fix(container): update rook-ceph group ( v1.18.2 ➔ v1.18.4 )

[unsc-oni-ancilla]

This PR contains the following updates:

Package	Update	Change
ghcr.io/rook/rook-ceph	patch	v1.18.2 -> v1.18.4
ghcr.io/rook/rook-ceph-cluster	patch	v1.18.2 -> v1.18.4

---

Release Notes

rook/rook (ghcr.io/rook/rook-ceph)

v1.18.4

Compare Source

Improvements

Rook v1.18.4 is a patch release with changes only in the rook-ceph-cluster helm chart. If not affected by #​16567 in v1.18.3, no need to update to this release.

• helm: Revert ceph image tag change (#​16567, @​travisn)

v1.18.3

Compare Source

Improvements

Rook v1.18.3 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• helm: Allow specifying the image tag and repository separately (#​16512, @​travisn)
• csi: Allow overriding volume settings in csi operator for nixos (#​16395, @​travisn)
• osd: Exclude down OSDs from main PDB when cluster is clean (#​16112, @​elias-dbx)
• build: Add csi operator image to images.txt (#​16563, @​travisn)
• csi: Update csi-operator version to v0.4.1 (#​16560, @​Madhu-1)
• rbdmirror: Fix mirroring monitoring settings for rados namespaces (#​16520, @​parth-gr)
• namespace: Blocklist ip:nonce in cleanup job (#​16532, @​Madhu-1)
• osd: Clean encrypted disks from other clusters (#​16488, @​sp98)
• csi: Avoid port conflict by removing liveness probe from the csi-operator (#​16516, @​Madhu-1)
• csi: Add labels to the csi-operator driver pod (#​16514, @​subhamkrai)
• helm: Refactoring to modernize templates (#​16494, @​consideRatio)
• osd: Updated blocking pdbs when drained node comes back online (#​16506, @​sp98)
• core: Use latest operator context to avoid reference to canceled context (#​16493, @​sp98)
• ci: Update latest k8s version to v1.34 (#​16418, @​obnoxxx)
• external: Fix ipv6 monitoring endpoint reconcile (#​16468, @​parth-gr)
• pool: Allow enableCrushUpdates to be nil (#​16478, @​travisn)
• mon: Fix mon health nil pointer exception with mons on PVC (#​16484, @​sp98)
• helm: Refactoring of rook-ceph's configmap to be easier to read and maintain (#​16457, @​consideRatio)
• nfs: Rotate nfs cephx key (#​16456, @​subhamkrai)
• external: Fixing rbd provisioner secret in import-external-cluster script (#​16474, @​rubentsirunyan)
• core: Add CRD Phase column to cephor, cephnfs, cephbn (#​16541 #​16542 #​16543, @​jhoblitt)
• object: Add status.{phase,observedGeneration} to cephbn (#​16499, @​jhoblitt)
• core: fix ObjectZoneSpec.ZoneGroup and ObjectZoneGroupSpec.Realm field descriptions (#​16496, @​jhoblitt)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[unsc-oni-ancilla]

--- HelmRelease: rook-ceph/rook-ceph-cluster StorageClass: rook-ceph/ceph-block

+++ HelmRelease: rook-ceph/rook-ceph-cluster StorageClass: rook-ceph/ceph-block

@@ -1,9 +1,9 @@

 ---
+kind: StorageClass
 apiVersion: storage.k8s.io/v1
-kind: StorageClass
 metadata:
   name: ceph-block
   annotations:
     storageclass.kubernetes.io/is-default-class: 'true'
 provisioner: rook-ceph.rbd.csi.ceph.com
 parameters:
--- HelmRelease: rook-ceph/rook-ceph-cluster StorageClass: rook-ceph/ceph-filesystem

+++ HelmRelease: rook-ceph/rook-ceph-cluster StorageClass: rook-ceph/ceph-filesystem

