Helm OCI chart tags no longer include the v prefix (e.g., 1.21.0 instead of v1.21.0). Update any scripts or tooling that reference the chart by tag.
Ceph msgrv2 is required by default. Msgrv2 requires the 5.11 kernel. If you still cannot use msgrv2 due to an older kernel, disable the msgrv2 protocol with the CephCluster CR setting network.connections.requireMsgr2: false. If using the helm chart, this same value is applied under the cephClusterSpec of the values.
New installs of NFS must define a CephBlockPool for the .nfs pool. Rook no longer automatically creates the .nfs pool. A sample CephBlockPool spec is included in deploy/examples/nfs.yaml. Upgraded clusters are not impacted, as the .nfspool was already previously created.
Features
Ceph Umbrella (v21) is now a supported version of Ceph, once v21.2.0 is released by the Ceph team soon.
RBD Quality of Service (QoS) support is configured via the VolumeAttributesClass using the krbd mounter with cgroup v2 io.max enforcement. See the RBD QoS documentation for details.
Automated OSD replacement: An OSD deployment can be annotated to mark it for replacement. Rook will drain and destroy it by preserving its CRUSH position to later reuse it when new device will be available on the same node. All types of OSDs supported for host-based clusters, including OSDs sharing a metadata device. PVC-based OSDs are not supported for this new replacement design. See OSD replacement design document for details.
The rook-ceph-cluster Helm chart can create CephObjectStoreUser resources via the new cephObjectStoreUsers value.
The toolbox deployments from the Helm chart and the example manifests now reload the keyring and ceph.conf automatically after CephX key rotation, mon failover, or a config override change.
CephCluster dashboard TLS certificates can now be configured from a same-namespace Kubernetes TLS Secret with spec.dashboard.sslCertificateRef when the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.
CephObjectStoreUser gained settings spec.defaultPlacement and spec.defaultStorageClass, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported in status.info. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changing defaultPlacement without a defaultStorageClass resets the storage class to the new placement target's default.
Default CSI driver container images are no longer set by Rook. The configmap rook-csi-operator-image-set-configmap is now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.
Helm OCI chart tags no longer include the v prefix (e.g., 1.21.0 instead of v1.21.0). Update any scripts or tooling that reference the chart by tag.
Ceph msgrv2 is required by default. Msgrv2 requires the 5.11 kernel. If you still cannot use msgrv2 due to an older kernel, disable the msgrv2 protocol with the CephCluster CR setting network.connections.requireMsgr2: false. If using the helm chart, this same value is applied under the cephClusterSpec of the values.
New installs of NFS must define a CephBlockPool for the .nfs pool. Rook no longer automatically creates the .nfs pool. A sample CephBlockPool spec is included in deploy/examples/nfs.yaml. Upgraded clusters are not impacted, as the .nfspool was already previously created.
Features
Ceph Umbrella (v21) is now a supported version of Ceph, once v21.2.0 is released by the Ceph team soon.
RBD Quality of Service (QoS) support is configured via the VolumeAttributesClass using the krbd mounter with cgroup v2 io.max enforcement. See the RBD QoS documentation for details.
Automated OSD replacement: An OSD deployment can be annotated to mark it for replacement. Rook will drain and destroy it by preserving its CRUSH position to later reuse it when new device will be available on the same node. All types of OSDs supported for host-based clusters, including OSDs sharing a metadata device. PVC-based OSDs are not supported for this new replacement design. See OSD replacement design document for details.
The rook-ceph-cluster Helm chart can create CephObjectStoreUser resources via the new cephObjectStoreUsers value.
The toolbox deployments from the Helm chart and the example manifests now reload the keyring and ceph.conf automatically after CephX key rotation, mon failover, or a config override change.
CephCluster dashboard TLS certificates can now be configured from a same-namespace Kubernetes TLS Secret with spec.dashboard.sslCertificateRef when the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.
CephObjectStoreUser gained settings spec.defaultPlacement and spec.defaultStorageClass, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported in status.info. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changing defaultPlacement without a defaultStorageClass resets the storage class to the new placement target's default.
Default CSI driver container images are no longer set by Rook. The configmap rook-csi-operator-image-set-configmap is now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.
