my-rook-config

0 Fork 0

Files

T

Oded Viner 9cec9780fd security: restrict mgr NetworkPolicy to ingress-only

The MGR watch-active sidecar needs Kubernetes API access to
read configmaps and monitor active-standby state. The API
server is host-networked and cannot be targeted by
pod/namespace selectors, making egress restrictions
impractical.

Switch the rook-ceph-mgr NetworkPolicy from egress-only to
ingress-only:
- Allow MON/OSD/MDS/tools pods on ports 6800-7300
- Allow Prometheus scraping on port 9283
- Remove egress rules that blocked API server access and
  caused CrashLoopBackOff in the watch-active container

Signed-off-by: Oded Viner <oviner@redhat.com>

2026-06-28 17:54:39 +03:00

cosi

Revert "object: create cosi user for each object store"

2024-11-21 16:03:32 -07:00

csi

docs: add rook compatible ceph csi driver values

2026-06-05 14:48:21 -06:00

external

external: update the external cluster to make use of csi op

2026-06-11 19:10:30 +05:30

monitoring

helm: add cluster label to prom persistent-volume-alert.rules

2026-05-15 14:55:07 -07:00

bucket-notification-endpoint.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

bucket-notification.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

bucket-topic.yaml

rgw: support kafka auth mechanism parameter

2025-03-24 21:53:49 +01:00

ceph-client.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

cleanup-job.yaml

manifest: add standalone cleanup-job.yaml example

2026-04-02 09:50:11 -04:00

cluster-external-management.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

cluster-external.yaml

external: update the external cluster to make use of csi op

2026-06-11 19:10:30 +05:30

cluster-multus-test.yaml

core: update all docs and examples to v20.2.1

2026-04-28 14:09:17 -06:00

cluster-on-local-pvc.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

cluster-on-pvc-minikube.yaml

core: update all docs and examples to v20.2.1

2026-04-28 14:09:17 -06:00

cluster-on-pvc.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

cluster-stretched-aws.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

cluster-stretched.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

cluster-test.yaml

core: make Ceph Tentacle default version

2025-12-01 13:43:20 +05:30

cluster-tnf.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

cluster.yaml

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

common-external.yaml

security: operator and toolbox scc for default service account

2024-03-18 11:40:32 -06:00

common-second-cluster.yaml

manifest: add missing rook-ceph-mgr role to secondary cluster

2026-04-08 15:43:11 +02:00

common.yaml

csi: move csi management to admin

2026-04-29 14:24:26 -06:00

crds.yaml

nvmeof: fetch gateway image from ceph config when not in CR

2026-06-11 19:55:16 +03:00

create-external-cluster-resources-tests.py

external: automate external users cephx key rotation

2025-07-24 14:41:51 +05:30

create-external-cluster-resources.py

external: if admin creds is provided dont stop creating csi secret

2026-01-12 19:43:26 +05:30

csi-ceph-conf-override.yaml

csi: add custom ceph.conf for csi pods

2022-03-01 12:42:59 +05:30

csi-operator.yaml

build: update csi-operator to v1.0.1

2026-05-27 18:05:56 +05:30

dashboard-external-http.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

dashboard-external-https.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

dashboard-ingress-https.yaml

docs: replace deprecated ingress.class annotation

2023-06-23 19:31:54 +02:00

dashboard-loadbalancer.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

direct-mount.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

drbd-setup-experimental.sh

core: add a install guide for tnf

2026-06-12 17:22:43 +05:30

filesystem-ec.yaml

mds: remove mds standby if disabled

2025-11-19 10:55:12 -07:00

filesystem-mirror.yaml

helm: remove cpu limits from all pods

2024-02-07 17:36:59 -07:00

filesystem-test.yaml

mds: remove mds standby if disabled

2025-11-19 10:55:12 -07:00

filesystem.yaml

mds: remove mds standby if disabled

2025-11-19 10:55:12 -07:00

headless-mon-service.yaml

mon: manage endpoints containing set of mon ip addresses

2025-03-31 18:05:37 +02:00

images.txt

build: update ceph version to latest v20.2.2

2026-06-17 22:00:11 +05:30

import-external-cluster.sh

external: unify variable quoting style in importClusterID

2025-11-13 15:15:10 +09:00

kustomization.yaml

csi: move csi management to admin

2026-04-29 14:24:26 -06:00

multus-validation-test-openshift.yaml

multus: add host checking to validation tool

2024-07-10 13:41:38 -06:00

mysql.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

networkpolicy.yaml

security: restrict mgr NetworkPolicy to ingress-only

2026-06-28 17:54:39 +03:00

nfs-load-balancer.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

nfs-test.yaml

nfs: add support for running SSSD as a sidecar

2022-08-11 14:59:23 -06:00

nfs.yaml

helm: remove cpu limits from all pods

2024-02-07 17:36:59 -07:00

nvmeof-test.yaml

nvmeof: fetch gateway image from ceph config when not in CR

2026-06-11 19:55:16 +03:00

object-a.yaml

docs: remove deprecated toplogyKey beta labels

2024-12-09 11:59:20 -07:00

object-account.yaml

rgw: controller for account management

2026-03-13 11:21:46 +05:30

object-b.yaml

docs: remove deprecated toplogyKey beta labels

2024-12-09 11:59:20 -07:00

object-bucket-claim-a.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

object-bucket-claim-delete.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-bucket-claim-notification.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-bucket-claim-retain.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-ec.yaml

