fix(container): update rook-ceph group (v1.19.3 → v1.19.6) by bot-akira[bot] · Pull Request #3266 · axeII/home-ops

bot-akira · 2026-04-14T21:42:35Z

This PR contains the following updates:

Package	Update	Change
ghcr.io/rook/rook-ceph	patch	`v1.19.3` → `v1.19.6`
ghcr.io/rook/rook-ceph-cluster	patch	`v1.19.3` → `v1.19.6`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

rook/rook (ghcr.io/rook/rook-ceph)

`v1.19.6`

Compare Source

Improvements

Rook v1.19.6 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

helm: Update prometheus rules from upstream ceph/ceph; add cluster label to all scraped metrics (#17544, @jhoblitt)
osd: Honor per-device deviceClass in raw-mode prepare and reconcile (#17407, @arttor)
mgr: Retry self-signed cert creation on wrapped context deadline errors (#17472, @texasich)
mon: Check node existence on every health check iteration (#17484, @taraasrita10)
core: Add default ResourceRequirements for cmd-reporter (#17464, @jhoblitt)
osd: Detect encryption label from dmcrypt path (#17453, @sp98)
exporter: Set correct DNSPolicy for rook-ceph-exporter (#17451, @rohan47)
doc: Add CSI operator resource cleanup steps to teardown guide (#17286, @lumir-sliva)
build: Bump golang.org/x/net to fix govulncheck ci failure (#17504, @OdedViner)
build: Bump github.com/moby/spdystream from 0.5.0 to 0.5.1 (#17364, @dependabot[bot])
ci: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 (#17582, @OdedViner)
ci: bump and/or pin github action versions (#17577, @jhoblitt)

`v1.19.5`

Compare Source

Improvements

Rook v1.19.5 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

security: Grant scc to rook-ceph-nvmeof service account (#17432, @OdedViner)
core: Remove newlines from liveness probe scripts (#17420, @sp98)
csi: Add helm ownership annotation to csi resources (#17289, @subhamkrai)
osd: Fix CRUSH device class not applied during OSD re-discovery (#17228, @ormandj)
mds: Fix incorrect behaviour for CephFS when no active standby (#17373, @degorenko)
doc: Fix out of date references to default PgHealthyRegex (#17376, @elias-dbx)
build(deps): Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 (#17300, @dependabot[bot])
mon: Prevent mon drains more reliably when mons are down (#17359, @travisn)
helm: Set ROOK_UNREACHABLE_NODE_TOLERATION_SECONDS from chart values (#17352, @taraasrita10)
csi: Swapped provisionerPriorityClassName with pluginPriorityClassName (#17361, @sonnysasaka)
csi: Add 'CSIMetadataRadosNamespace' parameter to CephFilesystemSubVolumeGroup (#17351, @ein-stein-chen)

`v1.19.4`

Compare Source

Improvements

Rook v1.19.4 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

object: Fix CephObjectStoreUser support for setting Capabilities (#17149, @hjk068)
mgr: Add missing RBAC role for ceph-mgr in secondary clusters (#17324, @gonzolino)
deploy/examples: Add standalone cleanup-job.yaml (#17262, @mateenali66)
osd: Add logging when detecting osd versions (#17320, @travisn)
build: Update base image for Rook operator to v20.2.1 (#16836, @subhamkrai)
cosi: Update default COSI sidecar image version (#17204, @takirala)
ceph: Add labels support to CephObjectStore RGW service (#17238, @majiayu000)
osd: Zap disks for forceful OSD installation (#17225, @sp98)
helm: Update csi operator to v0.6.0 (#17244, @travisn)

Configuration

📅 Schedule: (in timezone Europe/Berlin)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

bot-akira · 2026-04-14T21:43:11Z

--- kubernetes/apps/rook-ceph/rook-ceph/app Kustomization: rook-ceph/rook-ceph OCIRepository: rook-ceph/rook-ceph

+++ kubernetes/apps/rook-ceph/rook-ceph/app Kustomization: rook-ceph/rook-ceph OCIRepository: rook-ceph/rook-ceph

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: v1.19.3
+    tag: v1.19.6
   url: oci://ghcr.io/rook/rook-ceph
 