Configuration
📅Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [argo-cd](https://github.com/argoproj/argo-helm) | minor | `10.9.6` -> `10.10.0` |
| [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.11.0` -> `2.12.0` |
| [rook-ceph](https://github.com/rook/rook) | minor | `v1.20.8` -> `v1.21.0` |
---
### Release Notes
<details>
<summary>argoproj/argo-helm (argo-cd)</summary>
### [`v10.10.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-10.10.0)
[Compare Source](https://github.com/argoproj/argo-helm/compare/argo-cd-10.9.7...argo-cd-10.10.0)
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
#### What's Changed
- chore(argo-cd): Update ghcr.io/oliver006/redis_exporter Docker tag to v1.93.0 by [@​argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in https://github.com/argoproj/argo-helm/pull/4117
- feat(argo-cd): add server.enabled for Argo CD Core installation by [@​berlewis](https://github.com/berlewis) in https://github.com/argoproj/argo-helm/pull/4118
#### New Contributors
- [@​berlewis](https://github.com/berlewis) made their first contribution in https://github.com/argoproj/argo-helm/pull/4118
**Full Changelog**: https://github.com/argoproj/argo-helm/compare/argo-cd-10.9.7...argo-cd-10.10.0
### [`v10.9.7`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-10.9.7)
[Compare Source](https://github.com/argoproj/argo-helm/compare/argo-cd-10.9.6...argo-cd-10.9.7)
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
#### What's Changed
- chore(argo-cd): Update dependency argoproj/argo-cd to v3.5.4 by [@​argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in https://github.com/argoproj/argo-helm/pull/4119
**Full Changelog**: https://github.com/argoproj/argo-helm/compare/argo-rollouts-2.43.6...argo-cd-10.9.7
</details>
<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>
### [`v2.12.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.12.0)
[Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.11.0...v2.12.0)
Image: `ghcr.io/external-secrets/external-secrets:v2.12.0`
Image: `ghcr.io/external-secrets/external-secrets:v2.12.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v2.12.0-ubi-boringssl`
<!-- Release notes generated using configuration in .github/release.yml at main -->
#### What's Changed
##### General
- fix: Revert breaking change to change imageRegistry by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6996
- fix: e2e test should not override default vars by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6995
- chore: release helm chart for 2.11.0 by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/6997
- fix: Remove fail from templates by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/7019
- docs(generators): describe UUID output as lowercase version 4 by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/7027
- fix(akeyless): return esv1.NoSecretErr when a secret does not exist in GetSecret by [@​wankhede04](https://github.com/wankhede04) in https://github.com/external-secrets/external-secrets/pull/7013
- feat(generators): add prefix and suffix to the Password generator by [@​alekc](https://github.com/alekc) in https://github.com/external-secrets/external-secrets/pull/7028
- fix(aws): return esv1.NoSecretErr when a certificate does not exist in Certificate Manager GetSecret by [@​wankhede04](https://github.com/wankhede04) in https://github.com/external-secrets/external-secrets/pull/7015
- fix: use preinstalled-runtimes to match v2 bump by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/7031
- chore: update dependencies by [@​eso-service-account-app](https://github.com/eso-service-account-app)\[bot] in https://github.com/external-secrets/external-secrets/pull/7047
- fix(pulumi): preserve environment definition on PushSecret by [@​KR-Ravindra](https://github.com/KR-Ravindra) in https://github.com/external-secrets/external-secrets/pull/6933
- docs: set Orphan on ClusterExternalSecret fan-out example by [@​guanchzhou](https://github.com/guanchzhou) in https://github.com/external-secrets/external-secrets/pull/6885
- feat(conjur): Cloud Authenticators support by [@​hdabrowski](https://github.com/hdabrowski) in https://github.com/external-secrets/external-secrets/pull/6729
- docs: add Vault custom metadata example by [@​PCDattt](https://github.com/PCDattt) in https://github.com/external-secrets/external-secrets/pull/6982
- feat(charts): add rbac.leaderElection.create toggle by [@​kriszkern](https://github.com/kriszkern) in https://github.com/external-secrets/external-secrets/pull/6950
