flate diff
Select a resource from the tree to view its diff.

removedClusterRole ceph-csi-cephfs-ctrlplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - configmaps
24 verbs:
25 - get
26 - apiGroups:
27 - ""
28 resources:
29 - nodes
30 verbs:
31 - get
32 - list
33 - watch
34 - apiGroups:
35 - storage.k8s.io
36 resources:
37 - csinodes
38 verbs:
39 - get
40 - list
41 - watch
42 - apiGroups:
43 - ""
44 resources:
45 - persistentvolumes
46 verbs:
47 - get
48 - list
49 - watch
50 - create
51 - delete
52 - patch
53 - update
54 - apiGroups:
55 - ""
56 resources:
57 - persistentvolumeclaims
58 verbs:
59 - get
60 - list
61 - watch
62 - patch
63 - update
64 - apiGroups:
65 - storage.k8s.io
66 resources:
67 - storageclasses
68 verbs:
69 - get
70 - list
71 - watch
72 - apiGroups:
73 - ""
74 resources:
75 - events
76 verbs:
77 - list
78 - watch
79 - create
80 - update
81 - patch
82 - apiGroups:
83 - storage.k8s.io
84 resources:
85 - volumeattachments
86 verbs:
87 - get
88 - list
89 - watch
90 - patch
91 - apiGroups:
92 - storage.k8s.io
93 resources:
94 - volumeattachments/status
95 verbs:
96 - patch
97 - apiGroups:
98 - ""
99 resources:
100 - persistentvolumeclaims/status
101 verbs:
102 - patch
103 - apiGroups:
104 - snapshot.storage.k8s.io
105 resources:
106 - volumesnapshots
107 verbs:
108 - get
109 - list
110 - apiGroups:
111 - snapshot.storage.k8s.io
112 resources:
113 - volumesnapshotclasses
114 verbs:
115 - get
116 - list
117 - watch
118 - apiGroups:
119 - snapshot.storage.k8s.io
120 resources:
121 - volumesnapshotcontents
122 verbs:
123 - get
124 - list
125 - watch
126 - patch
127 - update
128 - apiGroups:
129 - snapshot.storage.k8s.io
130 resources:
131 - volumesnapshotcontents/status
132 verbs:
133 - update
134 - patch
135 - apiGroups:
136 - groupsnapshot.storage.k8s.io
137 resources:
138 - volumegroupsnapshotclasses
139 verbs:
140 - get
141 - list
142 - watch
143 - apiGroups:
144 - groupsnapshot.storage.k8s.io
145 resources:
146 - volumegroupsnapshotcontents
147 verbs:
148 - get
149 - list
150 - watch
151 - update
152 - patch
153 - apiGroups:
154 - groupsnapshot.storage.k8s.io
155 resources:
156 - volumegroupsnapshotcontents/status
157 verbs:
158 - update
159 - patch
160 - apiGroups:
161 - groupsnapshot.storage.openshift.io
162 resources:
163 - volumegroupsnapshotclasses
164 verbs:
165 - get
166 - list
167 - watch
168 - apiGroups:
169 - groupsnapshot.storage.openshift.io
170 resources:
171 - volumegroupsnapshotcontents
172 verbs:
173 - get
174 - list
175 - watch
176 - update
177 - patch
178 - apiGroups:
179 - groupsnapshot.storage.openshift.io
180 resources:
181 - volumegroupsnapshotcontents/status
182 verbs:
183 - update
184 - patch
185 - apiGroups:
186 - ""
187 resources:
188 - serviceaccounts
189 verbs:
190 - get
191 - apiGroups:
192 - ""
193 resources:
194 - serviceaccounts/token
195 verbs:
196 - create
197 - apiGroups:
198 - authentication.k8s.io
199 resources:
200 - tokenreviews
201 verbs:
202 - create
203 - apiGroups:
204 - storage.k8s.io
205 resources:
206 - volumeattributesclasses
207 verbs:
208 - get
209 - list
210 - watch
211 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - configmaps
24 verbs:
25 - get
26 - apiGroups:
27 - ""
28 resources:
29 - nodes
30 verbs:
31 - get
32 - list
33 - watch
34 - apiGroups:
35 - storage.k8s.io
36 resources:
37 - csinodes
38 verbs:
39 - get
40 - list
41 - watch
42 - apiGroups:
43 - ""
44 resources:
45 - persistentvolumes
46 verbs:
47 - get
48 - list
49 - watch
50 - create
51 - delete
52 - patch
53 - update
54 - apiGroups:
55 - ""
56 resources:
57 - persistentvolumeclaims
58 verbs:
59 - get
60 - list
61 - watch
62 - patch
63 - update
64 - apiGroups:
65 - storage.k8s.io
66 resources:
67 - storageclasses
68 verbs:
69 - get
70 - list
71 - watch
72 - apiGroups:
73 - ""
74 resources:
75 - events
76 verbs:
77 - list
78 - watch
79 - create
80 - update
81 - patch
82 - apiGroups:
83 - storage.k8s.io
84 resources:
85 - volumeattachments
86 verbs:
87 - get
88 - list
89 - watch
90 - patch
91 - apiGroups:
92 - storage.k8s.io
93 resources:
94 - volumeattachments/status
95 verbs:
96 - patch
97 - apiGroups:
98 - ""
99 resources:
100 - persistentvolumeclaims/status
101 verbs:
102 - patch
103 - apiGroups:
104 - snapshot.storage.k8s.io
105 resources:
106 - volumesnapshots
107 verbs:
108 - get
109 - list
110 - apiGroups:
111 - snapshot.storage.k8s.io
112 resources:
113 - volumesnapshotclasses
114 verbs:
115 - get
116 - list
117 - watch
118 - apiGroups:
119 - snapshot.storage.k8s.io
120 resources:
121 - volumesnapshotcontents
122 verbs:
123 - get
124 - list
125 - watch
126 - patch
127 - update
128 - apiGroups:
129 - snapshot.storage.k8s.io
130 resources:
131 - volumesnapshotcontents/status
132 verbs:
133 - update
134 - patch
135 - apiGroups:
136 - groupsnapshot.storage.k8s.io
137 resources:
138 - volumegroupsnapshotclasses
139 verbs:
140 - get
141 - list
142 - watch
143 - apiGroups:
144 - groupsnapshot.storage.k8s.io
145 resources:
146 - volumegroupsnapshotcontents
147 verbs:
148 - get
149 - list
150 - watch
151 - update
152 - patch
153 - apiGroups:
154 - groupsnapshot.storage.k8s.io
155 resources:
156 - volumegroupsnapshotcontents/status
157 verbs:
158 - update
159 - patch
160 - apiGroups:
161 - groupsnapshot.storage.openshift.io
162 resources:
163 - volumegroupsnapshotclasses
164 verbs:
165 - get
166 - list
167 - watch
168 - apiGroups:
169 - groupsnapshot.storage.openshift.io
170 resources:
171 - volumegroupsnapshotcontents
172 verbs:
173 - get
174 - list
175 - watch
176 - update
177 - patch
178 - apiGroups:
179 - groupsnapshot.storage.openshift.io
180 resources:
181 - volumegroupsnapshotcontents/status
182 verbs:
183 - update
184 - patch
185 - apiGroups:
186 - ""
187 resources:
188 - serviceaccounts
189 verbs:
190 - get
191 - apiGroups:
192 - ""
193 resources:
194 - serviceaccounts/token
195 verbs:
196 - create
197 - apiGroups:
198 - authentication.k8s.io
199 resources:
200 - tokenreviews
201 verbs:
202 - create
203 - apiGroups:
204 - storage.k8s.io
205 resources:
206 - volumeattributesclasses
207 verbs:
208 - get
209 - list
210 - watch
211 1

removedClusterRole ceph-csi-cephfs-nodeplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - nodes
16 verbs:
17 - get
18 - apiGroups:
19 - ""
20 resources:
21 - secrets
22 verbs:
23 - get
24 - list
25 - watch
26 - apiGroups:
27 - ""
28 resources:
29 - configmaps
30 verbs:
31 - get
32 - apiGroups:
33 - ""
34 resources:
35 - serviceaccounts
36 verbs:
37 - get
38 - apiGroups:
39 - ""
40 resources:
41 - serviceaccounts/token
42 verbs:
43 - create
44 - apiGroups:
45 - ""
46 resources:
47 - events
48 verbs:
49 - list
50 - watch
51 - create
52 - update
53 - patch
54 - apiGroups:
55 - ""
56 resources:
57 - persistentvolumes
58 - persistentvolumeclaims
59 verbs:
60 - get
61 - apiGroups:
62 - authentication.k8s.io
63 resources:
64 - tokenreviews
65 verbs:
66 - create
67 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - nodes
16 verbs:
17 - get
18 - apiGroups:
19 - ""
20 resources:
21 - secrets
22 verbs:
23 - get
24 - list
25 - watch
26 - apiGroups:
27 - ""
28 resources:
29 - configmaps
30 verbs:
31 - get
32 - apiGroups:
33 - ""
34 resources:
35 - serviceaccounts
36 verbs:
37 - get
38 - apiGroups:
39 - ""
40 resources:
41 - serviceaccounts/token
42 verbs:
43 - create
44 - apiGroups:
45 - ""
46 resources:
47 - events
48 verbs:
49 - list
50 - watch
51 - create
52 - update
53 - patch
54 - apiGroups:
55 - ""
56 resources:
57 - persistentvolumes
58 - persistentvolumeclaims
59 verbs:
60 - get
61 - apiGroups:
62 - authentication.k8s.io
63 resources:
64 - tokenreviews
65 verbs:
66 - create
67 1

removedClusterRole ceph-csi-nfs-ctrlplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - persistentvolumes
16 verbs:
17 - get
18 - list
19 - watch
20 - create
21 - update
22 - delete
23 - patch
24 - apiGroups:
25 - ""
26 resources:
27 - persistentvolumeclaims
28 verbs:
29 - get
30 - list
31 - watch
32 - patch
33 - update
34 - apiGroups:
35 - storage.k8s.io
36 resources:
37 - storageclasses
38 verbs:
39 - get
40 - list
41 - watch
42 - apiGroups:
43 - ""
44 resources:
45 - events
46 verbs:
47 - get
48 - list
49 - watch
50 - create
51 - update
52 - patch
53 - apiGroups:
54 - storage.k8s.io
55 resources:
56 - csinodes
57 verbs:
58 - get
59 - list
60 - watch
61 - apiGroups:
62 - ""
63 resources:
64 - nodes
65 verbs:
66 - get
67 - list
68 - watch
69 - apiGroups:
70 - coordination.k8s.io
71 resources:
72 - leases
73 verbs:
74 - get
75 - list
76 - watch
77 - create
78 - update
79 - patch
80 - apiGroups:
81 - ""
82 resources:
83 - secrets
84 verbs:
85 - get
86 - apiGroups:
87 - snapshot.storage.k8s.io
88 resources:
89 - volumesnapshotclasses
90 verbs:
91 - get
92 - list
93 - watch
94 - apiGroups:
95 - snapshot.storage.k8s.io
96 resources:
97 - volumesnapshotcontents
98 verbs:
99 - get
100 - list
101 - watch
102 - update
103 - patch
104 - apiGroups:
105 - snapshot.storage.k8s.io
106 resources:
107 - volumesnapshotcontents/status
108 verbs:
109 - update
110 - patch
111 - apiGroups:
112 - snapshot.storage.k8s.io
113 resources:
114 - volumesnapshots
115 verbs:
116 - get
117 - list
118 - apiGroups:
119 - ""
120 resources:
121 - persistentvolumeclaims/status
122 verbs:
123 - patch
124 - apiGroups:
125 - storage.k8s.io
126 resources:
127 - volumeattachments
128 verbs:
129 - get
130 - list
131 - watch
132 - patch
133 - apiGroups:
134 - storage.k8s.io
135 resources:
136 - volumeattachments/status
137 verbs:
138 - patch
139 - apiGroups:
140 - storage.k8s.io
141 resources:
142 - volumeattributesclasses
143 verbs:
144 - get
145 - list
146 - watch
147 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - persistentvolumes
16 verbs:
17 - get
18 - list
19 - watch
20 - create
21 - update
22 - delete
23 - patch
24 - apiGroups:
25 - ""
26 resources:
27 - persistentvolumeclaims
28 verbs:
29 - get
30 - list
31 - watch
32 - patch
33 - update
34 - apiGroups:
35 - storage.k8s.io
36 resources:
37 - storageclasses
38 verbs:
39 - get
40 - list
41 - watch
42 - apiGroups:
43 - ""
44 resources:
45 - events
46 verbs:
47 - get
48 - list
49 - watch
50 - create
51 - update
52 - patch
53 - apiGroups:
54 - storage.k8s.io
55 resources:
56 - csinodes
57 verbs:
58 - get
59 - list
60 - watch
61 - apiGroups:
62 - ""
63 resources:
64 - nodes
65 verbs:
66 - get
67 - list
68 - watch
69 - apiGroups:
70 - coordination.k8s.io
71 resources:
72 - leases
73 verbs:
74 - get
75 - list
76 - watch
77 - create
78 - update
79 - patch
80 - apiGroups:
81 - ""
82 resources:
83 - secrets
84 verbs:
85 - get
86 - apiGroups:
87 - snapshot.storage.k8s.io
88 resources:
89 - volumesnapshotclasses
90 verbs:
91 - get
92 - list
93 - watch
94 - apiGroups:
95 - snapshot.storage.k8s.io
96 resources:
97 - volumesnapshotcontents
98 verbs:
99 - get
100 - list
101 - watch
102 - update
103 - patch
104 - apiGroups:
105 - snapshot.storage.k8s.io
106 resources:
107 - volumesnapshotcontents/status
108 verbs:
109 - update
110 - patch
111 - apiGroups:
112 - snapshot.storage.k8s.io
113 resources:
114 - volumesnapshots
115 verbs:
116 - get
117 - list
118 - apiGroups:
119 - ""
120 resources:
121 - persistentvolumeclaims/status
122 verbs:
123 - patch
124 - apiGroups:
125 - storage.k8s.io
126 resources:
127 - volumeattachments
128 verbs:
129 - get
130 - list
131 - watch
132 - patch
133 - apiGroups:
134 - storage.k8s.io
135 resources:
136 - volumeattachments/status
137 verbs:
138 - patch
139 - apiGroups:
140 - storage.k8s.io
141 resources:
142 - volumeattributesclasses
143 verbs:
144 - get
145 - list
146 - watch
147 1

removedClusterRole ceph-csi-nfs-nodeplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - nodes
16 verbs:
17 - get
18 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - nodes
16 verbs:
17 - get
18 1

removedClusterRole ceph-csi-nvmeof-ctrlplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - persistentvolumes
24 verbs:
25 - get
26 - list
27 - watch
28 - create
29 - delete
30 - patch
31 - update
32 - apiGroups:
33 - ""
34 resources:
35 - persistentvolumeclaims
36 verbs:
37 - get
38 - list
39 - watch
40 - update
41 - apiGroups:
42 - storage.k8s.io
43 resources:
44 - storageclasses
45 verbs:
46 - get
47 - list
48 - watch
49 - apiGroups:
50 - ""
51 resources:
52 - events
53 verbs:
54 - list
55 - watch
56 - create
57 - update
58 - patch
59 - apiGroups:
60 - storage.k8s.io
61 resources:
62 - volumeattachments
63 verbs:
64 - get
65 - list
66 - watch
67 - patch
68 - apiGroups:
69 - storage.k8s.io
70 resources:
71 - volumeattachments/status
72 verbs:
73 - patch
74 - apiGroups:
75 - ""
76 resources:
77 - nodes
78 verbs:
79 - get
80 - list
81 - watch
82 - apiGroups:
83 - storage.k8s.io
84 resources:
85 - csinodes
86 verbs:
87 - get
88 - list
89 - watch
90 - apiGroups:
91 - ""
92 resources:
93 - persistentvolumeclaims/status
94 verbs:
95 - patch
96 - apiGroups:
97 - ""
98 resources:
99 - configmaps
100 verbs:
101 - get
102 - apiGroups:
103 - ""
104 resources:
105 - serviceaccounts
106 verbs:
107 - get
108 - apiGroups:
109 - ""
110 resources:
111 - serviceaccounts/token
112 verbs:
113 - create
114 - apiGroups:
115 - authentication.k8s.io
116 resources:
117 - tokenreviews
118 verbs:
119 - create
120 - apiGroups:
121 - authorization.k8s.io
122 resources:
123 - subjectaccessreviews
124 verbs:
125 - create
126 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - persistentvolumes
24 verbs:
25 - get
26 - list
27 - watch
28 - create
29 - delete
30 - patch
31 - update
32 - apiGroups:
33 - ""
34 resources:
35 - persistentvolumeclaims
36 verbs:
37 - get
38 - list
39 - watch
40 - update
41 - apiGroups:
42 - storage.k8s.io
43 resources:
44 - storageclasses
45 verbs:
46 - get
47 - list
48 - watch
49 - apiGroups:
50 - ""
51 resources:
52 - events
53 verbs:
54 - list
55 - watch
56 - create
57 - update
58 - patch
59 - apiGroups:
60 - storage.k8s.io
61 resources:
62 - volumeattachments
63 verbs:
64 - get
65 - list
66 - watch
67 - patch
68 - apiGroups:
69 - storage.k8s.io
70 resources:
71 - volumeattachments/status
72 verbs:
73 - patch
74 - apiGroups:
75 - ""
76 resources:
77 - nodes
78 verbs:
79 - get
80 - list
81 - watch
82 - apiGroups:
83 - storage.k8s.io
84 resources:
85 - csinodes
86 verbs:
87 - get
88 - list
89 - watch
90 - apiGroups:
91 - ""
92 resources:
93 - persistentvolumeclaims/status
94 verbs:
95 - patch
96 - apiGroups:
97 - ""
98 resources:
99 - configmaps
100 verbs:
101 - get
102 - apiGroups:
103 - ""
104 resources:
105 - serviceaccounts
106 verbs:
107 - get
108 - apiGroups:
109 - ""
110 resources:
111 - serviceaccounts/token
112 verbs:
113 - create
114 - apiGroups:
115 - authentication.k8s.io
116 resources:
117 - tokenreviews
118 verbs:
119 - create
120 - apiGroups:
121 - authorization.k8s.io
122 resources:
123 - subjectaccessreviews
124 verbs:
125 - create
126 1

removedClusterRole ceph-csi-nvmeof-nodeplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - apiGroups:
20 - ""
21 resources:
22 - persistentvolumes
23 verbs:
24 - get
25 - list
26 - apiGroups:
27 - storage.k8s.io
28 resources:
29 - volumeattachments
30 verbs:
31 - get
32 - list
33 - apiGroups:
34 - ""
35 resources:
36 - configmaps
37 verbs:
38 - get
39 - apiGroups:
40 - ""
41 resources:
42 - serviceaccounts
43 verbs:
44 - get
45 - apiGroups:
46 - ""
47 resources:
48 - serviceaccounts/token
49 verbs:
50 - create
51 - apiGroups:
52 - ""
53 resources:
54 - nodes
55 verbs:
56 - get
57 - apiGroups:
58 - authentication.k8s.io
59 resources:
60 - tokenreviews
61 verbs:
62 - create
63 - apiGroups:
64 - ""
65 resources:
66 - events
67 verbs:
68 - list
69 - watch
70 - create
71 - update
72 - patch
73 - apiGroups:
74 - ""
75 resources:
76 - persistentvolumeclaims
77 verbs:
78 - get
79 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - apiGroups:
20 - ""
21 resources:
22 - persistentvolumes
23 verbs:
24 - get
25 - list
26 - apiGroups:
27 - storage.k8s.io
28 resources:
29 - volumeattachments
30 verbs:
31 - get
32 - list
33 - apiGroups:
34 - ""
35 resources:
36 - configmaps
37 verbs:
38 - get
39 - apiGroups:
40 - ""
41 resources:
42 - serviceaccounts
43 verbs:
44 - get
45 - apiGroups:
46 - ""
47 resources:
48 - serviceaccounts/token
49 verbs:
50 - create
51 - apiGroups:
52 - ""
53 resources:
54 - nodes
55 verbs:
56 - get
57 - apiGroups:
58 - authentication.k8s.io
59 resources:
60 - tokenreviews
61 verbs:
62 - create
63 - apiGroups:
64 - ""
65 resources:
66 - events
67 verbs:
68 - list
69 - watch
70 - create
71 - update
72 - patch
73 - apiGroups:
74 - ""
75 resources:
76 - persistentvolumeclaims
77 verbs:
78 - get
79 1

removedClusterRole ceph-csi-rbd-ctrlplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - persistentvolumes
24 verbs:
25 - get
26 - list
27 - watch
28 - create
29 - delete
30 - patch
31 - update
32 - apiGroups:
33 - ""
34 resources:
35 - persistentvolumeclaims
36 verbs:
37 - get
38 - list
39 - watch
40 - update
41 - apiGroups:
42 - storage.k8s.io
43 resources:
44 - storageclasses
45 verbs:
46 - get
47 - list
48 - watch
49 - apiGroups:
50 - ""
51 resources:
52 - events
53 verbs:
54 - list
55 - watch
56 - create
57 - update
58 - patch
59 - apiGroups:
60 - storage.k8s.io
61 resources:
62 - volumeattachments
63 verbs:
64 - get
65 - list
66 - watch
67 - patch
68 - apiGroups:
69 - storage.k8s.io
70 resources:
71 - volumeattachments/status
72 verbs:
73 - patch
74 - apiGroups:
75 - ""
76 resources:
77 - nodes
78 verbs:
79 - get
80 - list
81 - watch
82 - apiGroups:
83 - storage.k8s.io
84 resources:
85 - csinodes
86 verbs:
87 - get
88 - list
89 - watch
90 - apiGroups:
91 - ""
92 resources:
93 - persistentvolumeclaims/status
94 verbs:
95 - patch
96 - apiGroups:
97 - snapshot.storage.k8s.io
98 resources:
99 - volumesnapshots
100 verbs:
101 - get
102 - list
103 - watch
104 - apiGroups:
105 - snapshot.storage.k8s.io
106 resources:
107 - volumesnapshotclasses
108 verbs:
109 - get
110 - list
111 - watch
112 - apiGroups:
113 - snapshot.storage.k8s.io
114 resources:
115 - volumesnapshotcontents
116 verbs:
117 - get
118 - list
119 - watch
120 - patch
121 - update
122 - apiGroups:
123 - snapshot.storage.k8s.io
124 resources:
125 - volumesnapshotcontents/status
126 verbs:
127 - update
128 - patch
129 - apiGroups:
130 - ""
131 resources:
132 - configmaps
133 verbs:
134 - get
135 - apiGroups:
136 - ""
137 resources:
138 - serviceaccounts
139 verbs:
140 - get
141 - apiGroups:
142 - ""
143 resources:
144 - serviceaccounts/token
145 verbs:
146 - create
147 - apiGroups:
148 - groupsnapshot.storage.k8s.io
149 resources:
150 - volumegroupsnapshotclasses
151 verbs:
152 - get
153 - list
154 - watch
155 - apiGroups:
156 - groupsnapshot.storage.k8s.io
157 resources:
158 - volumegroupsnapshotcontents
159 verbs:
160 - get
161 - list
162 - watch
163 - update
164 - patch
165 - apiGroups:
166 - groupsnapshot.storage.k8s.io
167 resources:
168 - volumegroupsnapshotcontents/status
169 verbs:
170 - update
171 - patch
172 - apiGroups:
173 - groupsnapshot.storage.openshift.io
174 resources:
175 - volumegroupsnapshotclasses
176 verbs:
177 - get
178 - list
179 - watch
180 - apiGroups:
181 - groupsnapshot.storage.openshift.io
182 resources:
183 - volumegroupsnapshotcontents
184 verbs:
185 - get
186 - list
187 - watch
188 - update
189 - patch
190 - apiGroups:
191 - groupsnapshot.storage.openshift.io
192 resources:
193 - volumegroupsnapshotcontents/status
194 verbs:
195 - update
196 - patch
197 - apiGroups:
198 - replication.storage.openshift.io
199 resources:
200 - volumegroupreplicationcontents
201 verbs:
202 - get
203 - list
204 - watch
205 - apiGroups:
206 - replication.storage.openshift.io
207 resources:
208 - volumegroupreplicationclasses
209 verbs:
210 - get
211 - list
212 - watch
213 - apiGroups:
214 - authentication.k8s.io
215 resources:
216 - tokenreviews
217 verbs:
218 - create
219 - apiGroups:
220 - authorization.k8s.io
221 resources:
222 - subjectaccessreviews
223 verbs:
224 - create
225 - apiGroups:
226 - cbt.storage.k8s.io
227 resources:
228 - snapshotmetadataservices
229 verbs:
230 - get
231 - list
232 - apiGroups:
233 - storage.k8s.io
234 resources:
235 - volumeattributesclasses
236 verbs:
237 - get
238 - list
239 - watch
240 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - persistentvolumes
24 verbs:
25 - get
26 - list
27 - watch
28 - create
29 - delete
30 - patch
31 - update
32 - apiGroups:
33 - ""
34 resources:
35 - persistentvolumeclaims
36 verbs:
37 - get
38 - list
39 - watch
40 - update
41 - apiGroups:
42 - storage.k8s.io
43 resources:
44 - storageclasses
45 verbs:
46 - get
47 - list
48 - watch
49 - apiGroups:
50 - ""
51 resources:
52 - events
53 verbs:
54 - list
55 - watch
56 - create
57 - update
58 - patch
59 - apiGroups:
60 - storage.k8s.io
61 resources:
62 - volumeattachments
63 verbs:
64 - get
65 - list
66 - watch
67 - patch
68 - apiGroups:
69 - storage.k8s.io
70 resources:
71 - volumeattachments/status
72 verbs:
73 - patch
74 - apiGroups:
75 - ""
76 resources:
77 - nodes
78 verbs:
79 - get
80 - list
81 - watch
82 - apiGroups:
83 - storage.k8s.io
84 resources:
85 - csinodes
86 verbs:
87 - get
88 - list
89 - watch
90 - apiGroups:
91 - ""
92 resources:
93 - persistentvolumeclaims/status
94 verbs:
95 - patch
96 - apiGroups:
97 - snapshot.storage.k8s.io
98 resources:
99 - volumesnapshots
100 verbs:
101 - get
102 - list
103 - watch
104 - apiGroups:
105 - snapshot.storage.k8s.io
106 resources:
107 - volumesnapshotclasses
108 verbs:
109 - get
110 - list
111 - watch
112 - apiGroups:
113 - snapshot.storage.k8s.io
114 resources:
115 - volumesnapshotcontents
116 verbs:
117 - get
118 - list
119 - watch
120 - patch
121 - update
122 - apiGroups:
123 - snapshot.storage.k8s.io
124 resources:
125 - volumesnapshotcontents/status
126 verbs:
127 - update
128 - patch
129 - apiGroups:
130 - ""
131 resources:
132 - configmaps
133 verbs:
134 - get
135 - apiGroups:
136 - ""
137 resources:
138 - serviceaccounts
139 verbs:
140 - get
141 - apiGroups:
142 - ""
143 resources:
144 - serviceaccounts/token
145 verbs:
146 - create
147 - apiGroups:
148 - groupsnapshot.storage.k8s.io
149 resources:
150 - volumegroupsnapshotclasses
151 verbs:
152 - get
153 - list
154 - watch
155 - apiGroups:
156 - groupsnapshot.storage.k8s.io
157 resources:
158 - volumegroupsnapshotcontents
159 verbs:
160 - get
161 - list
162 - watch
163 - update
164 - patch
165 - apiGroups:
166 - groupsnapshot.storage.k8s.io
167 resources:
168 - volumegroupsnapshotcontents/status
169 verbs:
170 - update
171 - patch
172 - apiGroups:
173 - groupsnapshot.storage.openshift.io
174 resources:
175 - volumegroupsnapshotclasses
176 verbs:
177 - get
178 - list
179 - watch
180 - apiGroups:
181 - groupsnapshot.storage.openshift.io
182 resources:
183 - volumegroupsnapshotcontents
184 verbs:
185 - get
186 - list
187 - watch
188 - update
189 - patch
190 - apiGroups:
191 - groupsnapshot.storage.openshift.io
192 resources:
193 - volumegroupsnapshotcontents/status
194 verbs:
195 - update
196 - patch
197 - apiGroups:
198 - replication.storage.openshift.io
199 resources:
200 - volumegroupreplicationcontents
201 verbs:
202 - get
203 - list
204 - watch
205 - apiGroups:
206 - replication.storage.openshift.io
207 resources:
208 - volumegroupreplicationclasses
209 verbs:
210 - get
211 - list
212 - watch
213 - apiGroups:
214 - authentication.k8s.io
215 resources:
216 - tokenreviews
217 verbs:
218 - create
219 - apiGroups:
220 - authorization.k8s.io
221 resources:
222 - subjectaccessreviews
223 verbs:
224 - create
225 - apiGroups:
226 - cbt.storage.k8s.io
227 resources:
228 - snapshotmetadataservices
229 verbs:
230 - get
231 - list
232 - apiGroups:
233 - storage.k8s.io
234 resources:
235 - volumeattributesclasses
236 verbs:
237 - get
238 - list
239 - watch
240 1

removedClusterRole ceph-csi-rbd-nodeplugin-cr

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - persistentvolumes
24 verbs:
25 - get
26 - list
27 - apiGroups:
28 - storage.k8s.io
29 resources:
30 - volumeattachments
31 verbs:
32 - get
33 - list
34 - apiGroups:
35 - ""
36 resources:
37 - configmaps
38 verbs:
39 - get
40 - apiGroups:
41 - ""
42 resources:
43 - serviceaccounts
44 verbs:
45 - get
46 - apiGroups:
47 - ""
48 resources:
49 - serviceaccounts/token
50 verbs:
51 - create
52 - apiGroups:
53 - ""
54 resources:
55 - nodes
56 verbs:
57 - get
58 - apiGroups:
59 - authentication.k8s.io
60 resources:
61 - tokenreviews
62 verbs:
63 - create
64 - apiGroups:
65 - ""
66 resources:
67 - events
68 verbs:
69 - list
70 - watch
71 - create
72 - update
73 - patch
74 - apiGroups:
75 - ""
76 resources:
77 - persistentvolumeclaims
78 verbs:
79 - get
80 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-cr
11 rules:
12 - apiGroups:
13 - ""
14 resources:
15 - secrets
16 verbs:
17 - get
18 - list
19 - watch
20 - apiGroups:
21 - ""
22 resources:
23 - persistentvolumes
24 verbs:
25 - get
26 - list
27 - apiGroups:
28 - storage.k8s.io
29 resources:
30 - volumeattachments
31 verbs:
32 - get
33 - list
34 - apiGroups:
35 - ""
36 resources:
37 - configmaps
38 verbs:
39 - get
40 - apiGroups:
41 - ""
42 resources:
43 - serviceaccounts
44 verbs:
45 - get
46 - apiGroups:
47 - ""
48 resources:
49 - serviceaccounts/token
50 verbs:
51 - create
52 - apiGroups:
53 - ""
54 resources:
55 - nodes
56 verbs:
57 - get
58 - apiGroups:
59 - authentication.k8s.io
60 resources:
61 - tokenreviews
62 verbs:
63 - create
64 - apiGroups:
65 - ""
66 resources:
67 - events
68 verbs:
69 - list
70 - watch
71 - create
72 - update
73 - patch
74 - apiGroups:
75 - ""
76 resources:
77 - persistentvolumeclaims
78 verbs:
79 - get
80 1

removedClusterRole cephfs-csi-nodeplugin

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-nodeplugin
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - nodes
20 verbs:
21 - get
22 - apiGroups:
23 - ""
24 resources:
25 - secrets
26 verbs:
27 - get
28 - apiGroups:
29 - ""
30 resources:
31 - configmaps
32 verbs:
33 - get
34 - apiGroups:
35 - ""
36 resources:
37 - serviceaccounts
38 verbs:
39 - get
40 - apiGroups:
41 - ""
42 resources:
43 - serviceaccounts/token
44 verbs:
45 - create
46 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-nodeplugin
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - nodes
20 verbs:
21 - get
22 - apiGroups:
23 - ""
24 resources:
25 - secrets
26 verbs:
27 - get
28 - apiGroups:
29 - ""
30 resources:
31 - configmaps
32 verbs:
33 - get
34 - apiGroups:
35 - ""
36 resources:
37 - serviceaccounts
38 verbs:
39 - get
40 - apiGroups:
41 - ""
42 resources:
43 - serviceaccounts/token
44 verbs:
45 - create
46 1

removedClusterRole cephfs-external-provisioner-runner

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-external-provisioner-runner
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - secrets
20 verbs:
21 - get
22 - list
23 - apiGroups:
24 - ""
25 resources:
26 - configmaps
27 verbs:
28 - get
29 - apiGroups:
30 - ""
31 resources:
32 - nodes
33 verbs:
34 - get
35 - list
36 - watch
37 - apiGroups:
38 - storage.k8s.io
39 resources:
40 - csinodes
41 verbs:
42 - get
43 - list
44 - watch
45 - apiGroups:
46 - ""
47 resources:
48 - persistentvolumes
49 verbs:
50 - get
51 - list
52 - watch
53 - create
54 - update
55 - delete
56 - patch
57 - apiGroups:
58 - ""
59 resources:
60 - persistentvolumeclaims
61 verbs:
62 - get
63 - list
64 - watch
65 - patch
66 - update
67 - apiGroups:
68 - storage.k8s.io
69 resources:
70 - storageclasses
71 verbs:
72 - get
73 - list
74 - watch
75 - apiGroups:
76 - ""
77 resources:
78 - events
79 verbs:
80 - list
81 - watch
82 - create
83 - update
84 - patch
85 - apiGroups:
86 - events.k8s.io
87 resources:
88 - events
89 verbs:
90 - create
91 - patch
92 - update
93 - apiGroups:
94 - storage.k8s.io
95 resources:
96 - volumeattachments
97 verbs:
98 - get
99 - list
100 - watch
101 - patch
102 - apiGroups:
103 - storage.k8s.io
104 resources:
105 - volumeattachments/status
106 verbs:
107 - patch
108 - apiGroups:
109 - ""
110 resources:
111 - persistentvolumeclaims/status
112 verbs:
113 - patch
114 - apiGroups:
115 - snapshot.storage.k8s.io
116 resources:
117 - volumesnapshots
118 verbs:
119 - get
120 - list
121 - watch
122 - apiGroups:
123 - snapshot.storage.k8s.io
124 resources:
125 - volumesnapshotclasses
126 verbs:
127 - get
128 - list
129 - watch
130 - apiGroups:
131 - snapshot.storage.k8s.io
132 resources:
133 - volumesnapshotcontents
134 verbs:
135 - get
136 - list
137 - watch
138 - patch
139 - update
140 - apiGroups:
141 - snapshot.storage.k8s.io
142 resources:
143 - volumesnapshotcontents/status
144 verbs:
145 - update
146 - patch
147 - apiGroups:
148 - groupsnapshot.storage.k8s.io
149 resources:
150 - volumegroupsnapshotclasses
151 verbs:
152 - get
153 - list
154 - watch
155 - apiGroups:
156 - groupsnapshot.storage.k8s.io
157 resources:
158 - volumegroupsnapshotcontents
159 verbs:
160 - get
161 - list
162 - watch
163 - update
164 - patch
165 - apiGroups:
166 - groupsnapshot.storage.k8s.io
167 resources:
168 - volumegroupsnapshotcontents/status
169 verbs:
170 - update
171 - patch
172 - apiGroups:
173 - ""
174 resources:
175 - serviceaccounts
176 verbs:
177 - get
178 - apiGroups:
179 - ""
180 resources:
181 - serviceaccounts/token
182 verbs:
183 - create
184 - apiGroups:
185 - authentication.k8s.io
186 resources:
187 - tokenreviews
188 verbs:
189 - create
190 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-external-provisioner-runner
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - secrets
20 verbs:
21 - get
22 - list
23 - apiGroups:
24 - ""
25 resources:
26 - configmaps
27 verbs:
28 - get
29 - apiGroups:
30 - ""
31 resources:
32 - nodes
33 verbs:
34 - get
35 - list
36 - watch
37 - apiGroups:
38 - storage.k8s.io
39 resources:
40 - csinodes
41 verbs:
42 - get
43 - list
44 - watch
45 - apiGroups:
46 - ""
47 resources:
48 - persistentvolumes
49 verbs:
50 - get
51 - list
52 - watch
53 - create
54 - update
55 - delete
56 - patch
57 - apiGroups:
58 - ""
59 resources:
60 - persistentvolumeclaims
61 verbs:
62 - get
63 - list
64 - watch
65 - patch
66 - update
67 - apiGroups:
68 - storage.k8s.io
69 resources:
70 - storageclasses
71 verbs:
72 - get
73 - list
74 - watch
75 - apiGroups:
76 - ""
77 resources:
78 - events
79 verbs:
80 - list
81 - watch
82 - create
83 - update
84 - patch
85 - apiGroups:
86 - events.k8s.io
87 resources:
88 - events
89 verbs:
90 - create
91 - patch
92 - update
93 - apiGroups:
94 - storage.k8s.io
95 resources:
96 - volumeattachments
97 verbs:
98 - get
99 - list
100 - watch
101 - patch
102 - apiGroups:
103 - storage.k8s.io
104 resources:
105 - volumeattachments/status
106 verbs:
107 - patch
108 - apiGroups:
109 - ""
110 resources:
111 - persistentvolumeclaims/status
112 verbs:
113 - patch
114 - apiGroups:
115 - snapshot.storage.k8s.io
116 resources:
117 - volumesnapshots
118 verbs:
119 - get
120 - list
121 - watch
122 - apiGroups:
123 - snapshot.storage.k8s.io
124 resources:
125 - volumesnapshotclasses
126 verbs:
127 - get
128 - list
129 - watch
130 - apiGroups:
131 - snapshot.storage.k8s.io
132 resources:
133 - volumesnapshotcontents
134 verbs:
135 - get
136 - list
137 - watch
138 - patch
139 - update
140 - apiGroups:
141 - snapshot.storage.k8s.io
142 resources:
143 - volumesnapshotcontents/status
144 verbs:
145 - update
146 - patch
147 - apiGroups:
148 - groupsnapshot.storage.k8s.io
149 resources:
150 - volumegroupsnapshotclasses
151 verbs:
152 - get
153 - list
154 - watch
155 - apiGroups:
156 - groupsnapshot.storage.k8s.io
157 resources:
158 - volumegroupsnapshotcontents
159 verbs:
160 - get
161 - list
162 - watch
163 - update
164 - patch
165 - apiGroups:
166 - groupsnapshot.storage.k8s.io
167 resources:
168 - volumegroupsnapshotcontents/status
169 verbs:
170 - update
171 - patch
172 - apiGroups:
173 - ""
174 resources:
175 - serviceaccounts
176 verbs:
177 - get
178 - apiGroups:
179 - ""
180 resources:
181 - serviceaccounts/token
182 verbs:
183 - create
184 - apiGroups:
185 - authentication.k8s.io
186 resources:
187 - tokenreviews
188 verbs:
189 - create
190 1

removedClusterRole rbd-csi-nodeplugin

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-nodeplugin
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - secrets
20 verbs:
21 - get
22 - list
23 - apiGroups:
24 - ""
25 resources:
26 - persistentvolumes
27 verbs:
28 - get
29 - list
30 - apiGroups:
31 - storage.k8s.io
32 resources:
33 - volumeattachments
34 verbs:
35 - get
36 - list
37 - apiGroups:
38 - ""
39 resources:
40 - configmaps
41 verbs:
42 - get
43 - apiGroups:
44 - ""
45 resources:
46 - serviceaccounts
47 verbs:
48 - get
49 - apiGroups:
50 - ""
51 resources:
52 - serviceaccounts/token
53 verbs:
54 - create
55 - apiGroups:
56 - ""
57 resources:
58 - nodes
59 verbs:
60 - get
61 - apiGroups:
62 - authentication.k8s.io
63 resources:
64 - tokenreviews
65 verbs:
66 - create
67 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-nodeplugin
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - secrets
20 verbs:
21 - get
22 - list
23 - apiGroups:
24 - ""
25 resources:
26 - persistentvolumes
27 verbs:
28 - get
29 - list
30 - apiGroups:
31 - storage.k8s.io
32 resources:
33 - volumeattachments
34 verbs:
35 - get
36 - list
37 - apiGroups:
38 - ""
39 resources:
40 - configmaps
41 verbs:
42 - get
43 - apiGroups:
44 - ""
45 resources:
46 - serviceaccounts
47 verbs:
48 - get
49 - apiGroups:
50 - ""
51 resources:
52 - serviceaccounts/token
53 verbs:
54 - create
55 - apiGroups:
56 - ""
57 resources:
58 - nodes
59 verbs:
60 - get
61 - apiGroups:
62 - authentication.k8s.io
63 resources:
64 - tokenreviews
65 verbs:
66 - create
67 1

