This repository was archived by the owner on Mar 19, 2026. It is now read-only.
fix(helm): update chart rook-ceph to v1.19.2#1150
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-cephfs-ctrlplugin-sa
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-cephfs-ctrlplugin-sa
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-cephfs-ctrlplugin-sa
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-cephfs-nodeplugin-sa
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-cephfs-nodeplugin-sa
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-cephfs-nodeplugin-sa
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-controller-manager
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-controller-manager
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-controller-manager
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nfs-ctrlplugin-sa
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nfs-ctrlplugin-sa
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-nfs-ctrlplugin-sa
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nfs-nodeplugin-sa
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nfs-nodeplugin-sa
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-nfs-nodeplugin-sa
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-rbd-ctrlplugin-sa
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-rbd-ctrlplugin-sa
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-rbd-ctrlplugin-sa
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-rbd-nodeplugin-sa
+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-rbd-nodeplugin-sa
@@ -1,10 +1,11 @@
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: ceph-csi-rbd-nodeplugin-sa
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
+++ HelmRelease: rook-ceph/rook-ceph-operator ConfigMap: rook-ceph/rook-ceph-operator-config
@@ -35,13 +35,13 @@
CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
CSI_RBD_FSGROUPPOLICY: File
CSI_CEPHFS_FSGROUPPOLICY: File
CSI_NFS_FSGROUPPOLICY: File
CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=prefer-crc
- ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.0
+ ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.1
ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.0
ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.0.0
ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0
ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.10.0
ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.0.0
ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-cephfs-ctrlplugin-cr
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-cephfs-ctrlplugin-cr
@@ -196,7 +196,15 @@
- apiGroups:
- authentication.k8s.io
resources:
- tokenreviews
verbs:
- create
+- apiGroups:
+ - storage.k8s.io
+ resources:
+ - volumeattributesclasses
+ verbs:
+ - get
+ - list
+ - watch
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-cephfs-nodeplugin-cr
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-cephfs-nodeplugin-cr
@@ -17,12 +17,14 @@
- apiGroups:
- ''
resources:
- secrets
verbs:
- get
+ - list
+ - watch
- apiGroups:
- ''
resources:
- configmaps
verbs:
- get
@@ -52,7 +54,13 @@
- ''
resources:
- persistentvolumes
- persistentvolumeclaims
verbs:
- get
+- apiGroups:
+ - authentication.k8s.io
+ resources:
+ - tokenreviews
+ verbs:
+ - create
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-nfs-ctrlplugin-cr
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-nfs-ctrlplugin-cr
@@ -132,7 +132,15 @@
- apiGroups:
- storage.k8s.io
resources:
- volumeattachments/status
verbs:
- patch
+- apiGroups:
+ - storage.k8s.io
+ resources:
+ - volumeattributesclasses
+ verbs:
+ - get
+ - list
+ - watch
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-rbd-ctrlplugin-cr
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-rbd-ctrlplugin-cr
@@ -225,7 +225,15 @@
- cbt.storage.k8s.io
resources:
- snapshotmetadataservices
verbs:
- get
- list
+- apiGroups:
+ - storage.k8s.io
+ resources:
+ - volumeattributesclasses
+ verbs:
+ - get
+ - list
+ - watch
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-rbd-nodeplugin-cr
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-rbd-nodeplugin-cr
@@ -12,12 +12,13 @@
- ''
resources:
- secrets
verbs:
- get
- list
+ - watch
- apiGroups:
- ''
resources:
- persistentvolumes
verbs:
- get
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-global
@@ -14,13 +14,12 @@
rules:
- apiGroups:
- ''
resources:
- pods
- nodes
- - nodes/proxy
- secrets
- configmaps
verbs:
- get
- list
- watch
@@ -40,12 +39,20 @@
- list
- watch
- patch
- create
- update
- delete
+- apiGroups:
+ - events.k8s.io
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
- apiGroups:
- storage.k8s.io
resources:
- storageclasses
verbs:
- get
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-mgr-cluster
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rook-ceph-mgr-cluster
@@ -14,13 +14,12 @@
rules:
- apiGroups:
- ''
resources:
- configmaps
- nodes
- - nodes/proxy
- persistentvolumes
verbs:
- get
- list
- watch
- apiGroups:
@@ -31,12 +30,20 @@
- create
- patch
- list
- get
- watch
- apiGroups:
+ - events.k8s.io
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
+- apiGroups:
- storage.k8s.io
resources:
- storageclasses
verbs:
- get
- list
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/cephfs-external-provisioner-runner
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/cephfs-external-provisioner-runner
@@ -78,12 +78,20 @@
verbs:
- list
- watch
- create
- update
- patch
+- apiGroups:
+ - events.k8s.io
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
- apiGroups:
- storage.k8s.io
resources:
- volumeattachments
verbs:
- get
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rbd-external-provisioner-runner
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/rbd-external-provisioner-runner
@@ -57,12 +57,20 @@
- list
- watch
- create
- update
- patch
- apiGroups:
+ - events.k8s.io
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
+- apiGroups:
- storage.k8s.io
resources:
- volumeattachments
verbs:
- get
- list
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/objectstorage-provisioner-role
+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/objectstorage-provisioner-role
@@ -44,7 +44,15 @@
- events
verbs:
- get
- delete
- update
- create
+- apiGroups:
+ - events.k8s.io
+ resources:
+ - events
+ verbs:
+ - create
+ - patch
+ - update
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-cephfs-ctrlplugin-r
+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-cephfs-ctrlplugin-r
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: ceph-csi-cephfs-ctrlplugin-r
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-cephfs-nodeplugin-r
+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-cephfs-nodeplugin-r
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: ceph-csi-cephfs-nodeplugin-r
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-leader-election-role
+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-leader-election-role
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: ceph-csi-leader-election-role
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-rbd-ctrlplugin-r
+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-rbd-ctrlplugin-r
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: ceph-csi-rbd-ctrlplugin-r
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-rbd-nodeplugin-r
+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-rbd-nodeplugin-r
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: ceph-csi-rbd-nodeplugin-r
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
rules:
- apiGroups:
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-cephfs-ctrlplugin-rb
+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-cephfs-ctrlplugin-rb
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ceph-csi-cephfs-ctrlplugin-rb
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-cephfs-nodeplugin-rb
+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-cephfs-nodeplugin-rb
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ceph-csi-cephfs-nodeplugin-rb
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-leader-election-rolebinding
+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-leader-election-rolebinding
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ceph-csi-leader-election-rolebinding
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-rbd-ctrlplugin-rb
+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-rbd-ctrlplugin-rb
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ceph-csi-rbd-ctrlplugin-rb
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-rbd-nodeplugin-rb
+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-rbd-nodeplugin-rb
@@ -1,11 +1,12 @@
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: ceph-csi-rbd-nodeplugin-rb
+ namespace: rook-ceph
labels:
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
roleRef:
apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/ceph-csi-controller-manager
+++ HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/ceph-csi-controller-manager
@@ -1,11 +1,12 @@
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: ceph-csi-controller-manager
+ namespace: rook-ceph
labels:
control-plane: controller-manager
app.kubernetes.io/name: ceph-csi
app.kubernetes.io/instance: rook-ceph-operator
app.kubernetes.io/managed-by: Helm
spec:
@@ -37,13 +38,13 @@
- name: CSI_SERVICE_ACCOUNT_PREFIX
value: ceph-csi-
- name: WATCH_NAMESPACE
value: ''
- name: KUBERNETES_CLUSTER_DOMAIN
value: cluster.local
- image: quay.io/cephcsi/ceph-csi-operator:v0.4.1
+ image: quay.io/cephcsi/ceph-csi-operator:v0.5.0
livenessProbe:
httpGet:
path: /healthz
port: 8081
initialDelaySeconds: 15
periodSeconds: 20
--- HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
+++ HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator
@@ -28,13 +28,13 @@
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 5
containers:
- name: rook-ceph-operator
- image: docker.io/rook/ceph:v1.19.0
+ image: docker.io/rook/ceph:v1.19.2
imagePullPolicy: IfNotPresent
args:
- ceph
- operator
securityContext:
capabilities: |
--- kubernetes/apps/rook-ceph/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
+++ kubernetes/apps/rook-ceph/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: rook-ceph/rook-ceph-operator
@@ -13,13 +13,13 @@
spec:
chart: rook-ceph
sourceRef:
kind: HelmRepository
name: rook-ceph
namespace: flux-system
- version: v1.19.0
+ version: v1.19.2
install:
remediation:
retries: 3
interval: 30m
timeout: 15m
upgrade: |
da94a27 to
07d570d
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.19.0→v1.19.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
rook/rook (rook-ceph)
v1.19.2Compare Source
v1.19.1Compare Source
Improvements
Rook v1.19.1 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.
csi: Update to ceph csi operator to v0.5 (#17029, @subhamkrai)
security: Remove unnecessary nodes/proxy RBAC enablement (#16979, @ibotty)
helm: Set default ceph image pull policy (#16954, @travisn)
nfs: Add CephNFS.spec.server.{image,imagePullPolicy} fields (#16982, @jhoblitt)
osd: Assign correct osd container in case it is not index 0 (#16969, @kyrbrbik)
csi: Remove obsolete automated node fencing code (#16922, @subhamkrai)
osd: Enable proper cancellation during OSD reconcile (#17022, @sp98)
csi: Allow running the csi controller plugin on host network (#16972, @Madhu-1)
rgw: Update ca bundle mount perms to read-all (#16968, @BlaineEXE)
mon: Change do-not-reconcile to be more granular for individual mons (#16939, @travisn)
build(deps): Bump the k8s-dependencies group with 6 updates (#16846, @dependabot[bot])
doc: add csi-operator example in configuration doc (#17001, @subhamkrai)
Configuration
📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.