@@ -1,9 +1,9 @@

 ---
+kind: StorageClass
 apiVersion: storage.k8s.io/v1
-kind: StorageClass
 metadata:
   name: ceph-filesystem
   annotations:
     storageclass.kubernetes.io/is-default-class: 'false'
 provisioner: rook-ceph.cephfs.csi.ceph.com
 parameters:
--- HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools

+++ HelmRelease: rook-ceph/rook-ceph-cluster Deployment: rook-ceph/rook-ceph-tools

@@ -1,9 +1,9 @@

 ---
+kind: Deployment
 apiVersion: apps/v1
-kind: Deployment
 metadata:
   name: rook-ceph-tools
   namespace: rook-ceph
   labels:
     app: rook-ceph-tools
 spec:
--- HelmRelease: rook-ceph/rook-ceph-cluster CephBlockPool: rook-ceph/ceph-blockpool

+++ HelmRelease: rook-ceph/rook-ceph-cluster CephBlockPool: rook-ceph/ceph-blockpool

@@ -1,9 +1,9 @@

 ---
+kind: CephBlockPool
 apiVersion: ceph.rook.io/v1
-kind: CephBlockPool
 metadata:
   name: ceph-blockpool
   namespace: rook-ceph
 spec:
   failureDomain: host
   replicated:
--- HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystem: rook-ceph/ceph-filesystem

+++ HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystem: rook-ceph/ceph-filesystem

@@ -1,9 +1,9 @@

 ---
+kind: CephFilesystem
 apiVersion: ceph.rook.io/v1
-kind: CephFilesystem
 metadata:
   name: ceph-filesystem
   namespace: rook-ceph
 spec:
   dataPools:
   - failureDomain: host
--- HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi

+++ HelmRelease: rook-ceph/rook-ceph-cluster CephFilesystemSubVolumeGroup: rook-ceph/ceph-filesystem-csi

@@ -1,9 +1,9 @@

 ---
+kind: CephFilesystemSubVolumeGroup
 apiVersion: ceph.rook.io/v1
-kind: CephFilesystemSubVolumeGroup
 metadata:
   name: ceph-filesystem-csi
   namespace: rook-ceph
 spec:
   name: csi
   filesystemName: ceph-filesystem
--- HelmRelease: rook-ceph/rook-ceph-cluster HTTPRoute: rook-ceph/rook-ceph-dashboard

+++ HelmRelease: rook-ceph/rook-ceph-cluster HTTPRoute: rook-ceph/rook-ceph-dashboard

@@ -1,9 +1,9 @@

 ---
+kind: HTTPRoute
 apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
 metadata:
   name: rook-ceph-dashboard
   namespace: rook-ceph
 spec:
   hostnames:
   - rook.unscfleet.com
--- HelmRelease: rook-ceph/rook-ceph-cluster PrometheusRule: rook-ceph/prometheus-ceph-rules

+++ HelmRelease: rook-ceph/rook-ceph-cluster PrometheusRule: rook-ceph/prometheus-ceph-rules

@@ -1,9 +1,9 @@

 ---
+kind: PrometheusRule
 apiVersion: monitoring.coreos.com/v1
-kind: PrometheusRule
 metadata:
   labels:
     prometheus: rook-prometheus
     role: alert-rules
   name: prometheus-ceph-rules
   namespace: rook-ceph
--- HelmRelease: rook-ceph/rook-ceph-cluster VolumeSnapshotClass: rook-ceph/csi-ceph-filesystem

+++ HelmRelease: rook-ceph/rook-ceph-cluster VolumeSnapshotClass: rook-ceph/csi-ceph-filesystem

@@ -1,9 +1,9 @@

 ---
+kind: VolumeSnapshotClass
 apiVersion: snapshot.storage.k8s.io/v1
-kind: VolumeSnapshotClass
 metadata:
   name: csi-ceph-filesystem
   annotations:
     snapshot.storage.kubernetes.io/is-default-class: 'false'
 driver: rook-ceph.cephfs.csi.ceph.com
 parameters:
--- HelmRelease: rook-ceph/rook-ceph-cluster VolumeSnapshotClass: rook-ceph/csi-ceph-blockpool

