Update dependency Rook to v1.12.7

[vshn-renovate]

This PR contains the following updates:

Package	Update	Change
docker.io/rook/ceph	minor	v1.11.11 -> v1.12.7
rook-ceph	minor	v1.11.11 -> v1.12.7

---

Release Notes

rook/rook (rook-ceph)

v1.12.7

Compare Source

Improvements

Rook v1.12.7 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• core: Crash collector keyring requires rw access for the mgr profile (#​13072, @​travisn)
• external: Automatically init the rbd pool (#​13061, @​parth-gr)
• doc: Add a table for supported OSD configuration (#​12166, @​satoru-takeuchi)
• external: Fix monitoring endpoint check (#​13060, @​parth-gr)
• docs: Unify namespaces handling for the second cluster creation (#​13089, @​rkachach)
• doc: Clarify LVM prerequisites (#​13099, @​sp98)
• namespace: Adding namespace to all rook-ceph namespaces references (#​13078, @​rkachach)
• namespace: Adding a dedicated entry for operator namespace in common (#​13080, @​rkachach)

v1.12.6

Compare Source

Improvements

Rook v1.12.6 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• osd: Prevent to fallback to LVM mode in OSD on LVM creation (#​12165, @​satoru-takeuchi)
• build: Reduce Go module dependencies significantly by removing unnecessary package dependencies (#​13035, @​BlaineEXE)
• osd: Use bash script to run OSDs if the flappingRestartIntervalHours is set (#​13031, @​sp98)
• mon: Write the assimilate-conf config to a valid operator working directory (#​13033, @​travisn)
• mds: improve the MDS liveness probe calls (#​12860, @​parth-gr)
• csi: Add mountinfo path for the CephFS daemonset (#​13011, @​Madhu-1)
• osd: Print warning message if no matching node found in nodes list for an OSD (#​13046, @​wb14123)

v1.12.5

Compare Source

Improvements

Rook v1.12.5 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• external: Fix return value for client.healthchecker user keyring (#​13001, @​parth-gr)
• object: Create cosi user for each object store (#​12633, @​thotz)
• mgr: Allow more than two mgrs (#​12895, @​travisn)
• core: Use crash profile in crash daemon keyring (#​12970, @​travisn)
• multus: Allow node profiles in validation test (#​12968, @​BlaineEXE)
• file: Disable active standby when set to false (#​12981, @​travisn)
• mgr: Adding support for prometheus endpoint configuration (#​12926, @​rkachach)
• external: Update healthchecker caps for rbd command (#​12941, @​subhamkrai)
• docs: Review the teardown guide for updated guidelines (#​12921, @​travisn)
• osd: Support encrypted OSDs on partitons (#​12924, @​satoru-takeuchi)
• helm: Clusterrole to add objectbucketclaims to user facing roles (#​12329, @​jouve)
• build: update s5cmd to version v2.2.1 (#​12898, @​obnoxxx)
• core: Import packages only once (#​12909, @​testwill)
• docs: Improving minikube developer setup documentation (#​12984, @​rkachach)

v1.12.4

Compare Source

Improvements

Rook v1.12.4 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• core: Restart ceph daemons when network updated (#​12791, @​subhamkrai)
• helm: Update docs/comments to reflect reef support (#​12872, @​mjnagel)
• exporter: Bind to all interfaces if IPv6 is enabled (#​12886, @​matthewpi)
• object: Unique username for OBC even when preceding OBC was retained (#​12884, @​haslersn)
• multus: Allow using NADs without inspectable CIDRs (#​12778, @​BlaineEXE)
• discover: Fix discover daemonset default value for discovery interval (#​12844, @​lbailleul)
• operator: Move discover pod settings to the operator configmap (#​12840 #​12691, @​subhamkrai)
• build: Correct release version for toolbox based on operator in release-1.12 branch (#​12853, @​travisn)
• osd: Replace existing OSDs to be upgraded when new store is available (#​12770, @​sp98)
• ci: Simplify docs-check workflow by extracting functionality (#​12816, @​obnoxxx)
• csi: Enable csi-addons-side when dependent CRDs are deployed (#​12487, @​subhamkrai)
• monitoring: Set port for exporter servicemonitor (#​12825, @​weirdwiz)

v1.12.3

Compare Source

Improvements

Rook v1.12.3 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• object: Avoid creating same bucket for two different OBCs (#​12804, @​thotz)
• object: Allow creating an object user in different namespace (#​12730, @​travisn)
• external: rename --cluster_name parameter to --k8s_cluster_name (#​12811, @​parth-gr)
• core: Return valid CIDR IP for blocklisting (#​12797, @​Madhu-1)
• ci: Add K8s v1.28 to test suite (#​12748, @​subhamkrai)
• csi: Set ceph cluster as ControllerRef for holder daemonset (#​12724, @​Madhu-1)
• build: Add support for Go version 1.21 in addition to 1.20 (#​12788, @​subhamkrai)
• build: Update go modules (#​12663, @​BlaineEXE)
• build: Remove go modules under apis directory (#​12764, @​travisn)
• helm: Documentation uses values.yaml instead of values-override.yaml (#​12734, @​parth-gr)
• osd: Implement replacing OSDs for when the backend store may change in future (#​12507, @​sp98)
• mon: Support mon backing storage in different storage classes across zones (#​12384, @​ideepika)
• monitoring: Add "for" to CephOSDDownHigh alert (#​12731, @​cjyar)
• operator: Log operator config configmap settings only when changed (#​12679, @​subhamkrai)
• build: Update vault and other indirect imports (#​12672, @​subhamkrai)
• helm: Support helm chart install in OpenShift clusters (#​12675, @​parth-gr)

v1.12.2

Compare Source

Improvements

Rook v1.12.2 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• file: Handle filesystem add pool error for Reef (#​12725, @​Madhu-1)
• nfs: Run dbus-daemon sidecar as dbus user instead of root (#​12698, @​nixpanic)
• multus: Add sample job manifest for multus config validation (#​12495, @​Nikhil-Ladha)
• csi: Add CSI pods to the list to force delete when stuck terminating (#​12681, @​Madhu-1)
• csi: Configurable maxUnavailable for CephFS CSI Daemonset for faster updates (#​12678, @​karthik-us)
• mon: Cleanup ParseMonEndpoints from mon package (#​12561, @​henrydavies1)
• helm: Configure additional ServiceMonitor labels (#​12605, @​jouve)
• operator: Fix formatting of some logger methods (#​12666, @​polyedre)
• object: Fix s5cmd documentation for s3 endpoint verification (#​12624, @​parth-gr)

v1.12.1

Compare Source

Improvements

Rook v1.12.1 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• docs: Add note in upgrade guide about cephfs driver's breaking change (#​12615, @​Rakshith-R)
• osd: Use cp -a command for copying init-containers binary (#​12501, @​Sheetalpamecha)
• external: added an optional flag for enabling v2 mon port (#​12534, @​Nikhil-Ladha)
• external: set RequireMsgr2 if v2 port is configured (#​12537, @​parth-gr)
• multus: Revise kube config/client loading (#​12611, @​BlaineEXE)
• nfs: Fix null pointer deref in generateSssdSidecarResources() (#​12617, @​spuiuk)
• external: Create cluster namespace for the external cluster (#​12508, @​parth-gr)
• object: Update ceph COSI driver image to v0.1.1 (#​12562, @​thotz)
• object: Do not add objectstore endpoint to zone when sync is disabled (#​12560, @​polyedre)
• nfs: mount krb5.conf and krb5.keytab in the sssd container (#​12517, @​spuiuk)
• core: Force delete rook-ceph-exporter pod on a down node (#​12575, @​sp98)
• rbd: Skip PV during node fencing when PV is not backed by Ceph-CSI (#​12563, @​subhamkrai)
• build: COSI driver is missing from OLM list (#​12592, @​subhamkrai)
• ci: add detached mode in tmate (#​12579, @​subhamkrai)

v1.12.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes

• The minimum supported Kubernetes version is v1.22
• The minimum supported Ceph-CSI driver is 3.8
• Version of golang supported during development is v1.20
• For CephObjectStores, if rgw_run_sync_thread was set manually via ceph config set ...
  the value will be overridden by Rook according to disableMultisiteSyncTraffic

Features

• Add support for Ceph Reef (v18)
• Ceph COSI Driver for provisioning buckets is available in experimental mode
• Ceph CSI version by default is v3.9
• Automate recovery of RBD (RWO) volumes following node loss
  • Requires CSI-add-ons
  • Requires the K8s v1.26 feature for non-graceful node shutdown
• Multus network validation tool
• Security improvements by dropping container capabilities
• Allow disabling ObjectBucketClaim and ObjectBucketNotification controllers
• Various improvements for the external Ceph cluster configuration script
• NFS
  • Add experimental support for RGW as a backend for CephNFSes
  • Add support for the monitoring endpoint present in NFS-Ganesha v5.1 (Ceph Reef v18 and up)
  • Fix various bugs in kerberos support

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[vshn-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

[simu]

Summary of changes:

• Upgrade Rook to 1.12.7
• Remove SCC manifests template in the operator helm chart -> we already generate SCCs for OpenShift 4 in the component, the upstream manifest wouldn't work for our configuration anyway
• Remove discard mount option for CephFS (not required, and breaks mounts with Ceph-CSI v3.9.0)
• Additional test case which enables CephFS
• Update alert runbooks and fix typo in CephPGUnavailableBlockingIO alert