Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(helm): update rook ceph group to v1.14.0 (minor) #5838

Merged
merged 1 commit into from
Apr 4, 2024

Conversation

rosey-the-renovator-bot[bot]
Copy link
Contributor

@rosey-the-renovator-bot rosey-the-renovator-bot bot commented Apr 3, 2024

This PR contains the following updates:

Package Update Change
rook-ceph minor v1.13.8 -> v1.14.0
rook-ceph-cluster minor v1.13.8 -> v1.14.0
rook/ceph minor v1.13.8 -> v1.14.0

Release Notes

rook/rook (rook-ceph)

v1.14.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes
  • The minimum supported version of Kubernetes is v1.25. Upgrade to Kubernetes v1.25 or higher before upgrading Rook.
  • The image repository and tag settings are specified separately in the helm chart values.yaml for the CSI images. Helm users previously specifying the CSI images with the image setting will need to update their values.yaml with the separate repository and tag settings.
  • Rook is beginning the process of deprecating CSI network "holder" pods. If there are pods named csi-*plugin-holder-* in the Rook operator namespace, see the holder pod deprecation documentation to disable them. Migration of affected clusters is optional for v1.14, but will be required in a future release.
  • The Rook operator config CSI_ENABLE_READ_AFFINITY was removed. v1.13 clusters that have modified this value to be "true" must set the option as desired in each CephCluster as documented here before upgrading to v1.14.
Features
  • Kubernetes versions v1.25 through v1.29 are supported. K8s v1.30 will be supported as soon as released.
  • Ceph daemon pods using the default service account now use a new rook-ceph-default service account.
  • A custom Ceph application can be applied to a CephBlockPool CR.
  • Object stores can be created with shared metadata and data pools. Isolation between object stores is enabled via RADOS namespaces. This configuration is recommended to limit the number of pools when multiple object stores are created.
  • Support for VolumeSnapshotGroup is available for the RBD and CephFS CSI drivers.
  • Support for virtual style hosting for s3 buckets is added in the CephObjectStore, by adding hosting.dnsNames to the object store.
  • A static prefix can be specified for the CSI drivers and OBC provisioner (the default prefix is the rook-ceph namespace).
  • Azure Key Vault KMS support is added for storing OSD encryption keys.
  • Additional status columns added to the kubectl output for Rook CRDs.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@rosey-the-renovator-bot
Copy link
Contributor Author

rosey-the-renovator-bot bot commented Apr 3, 2024

--- HelmRelease: rook-ceph/rook-ceph-cluster CephCluster: rook-ceph/rook-ceph

+++ HelmRelease: rook-ceph/rook-ceph-cluster CephCluster: rook-ceph/rook-ceph

@@ -51,15 +51,13 @@

     enabled: true
     maxLogSize: 500M
     periodicity: daily
   mgr:
     allowMultiplePerNode: false
     count: 2
-    modules:
-    - enabled: true
-      name: pg_autoscaler
+    modules: null
   mon:
     allowMultiplePerNode: false
     count: 3
   network:
     connections:
       compression:
--- HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config

