Skip to content

feat(helm/rook-ceph-cluster): update v1.20.6 ➼ v1.21.0 - #8124

Open
tinfoild[bot] wants to merge 1 commit into
mainfrom
renovate/rook-ceph-cluster-1.x
Open

feat(helm/rook-ceph-cluster): update v1.20.6 ➼ v1.21.0#8124
tinfoild[bot] wants to merge 1 commit into
mainfrom
renovate/rook-ceph-cluster-1.x

Conversation

@tinfoild

@tinfoild tinfoild Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change OpenSSF
rook-ceph-cluster minor v1.20.6 → v1.21.0 OpenSSF Scorecard

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

rook/rook (rook-ceph-cluster)

v1.21.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes
  • Helm OCI chart tags no longer include the v prefix (e.g., 1.21.0 instead of v1.21.0). Update any scripts or tooling that reference the chart by tag.
  • Ceph msgrv2 is required by default. Msgrv2 requires the 5.11 kernel. If you still cannot use msgrv2 due to an older kernel, disable the msgrv2 protocol with the CephCluster CR setting network.connections.requireMsgr2: false. If using the helm chart, this same value is applied under the cephClusterSpec of the values.
  • New installs of NFS must define a CephBlockPool for the .nfs pool. Rook no longer automatically creates the .nfs pool. A sample CephBlockPool spec is included in deploy/examples/nfs.yaml. Upgraded clusters are not impacted, as the .nfspool was already previously created.
Features
  • Ceph Umbrella (v21) is now a supported version of Ceph, once v21.2.0 is released by the Ceph team soon.
  • RBD Quality of Service (QoS) support is configured via the VolumeAttributesClass using the krbd mounter with cgroup v2 io.max enforcement. See the RBD QoS documentation for details.
  • Automated OSD replacement: An OSD deployment can be annotated to mark it for replacement. Rook will drain and destroy it by preserving its CRUSH position to later reuse it when new device will be available on the same node. All types of OSDs supported for host-based clusters, including OSDs sharing a metadata device. PVC-based OSDs are not supported for this new replacement design. See OSD replacement design document for details.
  • The rook-ceph-cluster Helm chart can create CephObjectStoreUser resources via the new cephObjectStoreUsers value.
  • The toolbox deployments from the Helm chart and the example manifests now reload the keyring and ceph.conf automatically after CephX key rotation, mon failover, or a config override change.
  • CephCluster dashboard TLS certificates can now be configured from a same-namespace Kubernetes TLS Secret with spec.dashboard.sslCertificateRef when the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.
  • CephObjectStoreUser gained settings spec.defaultPlacement and spec.defaultStorageClass, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported in status.info. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changing defaultPlacement without a defaultStorageClass resets the storage class to the new placement target's default.
  • Default CSI driver container images are no longer set by Rook. The configmap rook-csi-operator-image-set-configmap is now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.

v1.21.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes
  • Helm OCI chart tags no longer include the v prefix (e.g., 1.21.0 instead of v1.21.0). Update any scripts or tooling that reference the chart by tag.
  • Ceph msgrv2 is required by default. Msgrv2 requires the 5.11 kernel. If you still cannot use msgrv2 due to an older kernel, disable the msgrv2 protocol with the CephCluster CR setting network.connections.requireMsgr2: false. If using the helm chart, this same value is applied under the cephClusterSpec of the values.
  • New installs of NFS must define a CephBlockPool for the .nfs pool. Rook no longer automatically creates the .nfs pool. A sample CephBlockPool spec is included in deploy/examples/nfs.yaml. Upgraded clusters are not impacted, as the .nfspool was already previously created.
Features
  • Ceph Umbrella (v21) is now a supported version of Ceph, once v21.2.0 is released by the Ceph team soon.
  • RBD Quality of Service (QoS) support is configured via the VolumeAttributesClass using the krbd mounter with cgroup v2 io.max enforcement. See the RBD QoS documentation for details.
  • Automated OSD replacement: An OSD deployment can be annotated to mark it for replacement. Rook will drain and destroy it by preserving its CRUSH position to later reuse it when new device will be available on the same node. All types of OSDs supported for host-based clusters, including OSDs sharing a metadata device. PVC-based OSDs are not supported for this new replacement design. See OSD replacement design document for details.
  • The rook-ceph-cluster Helm chart can create CephObjectStoreUser resources via the new cephObjectStoreUsers value.
  • The toolbox deployments from the Helm chart and the example manifests now reload the keyring and ceph.conf automatically after CephX key rotation, mon failover, or a config override change.
  • CephCluster dashboard TLS certificates can now be configured from a same-namespace Kubernetes TLS Secret with spec.dashboard.sslCertificateRef when the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.
  • CephObjectStoreUser gained settings spec.defaultPlacement and spec.defaultStorageClass, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported in status.info. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changing defaultPlacement without a defaultStorageClass resets the storage class to the new placement target's default.
  • Default CSI driver container images are no longer set by Rook. The configmap rook-csi-operator-image-set-configmap is now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.

v1.20.8

Compare Source

Improvements

Rook v1.20.8 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.20.7

Compare Source

Improvements

Rook v1.20.7 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

Configuration

📅 Schedule: (in timezone Asia/Singapore)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Oct 6, 2026

Copy link
Copy Markdown

Deploying jjgadgets-biohazard with  Cloudflare Pages  Cloudflare Pages

Latest commit: 7533ac5
Status:🚫  Build failed.

