feat(helm): update rook-ceph group to v1.13.0 (minor) #1776
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![layla-bot[bot]](https://avatars.githubusercontent.com/in/356911?s=60&v=4){kind=small}
layla-bot
bot
added
renovate/helm
type/minor
area/kubernetes
--- kubernetes/apps/main/rook-ceph/rook-ceph/cluster Kustomization: flux-system/cluster-apps-rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster
+++ kubernetes/apps/main/rook-ceph/rook-ceph/cluster Kustomization: flux-system/cluster-apps-rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster
@@ -12,13 +12,13 @@
spec:
chart: rook-ceph-cluster
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.12.10
+ version: v1.13.0
install:
createNamespace: true
remediation:
retries: 3
interval: 30m
maxHistory: 2
--- kubernetes/apps/main/rook-ceph/rook-ceph/app Kustomization: flux-system/cluster-apps-rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
+++ kubernetes/apps/main/rook-ceph/rook-ceph/app Kustomization: flux-system/cluster-apps-rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
@@ -12,13 +12,13 @@
spec:
chart: rook-ceph
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.12.10
+ version: v1.13.0
interval: 30m
timeout: 15m
values:
csi:
csiCephFSProvisionerResource: |
- name : csi-provisioner |
--- kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools
+++ kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools
@@ -87,12 +87,19 @@
write_endpoints
# continuously update the mon endpoints if they fail over
watch_endpoints
imagePullPolicy: IfNotPresent
tty: true
+ securityContext:
+ capabilities:
+ drop:
+ - ALL
+ runAsGroup: 2016
+ runAsNonRoot: true
+ runAsUser: 2016
env:
- name: ROOK_CEPH_USERNAME
valueFrom:
secretKeyRef:
name: rook-ceph-mon
key: ceph-username
--- kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi
+++ kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi
@@ -0,0 +1,12 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephFilesystemSubVolumeGroup
+metadata:
+ name: ceph-filesystem-csi
+ namespace: rook-ceph
+spec:
+ name: csi
+ filesystemName: ceph-filesystem
+ pinning:
+ distributed: 1
+
--- kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
+++ kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
@@ -6,13 +6,12 @@
namespace: rook-ceph
data:
ROOK_LOG_LEVEL: INFO
ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: '15'
ROOK_OBC_WATCH_OPERATOR_NAMESPACE: 'true'
ROOK_CEPH_ALLOW_LOOP_DEVICES: 'false'
- ROOK_DISABLE_ADMISSION_CONTROLLER: 'true'
ROOK_ENABLE_DISCOVERY_DAEMON: 'false'
ROOK_CSI_ENABLE_RBD: 'true'
ROOK_CSI_ENABLE_CEPHFS: 'true'
CSI_ENABLE_CEPHFS_SNAPSHOTTER: 'true'
CSI_ENABLE_NFS_SNAPSHOTTER: 'true'
CSI_ENABLE_RBD_SNAPSHOTTER: 'true'
@@ -23,13 +22,12 @@
CSI_ENABLE_METADATA: 'false'
CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
CSI_RBD_FSGROUPPOLICY: File
CSI_CEPHFS_FSGROUPPOLICY: File
CSI_NFS_FSGROUPPOLICY: File
- ROOK_CSI_ENABLE_GRPC_METRICS: 'false'
ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
CSI_ENABLE_CSIADDONS: 'false'
ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.7.0
CSI_ENABLE_TOPOLOGY: 'false'
CSI_ENABLE_READ_AFFINITY: 'false'
ROOK_CSI_ENABLE_NFS: 'false'
--- kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-system
+++ kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-system
@@ -22,21 +22,12 @@
- ''
resources:
- pods/exec
verbs:
- create
- apiGroups:
- - admissionregistration.k8s.io
- resources:
- - validatingwebhookconfigurations
- verbs:
- - create
- - get
- - delete
- - update
-- apiGroups:
- csiaddons.openshift.io
resources:
- networkfences
verbs:
- create
- get
--- kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
+++ kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
@@ -13,13 +13,12 @@
- apiGroups:
- ''
resources:
- pods
- nodes
- nodes/proxy
- - services
- secrets
- configmaps
verbs:
- get
- list
- watch
@@ -27,12 +26,13 @@
- ''
resources:
- events
- persistentvolumes
- persistentvolumeclaims
- endpoints
+ - services
verbs:
- get
- list
- watch
- patch
- create
--- kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
+++ kubernetes/flux/main HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
@@ -19,34 +19,36 @@
type: Recreate
template:
metadata:
labels:
app: rook-ceph-operator
spec:
+ tolerations:
+ - effect: NoExecute
+ key: node.kubernetes.io/unreachable
+ operator: Exists
+ tolerationSeconds: 5
containers:
- name: rook-ceph-operator
- image: rook/ceph:v1.12.10
+ image: rook/ceph:v1.13.0
imagePullPolicy: IfNotPresent
args:
- ceph
- operator
securityContext:
+ capabilities:
+ drop:
+ - ALL
+ runAsGroup: 2016
runAsNonRoot: true
runAsUser: 2016
- runAsGroup: 2016
volumeMounts:
- mountPath: /var/lib/rook
name: rook-config
- mountPath: /etc/ceph
name: default-config-dir
- - mountPath: /etc/webhook
- name: webhook-cert
- ports:
- - containerPort: 9443
- name: https-webhook
- protocol: TCP
env:
- name: ROOK_CURRENT_NAMESPACE_ONLY
value: 'false'
- name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
value: 'false'
- name: ROOK_DISABLE_DEVICE_HOTPLUG
@@ -75,9 +77,7 @@
serviceAccountName: rook-ceph-system
volumes:
- name: rook-config
emptyDir: {}
- name: default-config-dir
emptyDir: {}
- - name: webhook-cert
- emptyDir: {}
|
layla-bot
bot
force-pushed
the
renovate/main-rook-ceph
branch
from
6d18bbc
to
992ce94
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.12.10->v1.13.0v1.12.10->v1.13.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
rook/rook (rook-ceph)
v1.13.0Compare Source
Upgrade Guide
To upgrade from previous versions of Rook, see the Rook upgrade guide.
Breaking Changes
Features
cephConfigto the CephCluster CR to allow setting Ceph config options in the Ceph MON config store via the CRD. These settings supersede the ceph.conf override settings.ceph.rook.io/do-not-reconcilefor all Ceph daemons. This is helpful when using the debug command in the kubectl rook-ceph plugin.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.