+++ HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config

@@ -9,30 +9,38 @@

   ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: '15'
   ROOK_OBC_WATCH_OPERATOR_NAMESPACE: 'true'
   ROOK_CEPH_ALLOW_LOOP_DEVICES: 'false'
   ROOK_ENABLE_DISCOVERY_DAEMON: 'false'
   ROOK_CSI_ENABLE_RBD: 'true'
   ROOK_CSI_ENABLE_CEPHFS: 'true'
+  ROOK_CSI_DISABLE_DRIVER: 'false'
   CSI_ENABLE_CEPHFS_SNAPSHOTTER: 'true'
   CSI_ENABLE_NFS_SNAPSHOTTER: 'true'
   CSI_ENABLE_RBD_SNAPSHOTTER: 'true'
   CSI_PLUGIN_ENABLE_SELINUX_HOST_MOUNT: 'false'
   CSI_ENABLE_ENCRYPTION: 'false'
   CSI_ENABLE_OMAP_GENERATOR: 'false'
   CSI_ENABLE_HOST_NETWORK: 'true'
+  CSI_DISABLE_HOLDER_PODS: 'true'
   CSI_ENABLE_METADATA: 'false'
+  CSI_ENABLE_VOLUME_GROUP_SNAPSHOT: 'true'
   CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
   CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
   CSI_RBD_FSGROUPPOLICY: File
   CSI_CEPHFS_FSGROUPPOLICY: File
   CSI_NFS_FSGROUPPOLICY: File
+  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.11.0
+  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.0
+  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v4.0.0
+  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v7.0.1
+  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.5.0
+  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v1.10.0
   ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
   CSI_ENABLE_CSIADDONS: 'false'
   ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.8.0
   CSI_ENABLE_TOPOLOGY: 'false'
-  CSI_ENABLE_READ_AFFINITY: 'false'
   ROOK_CSI_ENABLE_NFS: 'false'
   CSI_FORCE_CEPHFS_KERNEL_CLIENT: 'true'
   CSI_GRPC_TIMEOUT_SECONDS: '150'
   CSI_PROVISIONER_REPLICAS: '2'
   CSI_RBD_PROVISIONER_RESOURCE: |
     - name : csi-provisioner
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/cephfs-external-provisioner-runner

+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/cephfs-external-provisioner-runner

@@ -84,12 +84,16 @@

   - snapshot.storage.k8s.io
   resources:
   - volumesnapshots
   verbs:
   - get
   - list
+  - watch
+  - update
+  - patch
+  - create
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshotclasses
   verbs:
   - get
@@ -102,14 +106,40 @@

   verbs:
   - get
   - list
   - watch
   - patch
   - update
+  - create
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshotcontents/status
   verbs:
   - update
   - patch
+- apiGroups:
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumegroupsnapshotclasses
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumegroupsnapshotcontents
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
+- apiGroups:
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumegroupsnapshotcontents/status
+  verbs:
+  - update
+  - patch
 
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rbd-external-provisioner-runner

+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rbd-external-provisioner-runner

@@ -93,12 +93,15 @@

   resources:
   - volumesnapshots
   verbs:
   - get
   - list
   - watch
+  - update
+  - patch
+  - create
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshotclasses
   verbs:
   - get
@@ -111,16 +114,42 @@

   verbs:
   - get
   - list
   - watch
   - patch
   - update
+  - create
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshotcontents/status
+  verbs:
+  - update
+  - patch
+- apiGroups:
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumegroupsnapshotclasses
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumegroupsnapshotcontents
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+  - patch
+- apiGroups:
+  - groupsnapshot.storage.k8s.io
+  resources:
+  - volumegroupsnapshotcontents/status
   verbs:
   - update
   - patch
 - apiGroups:
   - ''
   resources:
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/rook-ceph-rgw

+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/rook-ceph-rgw

@@ -1,14 +0,0 @@

----
-kind: Role
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: rook-ceph-rgw
-  namespace: rook-ceph
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - configmaps
-  verbs:
-  - get
-
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/rook-ceph-rgw

+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/rook-ceph-rgw

@@ -1,15 +0,0 @@

----
-kind: RoleBinding
-apiVersion: rbac.authorization.k8s.io/v1
-metadata:
-  name: rook-ceph-rgw
-  namespace: rook-ceph
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: Role
-  name: rook-ceph-rgw
-subjects:
-- kind: ServiceAccount
-  name: rook-ceph-rgw
-  namespace: rook-ceph
-
--- HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator

+++ HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator

@@ -26,13 +26,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: rook/ceph:v1.13.8
+        image: rook/ceph:v1.14.0
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities:
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/rook-ceph-default

+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/rook-ceph-default

@@ -0,0 +1,10 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: rook-ceph-default
+  namespace: rook-ceph
+  labels:
+    operator: rook
+    storage-backend: ceph
+
--- HelmRelease: home/home-assistant StatefulSet: home/home-assistant

