Daian Cardoso Sganderlla 63e213d429 Update yaml structures to be compatible with k8s 1.23+
- Removed the "beta1" in apiextensios version
- Declare the field types in CustomResourceDefinition kinds.
The declaration is mandatory to apply the custom resources
in kubernetes.
- Update CRDs
- Update resources to use the new CRDs
- Add wait time for the ceph osd to create the pools. This is
necessary to generate the certificate keys properly.
- Increase number of restarts limit for job rook-ceph-provision
to give more time for the dependencies to get ready.
- Switch ceph-config-helper to ubuntu_bionic-20220802
- Update ceph to v16.2.9

Test Plan:
PASS: Apply rook-ceph-app with the changes in k8s v1.23
PASS: Apply rook-ceph-app with the changes in k8s v1.24

Story: 2009138
Task: 45647

Signed-off-by: Daian Cardoso Sganderlla <Daian.CardosoSganderlla@windriver.com>
Change-Id: Ifc1d905b49504c3ac8d1a1fd4dd3d6661661a4cd
2023-02-03 11:36:40 +00:00

92 lines
3.2 KiB
YAML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

#
# Copyright (c) 2022 Wind River Systems, Inc.
#
# SPDX-License-Identifier: Apache-2.0
#
operator:
image:
prefix: rook
repository: rook/ceph
tag: v1.9.6
pullPolicy: IfNotPresent
resources:
limits:
cpu: 500m
memory: 256Mi
requests:
cpu: 100m
memory: 256Mi
# Tolerations for the rook-ceph-operator to allow it to run on nodes with particular taints
tolerations: []
# Delay to use in node.kubernetes.io/unreachable toleration
unreachableNodeTolerationSeconds: 5
# Whether rook watches its current namespace for CRDs or the entire cluster, defaults to false
currentNamespaceOnly: false
# Interval at which to get the ceph status and update the cluster custom resource status
cephStatusCheckInterval: "60s"
mon:
healthCheckInterval: "45s"
monOutTimeout: "600s"
## Annotations to be added to pod
annotations: {}
## LogLevel can be set to: TRACE, DEBUG, INFO, NOTICE, WARNING, ERROR or CRITICAL
logLevel: INFO
## If true, create & use RBAC resources
rbacEnable: true
## If true, create & use PSP resources
pspEnable: false
## Settings for whether to disable the drivers or other daemons if they are not needed
csi:
enableRbdDriver: true
enableCephfsDriver: true
enableGrpcMetrics: true
enableSnapshotter: true
# Enable Ceph Kernel clients on kernel < 4.17. If your kernel does not support quotas for CephFS
# you may want to disable this setting. However, this will cause an issue during upgrades
# with the FUSE client. See the upgrade guide: https://rook.io/docs/rook/v1.2/ceph-upgrade.html
forceCephFSKernelClient: true
kubeletDirPath: /var/lib/kubelet
cephcsi:
image: quay.io/cephcsi/cephcsi:v3.6.2
registrar:
image: k8s.gcr.io/sig-storage/csi-node-driver-registrar:v2.4.0
provisioner:
image: gcr.io/k8s-staging-sig-storage/csi-provisioner:v3.1.0
snapshotter:
image: k8s.gcr.io/sig-storage/csi-snapshotter:v4.2.0
attacher:
image: k8s.gcr.io/sig-storage/csi-attacher:v3.4.0
resizer:
image: k8s.gcr.io/sig-storage/csi-resizer:v1.4.0
enableFlexDriver: false
enableDiscoveryDaemon: true
# In some situations SELinux relabelling breaks (times out) on large filesystems, and doesn't work with cephfs ReadWriteMany volumes (last relabel wins).
# Disable it here if you have similar issues.
# For more details see https://github.com/rook/rook/issues/2417
enableSelinuxRelabeling: true
# Writing to the hostPath is required for the Ceph mon and osd pods. Given the restricted permissions in OpenShift with SELinux,
# the pod must be running privileged in order to write to the hostPath volume, this must be set to true then.
hostpathRequiresPrivileged: false
# Disable automatic orchestration when new devices are discovered.
disableDeviceHotplug: false
# Blacklist certain disks according to the regex provided.
discoverDaemonUdev:
# imagePullSecrets option allow to pull docker images from private docker registry. Option will be passed to all service accounts.
imagePullSecrets:
- name: default-registry-key
saInit:
name: sa-init
images:
tags:
sa_init_provisioner: docker.io/openstackhelm/ceph-config-helper:ubuntu_bionic-20220802
cleanup:
enable: true
cluster_cleanup: ceph-cluster