Update dependency Rook to v1.13.3

Signed-off-by: Renovate Bot <tech+renovate@vshn.ch>
projectsyn · Jan 26, 2024 · 250d98b · 250d98b
1 parent 718e309
commit 250d98b
Show file tree

Hide file tree

Showing 34 changed files with 5,525 additions and 22,094 deletions.
diff --git a/class/defaults.yml b/class/defaults.yml
@@ -224,7 +224,7 @@ parameters:
       rook:
         registry: docker.io
         image: rook/ceph
-        tag: v1.12.7
+        tag: v1.13.3
       ceph:
         registry: quay.io
         image: ceph/ceph
@@ -240,7 +240,7 @@ parameters:
 
     charts:
       # We do not support helm chart versions older than v1.7.0
-      rook-ceph: v1.12.7
+      rook-ceph: v1.13.3
 
     operator_helm_values:
       image:

diff --git a/...n/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/cluster-rbac.yaml b/...n/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/cluster-rbac.yaml
@@ -5,7 +5,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-osd
@@ -18,7 +18,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-mgr
@@ -31,7 +31,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-cmd-reporter
@@ -50,7 +50,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-rgw

diff --git a/...en/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/clusterrole.yaml b/...en/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/clusterrole.yaml
@@ -5,7 +5,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-system
@@ -24,15 +24,6 @@ rules:
       - pods/exec
     verbs:
       - create
-  - apiGroups:
-      - admissionregistration.k8s.io
-    resources:
-      - validatingwebhookconfigurations
-    verbs:
-      - create
-      - get
-      - delete
-      - update
   - apiGroups:
       - csiaddons.openshift.io
     resources:
@@ -58,7 +49,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-cluster-mgmt
@@ -91,7 +82,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-global
@@ -102,7 +93,6 @@ rules:
       - pods
       - nodes
       - nodes/proxy
-      - services
       - secrets
       - configmaps
     verbs:
@@ -116,6 +106,7 @@ rules:
       - persistentvolumes
       - persistentvolumeclaims
       - endpoints
+      - services
     verbs:
       - get
       - list
@@ -279,7 +270,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-mgr-cluster
@@ -335,7 +326,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-object-bucket
@@ -445,6 +436,7 @@ rules:
       - list
       - watch
       - create
+      - update
       - delete
       - patch
   - apiGroups:
@@ -536,7 +528,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rbd-csi-nodeplugin
@@ -609,6 +601,7 @@ rules:
       - list
       - watch
       - create
+      - update
       - delete
       - patch
   - apiGroups:

diff --git a/...fs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/clusterrolebinding.yaml b/...fs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/clusterrolebinding.yaml
@@ -5,7 +5,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-system
@@ -25,7 +25,7 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-global

diff --git a/...lden/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/configmap.yaml b/...lden/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/configmap.yaml
@@ -226,17 +226,16 @@ data:
           cpu: 100m
   ROOK_CEPH_ALLOW_LOOP_DEVICES: 'false'
   ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: '15'
-  ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.7.0
+  ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.8.0
   ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.9.0
   ROOK_CSI_ENABLE_CEPHFS: 'true'
-  ROOK_CSI_ENABLE_GRPC_METRICS: 'true'
   ROOK_CSI_ENABLE_NFS: 'false'
   ROOK_CSI_ENABLE_RBD: 'false'
   ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
-  ROOK_DISABLE_ADMISSION_CONTROLLER: 'true'
   ROOK_ENABLE_DISCOVERY_DAEMON: 'false'
   ROOK_LOG_LEVEL: INFO
   ROOK_OBC_WATCH_OPERATOR_NAMESPACE: 'true'
 kind: ConfigMap
 metadata:
   name: rook-ceph-operator-config
+  namespace: syn-rook-ceph-operator
diff --git a/...den/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/deployment.yaml b/...den/cephfs/rook-ceph/rook-ceph/01_rook_ceph_helmchart/rook-ceph/templates/deployment.yaml
@@ -5,10 +5,11 @@ metadata:
     app.kubernetes.io/created-by: helm
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/part-of: rook-ceph-operator
-    helm.sh/chart: rook-ceph-v1.12.7
+    helm.sh/chart: rook-ceph-v1.13.3
     operator: rook
     storage-backend: ceph
   name: rook-ceph-operator
+  namespace: syn-rook-ceph-operator
 spec:
   replicas: 1
   selector:
@@ -20,7 +21,7 @@ spec:
     metadata:
       labels:
         app: rook-ceph-operator
-        helm.sh/chart: rook-ceph-v1.12.7
+        helm.sh/chart: rook-ceph-v1.13.3
     spec:
       containers:
         - args:
@@ -47,13 +48,9 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: metadata.namespace
-          image: docker.io/rook/ceph:v1.12.7
+          image: docker.io/rook/ceph:v1.13.3
           imagePullPolicy: IfNotPresent
           name: rook-ceph-operator
-          ports:
-            - containerPort: 9443
-              name: https-webhook
-              protocol: TCP
           resources:
             limits:
               cpu: 1000m
@@ -62,6 +59,9 @@ spec:
               cpu: 750m
               memory: 512Mi
           securityContext:
+            capabilities:
+              drop:
+                - ALL
             runAsGroup: 2016
             runAsNonRoot: true
             runAsUser: 2016
@@ -70,18 +70,18 @@ spec:
               name: rook-config
             - mountPath: /etc/ceph
               name: default-config-dir
-            - mountPath: /etc/webhook
-              name: webhook-cert
       nodeSelector:
         node-role.kubernetes.io/storage: ''
       serviceAccountName: rook-ceph-system
       tolerations:
+        - effect: NoExecute
+          key: node.kubernetes.io/unreachable
+          operator: Exists
+          tolerationSeconds: 5
         - key: storagenode
           operator: Exists
       volumes:
         - emptyDir: {}
           name: rook-config
         - emptyDir: {}
           name: default-config-dir
-        - emptyDir: {}
-          name: webhook-cert