- feat(charts): warn when replicas > 1 without leader election by [@​anikievev](https://github.com/anikievev) in https://github.com/external-secrets/external-secrets/pull/7036
- fix: Never template strings in errors by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/7021
- fix: Validate Secret before writing by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/7065
- chore: Update docs for new release by [@​evrardj-roche](https://github.com/evrardj-roche) in https://github.com/external-secrets/external-secrets/pull/7085
##### Dependencies
- chore(deps): bump ubi9/ubi from `c5cc9c2` to `a4b9ec0` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7001
- chore(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7006
- chore(deps): bump jlumbroso/free-disk-space from 1.3.1 to 2.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7005
- chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7004
- chore(deps): bump golang from `648f440` to `69a7b97` in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7044
- chore(deps): bump alpine from 3.24.1 to 3.24.2 in /e2e by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7043
- chore(deps): bump alpine from `28bd5fe` to `294b683` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7042
- chore(deps): bump alpine from `28bd5fe` to `294b683` in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7045
- chore(deps): bump ubi9/ubi from `a4b9ec0` to `7a38d75` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7041
- chore(deps): bump docker/setup-qemu-action from 4.3.0 to 4.4.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7003
- chore(deps): bump aws-actions/configure-aws-credentials from 6.2.4 to 6.3.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7002
- chore(deps): bump azure/login from 3.0.2 to 3.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6959
- chore(deps): bump the codeql group across 1 directory with 3 updates by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6958
- chore(deps): bump distroless/static from `f2ea270` to `5813399` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/6957
- chore(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7080
- chore(deps): bump ubi9/ubi from `7a38d75` to `803a35a` by [@​dependabot](https://github.com/dependabot)\[bot] in https://github.com/external-secrets/external-secrets/pull/7079
#### New Contributors
- [@​wankhede04](https://github.com/wankhede04) made their first contribution in https://github.com/external-secrets/external-secrets/pull/7013
- [@​KR-Ravindra](https://github.com/KR-Ravindra) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6933
- [@​guanchzhou](https://github.com/guanchzhou) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6885
- [@​PCDattt](https://github.com/PCDattt) made their first contribution in https://github.com/external-secrets/external-secrets/pull/6982
- [@​anikievev](https://github.com/anikievev) made their first contribution in https://github.com/external-secrets/external-secrets/pull/7036
**Full Changelog**: https://github.com/external-secrets/external-secrets/compare/v2.11.0...v2.12.0
</details>
<details>
<summary>rook/rook (rook-ceph)</summary>
### [`v1.21.0`](https://github.com/rook/rook/releases/tag/v1.21.0)
[Compare Source](https://github.com/rook/rook/compare/v1.21.0...v1.21.0)
##### Upgrade Guide
To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.21/Upgrade/rook-upgrade/).
##### Breaking Changes
- Helm OCI chart tags no longer include the `v` prefix (e.g., `1.21.0` instead of `v1.21.0`). Update any scripts or tooling that reference the chart by tag.
- Ceph msgrv2 is required by default. Msgrv2 requires the 5.11 kernel. If you still cannot use msgrv2 due to an older kernel, disable the msgrv2 protocol with the CephCluster CR setting `network.connections.requireMsgr2: false`. If using the helm chart, this same value is applied under the `cephClusterSpec` of the values.
- New installs of NFS must define a CephBlockPool for the `.nfs` pool. Rook no longer automatically creates the `.nfs` pool. A sample CephBlockPool spec is included in `deploy/examples/nfs.yaml`. Upgraded clusters are not impacted, as the `.nfs`pool was already previously created.
##### Features
- Ceph Umbrella (v21) is now a supported version of Ceph, once v21.2.0 is released by the Ceph team soon.
- RBD Quality of Service (QoS) support is configured via the `VolumeAttributesClass` using the krbd mounter with cgroup v2 `io.max` enforcement. See the [RBD QoS documentation](Documentation/Storage-Configuration/Block-Storage-RBD/rbd-qos.md) for details.
