infrastructure/weyma-talos
3
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

rook-ceph: upgrade ceph to v20.2.4 to address CVE-2025-30156

Browse Source
This commit is contained in:
williamp
2026-08-19 22:27:12 -04:00
parent 84a01f5851
commit ea297e2cd5
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
system-apps/rook-ceph/clusters/cluster.yaml
+6 -1
View File
@@ -21,11 +21,16 @@ spec:
# versions running within the cluster. See tags available at https://hub.docker.com/r/ceph/ceph/tags/. # versions running within the cluster. See tags available at https://hub.docker.com/r/ceph/ceph/tags/.
# If you want to be more precise, you can always use a timestamp tag such as quay.io/ceph/ceph:v19.2.1-20250202 # If you want to be more precise, you can always use a timestamp tag such as quay.io/ceph/ceph:v19.2.1-20250202
# This tag might not contain a new Ceph version, just security fixes from the underlying operating system, which will reduce vulnerabilities # This tag might not contain a new Ceph version, just security fixes from the underlying operating system, which will reduce vulnerabilities
image: quay.io/ceph/ceph:v20.2.0-20251104 image: quay.io/ceph/ceph:v20.2.4-20260818
# Whether to allow unsupported versions of Ceph. Currently Reef and Squid are supported. # Whether to allow unsupported versions of Ceph. Currently Reef and Squid are supported.
# Future versions such as Tentacle (v20) would require this to be set to `true`. # Future versions such as Tentacle (v20) would require this to be set to `true`.
# Do not set to true in production. # Do not set to true in production.
allowUnsupported: false allowUnsupported: false
security:
cephx:
daemon:
keyRotationPolicy: KeyGeneration
keyGeneration: 2 # must be greater than the current keyGeneration
# The path on the host where configuration files will be persisted. Must be specified. If there are multiple clusters, the directory must be unique for each cluster. # The path on the host where configuration files will be persisted. Must be specified. If there are multiple clusters, the directory must be unique for each cluster.
# Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fail to start on the new cluster. # Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fail to start on the new cluster.
# In Minikube, the '/data' directory is configured to persist across reboots. Use "/data/rook" in Minikube environment. # In Minikube, the '/data' directory is configured to persist across reboots. Use "/data/rook" in Minikube environment.