Syncing latest changes from upstream devel for ceph-csi - #856
Merged
Merged
Conversation
CI jobs fail deploying Rook, as Ceph Tentacle 20.2.4 uses new Ceph key formats. See-also: https://github.com/rook/rook/releases/tag/v1.19.9 Signed-off-by: Niels de Vos <ndevos@ibm.com>
With the latest Ceph Tentacle release, the ceph-release RPM has a different version. In order to make updating the version easier in the future, place it in build.env. Signed-off-by: Niels de Vos <ndevos@ibm.com>
Rook uses the Ceph-CSI Operator CRDs, so Rook should be deployed after Ceph-CSI Operator. Signed-off-by: Niels de Vos <ndevos@ibm.com>
Without building inside the container, all dependencies need to available on the system where building is done. Often the dependencies are just not available. During the e2e.test build in the CI, there are errors about librados not being available. This isn't fatal, but there is no need for these reports. Signed-off-by: Niels de Vos <ndevos@ibm.com>
The CephCluster CR that Rook configures has HEALTH_WARN state. This is
caused by the keys that are created for the Ceph-CSI clients. CephFS and
RBD kernel clients < Linux kernel 7.0 do not support the new aes256k key
type.
Ceph warns about it like this:
AUTH_INSECURE_CLIENT_KEY_TYPE:
message: 4 auth client entities with insecure key types
severity: HEALTH_WARN
AUTH_INSECURE_KEYS_ALLOWED:
message: Monitors are configured to allow auth using insecure key types
severity: HEALTH_WARN
AUTH_INSECURE_KEYS_CREATABLE:
message: Monitors are configured to allow creation of insecure key types
severity: HEALTH_WARN
Signed-off-by: Niels de Vos <ndevos@ibm.com>
The Linux kernel where the e2e CI suite runs does not support the newer CephX aes256k format yet. The keys need to be created with the legacy aes type for older kernels. Signed-off-by: Niels de Vos <ndevos@ibm.com>
The client.admin key with new CephX support can not be used for current Linux kernel clients. The new client.csiadmin user has a AES key-type that is suitable. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: Praveen M <m.praveen@ibm.com> Signed-off-by: Niels de Vos <ndevos@ibm.com>
Update static PV tests to use client.csiadmin instead of client.admin with all required capabilities (mon, mgr, osd, mds) for CephFS operations. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: Praveen M <m.praveen@ibm.com>
The NVMe-oF gateway was using client.admin with the new CephX key format which has been incompatible as the nvme-of gateway was not updated with a new Ceph release yet. Update to use client.csiadmin with AES key-type for compatibility. Changes: - Update gateway config to use csiadmin instead of admin - Create csiadmin key with AES key-type in init container - Use admin keyring for gateway configuration commands Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> Signed-off-by: Praveen M <m.praveen@ibm.com>
Update README.md and upgrade docs to reference v3.17.1 release. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Praveen M <m.praveen@ibm.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…-devel Signed-off-by: DF Build Team <df-build-team@redhat.com>
Madhu-1
approved these changes
Aug 26, 2026
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: df-build-team, Madhu-1 The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PR containing the latest commits from upstream devel branch