rook-ceph: upgrade to aes256k after talos added kernel support

This commit is contained in:
williamp committed 2026-09-06 16:11:14 -04:00
1 parent eb40b32dcf
commit 1299a2e115
1 file changed
+5 -14
+5 -14
View File
@@ -33,12 +33,12 @@ spec:
keyGeneration: 2 # must be greater than the current keyGeneration
csi:
keyRotationPolicy: KeyGeneration
keyGeneration: 3 # must be greater than the current keyGeneration
keyType: aes # Talos kernel 6.18 / cephcsi v3.17.0 don't support aes256k yet
keyGeneration: 4 # must be greater than the current keyGeneration
keyType: aes256k
rbdMirrorPeer:
keyRotationPolicy: KeyGeneration
keyGeneration: 3 # must be greater than the current keyGeneration
keyType: aes # Talos kernel 6.18 / cephcsi v3.17.0 don't support aes256k yet
keyGeneration: 4 # must be greater than the current keyGeneration
keyType: aes256k
# The path on the host where configuration files will be persisted. Must be specified. If there are multiple clusters, the directory must be unique for each cluster.
# Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fail to start on the new cluster.
# In Minikube, the '/data' directory is configured to persist across reboots. Use "/data/rook" in Minikube environment.
@@ -370,13 +370,4 @@ spec:
mgr:
disabled: false
osd:
disabled: false
muteHealthWarning: # Remove these after Talos uses 7.0+ kernel
AUTH_INSECURE_ROTATING_SERVICE_KEY_TYPE:
policy: mute
AUTH_INSECURE_CLIENT_KEY_TYPE:
policy: mute
AUTH_INSECURE_KEYS_ALLOWED:
policy: mute
AUTH_INSECURE_KEYS_CREATABLE:
policy: mute
disabled: false