fix(helm/rook-ceph): update v1.20.6 ➼ v1.20.8

[tinfoild]

This PR contains the following updates:

Package	Update	Change	OpenSSF
rook-ceph	patch	v1.20.6 → v1.20.8

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

rook/rook (rook-ceph)

v1.20.8

Compare Source

Improvements

Rook v1.20.8 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• osd: Run prepare pods on the host network with provider host (#​18454, @​ideepika)
• helm : Add default httproute backend parameters (#​18455, @​Nathanael-Mtd)
• core: Make util.retry context aware (#​18428, @​sp98)
• rgw: Make pool references in the zone immutable (#​18399, @​arttor)
• object: Allow missing lifecycle notification events (#​18378, @​olamilekan000)
• osd: Redact lockbox secret from ceph-volume logs (#​18389, @​Yash121l)
• core: Patch finalizers instead of updating the whole CR with default spec values (#​18361, @​travisn)
• object: Wait for the osd upgrade before reconciling (#​18369, @​mheler)
• security: Keep credential values out of object store log lines (#​18188, @​jhoblitt)
• core: Remove crash collector and exporter daemons for deleted nodes (#​18313, @​aqeelat)

v1.20.7

Compare Source

Improvements

Rook v1.20.7 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• mon: Skip election strategy change when stretch mode already enabled (#​18289, @​pujitha24)
• core: Mute health warnings in the cluster reconcile instead of the osd health goroutine (#​18295, @​travisn)
• security: Update Rook to use CSI 3.17.1 for AES256K compatibility (#​18261, @​BlaineEXE)
• security: Explicitly set root user for chown initContainer (#​18018, @​LaurentGoderre)
• external: Create csi secrets if the admin creds provided in an external cluster (#​18317, @​parth-gr)
• osd: Return error when noout update fails (#​18267, @​jhoblitt)
• mgr: Unset the rook mgr module when disabled (#​18276, @​travisn)
• build: Generate the toolbox script manifests from toolbox.sh (#​18237, @​jhoblitt)
• docs: Add toolbox update/restart note to CVE guide (#​18283, @​BlaineEXE)
• docs: Add CVE advisory to upgrade doc (#​18249, @​BlaineEXE)
• docs: Add steps to handle the ceph health warnings to the common issues guide (#​18223, @​travisn)
• docs: Recommend to disable the rook mgr module in ceph upgrades (#​18224, @​travisn)

---

Configuration

📅 Schedule: (in timezone Asia/Singapore)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cloudflare-workers-and-pages]

Deploying jjgadgets-biohazard with    Cloudflare Pages

Latest commit:	027cc07
Status:	🚫  Build failed.

View logs

[tinfoild]

kube/helmrelease/out00

--- HelmRelease: rook-ceph/rook-ceph ConfigMap: rook-ceph/rook-csi-operator-image-set-configmap

+++ HelmRelease: rook-ceph/rook-ceph ConfigMap: rook-ceph/rook-csi-operator-image-set-configmap

@@ -15,9 +15,9 @@

 data:
   provisioner: registry.k8s.io/sig-storage/csi-provisioner:v6.2.0
   attacher: registry.k8s.io/sig-storage/csi-attacher:v4.12.0
   resizer: registry.k8s.io/sig-storage/csi-resizer:v2.1.0
   snapshotter: registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0
   registrar: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0
-  plugin: quay.io/cephcsi/cephcsi:v3.17.0
+  plugin: quay.io/cephcsi/cephcsi:v3.17.1
   addons: quay.io/csiaddons/k8s-sidecar:v0.14.0
 
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

@@ -20,12 +20,13 @@

   - secrets
   - configmaps
   verbs:
   - get
   - list
   - watch
+  - patch
 - apiGroups:
   - ''
   - discovery.k8s.io
   resources:
   - events
   - persistentvolumes
@@ -95,12 +96,13 @@

   - cephcosidrivers
   verbs:
   - get
   - list
   - watch
   - update
+  - patch
 - apiGroups:
   - ceph.rook.io
   resources:
   - cephclients/status
   - cephclusters/status
   - cephblockpools/status
--- HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

+++ HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

@@ -28,13 +28,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: docker.io/rook/ceph:v1.20.6
+        image: docker.io/rook/ceph:v1.20.8
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities: