my-rook-config

0 Fork 0

Files

T

Blaine Gardner 4189a196c1 osd: implement automated cephx key rotation for osds

Implement automated CephX key rotation for OSDs.

OSDs have marshalled CephX statuses applied as an annotation on the OSD
pod spec, which differs from other Rook Ceph daemons for a two reasons:

A large cluster could have hundreds or thousands of OSDs, so it is more
critical that Rook avoid rotating OSD keys more than once in the event a
CephCluster reconcile restarts partway through OSD creation/updation.

OSDs do not have their CephX keys stored in K8s Secrets, whose resource
version is used for enforcing the desired restart behavior other daemon
pods like RGWs.

Signed-off-by: Blaine Gardner <blaine.gardner@ibm.com>

2025-07-30 14:18:54 -06:00

cosi

Revert "object: create cosi user for each object store"

2024-11-21 16:03:32 -07:00

csi

doc: update groupsnapshot to betav1

2025-01-02 16:06:16 +01:00

external

external: restructure external cluster examples manifests

2024-04-26 14:54:59 +03:00

monitoring

docs: add grafana dashboards files to docs

2024-09-12 15:44:16 +02:00

bucket-notification-endpoint.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

bucket-notification.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

bucket-topic.yaml

rgw: support kafka auth mechanism parameter

2025-03-24 21:53:49 +01:00

ceph-client.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

cluster-external-management.yaml

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

cluster-external.yaml

docs: update ruleNamesapce to rulesNamespaceOverride

2023-05-11 17:26:04 +05:30

cluster-multus-test.yaml

manifest: update default ceph version to v19

2024-12-11 14:45:26 -07:00

cluster-on-local-pvc.yaml

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

cluster-on-pvc-minikube.yaml

osd: allow one healthy OSD to be drained

2025-03-26 10:40:46 +05:30

cluster-on-pvc.yaml

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

cluster-stretched-aws.yaml

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

cluster-stretched.yaml

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

cluster-test.yaml

osd: enable osd ok-to-stop checks on single node for three osds

2025-02-05 12:08:48 -07:00

cluster.yaml

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

common-external.yaml

security: operator and toolbox scc for default service account

2024-03-18 11:40:32 -06:00

common-second-cluster.yaml

manifest: adding some missing RBAC roles to secondary cluster

2024-03-15 15:48:29 +01:00

common.yaml

mon: fix mon rbac for endpoint slice

2025-04-04 11:59:08 +05:30

crds.yaml

osd: implement automated cephx key rotation for osds

2025-07-30 14:18:54 -06:00

create-external-cluster-resources-tests.py

external: automate external users cephx key rotation

2025-07-24 14:41:51 +05:30

create-external-cluster-resources.py

external: automate external users cephx key rotation

2025-07-24 14:41:51 +05:30

csi-ceph-conf-override.yaml

csi: add custom ceph.conf for csi pods

2022-03-01 12:42:59 +05:30

csi-operator.yaml

csi: update csi-operator yaml to v1

2025-07-23 21:02:59 +05:30

dashboard-external-http.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

dashboard-external-https.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

dashboard-ingress-https.yaml

docs: replace deprecated ingress.class annotation

2023-06-23 19:31:54 +02:00

dashboard-loadbalancer.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

direct-mount.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

filesystem-ec.yaml

docs: remove deprecated toplogyKey beta labels

2024-12-09 11:59:20 -07:00

filesystem-mirror.yaml

helm: remove cpu limits from all pods

2024-02-07 17:36:59 -07:00

filesystem-test.yaml

subvolumegroup: add pinning spec in subvolumegroup CRD

2023-12-11 21:54:25 +05:30

filesystem.yaml

docs: remove deprecated toplogyKey beta labels

2024-12-09 11:59:20 -07:00

headless-mon-service.yaml

mon: manage endpoints containing set of mon ip addresses

2025-03-31 18:05:37 +02:00

images.txt

core: update ceph version to v19.2.3

2025-07-29 11:51:11 -06:00

import-external-cluster.sh

external: automate external users cephx key rotation

2025-07-24 14:41:51 +05:30

kustomization.yaml

core: upgrade to latest operator-sdk v1.25.0

2023-02-13 17:08:09 +05:30

multus-validation-test-openshift.yaml