--- kubernetes/apps/rook-ceph/rook-ceph/cluster Kustomization: rook-ceph/rook-ceph-cluster OCIRepository: rook-ceph/rook-ceph-cluster

+++ kubernetes/apps/rook-ceph/rook-ceph/cluster Kustomization: rook-ceph/rook-ceph-cluster OCIRepository: rook-ceph/rook-ceph-cluster

@@ -11,9 +11,9 @@

 spec:
   interval: 15m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: v1.19.3
+    tag: v1.19.6
   url: oci://ghcr.io/rook/rook-ceph-cluster

bot-akira · 2026-04-14T21:43:16Z

--- HelmRelease: rook-ceph/rook-ceph-cluster CephCluster: rook-ceph/rook-ceph

+++ HelmRelease: rook-ceph/rook-ceph-cluster CephCluster: rook-ceph/rook-ceph

@@ -98,12 +98,18 @@

     cleanup:
       limits:
         memory: 1Gi
       requests:
         cpu: 200m
         memory: 128Mi
+    cmd-reporter:
+      limits:
+        memory: 1Gi
+      requests:
+        cpu: 500m
+        memory: 100Mi
     crashcollector:
       limits:
         memory: 64Mi
       requests:
         cpu: 50m
         memory: 16Mi
--- HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/ceph-csi-controller-manager

+++ HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/ceph-csi-controller-manager

@@ -38,13 +38,13 @@

         - name: CSI_SERVICE_ACCOUNT_PREFIX
           value: ceph-csi-
         - name: WATCH_NAMESPACE
           value: ''
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: quay.io/cephcsi/ceph-csi-operator:v0.5.0
+        image: quay.io/cephcsi/ceph-csi-operator:v0.6.0
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
           periodSeconds: 20
--- HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator

+++ HelmRelease: rook-ceph/rook-ceph-operator Deployment: rook-ceph/rook-ceph-operator

@@ -28,13 +28,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: docker.io/rook/ceph:v1.19.3
+        image: docker.io/rook/ceph:v1.19.6
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities:
@@ -56,12 +56,14 @@

         - name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
           value: 'false'
         - name: ROOK_DISABLE_DEVICE_HOTPLUG
           value: 'false'
         - name: ROOK_DISCOVER_DEVICES_INTERVAL
           value: 60m
+        - name: ROOK_UNREACHABLE_NODE_TOLERATION_SECONDS
+          value: '5'
         - name: NODE_NAME
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
         - name: POD_NAME
           valueFrom:
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nvmeof-ctrlplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nvmeof-ctrlplugin-sa

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-sa
+  namespace: rook-ceph
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nvmeof-nodeplugin-sa

+++ HelmRelease: rook-ceph/rook-ceph-operator ServiceAccount: rook-ceph/ceph-csi-nvmeof-nodeplugin-sa

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-sa
+  namespace: rook-ceph
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-nvmeof-ctrlplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-nvmeof-ctrlplugin-cr

@@ -0,0 +1,125 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-cr
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - delete
+  - patch
+  - update
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumeclaims
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - events
+  verbs:
+  - list
+  - watch
+  - create
+  - update
+  - patch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments
+  verbs:
+  - get
+  - list
+  - watch
+  - patch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments/status
+  verbs:
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - csinodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumeclaims/status
+  verbs:
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-nvmeof-nodeplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRole: rook-ceph/ceph-csi-nvmeof-nodeplugin-cr

@@ -0,0 +1,78 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-cr
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
+- apiGroups:
+  - ''
+  resources:
+  - nodes
+  verbs:
+  - get
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - ''
+  resources:
+  - events
+  verbs:
+  - list
+  - watch
+  - create
+  - update
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumeclaims
+  verbs:
+  - get
+
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRoleBinding: rook-ceph/ceph-csi-nvmeof-ctrlplugin-crb

+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRoleBinding: rook-ceph/ceph-csi-nvmeof-ctrlplugin-crb

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-crb
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ceph-csi-nvmeof-ctrlplugin-cr
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-ctrlplugin-sa
+  namespace: rook-ceph
+
--- HelmRelease: rook-ceph/rook-ceph-operator ClusterRoleBinding: rook-ceph/ceph-csi-nvmeof-nodeplugin-crb

