode=secure. Now this
will be set by default if the mount options are not
already set in the cephcluster CR or the operator env
var CSI_CEPHFS_KERNEL_MOUNT_OPTIONS.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-27 16:30:47 -06:00
Travis Nielsen eeebfbf496 csi: set kernel mount options from env var if not in cluster spec
If the cephfs kernel mount options are not specified in the
cephcluster.spec.csi CR settings, fall back to the setting
in the operator env var CSI_CEPHFS_KERNEL_MOUNT_OPTIONS.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-27 16:11:34 -06:00
Travis Nielsen cc39368964 csi: update client profile when changing
The csi client profile CR needed to be updated if
the spec changed. Previously, the client profile was never
being updated because it was calling Update() on the
existing CR retreived from Get(), rather than with
the updated spec.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-27 15:57:28 -06:00
Blaine Gardner b162873623 Merge pull request #16271 from BlaineEXE/admin-key-rotation
core: rotate client.admin cephx key
2025-08-27 15:20:28 -06:00
Blaine Gardner b023eebc8c Merge pull request #16396 from BlaineEXE/csi-fix-cephx-status-from-config
csi: fix wrong use of daemon config for cephx status
2025-08-27 15:14:14 -06:00
Blaine Gardner 7c33186e72 core: admin cephx key rotation
Implement CephX key rotation for Rook's client.admin user.

Admin user rotation is risky, so this has been tested extensively both
in unit tests as well as by manually injecting failures during runtime.
In testing, all failures were able to be recovered by the recovery
routine.

A mutex is also added to help ensure that two simultaneous admin key
rotation processes cannot be running simultaneously for any given
namespace. The mutex is tested in unit tests, and it was verified during
runtime via  manual testing.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-08-27 14:47:45 -06:00
Blaine Gardner 480b407bc2 csi: fix wrong use of daemon config for cephx status
Fix a wrong usage of the CephX daemon config that should be CephX CSI
config.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>
2025-08-27 14:36:54 -06:00
Travis Nielsen b58689acbd Merge pull request #16393 from travisn/csi-driver-names
csi: Always initialize CSI driver names
2025-08-27 11:46:46 -06:00
Travis Nielsen 32a9bbedda Merge pull request #16392 from obnoxxx/build-fix-error-message
build: fix/improve an error message
2025-08-27 11:20:39 -06:00
Travis Nielsen af548ef2f6 csi: always initialize driver names
The driver names were only being initialized in certain code paths
where the drivers were being started and stopped. However, another
code path relied on those names being set. Now, we initialize the
driver names every time the CSI params are initialized, instead of
initializing the names separately.

Signed-off-by: Travis Nielsen <tnielsen@redhat.com>
2025-08-27 11:06:49 -06:00
Michael Adam 30667877a4 build: fix/improve an error message
The error message issued by `make` when the available golang was ont one
of the supported versions was somewhat confusion or even broken.

This change fixes the message.

Signed-off-by: Michael Adam <obnox@samba.org>
2025-08-27 18:53:11 +02:00
Travis Nielsen 87fa0a9a65 Merge pull request #16384 from sophotechlabs/add-sophotech-to-adopters-list
docs: add Sophotech to adopters list
2025-08-26 12:20:16 -06:00
Artem Muterko cd93c0fd58 docs: add Sophotech to adopters list
Signed-off-by: Artem Muterko <artem@sopho.tech>
2025-08-26 19:53:40 +02:00
subham rai 8f3cfb1e03 Merge pull request #16379 from rook/dependabot/go_modules/github-dependencies-e743bb0a3f
build(deps): bump the github-dependencies group with 6 updates
2025-08-26 14:21:32 +05:30
subham rai 9050972784 Merge pull request #16376 from travisn/topology-default-labels
csi: Generate default crush topology labels
2025-08-26 13:35:46 +05:30
subham rai da79736797 Merge pull request #16378 from rook/dependabot/github_actions/azure/setup-helm-4.3.1
build(deps): bump azure/setup-helm from 4.3.0 to 4.3.1
2025-08-26 12:51:08 +05:30
dependabot[bot] 73ab9017a9 build(deps): bump the github-dependencies group with 6 updates
Bumps the github-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.0` | `1.31.2` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.18.4` | `1.18.6` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.37.0` | `1.37.2` |
| [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator) | `0.84.1` | `0.85.0` |
| [github.com/prometheus-operator/prometheus-operator/pkg/client](https://github.com/prometheus-operator/prometheus-operator) | `0.84.1` | `0.85.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.0` |

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.0 to 1.31.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.31.0...config/v1.31.2)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.18.4 to 1.18.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.6/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.4...config/v1.18.6)

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.37.0 to 1.37.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.37.0...v1.37.2)

Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.84.1 to 0.85.0
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases)
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus-operator/prometheus-operator/compare/v0.84.1...v0.85.0)

Updates `github.com/prometheus-operator/prometheus-operator/pkg/client` from 0.84.1 to 0.85.0
- [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases)
- [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus-operator/prometheus-operator/compare/v0.84.1...v0.85.0)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
  dependency-version: 1.37.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring
  dependency-version: 0.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/client
  dependency-version: 0.85.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: subhamkrai <srai@redhat.com>
2025-08-26 12:45:32 +05:30
subham rai 31f454cfd2 Merge pull request #16377 from rook/dependabot/github_actions/github/codeql-action-3.29.11
build(deps): bump github/codeql-action from 3.29.10 to 3.29.11
2025-08-26 12:39:19 +05:30