multus: add host checking to validation tool

2024-07-10 13:41:38 -06:00

mysql.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

nfs-load-balancer.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

nfs-test.yaml

nfs: add support for running SSSD as a sidecar

2022-08-11 14:59:23 -06:00

nfs.yaml

helm: remove cpu limits from all pods

2024-02-07 17:36:59 -07:00

object-a.yaml

docs: remove deprecated toplogyKey beta labels

2024-12-09 11:59:20 -07:00

object-b.yaml

docs: remove deprecated toplogyKey beta labels

2024-12-09 11:59:20 -07:00

object-bucket-claim-a.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

object-bucket-claim-delete.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-bucket-claim-notification.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-bucket-claim-retain.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-ec.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-external.yaml

external: fqdn should be persisted

2023-05-31 17:36:29 +05:30

object-multi-instance-test.yaml

rgw: add rgw_enable_apis config option

2024-12-10 11:53:27 +01:00

object-multisite-pull-realm-test.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-multisite-pull-realm.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-multisite-test.yaml

rgw: delete zone/pools for multisite configuation

2022-09-12 21:44:55 +05:30

object-multisite.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-openshift.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-separate-pools-test.yaml

test: add two-object-one-zone canary test

2024-10-14 16:54:39 -07:00

object-shared-pools-test.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

object-shared-pools.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

object-test.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-user.yaml

object: allow creating an object user in different namespace

2023-08-25 11:54:57 -06:00

object.yaml

Merge pull request #15199 from ideepika/wip-rgw-sidecar

2024-12-20 12:24:34 -07:00

operator-openshift.yaml

csi: update ceph-csi to 3.14.2

2025-07-21 11:24:05 +02:00

operator.yaml

csi: update ceph-csi to 3.14.2

2025-07-21 11:24:05 +02:00

osd-env-override.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

osd-purge.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

pool-builtin-mgr.yaml

pool: allow setting the application on a pool

2024-02-14 16:53:25 -07:00

pool-ec.yaml

docs: the CephBlockPool CR does not have spec.annotations

2022-09-28 11:56:12 +02:00

pool-mirrored.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

pool-test.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

pool.yaml

docs: add docs for enableCrushUpdates option

2024-06-13 00:23:40 +05:30

psp.yaml

docs: move PSPs from common.yaml to psp.yaml

2022-08-25 16:39:52 -06:00

radosnamespace-mirrored.yaml

rbdmirror: add disable check for status check

2024-11-06 22:42:46 +05:30

radosnamespace.yaml

core: add clusterID to rados namespace CRD

2025-07-28 08:29:51 +02:00

rbdmirror.yaml

helm: remove cpu limits from all pods

2024-02-07 17:36:59 -07:00

README.md

docs: update doc path according to new doc change

2022-06-01 20:17:44 +05:30

rgw-external.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

sqlitevfs-client.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

storageclass-bucket-a.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

storageclass-bucket-delete.yaml

helm: fix indentation/whitespace

2024-01-23 11:53:46 +01:00

storageclass-bucket-retain.yaml

object: use us-east-1 for aws go lang sdk

2022-03-24 14:37:39 +05:30

subvolumegroup.yaml

core: add clusterID to subvolume group CRD

2025-07-28 08:29:51 +02:00

toolbox-job.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

toolbox-operator-image.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

toolbox.yaml

manifest: update default ceph version to v19

2024-12-11 14:45:26 -07:00

two-object-one-zone-test.yaml

test: add two-object-one-zone canary test

2024-10-14 16:54:39 -07:00

volume-replication-class.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

volume-replication.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

wordpress.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

README.md

For documentation on running Rook in your Kubernetes cluster see the Kubernetes Quickstart Guide