View logs

@tinfoild

tinfoild Bot commented Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

kube/kustomization/out00

--- kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: mollysocket/mollysocket-pvc

+++ kube/clusters/biohazard/flux Kustomization: flux-system/0-biohazard-config Kustomization: mollysocket/mollysocket-pvc

@@ -276,13 +276,13 @@

       RGID: '1000'
       RUID: '1000'
       SC: file
       SIZE: 1Gi
       SNAP: file
       SNAP_ACCESSMODE: ReadOnlyMany
-      VS_APP_CURRENT_VERSION: ghcr.io/mollyim/mollysocket:1.7.1-alpine@sha256:29ef29049c250f0ab3337c5daeb6b2cd54be9c57921eeeeb71a0ce3e35669c7e
+      VS_APP_CURRENT_VERSION: ghcr.io/mollyim/mollysocket:1.7.1-alpine@sha256:6c92a0b2bb913f64a270c8d4aebc29c813793d48037aec8258ea0daeb876893b
     substituteFrom:
     - kind: Secret
       name: biohazard-vars
       optional: false
     - kind: Secret
       name: biohazard-secrets
--- kube/deploy/core/storage/rook-ceph/cluster/biohazard Kustomization: flux-system/1-core-storage-rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster-biohazard

+++ kube/deploy/core/storage/rook-ceph/cluster/biohazard Kustomization: flux-system/1-core-storage-rook-ceph-cluster HelmRelease: rook-ceph/rook-ceph-cluster-biohazard

@@ -14,13 +14,13 @@

     spec:
       chart: rook-ceph-cluster
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
         namespace: flux-system
-      version: v1.20.6
+      version: v1.21.0
   dependsOn:
   - name: rook-ceph
     namespace: rook-ceph
   install:
     crds: CreateReplace
     createNamespace: true
--- kube/deploy/core/storage/volsync/template Kustomization: mollysocket/mollysocket-pvc ReplicationSource: mollysocket/mollysocket-data-r2-updates-restic

+++ kube/deploy/core/storage/volsync/template Kustomization: mollysocket/mollysocket-pvc ReplicationSource: mollysocket/mollysocket-data-r2-updates-restic

@@ -53,8 +53,8 @@

       daily: 14
       within: 7d
     storageClassName: file
     volumeSnapshotClassName: file
   sourcePVC: mollysocket-data
   trigger:
-    manual: ghcr.io/mollyim/mollysocket:1.7.1-alpine@sha256:29ef29049c250f0ab3337c5daeb6b2cd54be9c57921eeeeb71a0ce3e35669c7e
+    manual: ghcr.io/mollyim/mollysocket:1.7.1-alpine@sha256:6c92a0b2bb913f64a270c8d4aebc29c813793d48037aec8258ea0daeb876893b
 
--- kube/deploy/core/storage/volsync/template Kustomization: mollysocket/mollysocket-pvc VolumeSnapshot: mollysocket/mollysocket-data-ve3e35669c7e

+++ kube/deploy/core/storage/volsync/template Kustomization: mollysocket/mollysocket-pvc VolumeSnapshot: mollysocket/mollysocket-data-ve3e35669c7e

@@ -1,16 +0,0 @@

----
-apiVersion: snapshot.storage.k8s.io/v1
-kind: VolumeSnapshot
-metadata:
-  labels:
-    app.kubernetes.io/name: mollysocket
-    kustomize.toolkit.fluxcd.io/name: mollysocket-pvc
-    kustomize.toolkit.fluxcd.io/namespace: mollysocket
-    pvc.home.arpa/volsync: 'true'
-  name: mollysocket-data-ve3e35669c7e
-  namespace: mollysocket
-spec:
-  source:
-    persistentVolumeClaimName: mollysocket-data
-  volumeSnapshotClassName: file
-
--- kube/deploy/core/storage/volsync/template Kustomization: mollysocket/mollysocket-pvc VolumeSnapshot: mollysocket/mollysocket-data-vdaeb876893b

+++ kube/deploy/core/storage/volsync/template Kustomization: mollysocket/mollysocket-pvc VolumeSnapshot: mollysocket/mollysocket-data-vdaeb876893b

@@ -0,0 +1,16 @@

+---
+apiVersion: snapshot.storage.k8s.io/v1
+kind: VolumeSnapshot
+metadata:
+  labels:
+    app.kubernetes.io/name: mollysocket
+    kustomize.toolkit.fluxcd.io/name: mollysocket-pvc
+    kustomize.toolkit.fluxcd.io/namespace: mollysocket
+    pvc.home.arpa/volsync: 'true'
+  name: mollysocket-data-vdaeb876893b
+  namespace: mollysocket
+spec:
+  source:
+    persistentVolumeClaimName: mollysocket-data
+  volumeSnapshotClassName: file
+
--- kube/deploy/apps/mollysocket/app Kustomization: mollysocket/mollysocket-app HelmRelease: mollysocket/mollysocket

+++ kube/deploy/apps/mollysocket/app Kustomization: mollysocket/mollysocket-app HelmRelease: mollysocket/mollysocket

@@ -58,13 +58,13 @@

               TZ: null
             envFrom:
             - secretRef:
                 name: mollysocket-secrets
             image:
               repository: ghcr.io/mollyim/mollysocket
-              tag: 1.7.1-alpine@sha256:29ef29049c250f0ab3337c5daeb6b2cd54be9c57921eeeeb71a0ce3e35669c7e
+              tag: 1.7.1-alpine@sha256:6c92a0b2bb913f64a270c8d4aebc29c813793d48037aec8258ea0daeb876893b
             probes:
               liveness:
                 enabled: true
               readiness:
                 enabled: true
             resources:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

kube/deploy/core renovate/datasource/helm renovate/type/minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants