feedc0de/my-rook-config
1
0
Fork 0
forked from rook/rook
Code Pull Requests Activity
Files
ebf90170bc42d9934b526bfb87fddeb5b171cfcb
my-rook-config/PendingReleaseNotes.md
T
Santosh 726a3837a2 osd: add cryptsetup resize for encrypted host based osds 
when using encryptedDevice:true with host based (non pvc) osds, resizing
the underlying disk and restarting the OSD didn't expand the OSD because
the LUKS encryption layer was not resized.

This PR adds resize capabilities inside the activate container. Full
device stack must be resized: PV → LV → LUKS

Steps:
1. Run pvresize and lvextend to grow the LVM layers.
2. Retrieve the LUKS key from the Ceph config-key store using the
lockbox crednetials already available in the activate container
3. Pass the key explicitly to cryptsetup resize via --key-file.

Signed-off-by: Santosh <sapillai@redhat.com>
(cherry picked from commit 3e49c9f4cf)
2026-06-01 00:24:38 +00:00

2.0 KiB
Raw Blame History

v1.20 Pending Release Notes

Breaking Changes

  • The minimum supported Kubernetes version is v1.31.
  • The CSI operator is required for managing CSI driver settings.
    • The CSI settings are removed from the Rook operator configmap and helm chart
    • New installs must configure the CSI settings with the CSI CRs instead of Rook operator settings.
    • Upgrades will continue working with the existing settings that had been applied by Rook previously. Further updates to CSI settings will need to be updated by the Rook admin.

Features

  • The latest supported Kubernetes version is v1.36.
  • RGW Account support: Added CephObjectStoreAccount CRD for managing RGW accounts, and accountRef field in CephObjectStoreUser to associate users with accounts. This feature is experimental and currently only supported with the Ceph main branch image (quay.ceph.io/ceph-ci/ceph:main). See the Object Store Accounts documentation for more details.
  • SSE-S3 with Vault Agent: Added support for server-side encryption with SSE-S3 using HashiCorp Vault Agent authentication. See the CephObjectStore Security Settings for more details.
  • Unused CRUSH rule cleanup: Rook now deletes unused CRUSH rules by default after the Ceph mgr starts. Set ROOK_DELETE_UNUSED_CRUSH_RULES to false in the operator config to disable this cleanup.
  • Declare stable the feature to concurrently reconcile multiple Ceph Clusters with the setting ROOK_RECONCILE_CONCURRENT_CLUSTERS.
  • Containers within a pod are now consistently reconciled by name instead of relying on the order in which they are declared. This is a defensive measure against the declaration order changing due to manipulation by a mutating webhook.
  • OSD resize with encrypted host-based OSDs: When using encryptedDevice: true with host-based (non-PVC) OSDs, resizing the underlying disk now automatically expands encrypted OSDs.
View Git Blame Copy Permalink