removedClusterRole rbd-external-provisioner-runner

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-external-provisioner-runner
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - secrets
20 verbs:
21 - get
22 - list
23 - watch
24 - apiGroups:
25 - ""
26 resources:
27 - persistentvolumes
28 verbs:
29 - get
30 - list
31 - watch
32 - create
33 - update
34 - delete
35 - patch
36 - apiGroups:
37 - ""
38 resources:
39 - persistentvolumeclaims
40 verbs:
41 - get
42 - list
43 - watch
44 - update
45 - apiGroups:
46 - storage.k8s.io
47 resources:
48 - storageclasses
49 verbs:
50 - get
51 - list
52 - watch
53 - apiGroups:
54 - ""
55 resources:
56 - events
57 verbs:
58 - list
59 - watch
60 - create
61 - update
62 - patch
63 - apiGroups:
64 - events.k8s.io
65 resources:
66 - events
67 verbs:
68 - create
69 - patch
70 - update
71 - apiGroups:
72 - storage.k8s.io
73 resources:
74 - volumeattachments
75 verbs:
76 - get
77 - list
78 - watch
79 - patch
80 - apiGroups:
81 - storage.k8s.io
82 resources:
83 - volumeattachments/status
84 verbs:
85 - patch
86 - apiGroups:
87 - ""
88 resources:
89 - nodes
90 verbs:
91 - get
92 - list
93 - watch
94 - apiGroups:
95 - storage.k8s.io
96 resources:
97 - csinodes
98 verbs:
99 - get
100 - list
101 - watch
102 - apiGroups:
103 - ""
104 resources:
105 - persistentvolumeclaims/status
106 verbs:
107 - patch
108 - apiGroups:
109 - snapshot.storage.k8s.io
110 resources:
111 - volumesnapshots
112 verbs:
113 - get
114 - list
115 - watch
116 - apiGroups:
117 - snapshot.storage.k8s.io
118 resources:
119 - volumesnapshotclasses
120 verbs:
121 - get
122 - list
123 - watch
124 - apiGroups:
125 - snapshot.storage.k8s.io
126 resources:
127 - volumesnapshotcontents
128 verbs:
129 - get
130 - list
131 - watch
132 - patch
133 - update
134 - apiGroups:
135 - snapshot.storage.k8s.io
136 resources:
137 - volumesnapshotcontents/status
138 verbs:
139 - update
140 - patch
141 - apiGroups:
142 - groupsnapshot.storage.k8s.io
143 resources:
144 - volumegroupsnapshotclasses
145 verbs:
146 - get
147 - list
148 - watch
149 - apiGroups:
150 - groupsnapshot.storage.k8s.io
151 resources:
152 - volumegroupsnapshotcontents
153 verbs:
154 - get
155 - list
156 - watch
157 - update
158 - patch
159 - apiGroups:
160 - groupsnapshot.storage.k8s.io
161 resources:
162 - volumegroupsnapshotcontents/status
163 verbs:
164 - update
165 - patch
166 - apiGroups:
167 - ""
168 resources:
169 - configmaps
170 verbs:
171 - get
172 - apiGroups:
173 - ""
174 resources:
175 - serviceaccounts
176 verbs:
177 - get
178 - apiGroups:
179 - ""
180 resources:
181 - serviceaccounts/token
182 verbs:
183 - create
184 - apiGroups:
185 - ""
186 resources:
187 - nodes
188 verbs:
189 - get
190 - list
191 - watch
192 - apiGroups:
193 - gateway.networking.k8s.io
194 resources:
195 - referencegrants
196 verbs:
197 - get
198 - list
199 - watch
200 - apiGroups:
201 - replication.storage.openshift.io
202 resources:
203 - volumegroupreplicationcontents
204 verbs:
205 - get
206 - list
207 - watch
208 - apiGroups:
209 - replication.storage.openshift.io
210 resources:
211 - volumegroupreplicationclasses
212 verbs:
213 - get
214 - list
215 - watch
216 - apiGroups:
217 - authentication.k8s.io
218 resources:
219 - tokenreviews
220 verbs:
221 - create
222 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-external-provisioner-runner
15 rules:
16 - apiGroups:
17 - ""
18 resources:
19 - secrets
20 verbs:
21 - get
22 - list
23 - watch
24 - apiGroups:
25 - ""
26 resources:
27 - persistentvolumes
28 verbs:
29 - get
30 - list
31 - watch
32 - create
33 - update
34 - delete
35 - patch
36 - apiGroups:
37 - ""
38 resources:
39 - persistentvolumeclaims
40 verbs:
41 - get
42 - list
43 - watch
44 - update
45 - apiGroups:
46 - storage.k8s.io
47 resources:
48 - storageclasses
49 verbs:
50 - get
51 - list
52 - watch
53 - apiGroups:
54 - ""
55 resources:
56 - events
57 verbs:
58 - list
59 - watch
60 - create
61 - update
62 - patch
63 - apiGroups:
64 - events.k8s.io
65 resources:
66 - events
67 verbs:
68 - create
69 - patch
70 - update
71 - apiGroups:
72 - storage.k8s.io
73 resources:
74 - volumeattachments
75 verbs:
76 - get
77 - list
78 - watch
79 - patch
80 - apiGroups:
81 - storage.k8s.io
82 resources:
83 - volumeattachments/status
84 verbs:
85 - patch
86 - apiGroups:
87 - ""
88 resources:
89 - nodes
90 verbs:
91 - get
92 - list
93 - watch
94 - apiGroups:
95 - storage.k8s.io
96 resources:
97 - csinodes
98 verbs:
99 - get
100 - list
101 - watch
102 - apiGroups:
103 - ""
104 resources:
105 - persistentvolumeclaims/status
106 verbs:
107 - patch
108 - apiGroups:
109 - snapshot.storage.k8s.io
110 resources:
111 - volumesnapshots
112 verbs:
113 - get
114 - list
115 - watch
116 - apiGroups:
117 - snapshot.storage.k8s.io
118 resources:
119 - volumesnapshotclasses
120 verbs:
121 - get
122 - list
123 - watch
124 - apiGroups:
125 - snapshot.storage.k8s.io
126 resources:
127 - volumesnapshotcontents
128 verbs:
129 - get
130 - list
131 - watch
132 - patch
133 - update
134 - apiGroups:
135 - snapshot.storage.k8s.io
136 resources:
137 - volumesnapshotcontents/status
138 verbs:
139 - update
140 - patch
141 - apiGroups:
142 - groupsnapshot.storage.k8s.io
143 resources:
144 - volumegroupsnapshotclasses
145 verbs:
146 - get
147 - list
148 - watch
149 - apiGroups:
150 - groupsnapshot.storage.k8s.io
151 resources:
152 - volumegroupsnapshotcontents
153 verbs:
154 - get
155 - list
156 - watch
157 - update
158 - patch
159 - apiGroups:
160 - groupsnapshot.storage.k8s.io
161 resources:
162 - volumegroupsnapshotcontents/status
163 verbs:
164 - update
165 - patch
166 - apiGroups:
167 - ""
168 resources:
169 - configmaps
170 verbs:
171 - get
172 - apiGroups:
173 - ""
174 resources:
175 - serviceaccounts
176 verbs:
177 - get
178 - apiGroups:
179 - ""
180 resources:
181 - serviceaccounts/token
182 verbs:
183 - create
184 - apiGroups:
185 - ""
186 resources:
187 - nodes
188 verbs:
189 - get
190 - list
191 - watch
192 - apiGroups:
193 - gateway.networking.k8s.io
194 resources:
195 - referencegrants
196 verbs:
197 - get
198 - list
199 - watch
200 - apiGroups:
201 - replication.storage.openshift.io
202 resources:
203 - volumegroupreplicationcontents
204 verbs:
205 - get
206 - list
207 - watch
208 - apiGroups:
209 - replication.storage.openshift.io
210 resources:
211 - volumegroupreplicationclasses
212 verbs:
213 - get
214 - list
215 - watch
216 - apiGroups:
217 - authentication.k8s.io
218 resources:
219 - tokenreviews
220 verbs:
221 - create
222 1