+++ HelmRelease: rook-ceph/rook-ceph-cluster VolumeSnapshotClass: rook-ceph/csi-ceph-blockpool

@@ -1,9 +1,9 @@

 ---
+kind: VolumeSnapshotClass
 apiVersion: snapshot.storage.k8s.io/v1
-kind: VolumeSnapshotClass
 metadata:
   name: csi-ceph-blockpool
   annotations:
     snapshot.storage.kubernetes.io/is-default-class: 'false'
 driver: rook-ceph.rbd.csi.ceph.com
 parameters:
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-osd

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-osd

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-osd
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-mgr

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-mgr

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-mgr
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-cmd-reporter

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-cmd-reporter

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-cmd-reporter
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-purge-osd

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-purge-osd

@@ -1,7 +1,7 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-purge-osd
   namespace: rook-ceph
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-rgw

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-rgw

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-rgw
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-default

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-default

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-default
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-system

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-ceph-system

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-ceph-system
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-cephfs-plugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-cephfs-plugin-sa

@@ -1,7 +1,7 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-csi-cephfs-plugin-sa
   namespace: rook-ceph
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-cephfs-provisioner-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-cephfs-provisioner-sa

@@ -1,7 +1,7 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-csi-cephfs-provisioner-sa
   namespace: rook-ceph
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-rbd-plugin-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-rbd-plugin-sa

@@ -1,7 +1,7 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-csi-rbd-plugin-sa
   namespace: rook-ceph
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-rbd-provisioner-sa

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/rook-csi-rbd-provisioner-sa

@@ -1,7 +1,7 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: rook-csi-rbd-provisioner-sa
   namespace: rook-ceph
 
--- HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/objectstorage-provisioner

+++ HelmRelease: rook-ceph/rook-ceph ServiceAccount: rook-ceph/objectstorage-provisioner

@@ -1,9 +1,9 @@

 ---
+kind: ServiceAccount
 apiVersion: v1
-kind: ServiceAccount
 metadata:
   name: objectstorage-provisioner
   namespace: rook-ceph
   labels:
     app.kubernetes.io/part-of: container-object-storage-interface
     app.kubernetes.io/component: driver-ceph
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-cephfs-ctrlplugin-cr

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/ceph-csi-cephfs-ctrlplugin-cr

@@ -12,12 +12,13 @@

   - ''
   resources:
   - secrets
   verbs:
   - get
   - list
+  - watch
 - apiGroups:
   - ''
   resources:
   - configmaps
   verbs:
   - get
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-cluster-mgmt

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-cluster-mgmt

@@ -1,9 +1,9 @@

 ---
+kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
 metadata:
   name: rook-ceph-cluster-mgmt
   labels:
     operator: rook
     storage-backend: ceph
     app.kubernetes.io/part-of: rook-ceph-operator
--- HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

+++ HelmRelease: rook-ceph/rook-ceph ClusterRole: rook-ceph/rook-ceph-global

@@ -1,9 +1,9 @@

 ---
+kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
 metadata:
   name: rook-ceph-global
   labels:
     operator: rook
     storage-backend: ceph
     app.kubernetes.io/part-of: rook-ceph-operator
--- HelmRelease: rook-ceph/rook-ceph ClusterRoleBinding: rook-ceph/ceph-csi-nfs-nodeplugin-crb

+++ HelmRelease: rook-ceph/rook-ceph ClusterRoleBinding: rook-ceph/ceph-csi-nfs-nodeplugin-crb

@@ -5,13 +5,13 @@

   name: ceph-csi-nfs-nodeplugin-crb
   labels:
     app.kubernetes.io/name: ceph-csi
     app.kubernetes.io/instance: rook-ceph
     app.kubernetes.io/managed-by: Helm
 roleRef:
-  apiGroup: ''
+  apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: ceph-csi-nfs-nodeplugin-cr
 subjects:
 - kind: ServiceAccount
   name: ceph-csi-nfs-nodeplugin-sa
   namespace: rook-ceph
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/rook-ceph-system

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/rook-ceph-system

@@ -1,9 +1,9 @@

 ---
+kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
 metadata:
   name: rook-ceph-system
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
--- HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/ceph-csi-controller-manager

+++ HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/ceph-csi-controller-manager

@@ -37,13 +37,13 @@

         - name: CSI_SERVICE_ACCOUNT_PREFIX
           value: ceph-csi-
         - name: WATCH_NAMESPACE
           value: ''
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: quay.io/cephcsi/ceph-csi-operator:v0.4.0
+        image: quay.io/cephcsi/ceph-csi-operator:v0.4.1
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
           periodSeconds: 20
@@ -64,11 +64,12 @@

         securityContext:
           allowPrivilegeEscalation: false
           capabilities:
             drop:
             - ALL
           readOnlyRootFilesystem: true
+      imagePullSecrets: []
       securityContext:
         runAsNonRoot: true
       serviceAccountName: ceph-csi-controller-manager
       terminationGracePeriodSeconds: 10
 
--- HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

+++ HelmRelease: rook-ceph/rook-ceph Deployment: rook-ceph/rook-ceph-operator

@@ -1,9 +1,9 @@

 ---
+kind: Deployment
 apiVersion: apps/v1
-kind: Deployment
 metadata:
   name: rook-ceph-operator
   namespace: rook-ceph
   labels:
     operator: rook
     storage-backend: ceph
@@ -26,13 +26,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: ghcr.io/rook/ceph:v1.18.2
+        image: ghcr.io/rook/ceph:v1.18.4
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities:
--- HelmRelease: rook-ceph/rook-ceph ServiceMonitor: rook-ceph/csi-metrics

+++ HelmRelease: rook-ceph/rook-ceph ServiceMonitor: rook-ceph/csi-metrics

@@ -1,9 +1,9 @@

 ---
+kind: ServiceMonitor
 apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
 metadata:
   name: csi-metrics
   namespace: rook-ceph
   labels:
     app.kubernetes.io/part-of: rook-ceph-operator
     app.kubernetes.io/managed-by: Helm
--- HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-cephfs-nodeplugin-r

+++ HelmRelease: rook-ceph/rook-ceph Role: rook-ceph/ceph-csi-cephfs-nodeplugin-r

@@ -0,0 +1,41 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ceph-csi-cephfs-nodeplugin-r
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - csiaddons.openshift.io
+  resources:
+  - csiaddonsnodes
+  verbs:
+  - get
+  - watch
+  - list
+  - create
+  - update
+  - delete
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - deployments/finalizers
+  - daemonsets/finalizers
+  verbs:
+  - update
+
--- HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-cephfs-nodeplugin-rb

+++ HelmRelease: rook-ceph/rook-ceph RoleBinding: rook-ceph/ceph-csi-cephfs-nodeplugin-rb

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ceph-csi-cephfs-nodeplugin-rb
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ceph-csi-cephfs-nodeplugin-r
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-cephfs-nodeplugin-sa
+  namespace: rook-ceph
+

[unsc-oni-ancilla]

--- kubernetes/apps/rook-ceph/rook-ceph/app Kustomization: rook-ceph/rook-ceph OCIRepository: rook-ceph/rook-ceph

+++ kubernetes/apps/rook-ceph/rook-ceph/app Kustomization: rook-ceph/rook-ceph OCIRepository: rook-ceph/rook-ceph

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: v1.18.2
+    tag: v1.18.4
   url: oci://ghcr.io/rook/rook-ceph
 
--- kubernetes/apps/rook-ceph/rook-ceph/cluster Kustomization: rook-ceph/rook-ceph-cluster OCIRepository: rook-ceph/rook-ceph-cluster

+++ kubernetes/apps/rook-ceph/rook-ceph/cluster Kustomization: rook-ceph/rook-ceph-cluster OCIRepository: rook-ceph/rook-ceph-cluster

@@ -11,9 +11,9 @@

 spec:
   interval: 5m
   layerSelector:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: v1.18.2
+    tag: v1.18.4
   url: oci://ghcr.io/rook/rook-ceph-cluster