+++ HelmRelease: home/home-assistant StatefulSet: home/home-assistant

@@ -72,13 +72,13 @@

           value: postgres-rw.databases.svc.cluster.local
         - name: TZ
           value: ${TIMEZONE}
         envFrom:
         - secretRef:
             name: home-assistant
-        image: ghcr.io/onedr0p/home-assistant:2024.4.0@sha256:b0f16ea4c87a5e2936b6a2ac51fd4c7921f8ffe8a8b96241cdcae5d40a9756b5
+        image: ghcr.io/onedr0p/home-assistant:2024.3.3@sha256:a4c2b7a75e8d5168a9e9f78d9d9f7f36435e2da07899e7faf5f6e3cdc4eebe56
         name: main
         resources:
           limits:
             memory: 800M
           requests:
             cpu: 100m

@rosey-the-renovator-bot
Copy link
Contributor Author

rosey-the-renovator-bot bot commented Apr 3, 2024

--- kubernetes/main/apps/home/home-assistant/app Kustomization: flux-system/home-automation-home-assistant HelmRelease: home/home-assistant

+++ kubernetes/main/apps/home/home-assistant/app Kustomization: flux-system/home-automation-home-assistant HelmRelease: home/home-assistant

@@ -41,13 +41,13 @@

               TZ: ${TIMEZONE}
             envFrom:
             - secretRef:
                 name: home-assistant
             image:
               repository: ghcr.io/onedr0p/home-assistant
-              tag: 2024.4.0@sha256:b0f16ea4c87a5e2936b6a2ac51fd4c7921f8ffe8a8b96241cdcae5d40a9756b5
+              tag: 2024.3.3@sha256:a4c2b7a75e8d5168a9e9f78d9d9f7f36435e2da07899e7faf5f6e3cdc4eebe56
             probes:
               liveness:
                 enabled: false
               readiness:
                 enabled: false
               startup:
--- kubernetes/main/apps/storage/rook-ceph/app Kustomization: flux-system/storage-rook-ceph HelmRelease: rook-ceph/rook-ceph-operator

+++ kubernetes/main/apps/storage/rook-ceph/app Kustomization: flux-system/storage-rook-ceph HelmRelease: rook-ceph/rook-ceph-operator

@@ -12,13 +12,13 @@

     spec:
       chart: rook-ceph
       sourceRef:
         kind: HelmRepository
         name: rook-ceph-charts
         namespace: flux-system
-      version: v1.13.8
+      version: v1.14.0
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
   interval: 30m
--- kubernetes/main/apps/storage/rook-ceph/add-ons Kustomization: flux-system/storage-rook-ceph-addons Deployment: rook-ceph/rook-direct-mount

+++ kubernetes/main/apps/storage/rook-ceph/add-ons Kustomization: flux-system/storage-rook-ceph-addons Deployment: rook-ceph/rook-direct-mount

@@ -33,13 +33,13 @@

               name: rook-ceph-mon
         - name: ROOK_CEPH_SECRET
           valueFrom:
             secretKeyRef:
               key: ceph-secret
               name: rook-ceph-mon
-        image: rook/ceph:v1.13.8
+        image: rook/ceph:v1.14.0
         imagePullPolicy: IfNotPresent
         name: rook-direct-mount
         securityContext:
           privileged: true
           runAsUser: 0
         tty: true
--- kubernetes/main/apps/storage/rook-ceph/cluster Kustomization: flux-system/storage-rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster

+++ kubernetes/main/apps/storage/rook-ceph/cluster Kustomization: flux-system/storage-rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster

@@ -12,13 +12,13 @@

     spec:
       chart: rook-ceph-cluster
       sourceRef:
         kind: HelmRepository
         name: rook-ceph-charts
         namespace: flux-system
-      version: v1.13.8
+      version: v1.14.0
   install:
     crds: CreateReplace
     createNamespace: true
     remediation:
       retries: 3
     replace: true

| datasource | package           | from    | to      |
| ---------- | ----------------- | ------- | ------- |
| helm       | rook-ceph         | v1.13.8 | v1.14.0 |
| helm       | rook-ceph-cluster | v1.13.8 | v1.14.0 |
| docker     | rook/ceph         | v1.13.8 | v1.14.0 |
@rwlove rwlove merged commit abc4627 into main Apr 4, 2024
12 checks passed
@rwlove rwlove deleted the renovate/rook-ceph branch April 4, 2024 20:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant