Skip to content

feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.3#4339

Open
tinfoild[bot] wants to merge 1 commit intomainfrom
renovate/rook-ceph-1.x
Open

feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.3#4339
tinfoild[bot] wants to merge 1 commit intomainfrom
renovate/rook-ceph-1.x

Conversation

@tinfoild
Copy link
Copy Markdown
Contributor

@tinfoild tinfoild bot commented Jan 20, 2026 •
edited
Loading

This PR contains the following updates:

Package Update Change OpenSSF
rook-ceph minor v1.18.7 → v1.19.3 OpenSSF Scorecard

Release Notes

rook/rook (rook-ceph)

v1.19.3

Compare Source

Improvements

Rook v1.19.3 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.19.2

Compare Source

Improvements

Rook v1.19.2 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.19.1

Compare Source

Improvements

Rook v1.19.1 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

csi: Update to ceph csi operator to v0.5 (#​17029, @​subhamkrai)
security: Remove unnecessary nodes/proxy RBAC enablement (#​16979, @​ibotty)
helm: Set default ceph image pull policy (#​16954, @​travisn)
nfs: Add CephNFS.spec.server.{image,imagePullPolicy} fields (#​16982, @​jhoblitt)
osd: Assign correct osd container in case it is not index 0 (#​16969, @​kyrbrbik)
csi: Remove obsolete automated node fencing code (#​16922, @​subhamkrai)
osd: Enable proper cancellation during OSD reconcile (#​17022, @​sp98)
csi: Allow running the csi controller plugin on host network (#​16972, @​Madhu-1)
rgw: Update ca bundle mount perms to read-all (#​16968, @​BlaineEXE)
mon: Change do-not-reconcile to be more granular for individual mons (#​16939, @​travisn)
build(deps): Bump the k8s-dependencies group with 6 updates (#​16846, @​dependabot[bot])
doc: add csi-operator example in configuration doc (#​17001, @​subhamkrai)

v1.19.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes

  • The supported Kubernetes versions are v1.30 - v1.35
  • The minimum supported Ceph version is v19.2.0. Rook v1.18 clusters running Ceph v18 must upgrade
    to Ceph v19.2.0 or higher before upgrading Rook.
  • The behavior of the activeStandby property in the CephFilesystem CRD has changed. When set to false, the standby MDS daemon deployment will be scaled down and removed, rather than only disabling the standby cache while the daemon remains running.
  • Helm: The rook-ceph-cluster chart has changed where the Ceph image is defined, to allow separate settings for the repository and tag. For more details, see the Rook upgrade guide.
  • In external mode, when users provide a Ceph admin keyring to Rook, Rook will no longer create CSI Ceph clients automatically. This approach will provide more consistency to configure external mode clusters via the same external Python script.

Features

  • Experimental: NVMe over Fabrics (NVMe-oF) allows RBD volumes to be exposed and accessed via the NVMe/TCP protocol. This enables both Kubernetes pods within the cluster and external clients outside the cluster to connect to Ceph block storage using standard NVMe-oF initiators, providing high-performance block storage access over the network. See the NVMe-oF Configuration Guide to get started.
  • CephCSI v3.16 Integration:
    • NVMe-oF CSI driver for provisioning and mounting volumes over the NVMe over Fabrics protocol
    • Improved fencing for RBD and CephFS volumes during node failure
    • Block volume usage statistics
    • Configurable block encryption cipher
  • Experimental: Allow concurrent reconciles of the CephCluster CR when there multiple clusters being managed by the same Rook operator. Concurrency is enabled by increasing the operator setting ROOK_RECONCILE_CONCURRENT_CLUSTERS to a value greater than 1.
  • Improved logging with namespaced names for the controllers for more consistency in troubleshooting the rook operator log.

v1.18.10

Compare Source

Improvements

Rook v1.18.10 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.18.9

Compare Source

Improvements

Rook v1.18.9 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

v1.18.8

Compare Source

Improvements

Rook v1.18.8 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@cloudflare-workers-and-pages
Copy link
Copy Markdown

cloudflare-workers-and-pages bot commented Jan 20, 2026 •
edited
Loading

Deploying jjgadgets-biohazard with  Cloudflare Pages  Cloudflare Pages

Latest commit: 3d3d95e
Status: ✅  Deploy successful!
Preview URL: https://314ce5fb.jjgadgets-biohazard.pages.dev
Branch Preview URL: https://renovate-rook-ceph-1-x.jjgadgets-biohazard.pages.dev

View logs

@tinfoild
Copy link
Copy Markdown
Contributor Author

tinfoild bot commented Jan 20, 2026 •
edited
Loading

kube/helmrelease/out00

--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-cephfs-ctrlplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-cephfs-ctrlplugin-sa

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-cephfs-ctrlplugin-sa
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-cephfs-nodeplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-cephfs-nodeplugin-sa

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-cephfs-nodeplugin-sa
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-controller-manager

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-controller-manager

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-controller-manager
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-nfs-ctrlplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-nfs-ctrlplugin-sa

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-nfs-ctrlplugin-sa
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-nfs-nodeplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-nfs-nodeplugin-sa

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-nfs-nodeplugin-sa
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-rbd-ctrlplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-rbd-ctrlplugin-sa

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-rbd-ctrlplugin-sa
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-rbd-nodeplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/ceph-csi-rbd-nodeplugin-sa

@@ -1,10 +1,11 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: ceph-csi-rbd-nodeplugin-sa
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: rook-ceph/rook-ceph ConfigMap: rook-ceph/rook-ceph-operator-config

+++ HelmRelease: rook-ceph/rook-ceph ConfigMap: rook-ceph/rook-ceph-operator-config

@@ -35,21 +35,21 @@

   CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
   CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
   CSI_RBD_FSGROUPPOLICY: File
   CSI_CEPHFS_FSGROUPPOLICY: File
   CSI_NFS_FSGROUPPOLICY: File
   CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=prefer-secure
-  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.15.0
-  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0
-  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v5.2.0
-  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.2.1
-  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.8.1
-  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v1.13.2
+  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.1
+  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.0
+  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.0.0
+  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0
+  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.10.0
+  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.0.0
   ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
   CSI_ENABLE_CSIADDONS: 'true'
-  ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.13.0
+  ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.14.0
   CSI_ENABLE_CROSS_NAMESPACE_VOLUME_DATA_SOURCE: 'false'
   CSI_ENABLE_TOPOLOGY: 'false'
   ROOK_CSI_ENABLE_NFS: 'false'
   CSI_FORCE_CEPHFS_KERNEL_CLIENT: 'true'
   CSI_GRPC_TIMEOUT_SECONDS: '150'
   CSI_PROVISIONER_REPLICAS: '2'
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-cephfs-ctrlplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-cephfs-ctrlplugin-cr

@@ -196,7 +196,15 @@

 - apiGroups:
   - authentication.k8s.io
   resources:
   - tokenreviews
   verbs:
   - create
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattributesclasses
+  verbs:
+  - get
+  - list
+  - watch
 
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-cephfs-nodeplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-cephfs-nodeplugin-cr

@@ -17,12 +17,14 @@

 - apiGroups:
   - ''
   resources:
   - secrets
   verbs:
   - get
+  - list
+  - watch
 - apiGroups:
   - ''
   resources:
   - configmaps
   verbs:
   - get
@@ -52,7 +54,13 @@

   - ''
   resources:
   - persistentvolumes
   - persistentvolumeclaims
   verbs:
   - get
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
 
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-nfs-ctrlplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-nfs-ctrlplugin-cr

@@ -132,7 +132,15 @@

 - apiGroups:
   - storage.k8s.io
   resources:
   - volumeattachments/status
   verbs:
   - patch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattributesclasses
+  verbs:
+  - get
+  - list
+  - watch
 
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-rbd-ctrlplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-rbd-ctrlplugin-cr

@@ -225,7 +225,15 @@

   - cbt.storage.k8s.io
   resources:
   - snapshotmetadataservices
   verbs:
   - get
   - list
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattributesclasses
+  verbs:
+  - get
+  - list
+  - watch
 
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-rbd-nodeplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-rbd-nodeplugin-cr

@@ -12,12 +12,13 @@

   - ''
   resources:
   - secrets
   verbs:
   - get
   - list
+  - watch
 - apiGroups:
   - ''
   resources:
   - persistentvolumes
   verbs:
   - get
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

@@ -14,13 +14,12 @@

 rules:
 - apiGroups:
   - ''
   resources:
   - pods
   - nodes
-  - nodes/proxy
   - secrets
   - configmaps
   verbs:
   - get
   - list
   - watch
@@ -41,12 +40,20 @@

   - watch
   - patch
   - create
   - update
   - delete
 - apiGroups:
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - update
+- apiGroups:
   - storage.k8s.io
   resources:
   - storageclasses
   verbs:
   - get
   - list
@@ -69,12 +76,13 @@

   resources:
   - cephclients
   - cephclusters
   - cephblockpools
   - cephfilesystems
   - cephnfses
+  - cephnvmeofgateways
   - cephobjectstores
   - cephobjectstoreusers
   - cephobjectrealms
   - cephobjectzonegroups
   - cephobjectzones
   - cephbuckettopics
@@ -94,12 +102,13 @@

   resources:
   - cephclients/status
   - cephclusters/status
   - cephblockpools/status
   - cephfilesystems/status
   - cephnfses/status
+  - cephnvmeofgateways/status
   - cephobjectstores/status
   - cephobjectstoreusers/status
   - cephobjectrealms/status
   - cephobjectzonegroups/status
   - cephobjectzones/status
   - cephbuckettopics/status
@@ -115,12 +124,13 @@

   resources:
   - cephclients/finalizers
   - cephclusters/finalizers
   - cephblockpools/finalizers
   - cephfilesystems/finalizers
   - cephnfses/finalizers
+  - cephnvmeofgateways/finalizers
   - cephobjectstores/finalizers
   - cephobjectstoreusers/finalizers
   - cephobjectrealms/finalizers
   - cephobjectzonegroups/finalizers
   - cephobjectzones/finalizers
   - cephbuckettopics/finalizers
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-mgr-cluster

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-mgr-cluster

@@ -14,13 +14,12 @@

 rules:
 - apiGroups:
   - ''
   resources:
   - configmaps
   - nodes
-  - nodes/proxy
   - persistentvolumes
   verbs:
   - get
   - list
   - watch
 - apiGroups:
@@ -31,12 +30,20 @@

   - create
   - patch
   - list
   - get
   - watch
 - apiGroups:
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - update
+- apiGroups:
   - storage.k8s.io
   resources:
   - storageclasses
   verbs:
   - get
   - list
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/cephfs-external-provisioner-runner

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/cephfs-external-provisioner-runner

@@ -78,12 +78,20 @@

   verbs:
   - list
   - watch
   - create
   - update
   - patch
+- apiGroups:
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - update
 - apiGroups:
   - storage.k8s.io
   resources:
   - volumeattachments
   verbs:
   - get
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rbd-external-provisioner-runner

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rbd-external-provisioner-runner

@@ -57,12 +57,20 @@

   - list
   - watch
   - create
   - update
   - patch
 - apiGroups:
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - update
+- apiGroups:
   - storage.k8s.io
   resources:
   - volumeattachments
   verbs:
   - get
   - list
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/objectstorage-provisioner-role

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/objectstorage-provisioner-role

@@ -44,7 +44,15 @@

   - events
   verbs:
   - get
   - delete
   - update
   - create
+- apiGroups:
+  - events.k8s.io
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+  - update
 
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-cephfs-ctrlplugin-r

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-cephfs-ctrlplugin-r

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: ceph-csi-cephfs-ctrlplugin-r
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-cephfs-nodeplugin-r

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-cephfs-nodeplugin-r

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: ceph-csi-cephfs-nodeplugin-r
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-leader-election-role

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-leader-election-role

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: ceph-csi-leader-election-role
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-rbd-ctrlplugin-r

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-rbd-ctrlplugin-r

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: ceph-csi-rbd-ctrlplugin-r
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-rbd-nodeplugin-r

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-rbd-nodeplugin-r

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: ceph-csi-rbd-nodeplugin-r
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/rook-ceph-mgr

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/rook-ceph-mgr

@@ -39,15 +39,17 @@

   - delete
 - apiGroups:
   - ceph.rook.io
   resources:
   - cephclients
   - cephclusters
+  - cephclusters/finalizers
   - cephblockpools
   - cephfilesystems
   - cephnfses
+  - cephnvmeofgateways
   - cephobjectstores
   - cephobjectstoreusers
   - cephobjectrealms
   - cephobjectzonegroups
   - cephobjectzones
   - cephbuckettopics
--- HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-cephfs-ctrlplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-cephfs-ctrlplugin-rb

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: ceph-csi-cephfs-ctrlplugin-rb
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-cephfs-nodeplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-cephfs-nodeplugin-rb

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: ceph-csi-cephfs-nodeplugin-rb
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-leader-election-rolebinding

+++ HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-leader-election-rolebinding

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: ceph-csi-leader-election-rolebinding
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-rbd-ctrlplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-rbd-ctrlplugin-rb

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: ceph-csi-rbd-ctrlplugin-rb
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-rbd-nodeplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-rbd-nodeplugin-rb

@@ -1,11 +1,12 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: ceph-csi-rbd-nodeplugin-rb
+  namespace: rook-ceph
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
--- HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/ceph-csi-controller-manager

+++ HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/ceph-csi-controller-manager

@@ -1,11 +1,12 @@

 ---
 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: ceph-csi-controller-manager
+  namespace: rook-ceph
   labels:
     control-plane: controller-manager
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 spec:
@@ -37,13 +38,13 @@

         - name: CSI_SERVICE_ACCOUNT_PREFIX
           value: ceph-csi-
         - name: WATCH_NAMESPACE
           value: ''
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: quay.io/cephcsi/ceph-csi-operator:v0.4.1
+        image: quay.io/cephcsi/ceph-csi-operator:v0.5.0
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
           periodSeconds: 20
--- HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

+++ HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

@@ -28,13 +28,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: docker.io/rook/ceph:v1.18.7
+        image: docker.io/rook/ceph:v1.19.2
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities:
@@ -48,12 +48,14 @@

           name: rook-config
         - mountPath: /etc/ceph
           name: default-config-dir
         env:
         - name: ROOK_CURRENT_NAMESPACE_ONLY
           value: 'false'
+        - name: ROOK_RECONCILE_CONCURRENT_CLUSTERS
+          value: '1'
         - name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
           value: 'false'
         - name: ROOK_DISABLE_DEVICE_HOTPLUG
           value: 'false'
         - name: ROOK_DISCOVER_DEVICES_INTERVAL
           value: 60m
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-nvmeof

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-nvmeof

@@ -0,0 +1,15 @@

+---
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: rook-ceph-nvmeof
+  namespace: rook-ceph
+  labels:
+    operator: rook
+    storage-backend: ceph
+    app.kubernetes.io/name: rook-ceph
+    app.kubernetes.io/instance: rook-ceph
+    app.kubernetes.io/part-of: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/created-by: helm
+

@tinfoild
Copy link
Copy Markdown
Contributor Author

tinfoild bot commented Jan 20, 2026

kube/helmrelease/out00

--- HelmRelease: rook-ceph/rook-ceph ConfigMap: rook-ceph/rook-ceph-operator-config

+++ HelmRelease: rook-ceph/rook-ceph ConfigMap: rook-ceph/rook-ceph-operator-config

@@ -35,21 +35,21 @@

   CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
   CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
   CSI_RBD_FSGROUPPOLICY: File
   CSI_CEPHFS_FSGROUPPOLICY: File
   CSI_NFS_FSGROUPPOLICY: File
   CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=prefer-secure
-  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.15.0
-  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0
-  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v5.2.0
-  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.2.1
-  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.8.1
-  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v1.13.2
+  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.0
+  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.0
+  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.0.0
+  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0
+  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.10.0
+  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.0.0
   ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
   CSI_ENABLE_CSIADDONS: 'true'
-  ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.13.0
+  ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.14.0
   CSI_ENABLE_CROSS_NAMESPACE_VOLUME_DATA_SOURCE: 'false'
   CSI_ENABLE_TOPOLOGY: 'false'
   ROOK_CSI_ENABLE_NFS: 'false'
   CSI_FORCE_CEPHFS_KERNEL_CLIENT: 'true'
   CSI_GRPC_TIMEOUT_SECONDS: '150'
   CSI_PROVISIONER_REPLICAS: '2'
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

@@ -69,12 +69,13 @@

   resources:
   - cephclients
   - cephclusters
   - cephblockpools
   - cephfilesystems
   - cephnfses
+  - cephnvmeofgateways
   - cephobjectstores
   - cephobjectstoreusers
   - cephobjectrealms
   - cephobjectzonegroups
   - cephobjectzones
   - cephbuckettopics
@@ -94,12 +95,13 @@

   resources:
   - cephclients/status
   - cephclusters/status
   - cephblockpools/status
   - cephfilesystems/status
   - cephnfses/status
+  - cephnvmeofgateways/status
   - cephobjectstores/status
   - cephobjectstoreusers/status
   - cephobjectrealms/status
   - cephobjectzonegroups/status
   - cephobjectzones/status
   - cephbuckettopics/status
@@ -115,12 +117,13 @@

   resources:
   - cephclients/finalizers
   - cephclusters/finalizers
   - cephblockpools/finalizers
   - cephfilesystems/finalizers
   - cephnfses/finalizers
+  - cephnvmeofgateways/finalizers
   - cephobjectstores/finalizers
   - cephobjectstoreusers/finalizers
   - cephobjectrealms/finalizers
   - cephobjectzonegroups/finalizers
   - cephobjectzones/finalizers
   - cephbuckettopics/finalizers
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/rook-ceph-mgr

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/rook-ceph-mgr

@@ -39,15 +39,17 @@

   - delete
 - apiGroups:
   - ceph.rook.io
   resources:
   - cephclients
   - cephclusters
+  - cephclusters/finalizers
   - cephblockpools
   - cephfilesystems
   - cephnfses
+  - cephnvmeofgateways
   - cephobjectstores
   - cephobjectstoreusers
   - cephobjectrealms
   - cephobjectzonegroups
   - cephobjectzones
   - cephbuckettopics
--- HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

+++ HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

@@ -28,13 +28,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: docker.io/rook/ceph:v1.18.7
+        image: docker.io/rook/ceph:v1.19.0
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities:
@@ -48,12 +48,14 @@

           name: rook-config
         - mountPath: /etc/ceph
           name: default-config-dir
         env:
         - name: ROOK_CURRENT_NAMESPACE_ONLY
           value: 'false'
+        - name: ROOK_RECONCILE_CONCURRENT_CLUSTERS
+          value: '1'
         - name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
           value: 'false'
         - name: ROOK_DISABLE_DEVICE_HOTPLUG
           value: 'false'
         - name: ROOK_DISCOVER_DEVICES_INTERVAL
           value: 60m
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-nvmeof

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-nvmeof

@@ -0,0 +1,15 @@

+---
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: rook-ceph-nvmeof
+  namespace: rook-ceph
+  labels:
+    operator: rook
+    storage-backend: ceph
+    app.kubernetes.io/name: rook-ceph
+    app.kubernetes.io/instance: rook-ceph
+    app.kubernetes.io/part-of: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/created-by: helm
+

@tinfoild tinfoild bot force-pushed the renovate/rook-ceph-1.x branch from 216133f to 06c4811 Compare January 23, 2026 13:27
@tinfoild
Copy link
Copy Markdown
Contributor Author

tinfoild bot commented Jan 23, 2026 •
edited
Loading

kube/kustomization/out00

--- kube/deploy/core/storage/rook-ceph/app Kustomization: flux-system/1-core-storage-rook-ceph-app HelmRelease: rook-ceph/rook-ceph

+++ kube/deploy/core/storage/rook-ceph/app Kustomization: flux-system/1-core-storage-rook-ceph-app HelmRelease: rook-ceph/rook-ceph

@@ -12,13 +12,13 @@

     spec:
       chart: rook-ceph
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
         namespace: flux-system
-      version: v1.18.7
+      version: v1.19.1
   driftDetection:
     ignore:
     - paths:
       - /spec/replicas
     mode: warn
   install:

@tinfoild tinfoild bot force-pushed the renovate/rook-ceph-1.x branch from 06c4811 to 3633eac Compare January 27, 2026 02:57
@tinfoild tinfoild bot changed the title feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.0 feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.1 Feb 5, 2026
@tinfoild tinfoild bot force-pushed the renovate/rook-ceph-1.x branch from 3633eac to 15f273e Compare February 5, 2026 22:12
@tinfoild tinfoild bot changed the title feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.1 feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.2 Feb 24, 2026
@tinfoild tinfoild bot force-pushed the renovate/rook-ceph-1.x branch from 15f273e to 223bdc3 Compare February 24, 2026 19:26
@tinfoild tinfoild bot force-pushed the renovate/rook-ceph-1.x branch from 223bdc3 to adc17e2 Compare March 23, 2026 03:13
@tinfoild tinfoild bot changed the title feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.2 feat(helm/rook-ceph): update v1.18.7 ➼ v1.19.3 Mar 24, 2026
@tinfoild tinfoild bot force-pushed the renovate/rook-ceph-1.x branch from adc17e2 to 3d3d95e Compare March 24, 2026 22:17
@JJGadgets JJGadgets added wontfix This will not be worked on procrastination and removed wontfix This will not be worked on labels Mar 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

kube/deploy/core procrastination renovate/datasource/helm renovate/type/minor

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JJGadgets