changedClusterRole rook-ceph-global

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1 1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRole 2 kind: ClusterRole
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app.kubernetes.io/created-by: helm 5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph 6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm 7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph 8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator 9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph 10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph 11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook 12 operator: rook
13 storage-backend: ceph 13 storage-backend: ceph
14 name: rook-ceph-global 14 name: rook-ceph-global
15 rules: 15 rules:
16 - apiGroups: 16 - apiGroups:
17 - "" 17 - ""
18 resources: 18 resources:
19 - pods 19 - pods
20 - nodes 20 - nodes
21 - secrets 21 - secrets
22 - configmaps 22 - configmaps
23 verbs: 23 verbs:
24 - get 24 - get
25 - list 25 - list
26 - watch 26 - watch
27 - apiGroups: 27 - apiGroups:
28 - "" 28 - ""
29 - discovery.k8s.io 29 - discovery.k8s.io
30 resources: 30 resources:
31 - events 31 - events
32 - persistentvolumes 32 - persistentvolumes
33 - persistentvolumeclaims 33 - persistentvolumeclaims
34 - endpoints 34 - endpoints
35 - services 35 - services
36 - endpointslices 36 - endpointslices
37 - endpointslices/restricted 37 - endpointslices/restricted
38 verbs: 38 verbs:
39 - get 39 - get
40 - list 40 - list
41 - watch 41 - watch
42 - patch 42 - patch
43 - create 43 - create
44 - update 44 - update
45 - delete 45 - delete
46 - apiGroups: 46 - apiGroups:
47 - events.k8s.io 47 - events.k8s.io
48 resources: 48 resources:
49 - events 49 - events
50 verbs: 50 verbs:
51 - create 51 - create
52 - patch 52 - patch
53 - update 53 - update
54 - apiGroups: 54 - apiGroups:
55 - storage.k8s.io 55 - storage.k8s.io
56 resources: 56 resources:
57 - storageclasses 57 - storageclasses
58 verbs: 58 verbs:
59 - get 59 - get
60 - list 60 - list
61 - watch 61 - watch
62 - apiGroups: 62 - apiGroups:
63 - batch 63 - batch
64 resources: 64 resources:
65 - jobs 65 - jobs
66 - cronjobs 66 - cronjobs
67 verbs: 67 verbs:
68 - get 68 - get
69 - list 69 - list
70 - watch 70 - watch
71 - create 71 - create
72 - update 72 - update
73 - delete 73 - delete
74 - deletecollection 74 - deletecollection
75 - apiGroups: 75 - apiGroups:
76 - ceph.rook.io 76 - ceph.rook.io
77 resources: 77 resources:
78 - cephclients 78 - cephclients
79 - cephclusters 79 - cephclusters
80 - cephblockpools 80 - cephblockpools
81 - cephfilesystems 81 - cephfilesystems
82 - cephnfses 82 - cephnfses
83 - cephnvmeofgateways 83 - cephnvmeofgateways
84 - cephobjectstores 84 - cephobjectstores
85 - cephobjectstoreusers 85 - cephobjectstoreusers
86 - cephobjectstoreaccounts
86 - cephobjectrealms 87 - cephobjectrealms
87 - cephobjectzonegroups 88 - cephobjectzonegroups
88 - cephobjectzones 89 - cephobjectzones
89 - cephbuckettopics 90 - cephbuckettopics
90 - cephbucketnotifications 91 - cephbucketnotifications
91 - cephrbdmirrors 92 - cephrbdmirrors
92 - cephfilesystemmirrors 93 - cephfilesystemmirrors
93 - cephfilesystemsubvolumegroups 94 - cephfilesystemsubvolumegroups
94 - cephblockpoolradosnamespaces 95 - cephblockpoolradosnamespaces
95 - cephcosidrivers 96 - cephcosidrivers
96 verbs: 97 verbs:
97 - get 98 - get
98 - list 99 - list
99 - watch 100 - watch
100 - update 101 - update
101 - apiGroups: 102 - apiGroups:
102 - ceph.rook.io 103 - ceph.rook.io
103 resources: 104 resources:
104 - cephclients/status 105 - cephclients/status
105 - cephclusters/status 106 - cephclusters/status
106 - cephblockpools/status 107 - cephblockpools/status
107 - cephfilesystems/status 108 - cephfilesystems/status
108 - cephnfses/status 109 - cephnfses/status
109 - cephnvmeofgateways/status 110 - cephnvmeofgateways/status
110 - cephobjectstores/status 111 - cephobjectstores/status
111 - cephobjectstoreusers/status 112 - cephobjectstoreusers/status
113 - cephobjectstoreaccounts/status
112 - cephobjectrealms/status 114 - cephobjectrealms/status
113 - cephobjectzonegroups/status 115 - cephobjectzonegroups/status
114 - cephobjectzones/status 116 - cephobjectzones/status
115 - cephbuckettopics/status 117 - cephbuckettopics/status
116 - cephbucketnotifications/status 118 - cephbucketnotifications/status
117 - cephrbdmirrors/status 119 - cephrbdmirrors/status
118 - cephfilesystemmirrors/status 120 - cephfilesystemmirrors/status
119 - cephfilesystemsubvolumegroups/status 121 - cephfilesystemsubvolumegroups/status
120 - cephblockpoolradosnamespaces/status 122 - cephblockpoolradosnamespaces/status
121 verbs: 123 verbs:
122 - update 124 - update
123 - apiGroups: 125 - apiGroups:
124 - ceph.rook.io 126 - ceph.rook.io
125 resources: 127 resources:
126 - cephclients/finalizers 128 - cephclients/finalizers
127 - cephclusters/finalizers 129 - cephclusters/finalizers
128 - cephblockpools/finalizers 130 - cephblockpools/finalizers
129 - cephfilesystems/finalizers 131 - cephfilesystems/finalizers
130 - cephnfses/finalizers 132 - cephnfses/finalizers
131 - cephnvmeofgateways/finalizers 133 - cephnvmeofgateways/finalizers
132 - cephobjectstores/finalizers 134 - cephobjectstores/finalizers
133 - cephobjectstoreusers/finalizers 135 - cephobjectstoreusers/finalizers
136 - cephobjectstoreaccounts/finalizers
134 - cephobjectrealms/finalizers 137 - cephobjectrealms/finalizers
135 - cephobjectzonegroups/finalizers 138 - cephobjectzonegroups/finalizers
136 - cephobjectzones/finalizers 139 - cephobjectzones/finalizers
137 - cephbuckettopics/finalizers 140 - cephbuckettopics/finalizers
138 - cephbucketnotifications/finalizers 141 - cephbucketnotifications/finalizers
139 - cephrbdmirrors/finalizers 142 - cephrbdmirrors/finalizers
140 - cephfilesystemmirrors/finalizers 143 - cephfilesystemmirrors/finalizers
141 - cephfilesystemsubvolumegroups/finalizers 144 - cephfilesystemsubvolumegroups/finalizers
142 - cephblockpoolradosnamespaces/finalizers 145 - cephblockpoolradosnamespaces/finalizers
143 verbs: 146 verbs:
144 - update 147 - update
145 - apiGroups: 148 - apiGroups:
146 - policy 149 - policy
147 - apps 150 - apps
148 - extensions 151 - extensions
149 resources: 152 resources:
150 - poddisruptionbudgets 153 - poddisruptionbudgets
151 - deployments 154 - deployments
152 - replicasets 155 - replicasets
153 verbs: 156 verbs:
154 - get 157 - get
155 - list 158 - list
156 - watch 159 - watch
157 - create 160 - create
158 - update 161 - update
159 - delete 162 - delete
160 - deletecollection 163 - deletecollection
161 - apiGroups: 164 - apiGroups:
162 - apps 165 - apps
163 resources: 166 resources:
164 - deployments/finalizers 167 - deployments/finalizers
165 verbs: 168 verbs:
166 - update 169 - update
167 - apiGroups: 170 - apiGroups:
168 - healthchecking.openshift.io 171 - healthchecking.openshift.io
169 resources: 172 resources:
170 - machinedisruptionbudgets 173 - machinedisruptionbudgets
171 verbs: 174 verbs:
172 - get 175 - get
173 - list 176 - list
174 - watch 177 - watch
175 - create 178 - create
176 - update 179 - update
177 - delete 180 - delete
178 - apiGroups: 181 - apiGroups:
179 - machine.openshift.io 182 - machine.openshift.io
180 resources: 183 resources:
181 - machines 184 - machines
182 verbs: 185 verbs:
183 - get 186 - get
184 - list 187 - list
185 - watch 188 - watch
186 - create 189 - create
187 - update 190 - update
188 - delete 191 - delete
189 - apiGroups: 192 - apiGroups:
190 - storage.k8s.io 193 - storage.k8s.io
191 resources: 194 resources:
192 - csidrivers 195 - csidrivers
193 verbs: 196 verbs:
194 - create 197 - create
195 - delete 198 - delete
196 - get 199 - get
197 - update 200 - update
198 - apiGroups: 201 - apiGroups:
199 - k8s.cni.cncf.io 202 - k8s.cni.cncf.io
200 resources: 203 resources:
201 - network-attachment-definitions 204 - network-attachment-definitions
202 verbs: 205 verbs:
203 - get 206 - get
204 207
1 1 apiVersion: rbac.authorization.k8s.io/v1
2 2 kind: ClusterRole
3 3 metadata:
4 4 labels:
5 5 app.kubernetes.io/created-by: helm
6 6 app.kubernetes.io/instance: rook-ceph
7 7 app.kubernetes.io/managed-by: Helm
8 8 app.kubernetes.io/name: rook-ceph
9 9 app.kubernetes.io/part-of: rook-ceph-operator
10 10 helm.toolkit.fluxcd.io/name: rook-ceph
11 11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 12 operator: rook
13 13 storage-backend: ceph
14 14 name: rook-ceph-global
15 15 rules:
16 16 - apiGroups:
17 17 - ""
18 18 resources:
19 19 - pods
20 20 - nodes
21 21 - secrets
22 22 - configmaps
23 23 verbs:
24 24 - get
25 25 - list
26 26 - watch
27 27 - apiGroups:
28 28 - ""
29 29 - discovery.k8s.io
30 30 resources:
31 31 - events
32 32 - persistentvolumes
33 33 - persistentvolumeclaims
34 34 - endpoints
35 35 - services
36 36 - endpointslices
37 37 - endpointslices/restricted
38 38 verbs:
39 39 - get
40 40 - list
41 41 - watch
42 42 - patch
43 43 - create
44 44 - update
45 45 - delete
46 46 - apiGroups:
47 47 - events.k8s.io
48 48 resources:
49 49 - events
50 50 verbs:
51 51 - create
52 52 - patch
53 53 - update
54 54 - apiGroups:
55 55 - storage.k8s.io
56 56 resources:
57 57 - storageclasses
58 58 verbs:
59 59 - get
60 60 - list
61 61 - watch
62 62 - apiGroups:
63 63 - batch
64 64 resources:
65 65 - jobs
66 66 - cronjobs
67 67 verbs:
68 68 - get
69 69 - list
70 70 - watch
71 71 - create
72 72 - update
73 73 - delete
74 74 - deletecollection
75 75 - apiGroups:
76 76 - ceph.rook.io
77 77 resources:
78 78 - cephclients
79 79 - cephclusters
80 80 - cephblockpools
81 81 - cephfilesystems
82 82 - cephnfses
83 83 - cephnvmeofgateways
84 84 - cephobjectstores
85 85 - cephobjectstoreusers
86 - cephobjectstoreaccounts
86 87 - cephobjectrealms
87 88 - cephobjectzonegroups
88 89 - cephobjectzones
89 90 - cephbuckettopics
90 91 - cephbucketnotifications
91 92 - cephrbdmirrors
92 93 - cephfilesystemmirrors
93 94 - cephfilesystemsubvolumegroups
94 95 - cephblockpoolradosnamespaces
95 96 - cephcosidrivers
96 97 verbs:
97 98 - get
98 99 - list
99 100 - watch
100 101 - update
101 102 - apiGroups:
102 103 - ceph.rook.io
103 104 resources:
104 105 - cephclients/status
105 106 - cephclusters/status
106 107 - cephblockpools/status
107 108 - cephfilesystems/status
108 109 - cephnfses/status
109 110 - cephnvmeofgateways/status
110 111 - cephobjectstores/status
111 112 - cephobjectstoreusers/status
113 - cephobjectstoreaccounts/status
112 114 - cephobjectrealms/status
113 115 - cephobjectzonegroups/status
114 116 - cephobjectzones/status
115 117 - cephbuckettopics/status
116 118 - cephbucketnotifications/status
117 119 - cephrbdmirrors/status
118 120 - cephfilesystemmirrors/status
119 121 - cephfilesystemsubvolumegroups/status
120 122 - cephblockpoolradosnamespaces/status
121 123 verbs:
122 124 - update
123 125 - apiGroups:
124 126 - ceph.rook.io
125 127 resources:
126 128 - cephclients/finalizers
127 129 - cephclusters/finalizers
128 130 - cephblockpools/finalizers
129 131 - cephfilesystems/finalizers
130 132 - cephnfses/finalizers
131 133 - cephnvmeofgateways/finalizers
132 134 - cephobjectstores/finalizers
133 135 - cephobjectstoreusers/finalizers
136 - cephobjectstoreaccounts/finalizers
134 137 - cephobjectrealms/finalizers
135 138 - cephobjectzonegroups/finalizers
136 139 - cephobjectzones/finalizers
137 140 - cephbuckettopics/finalizers
138 141 - cephbucketnotifications/finalizers
139 142 - cephrbdmirrors/finalizers
140 143 - cephfilesystemmirrors/finalizers
141 144 - cephfilesystemsubvolumegroups/finalizers
142 145 - cephblockpoolradosnamespaces/finalizers
143 146 verbs:
144 147 - update
145 148 - apiGroups:
146 149 - policy
147 150 - apps
148 151 - extensions
149 152 resources:
150 153 - poddisruptionbudgets
151 154 - deployments
152 155 - replicasets
153 156 verbs:
154 157 - get
155 158 - list
156 159 - watch
157 160 - create
158 161 - update
159 162 - delete
160 163 - deletecollection
161 164 - apiGroups:
162 165 - apps
163 166 resources:
164 167 - deployments/finalizers
165 168 verbs:
166 169 - update
167 170 - apiGroups:
168 171 - healthchecking.openshift.io
169 172 resources:
170 173 - machinedisruptionbudgets
171 174 verbs:
172 175 - get
173 176 - list
174 177 - watch
175 178 - create
176 179 - update
177 180 - delete
178 181 - apiGroups:
179 182 - machine.openshift.io
180 183 resources:
181 184 - machines
182 185 verbs:
183 186 - get
184 187 - list
185 188 - watch
186 189 - create
187 190 - update
188 191 - delete
189 192 - apiGroups:
190 193 - storage.k8s.io
191 194 resources:
192 195 - csidrivers
193 196 verbs:
194 197 - create
195 198 - delete
196 199 - get
197 200 - update
198 201 - apiGroups:
199 202 - k8s.cni.cncf.io
200 203 resources:
201 204 - network-attachment-definitions
202 205 verbs:
203 206 - get
204 207

removedClusterRoleBinding ceph-csi-cephfs-ctrlplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-cephfs-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-cephfs-ctrlplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-cephfs-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-cephfs-ctrlplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding ceph-csi-cephfs-nodeplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-cephfs-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-cephfs-nodeplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-cephfs-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-cephfs-nodeplugin-sa
18 namespace: rook-ceph
19 1

changedClusterRoleBinding ceph-csi-manager-rolebinding

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1 1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding 2 kind: ClusterRoleBinding
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app.kubernetes.io/instance: rook-ceph 5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm 6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi 7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph 8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph 9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-manager-rolebinding 10 name: ceph-csi-manager-rolebinding
11 roleRef: 11 roleRef:
12 apiGroup: rbac.authorization.k8s.io 12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole 13 kind: ClusterRole
14 name: ceph-csi-manager-role 14 name: ceph-csi-manager-role
15 subjects: 15 subjects:
16 - kind: ServiceAccount 16 - kind: ServiceAccount
17 name: ceph-csi-controller-manager 17 name: ceph-csi
18 namespace: rook-ceph 18 namespace: rook-ceph
19 19
1 1 apiVersion: rbac.authorization.k8s.io/v1
2 2 kind: ClusterRoleBinding
3 3 metadata:
4 4 labels:
5 5 app.kubernetes.io/instance: rook-ceph
6 6 app.kubernetes.io/managed-by: Helm
7 7 app.kubernetes.io/name: ceph-csi
8 8 helm.toolkit.fluxcd.io/name: rook-ceph
9 9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 10 name: ceph-csi-manager-rolebinding
11 11 roleRef:
12 12 apiGroup: rbac.authorization.k8s.io
13 13 kind: ClusterRole
14 14 name: ceph-csi-manager-role
15 15 subjects:
16 16 - kind: ServiceAccount
17 name: ceph-csi-controller-manager
17 name: ceph-csi
18 18 namespace: rook-ceph
19 19

changedClusterRoleBinding ceph-csi-metrics-auth-rolebinding

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1 1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding 2 kind: ClusterRoleBinding
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app.kubernetes.io/instance: rook-ceph 5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm 6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi 7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph 8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph 9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-metrics-auth-rolebinding 10 name: ceph-csi-metrics-auth-rolebinding
11 roleRef: 11 roleRef:
12 apiGroup: rbac.authorization.k8s.io 12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole 13 kind: ClusterRole
14 name: ceph-csi-metrics-auth-role 14 name: ceph-csi-metrics-auth-role
15 subjects: 15 subjects:
16 - kind: ServiceAccount 16 - kind: ServiceAccount
17 name: ceph-csi-controller-manager 17 name: ceph-csi
18 namespace: rook-ceph 18 namespace: rook-ceph
19 19
1 1 apiVersion: rbac.authorization.k8s.io/v1
2 2 kind: ClusterRoleBinding
3 3 metadata:
4 4 labels:
5 5 app.kubernetes.io/instance: rook-ceph
6 6 app.kubernetes.io/managed-by: Helm
7 7 app.kubernetes.io/name: ceph-csi
8 8 helm.toolkit.fluxcd.io/name: rook-ceph
9 9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 10 name: ceph-csi-metrics-auth-rolebinding
11 11 roleRef:
12 12 apiGroup: rbac.authorization.k8s.io
13 13 kind: ClusterRole
14 14 name: ceph-csi-metrics-auth-role
15 15 subjects:
16 16 - kind: ServiceAccount
17 name: ceph-csi-controller-manager
17 name: ceph-csi
18 18 namespace: rook-ceph
19 19

removedClusterRoleBinding ceph-csi-nfs-ctrlplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nfs-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nfs-ctrlplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nfs-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nfs-ctrlplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding ceph-csi-nfs-nodeplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nfs-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nfs-nodeplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nfs-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nfs-nodeplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding ceph-csi-nvmeof-ctrlplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nvmeof-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nvmeof-ctrlplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nvmeof-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nvmeof-ctrlplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding ceph-csi-nvmeof-nodeplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nvmeof-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nvmeof-nodeplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-nvmeof-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-nvmeof-nodeplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding ceph-csi-rbd-ctrlplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-rbd-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-rbd-ctrlplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-rbd-ctrlplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-rbd-ctrlplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding ceph-csi-rbd-nodeplugin-crb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-rbd-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-rbd-nodeplugin-sa
18 namespace: rook-ceph
19 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-crb
11 roleRef:
12 apiGroup: rbac.authorization.k8s.io
13 kind: ClusterRole
14 name: ceph-csi-rbd-nodeplugin-cr
15 subjects:
16 - kind: ServiceAccount
17 name: ceph-csi-rbd-nodeplugin-sa
18 namespace: rook-ceph
19 1

removedClusterRoleBinding cephfs-csi-nodeplugin-role

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-nodeplugin-role
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: cephfs-csi-nodeplugin
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-cephfs-plugin-sa
22 namespace: rook-ceph
23 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-nodeplugin-role
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: cephfs-csi-nodeplugin
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-cephfs-plugin-sa
22 namespace: rook-ceph
23 1

removedClusterRoleBinding cephfs-csi-provisioner-role

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-provisioner-role
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: cephfs-external-provisioner-runner
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-cephfs-provisioner-sa
22 namespace: rook-ceph
23 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-provisioner-role
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: cephfs-external-provisioner-runner
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-cephfs-provisioner-sa
22 namespace: rook-ceph
23 1

removedClusterRoleBinding rbd-csi-nodeplugin

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-nodeplugin
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: rbd-csi-nodeplugin
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-rbd-plugin-sa
22 namespace: rook-ceph
23 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-nodeplugin
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: rbd-csi-nodeplugin
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-rbd-plugin-sa
22 namespace: rook-ceph
23 1

removedClusterRoleBinding rbd-csi-provisioner-role

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-provisioner-role
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: rbd-external-provisioner-runner
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-rbd-provisioner-sa
22 namespace: rook-ceph
23 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: ClusterRoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-provisioner-role
15 roleRef:
16 apiGroup: rbac.authorization.k8s.io
17 kind: ClusterRole
18 name: rbd-external-provisioner-runner
19 subjects:
20 - kind: ServiceAccount
21 name: rook-csi-rbd-provisioner-sa
22 namespace: rook-ceph
23 1

