rook-ceph: upgrade to aes256k after talos added kernel support
This commit is contained in:
1 file changed
+5
-14
@@ -33,12 +33,12 @@ spec:
|
||||
keyGeneration: 2 # must be greater than the current keyGeneration
|
||||
csi:
|
||||
keyRotationPolicy: KeyGeneration
|
||||
keyGeneration: 3 # must be greater than the current keyGeneration
|
||||
keyType: aes # Talos kernel 6.18 / cephcsi v3.17.0 don't support aes256k yet
|
||||
keyGeneration: 4 # must be greater than the current keyGeneration
|
||||
keyType: aes256k
|
||||
rbdMirrorPeer:
|
||||
keyRotationPolicy: KeyGeneration
|
||||
keyGeneration: 3 # must be greater than the current keyGeneration
|
||||
keyType: aes # Talos kernel 6.18 / cephcsi v3.17.0 don't support aes256k yet
|
||||
keyGeneration: 4 # must be greater than the current keyGeneration
|
||||
keyType: aes256k
|
||||
# The path on the host where configuration files will be persisted. Must be specified. If there are multiple clusters, the directory must be unique for each cluster.
|
||||
# Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fail to start on the new cluster.
|
||||
# In Minikube, the '/data' directory is configured to persist across reboots. Use "/data/rook" in Minikube environment.
|
||||
@@ -370,13 +370,4 @@ spec:
|
||||
mgr:
|
||||
disabled: false
|
||||
osd:
|
||||
disabled: false
|
||||
muteHealthWarning: # Remove these after Talos uses 7.0+ kernel
|
||||
AUTH_INSECURE_ROTATING_SERVICE_KEY_TYPE:
|
||||
policy: mute
|
||||
AUTH_INSECURE_CLIENT_KEY_TYPE:
|
||||
policy: mute
|
||||
AUTH_INSECURE_KEYS_ALLOWED:
|
||||
policy: mute
|
||||
AUTH_INSECURE_KEYS_CREATABLE:
|
||||
policy: mute
|
||||
disabled: false
|
||||
Reference in new issue
Block a user