feat(helm): update rook-ceph group to v1.13.0 (minor) - autoclosed #3848
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![lumiere-bot[bot]](https://avatars.githubusercontent.com/in/165833?s=60&v=4){kind=small}
lumiere-bot
bot
added
area/kubernetes
--- kubernetes/kyak/apps/rook-ceph/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
+++ kubernetes/kyak/apps/rook-ceph/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
@@ -13,13 +13,13 @@
spec:
chart: rook-ceph
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.12.10
+ version: v1.13.0
install:
remediation:
retries: 3
interval: 30m
maxHistory: 2
timeout: 15m
--- kubernetes/kyak/apps/rook-ceph/rook-ceph/cluster Kustomization: flux-system/rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster
+++ kubernetes/kyak/apps/rook-ceph/rook-ceph/cluster Kustomization: flux-system/rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster
@@ -13,13 +13,13 @@
spec:
chart: rook-ceph-cluster
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.12.10
+ version: v1.13.0
install:
remediation:
retries: 3
interval: 30m
maxHistory: 2
timeout: 15m |
--- kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools
+++ kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools
@@ -87,12 +87,19 @@
write_endpoints
# continuously update the mon endpoints if they fail over
watch_endpoints
imagePullPolicy: IfNotPresent
tty: true
+ securityContext:
+ capabilities:
+ drop:
+ - ALL
+ runAsGroup: 2016
+ runAsNonRoot: true
+ runAsUser: 2016
env:
- name: ROOK_CEPH_USERNAME
valueFrom:
secretKeyRef:
name: rook-ceph-mon
key: ceph-username
--- kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi
+++ kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi
@@ -0,0 +1,12 @@
+---
+apiVersion: ceph.rook.io/v1
+kind: CephFilesystemSubVolumeGroup
+metadata:
+ name: ceph-filesystem-csi
+ namespace: rook-ceph
+spec:
+ name: csi
+ filesystemName: ceph-filesystem
+ pinning:
+ distributed: 1
+
--- kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
+++ kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
@@ -6,13 +6,12 @@
namespace: rook-ceph
data:
ROOK_LOG_LEVEL: INFO
ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: '15'
ROOK_OBC_WATCH_OPERATOR_NAMESPACE: 'true'
ROOK_CEPH_ALLOW_LOOP_DEVICES: 'false'
- ROOK_DISABLE_ADMISSION_CONTROLLER: 'true'
ROOK_ENABLE_DISCOVERY_DAEMON: 'false'
ROOK_CSI_ENABLE_RBD: 'true'
ROOK_CSI_ENABLE_CEPHFS: 'true'
CSI_ENABLE_CEPHFS_SNAPSHOTTER: 'true'
CSI_ENABLE_NFS_SNAPSHOTTER: 'true'
CSI_ENABLE_RBD_SNAPSHOTTER: 'true'
@@ -24,13 +23,12 @@
CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
CSI_RBD_FSGROUPPOLICY: File
CSI_CEPHFS_FSGROUPPOLICY: File
CSI_NFS_FSGROUPPOLICY: File
CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=secure
- ROOK_CSI_ENABLE_GRPC_METRICS: 'false'
ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
CSI_ENABLE_CSIADDONS: 'false'
ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.7.0
CSI_ENABLE_TOPOLOGY: 'false'
CSI_ENABLE_READ_AFFINITY: 'false'
ROOK_CSI_ENABLE_NFS: 'false'
--- kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-system
+++ kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-system
@@ -22,21 +22,12 @@
- ''
resources:
- pods/exec
verbs:
- create
- apiGroups:
- - admissionregistration.k8s.io
- resources:
- - validatingwebhookconfigurations
- verbs:
- - create
- - get
- - delete
- - update
-- apiGroups:
- csiaddons.openshift.io
resources:
- networkfences
verbs:
- create
- get
--- kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
+++ kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
@@ -13,13 +13,12 @@
- apiGroups:
- ''
resources:
- pods
- nodes
- nodes/proxy
- - services
- secrets
- configmaps
verbs:
- get
- list
- watch
@@ -27,12 +26,13 @@
- ''
resources:
- events
- persistentvolumes
- persistentvolumeclaims
- endpoints
+ - services
verbs:
- get
- list
- watch
- patch
- create
--- kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
+++ kubernetes/kyak HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
@@ -19,34 +19,36 @@
type: Recreate
template:
metadata:
labels:
app: rook-ceph-operator
spec:
+ tolerations:
+ - effect: NoExecute
+ key: node.kubernetes.io/unreachable
+ operator: Exists
+ tolerationSeconds: 5
containers:
- name: rook-ceph-operator
- image: rook/ceph:v1.12.10
+ image: rook/ceph:v1.13.0
imagePullPolicy: IfNotPresent
args:
- ceph
- operator
securityContext:
+ capabilities:
+ drop:
+ - ALL
+ runAsGroup: 2016
runAsNonRoot: true
runAsUser: 2016
- runAsGroup: 2016
volumeMounts:
- mountPath: /var/lib/rook
name: rook-config
- mountPath: /etc/ceph
name: default-config-dir
- - mountPath: /etc/webhook
- name: webhook-cert
- ports:
- - containerPort: 9443
- name: https-webhook
- protocol: TCP
env:
- name: ROOK_CURRENT_NAMESPACE_ONLY
value: 'false'
- name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
value: 'false'
- name: ROOK_DISABLE_DEVICE_HOTPLUG
@@ -75,9 +77,7 @@
serviceAccountName: rook-ceph-system
volumes:
- name: rook-config
emptyDir: {}
- name: default-config-dir
emptyDir: {}
- - name: webhook-cert
- emptyDir: {}
|
lumiere-bot
bot
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.12.10->v1.13.0v1.12.10->v1.13.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
rook/rook (rook-ceph)
v1.13.0Compare Source
Upgrade Guide
To upgrade from previous versions of Rook, see the Rook upgrade guide.
Breaking Changes
Features
cephConfigto the CephCluster CR to allow setting Ceph config options in the Ceph MON config store via the CRD. These settings supersede the ceph.conf override settings.ceph.rook.io/do-not-reconcilefor all Ceph daemons. This is helpful when using the debug command in the kubectl rook-ceph plugin.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Renovate Bot.