- Automated OSD replacement: An OSD deployment can be annotated to mark it for replacement. Rook will drain and destroy it by preserving its CRUSH position to later reuse it when new device will be available on the same node. All types of OSDs supported for host-based clusters, including OSDs sharing a metadata device. PVC-based OSDs are not supported for this new replacement design. See [OSD replacement design document](./design/ceph/osd-replacement.md) for details.
- The rook-ceph-cluster Helm chart can create `CephObjectStoreUser` resources via the new `cephObjectStoreUsers` value.
- The toolbox deployments from the Helm chart and the example manifests now reload the keyring and `ceph.conf` automatically after CephX key rotation, mon failover, or a config override change.
- CephCluster dashboard TLS certificates can now be configured from a same-namespace Kubernetes TLS Secret with `spec.dashboard.sslCertificateRef` when the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.
- `CephObjectStoreUser` gained settings `spec.defaultPlacement` and `spec.defaultStorageClass`, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported in `status.info`. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changing `defaultPlacement` without a `defaultStorageClass` resets the storage class to the new placement target's default.
- Default CSI driver container images are no longer set by Rook. The configmap `rook-csi-operator-image-set-configmap` is now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.
### [`v1.21.0`](https://github.com/rook/rook/releases/tag/v1.21.0)
[Compare Source](https://github.com/rook/rook/compare/v1.20.8...v1.21.0)
##### Upgrade Guide
To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.21/Upgrade/rook-upgrade/).
##### Breaking Changes
- Helm OCI chart tags no longer include the `v` prefix (e.g., `1.21.0` instead of `v1.21.0`). Update any scripts or tooling that reference the chart by tag.
- Ceph msgrv2 is required by default. Msgrv2 requires the 5.11 kernel. If you still cannot use msgrv2 due to an older kernel, disable the msgrv2 protocol with the CephCluster CR setting `network.connections.requireMsgr2: false`. If using the helm chart, this same value is applied under the `cephClusterSpec` of the values.
- New installs of NFS must define a CephBlockPool for the `.nfs` pool. Rook no longer automatically creates the `.nfs` pool. A sample CephBlockPool spec is included in `deploy/examples/nfs.yaml`. Upgraded clusters are not impacted, as the `.nfs`pool was already previously created.
##### Features
- Ceph Umbrella (v21) is now a supported version of Ceph, once v21.2.0 is released by the Ceph team soon.
- RBD Quality of Service (QoS) support is configured via the `VolumeAttributesClass` using the krbd mounter with cgroup v2 `io.max` enforcement. See the [RBD QoS documentation](Documentation/Storage-Configuration/Block-Storage-RBD/rbd-qos.md) for details.
- Automated OSD replacement: An OSD deployment can be annotated to mark it for replacement. Rook will drain and destroy it by preserving its CRUSH position to later reuse it when new device will be available on the same node. All types of OSDs supported for host-based clusters, including OSDs sharing a metadata device. PVC-based OSDs are not supported for this new replacement design. See [OSD replacement design document](./design/ceph/osd-replacement.md) for details.
- The rook-ceph-cluster Helm chart can create `CephObjectStoreUser` resources via the new `cephObjectStoreUsers` value.
- The toolbox deployments from the Helm chart and the example manifests now reload the keyring and `ceph.conf` automatically after CephX key rotation, mon failover, or a config override change.
- CephCluster dashboard TLS certificates can now be configured from a same-namespace Kubernetes TLS Secret with `spec.dashboard.sslCertificateRef` when the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.
- `CephObjectStoreUser` gained settings `spec.defaultPlacement` and `spec.defaultStorageClass`, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported in `status.info`. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changing `defaultPlacement` without a `defaultStorageClass` resets the storage class to the new placement target's default.
- Default CSI driver container images are no longer set by Rook. The configmap `rook-csi-operator-image-set-configmap` is now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4xNC42IiwidXBkYXRlZEluVmVyIjoiNDAuMTQuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate-bot
changed title from chore(deps): update helm release external-secrets to v2.12.0 to chore(deps): update all-minor-patch-updates2026-10-06 19:00:33 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
10.9.6->10.10.02.11.0->2.12.0v1.20.8->v1.21.0Release Notes
argoproj/argo-helm (argo-cd)
v10.10.0Compare Source
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
What's Changed
New Contributors
Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-cd-10.9.7...argo-cd-10.10.0
v10.9.7Compare Source
A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes.