docs: add pool parameter for erasure code optimizations

2025-12-04 11:42:07 -07:00

object-external.yaml

external: update object-external.yaml example

2026-05-18 22:14:29 +02:00

object-multi-instance-test.yaml

rgw: add rgw_enable_apis config option

2024-12-10 11:53:27 +01:00

object-multisite-pull-realm-test.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-multisite-pull-realm.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-multisite-realm-test.yaml

rgw: skip non-raw commands on object deletion path when pools not exists

2026-02-26 09:48:15 +01:00

object-multisite-store-test.yaml

rgw: skip non-raw commands on object deletion path when pools not exists

2026-02-26 09:48:15 +01:00

object-multisite-test.yaml

rgw: delete zone/pools for multisite configuation

2022-09-12 21:44:55 +05:30

object-multisite.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-openshift.yaml

rgw: bulk data pool by default

2024-12-17 09:47:59 +01:00

object-separate-pools-test.yaml

test: add two-object-one-zone canary test

2024-10-14 16:54:39 -07:00

object-shared-pools-test.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

object-shared-pools.yaml

docs: add pool parameter for erasure code optimizations

2025-12-04 11:42:07 -07:00

object-test.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

object-user.yaml

object: allow creating an object user in different namespace

2023-08-25 11:54:57 -06:00

object.yaml

object: add labels field to CephObjectStore RGW service spec

2026-03-28 17:46:28 +08:00

operator-openshift.yaml

csi: csi-addons should be disabled by default

2026-06-05 13:42:17 -06:00

operator.yaml

csi: csi-addons should be disabled by default

2026-06-05 13:42:17 -06:00

osd-env-override.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

osd-purge.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

pool-builtin-mgr.yaml

pool: allow setting the application on a pool

2024-02-14 16:53:25 -07:00

pool-ec.yaml

docs: add pool parameter for erasure code optimizations

2025-12-04 11:42:07 -07:00

pool-mirrored.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

pool-test.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

pool-tnf.yaml

core: add a install guide for tnf

2026-06-12 17:22:43 +05:30

pool.yaml

docs: add docs for enableCrushUpdates option

2024-06-13 00:23:40 +05:30

radosnamespace-mirrored.yaml

rbdmirror: add disable check for status check

2024-11-06 22:42:46 +05:30

radosnamespace.yaml

core: add clusterID to rados namespace CRD

2025-07-28 08:29:51 +02:00

rbdmirror.yaml

helm: remove cpu limits from all pods

2024-02-07 17:36:59 -07:00

README.md

docs: update doc path according to new doc change

2022-06-01 20:17:44 +05:30

rgw-external.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

sqlitevfs-client.yaml

manifest: add registry name to docker images

2024-08-20 13:35:08 -04:00

storageclass-bucket-a.yaml

object: create an object store based on shared pools

2024-03-11 11:20:57 -06:00

storageclass-bucket-delete.yaml

helm: fix indentation/whitespace

2024-01-23 11:53:46 +01:00

storageclass-bucket-retain.yaml

object: use us-east-1 for aws go lang sdk

2022-03-24 14:37:39 +05:30

subvolumegroup.yaml

mds: remove mds standby if disabled

2025-11-19 10:55:12 -07:00

toolbox-job.yaml

manifest: merge rook-config-override ConfigMap into ceph.conf

2025-11-18 13:43:14 -06:00

toolbox-operator-image.yaml

manifest: merge rook-config-override ConfigMap into ceph.conf

2025-11-18 13:43:14 -06:00

toolbox.yaml

operator: fail reconcile if rook-config-override lacks trailing newline

2026-06-24 09:56:41 +00:00

two-object-one-zone-test.yaml

test: add two-object-one-zone canary test

2024-10-14 16:54:39 -07:00

volume-replication-class.yaml

namespace: adding namespace to all rook-ceph namespaces references

2023-10-24 14:17:17 +02:00

volume-replication.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

wordpress.yaml

core: change directory layout

2021-11-30 09:12:53 +01:00

README.md

For documentation on running Rook in your Kubernetes cluster see the Kubernetes Quickstart Guide