+++ HelmRelease: rook-ceph/rook-ceph-operator ClusterRoleBinding: rook-ceph/ceph-csi-nvmeof-nodeplugin-crb

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-crb
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ceph-csi-nvmeof-nodeplugin-cr
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-nodeplugin-sa
+  namespace: rook-ceph
+
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-nvmeof-ctrlplugin-r

+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-nvmeof-ctrlplugin-r

@@ -0,0 +1,53 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-r
+  namespace: rook-ceph
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - watch
+  - list
+  - delete
+  - update
+  - create
+- apiGroups:
+  - csiaddons.openshift.io
+  resources:
+  - csiaddonsnodes
+  verbs:
+  - get
+  - watch
+  - list
+  - create
+  - update
+  - delete
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - deployments/finalizers
+  - daemonsets/finalizers
+  verbs:
+  - update
+
--- HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-nvmeof-nodeplugin-r

+++ HelmRelease: rook-ceph/rook-ceph-operator Role: rook-ceph/ceph-csi-nvmeof-nodeplugin-r

@@ -0,0 +1,42 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-r
+  namespace: rook-ceph
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - csiaddons.openshift.io
+  resources:
+  - csiaddonsnodes
+  verbs:
+  - get
+  - watch
+  - list
+  - create
+  - update
+  - delete
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - deployments/finalizers
+  - daemonsets/finalizers
+  verbs:
+  - update
+
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-nvmeof-ctrlplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-nvmeof-ctrlplugin-rb

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-rb
+  namespace: rook-ceph
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ceph-csi-nvmeof-ctrlplugin-r
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-ctrlplugin-sa
+  namespace: rook-ceph
+
--- HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-nvmeof-nodeplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph-operator RoleBinding: rook-ceph/ceph-csi-nvmeof-nodeplugin-rb

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-rb
+  namespace: rook-ceph
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ceph-csi-nvmeof-nodeplugin-r
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-nodeplugin-sa
+  namespace: rook-ceph
+

Signed-off-by: bot-akira[bot] <159718293+bot-akira[bot]@users.noreply.github.com>

bot-akira Bot added renovate/container type/patch labels Apr 14, 2026

github-actions Bot added the area/kubernetes label Apr 14, 2026

bot-akira Bot force-pushed the renovate/rook-ceph branch from 582e315 to 3f011ea Compare April 28, 2026 20:58

bot-akira Bot changed the title ~~fix(container): update rook-ceph group (v1.19.3 → v1.19.4)~~ fix(container): update rook-ceph group (v1.19.3 → v1.19.5) Apr 28, 2026

fix(container): update rook-ceph group (v1.19.3 → v1.19.6)

ba0d2e0

Signed-off-by: bot-akira[bot] <159718293+bot-akira[bot]@users.noreply.github.com>

bot-akira Bot force-pushed the renovate/rook-ceph branch from 3f011ea to ba0d2e0 Compare May 27, 2026 19:13

bot-akira Bot changed the title ~~fix(container): update rook-ceph group (v1.19.3 → v1.19.5)~~ fix(container): update rook-ceph group (v1.19.3 → v1.19.6) May 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(container): update rook-ceph group (v1.19.3 → v1.19.6)#3266

fix(container): update rook-ceph group (v1.19.3 → v1.19.6)#3266
bot-akira[bot] wants to merge 1 commit into
mainfrom
renovate/rook-ceph

bot-akira Bot commented Apr 14, 2026 •

edited

Loading

Uh oh!

bot-akira Bot commented Apr 14, 2026 •

edited

Loading

Uh oh!

bot-akira Bot commented Apr 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

bot-akira Bot commented Apr 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.19.6

Improvements

v1.19.5

Improvements

v1.19.4

Improvements

Configuration

Uh oh!

bot-akira Bot commented Apr 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

bot-akira Bot commented Apr 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

bot-akira Bot commented Apr 14, 2026 •

edited

Loading

`v1.19.6`

`v1.19.5`

`v1.19.4`

bot-akira Bot commented Apr 14, 2026 •

edited

Loading

bot-akira Bot commented Apr 14, 2026 •

edited

Loading