What's Changed
Full Changelog: https://github.com/argoproj/argo-helm/compare/argo-rollouts-2.43.6...argo-cd-10.9.7
external-secrets/external-secrets (external-secrets)
v2.12.0Compare Source
Image:
ghcr.io/external-secrets/external-secrets:v2.12.0Image:
ghcr.io/external-secrets/external-secrets:v2.12.0-ubiImage:
ghcr.io/external-secrets/external-secrets:v2.12.0-ubi-boringsslWhat's Changed
General
Dependencies
c5cc9c2toa4b9ec0by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/7001648f440to69a7b97in /e2e by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/704428bd5feto294b683by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/704228bd5feto294b683in /hack/api-docs by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/7045a4b9ec0to7a38d75by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/7041f2ea270to5813399by @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/69577a38d75to803a35aby @dependabot[bot] in https://github.com/external-secrets/external-secrets/pull/7079New Contributors
Full Changelog: https://github.com/external-secrets/external-secrets/compare/v2.11.0...v2.12.0
rook/rook (rook-ceph)
v1.21.0Compare Source
Upgrade Guide
To upgrade from previous versions of Rook, see the Rook upgrade guide.
Breaking Changes
vprefix (e.g.,1.21.0instead ofv1.21.0). Update any scripts or tooling that reference the chart by tag.network.connections.requireMsgr2: false. If using the helm chart, this same value is applied under thecephClusterSpecof the values..nfspool. Rook no longer automatically creates the.nfspool. A sample CephBlockPool spec is included indeploy/examples/nfs.yaml. Upgraded clusters are not impacted, as the.nfspool was already previously created.Features
VolumeAttributesClassusing the krbd mounter with cgroup v2io.maxenforcement. See the RBD QoS documentation for details.CephObjectStoreUserresources via the newcephObjectStoreUsersvalue.ceph.confautomatically after CephX key rotation, mon failover, or a config override change.spec.dashboard.sslCertificateRefwhen the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.CephObjectStoreUsergained settingsspec.defaultPlacementandspec.defaultStorageClass, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported instatus.info. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changingdefaultPlacementwithout adefaultStorageClassresets the storage class to the new placement target's default.rook-csi-operator-image-set-configmapis now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.v1.21.0Compare Source
Upgrade Guide
To upgrade from previous versions of Rook, see the Rook upgrade guide.
Breaking Changes
vprefix (e.g.,1.21.0instead ofv1.21.0). Update any scripts or tooling that reference the chart by tag.network.connections.requireMsgr2: false. If using the helm chart, this same value is applied under thecephClusterSpecof the values..nfspool. Rook no longer automatically creates the.nfspool. A sample CephBlockPool spec is included indeploy/examples/nfs.yaml. Upgraded clusters are not impacted, as the.nfspool was already previously created.Features
VolumeAttributesClassusing the krbd mounter with cgroup v2io.maxenforcement. See the RBD QoS documentation for details.CephObjectStoreUserresources via the newcephObjectStoreUsersvalue.ceph.confautomatically after CephX key rotation, mon failover, or a config override change.spec.dashboard.sslCertificateRefwhen the dashboard SSL is enabled. Rook reconciles updates to the referenced Secret and restores the default self-signed certificate when the reference is removed.CephObjectStoreUsergained settingsspec.defaultPlacementandspec.defaultStorageClass, which set the RGW user's default bucket placement target and default storage class. Both are optional and validated by RGW. The effective values are reported instatus.info. Removing either field stops Rook from managing it and leaves the last applied value in place on the RGW user, except that changingdefaultPlacementwithout adefaultStorageClassresets the storage class to the new placement target's default.rook-csi-operator-image-set-configmapis now configured with empty values, allowing the ceph-csi-operator to use its built-in defaults. Users with custom CSI images should ensure their overrides are present in the configmap after upgrade.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
812e8139bbto8b171adea7chore(deps): update helm release external-secrets to v2.12.0to chore(deps): update all-minor-patch-updates8b171adea7to5734a7098e5734a7098etoabfe3a6624