changedConfigMap rook-ceph/rook-ceph-operator-config

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1 1 apiVersion: v1
2 data: 2 data:
3 CSI_CEPHFS_ATTACH_REQUIRED: "true"
4 CSI_CEPHFS_FSGROUPPOLICY: File
5 CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=prefer-crc
6 CSI_CEPHFS_PLUGIN_RESOURCE: |
7 - name : driver-registrar
8 resource:
9 requests:
10 memory: 128Mi
11 cpu: 50m
12 limits:
13 memory: 256Mi
14 - name : csi-cephfsplugin
15 resource:
16 requests:
17 memory: 512Mi
18 cpu: 250m
19 limits:
20 memory: 1Gi
21 - name : liveness-prometheus
22 resource:
23 requests:
24 memory: 128Mi
25 cpu: 50m
26 limits:
27 memory: 256Mi
28 CSI_CEPHFS_PROVISIONER_RESOURCE: |
29 - name : csi-provisioner
30 resource:
31 requests:
32 memory: 128Mi
33 cpu: 100m
34 limits:
35 memory: 256Mi
36 - name : csi-resizer
37 resource:
38 requests:
39 memory: 128Mi
40 cpu: 100m
41 limits:
42 memory: 256Mi
43 - name : csi-attacher
44 resource:
45 requests:
46 memory: 128Mi
47 cpu: 100m
48 limits:
49 memory: 256Mi
50 - name : csi-snapshotter
51 resource:
52 requests:
53 memory: 128Mi
54 cpu: 100m
55 limits:
56 memory: 256Mi
57 - name : csi-cephfsplugin
58 resource:
59 requests:
60 memory: 512Mi
61 cpu: 250m
62 limits:
63 memory: 1Gi
64 - name : liveness-prometheus
65 resource:
66 requests:
67 memory: 128Mi
68 cpu: 50m
69 limits:
70 memory: 256Mi
71 CSI_ENABLE_CEPHFS_SNAPSHOTTER: "true"
72 CSI_ENABLE_CROSS_NAMESPACE_VOLUME_DATA_SOURCE: "false"
73 CSI_ENABLE_CSIADDONS: "false"
74 CSI_ENABLE_ENCRYPTION: "false"
75 CSI_ENABLE_HOST_NETWORK: "true"
76 CSI_ENABLE_METADATA: "false"
77 CSI_ENABLE_NFS_SNAPSHOTTER: "true"
78 CSI_ENABLE_OMAP_GENERATOR: "false"
79 CSI_ENABLE_RBD_SNAPSHOTTER: "true"
80 CSI_ENABLE_TOPOLOGY: "false"
81 CSI_ENABLE_VOLUME_GROUP_SNAPSHOT: "true"
82 CSI_FORCE_CEPHFS_KERNEL_CLIENT: "true"
83 CSI_GRPC_TIMEOUT_SECONDS: "150"
84 CSI_NFS_ATTACH_REQUIRED: "true"
85 CSI_NFS_FSGROUPPOLICY: File
86 CSI_NFS_PLUGIN_RESOURCE: |
87 - name : driver-registrar
88 resource:
89 requests:
90 memory: 128Mi
91 cpu: 50m
92 limits:
93 memory: 256Mi
94 - name : csi-nfsplugin
95 resource:
96 requests:
97 memory: 512Mi
98 cpu: 250m
99 limits:
100 memory: 1Gi
101 CSI_NFS_PROVISIONER_RESOURCE: |
102 - name : csi-provisioner
103 resource:
104 requests:
105 memory: 128Mi
106 cpu: 100m
107 limits:
108 memory: 256Mi
109 - name : csi-nfsplugin
110 resource:
111 requests:
112 memory: 512Mi
113 cpu: 250m
114 limits:
115 memory: 1Gi
116 - name : csi-attacher
117 resource:
118 requests:
119 memory: 512Mi
120 cpu: 250m
121 limits:
122 memory: 1Gi
123 CSI_PLUGIN_ENABLE_SELINUX_HOST_MOUNT: "false"
124 CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
125 CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
126 CSI_PROVISIONER_REPLICAS: "2"
127 CSI_RBD_ATTACH_REQUIRED: "true"
128 CSI_RBD_FSGROUPPOLICY: File
129 CSI_RBD_PLUGIN_RESOURCE: |
130 - name : driver-registrar
131 resource:
132 requests:
133 memory: 128Mi
134 cpu: 50m
135 limits:
136 memory: 256Mi
137 - name : csi-rbdplugin
138 resource:
139 requests:
140 memory: 512Mi
141 cpu: 250m
142 limits:
143 memory: 1Gi
144 - name : liveness-prometheus
145 resource:
146 requests:
147 memory: 128Mi
148 cpu: 50m
149 limits:
150 memory: 256Mi
151 CSI_RBD_PROVISIONER_RESOURCE: |
152 - name : csi-provisioner
153 resource:
154 requests:
155 memory: 128Mi
156 cpu: 100m
157 limits:
158 memory: 256Mi
159 - name : csi-resizer
160 resource:
161 requests:
162 memory: 128Mi
163 cpu: 100m
164 limits:
165 memory: 256Mi
166 - name : csi-attacher
167 resource:
168 requests:
169 memory: 128Mi
170 cpu: 100m
171 limits:
172 memory: 256Mi
173 - name : csi-snapshotter
174 resource:
175 requests:
176 memory: 128Mi
177 cpu: 100m
178 limits:
179 memory: 256Mi
180 - name : csi-rbdplugin
181 resource:
182 requests:
183 memory: 512Mi
184 limits:
185 memory: 1Gi
186 - name : csi-omap-generator
187 resource:
188 requests:
189 memory: 512Mi
190 cpu: 250m
191 limits:
192 memory: 1Gi
193 - name : liveness-prometheus
194 resource:
195 requests:
196 memory: 128Mi
197 cpu: 50m
198 limits:
199 memory: 256Mi
200 ROOK_CEPH_ALLOW_LOOP_DEVICES: "false" 3 ROOK_CEPH_ALLOW_LOOP_DEVICES: "false"
201 ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: "15" 4 ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: "15"
202 ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.11.0 5 ROOK_CEPH_MON_RUN_AS_ROOT: "false"
203 ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.2 6 ROOK_DELETE_UNUSED_CRUSH_RULES: "true"
204 ROOK_CSI_DISABLE_DRIVER: "false"
205 ROOK_CSI_ENABLE_CEPHFS: "true"
206 ROOK_CSI_ENABLE_NFS: "false"
207 ROOK_CSI_ENABLE_RBD: "true"
208 ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
209 ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.1.1
210 ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0
211 ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.1.0
212 ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0
213 ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.14.0
214 ROOK_ENABLE_DISCOVERY_DAEMON: "false" 7 ROOK_ENABLE_DISCOVERY_DAEMON: "false"
215 ROOK_LOG_LEVEL: INFO 8 ROOK_LOG_LEVEL: INFO
216 ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS: maxObjects,maxSize 9 ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS: maxObjects,maxSize
217 ROOK_OBC_WATCH_OPERATOR_NAMESPACE: "true" 10 ROOK_OBC_WATCH_OPERATOR_NAMESPACE: "true"
218 ROOK_USE_CSI_OPERATOR: "true"
219 kind: ConfigMap 11 kind: ConfigMap
220 metadata: 12 metadata:
221 labels: 13 labels:
222 app.kubernetes.io/created-by: helm 14 app.kubernetes.io/created-by: helm
223 app.kubernetes.io/instance: rook-ceph 15 app.kubernetes.io/instance: rook-ceph
224 app.kubernetes.io/managed-by: Helm 16 app.kubernetes.io/managed-by: Helm
225 app.kubernetes.io/name: rook-ceph 17 app.kubernetes.io/name: rook-ceph
226 app.kubernetes.io/part-of: rook-ceph-operator 18 app.kubernetes.io/part-of: rook-ceph-operator
227 helm.toolkit.fluxcd.io/name: rook-ceph 19 helm.toolkit.fluxcd.io/name: rook-ceph
228 helm.toolkit.fluxcd.io/namespace: rook-ceph 20 helm.toolkit.fluxcd.io/namespace: rook-ceph
229 operator: rook 21 operator: rook
230 storage-backend: ceph 22 storage-backend: ceph
231 name: rook-ceph-operator-config 23 name: rook-ceph-operator-config
232 namespace: rook-ceph 24 namespace: rook-ceph
233 25
1 1 apiVersion: v1
2 2 data:
3 CSI_CEPHFS_ATTACH_REQUIRED: "true"
4 CSI_CEPHFS_FSGROUPPOLICY: File
5 CSI_CEPHFS_KERNEL_MOUNT_OPTIONS: ms_mode=prefer-crc
6 CSI_CEPHFS_PLUGIN_RESOURCE: |
7 - name : driver-registrar
8 resource:
9 requests:
10 memory: 128Mi
11 cpu: 50m
12 limits:
13 memory: 256Mi
14 - name : csi-cephfsplugin
15 resource:
16 requests:
17 memory: 512Mi
18 cpu: 250m
19 limits:
20 memory: 1Gi
21 - name : liveness-prometheus
22 resource:
23 requests:
24 memory: 128Mi
25 cpu: 50m
26 limits:
27 memory: 256Mi
28 CSI_CEPHFS_PROVISIONER_RESOURCE: |
29 - name : csi-provisioner
30 resource:
31 requests:
32 memory: 128Mi
33 cpu: 100m
34 limits:
35 memory: 256Mi
36 - name : csi-resizer
37 resource:
38 requests:
39 memory: 128Mi
40 cpu: 100m
41 limits:
42 memory: 256Mi
43 - name : csi-attacher
44 resource:
45 requests:
46 memory: 128Mi
47 cpu: 100m
48 limits:
49 memory: 256Mi
50 - name : csi-snapshotter
51 resource:
52 requests:
53 memory: 128Mi
54 cpu: 100m
55 limits:
56 memory: 256Mi
57 - name : csi-cephfsplugin
58 resource:
59 requests:
60 memory: 512Mi
61 cpu: 250m
62 limits:
63 memory: 1Gi
64 - name : liveness-prometheus
65 resource:
66 requests:
67 memory: 128Mi
68 cpu: 50m
69 limits:
70 memory: 256Mi
71 CSI_ENABLE_CEPHFS_SNAPSHOTTER: "true"
72 CSI_ENABLE_CROSS_NAMESPACE_VOLUME_DATA_SOURCE: "false"
73 CSI_ENABLE_CSIADDONS: "false"
74 CSI_ENABLE_ENCRYPTION: "false"
75 CSI_ENABLE_HOST_NETWORK: "true"
76 CSI_ENABLE_METADATA: "false"
77 CSI_ENABLE_NFS_SNAPSHOTTER: "true"
78 CSI_ENABLE_OMAP_GENERATOR: "false"
79 CSI_ENABLE_RBD_SNAPSHOTTER: "true"
80 CSI_ENABLE_TOPOLOGY: "false"
81 CSI_ENABLE_VOLUME_GROUP_SNAPSHOT: "true"
82 CSI_FORCE_CEPHFS_KERNEL_CLIENT: "true"
83 CSI_GRPC_TIMEOUT_SECONDS: "150"
84 CSI_NFS_ATTACH_REQUIRED: "true"
85 CSI_NFS_FSGROUPPOLICY: File
86 CSI_NFS_PLUGIN_RESOURCE: |
87 - name : driver-registrar
88 resource:
89 requests:
90 memory: 128Mi
91 cpu: 50m
92 limits:
93 memory: 256Mi
94 - name : csi-nfsplugin
95 resource:
96 requests:
97 memory: 512Mi
98 cpu: 250m
99 limits:
100 memory: 1Gi
101 CSI_NFS_PROVISIONER_RESOURCE: |
102 - name : csi-provisioner
103 resource:
104 requests:
105 memory: 128Mi
106 cpu: 100m
107 limits:
108 memory: 256Mi
109 - name : csi-nfsplugin
110 resource:
111 requests:
112 memory: 512Mi
113 cpu: 250m
114 limits:
115 memory: 1Gi
116 - name : csi-attacher
117 resource:
118 requests:
119 memory: 512Mi
120 cpu: 250m
121 limits:
122 memory: 1Gi
123 CSI_PLUGIN_ENABLE_SELINUX_HOST_MOUNT: "false"
124 CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
125 CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
126 CSI_PROVISIONER_REPLICAS: "2"
127 CSI_RBD_ATTACH_REQUIRED: "true"
128 CSI_RBD_FSGROUPPOLICY: File
129 CSI_RBD_PLUGIN_RESOURCE: |
130 - name : driver-registrar
131 resource:
132 requests:
133 memory: 128Mi
134 cpu: 50m
135 limits:
136 memory: 256Mi
137 - name : csi-rbdplugin
138 resource:
139 requests:
140 memory: 512Mi
141 cpu: 250m
142 limits:
143 memory: 1Gi
144 - name : liveness-prometheus
145 resource:
146 requests:
147 memory: 128Mi
148 cpu: 50m
149 limits:
150 memory: 256Mi
151 CSI_RBD_PROVISIONER_RESOURCE: |
152 - name : csi-provisioner
153 resource:
154 requests:
155 memory: 128Mi
156 cpu: 100m
157 limits:
158 memory: 256Mi
159 - name : csi-resizer
160 resource:
161 requests:
162 memory: 128Mi
163 cpu: 100m
164 limits:
165 memory: 256Mi
166 - name : csi-attacher
167 resource:
168 requests:
169 memory: 128Mi
170 cpu: 100m
171 limits:
172 memory: 256Mi
173 - name : csi-snapshotter
174 resource:
175 requests:
176 memory: 128Mi
177 cpu: 100m
178 limits:
179 memory: 256Mi
180 - name : csi-rbdplugin
181 resource:
182 requests:
183 memory: 512Mi
184 limits:
185 memory: 1Gi
186 - name : csi-omap-generator
187 resource:
188 requests:
189 memory: 512Mi
190 cpu: 250m
191 limits:
192 memory: 1Gi
193 - name : liveness-prometheus
194 resource:
195 requests:
196 memory: 128Mi
197 cpu: 50m
198 limits:
199 memory: 256Mi
200 3 ROOK_CEPH_ALLOW_LOOP_DEVICES: "false"
201 4 ROOK_CEPH_COMMANDS_TIMEOUT_SECONDS: "15"
202 ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.11.0
203 ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.2
204 ROOK_CSI_DISABLE_DRIVER: "false"
205 ROOK_CSI_ENABLE_CEPHFS: "true"
206 ROOK_CSI_ENABLE_NFS: "false"
207 ROOK_CSI_ENABLE_RBD: "true"
208 ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
209 ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.1.1
210 ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0
211 ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.1.0
212 ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0
213 ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.14.0
5 ROOK_CEPH_MON_RUN_AS_ROOT: "false"
6 ROOK_DELETE_UNUSED_CRUSH_RULES: "true"
214 7 ROOK_ENABLE_DISCOVERY_DAEMON: "false"
215 8 ROOK_LOG_LEVEL: INFO
216 9 ROOK_OBC_ALLOW_ADDITIONAL_CONFIG_FIELDS: maxObjects,maxSize
217 10 ROOK_OBC_WATCH_OPERATOR_NAMESPACE: "true"
218 ROOK_USE_CSI_OPERATOR: "true"
219 11 kind: ConfigMap
220 12 metadata:
221 13 labels:
222 14 app.kubernetes.io/created-by: helm
223 15 app.kubernetes.io/instance: rook-ceph
224 16 app.kubernetes.io/managed-by: Helm
225 17 app.kubernetes.io/name: rook-ceph
226 18 app.kubernetes.io/part-of: rook-ceph-operator
227 19 helm.toolkit.fluxcd.io/name: rook-ceph
228 20 helm.toolkit.fluxcd.io/namespace: rook-ceph
229 21 operator: rook
230 22 storage-backend: ceph
231 23 name: rook-ceph-operator-config
232 24 namespace: rook-ceph
233 25

addedConfigMap rook-ceph/rook-csi-operator-image-set-configmap

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 data:
3 addons: quay.io/csiaddons/k8s-sidecar:v0.14.0
4 attacher: registry.k8s.io/sig-storage/csi-attacher:v4.12.0
5 plugin: quay.io/cephcsi/cephcsi:v3.17.0
6 provisioner: registry.k8s.io/sig-storage/csi-provisioner:v6.2.0
7 registrar: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0
8 resizer: registry.k8s.io/sig-storage/csi-resizer:v2.1.0
9 snapshotter: registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0
10 kind: ConfigMap
11 metadata:
12 labels:
13 app.kubernetes.io/created-by: helm
14 app.kubernetes.io/instance: rook-ceph
15 app.kubernetes.io/managed-by: Helm
16 app.kubernetes.io/name: rook-ceph
17 app.kubernetes.io/part-of: rook-ceph-operator
18 helm.toolkit.fluxcd.io/name: rook-ceph
19 helm.toolkit.fluxcd.io/namespace: rook-ceph
20 operator: rook
21 storage-backend: ceph
22 name: rook-csi-operator-image-set-configmap
23 namespace: rook-ceph
1 24
1 apiVersion: v1
2 data:
3 addons: quay.io/csiaddons/k8s-sidecar:v0.14.0
4 attacher: registry.k8s.io/sig-storage/csi-attacher:v4.12.0
5 plugin: quay.io/cephcsi/cephcsi:v3.17.0
6 provisioner: registry.k8s.io/sig-storage/csi-provisioner:v6.2.0
7 registrar: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0
8 resizer: registry.k8s.io/sig-storage/csi-resizer:v2.1.0
9 snapshotter: registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0
10 kind: ConfigMap
11 metadata:
12 labels:
13 app.kubernetes.io/created-by: helm
14 app.kubernetes.io/instance: rook-ceph
15 app.kubernetes.io/managed-by: Helm
16 app.kubernetes.io/name: rook-ceph
17 app.kubernetes.io/part-of: rook-ceph-operator
18 helm.toolkit.fluxcd.io/name: rook-ceph
19 helm.toolkit.fluxcd.io/namespace: rook-ceph
20 operator: rook
21 storage-backend: ceph
22 name: rook-csi-operator-image-set-configmap
23 namespace: rook-ceph
1 24

changedDeployment rook-ceph/ceph-csi-controller-manager

HelmRelease rook-ceph/rook-ceph
1 apiVersion: apps/v1 1 apiVersion: apps/v1
2 kind: Deployment 2 kind: Deployment
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app.kubernetes.io/instance: rook-ceph 5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm 6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi 7 app.kubernetes.io/name: ceph-csi
8 control-plane: controller-manager 8 control-plane: controller-manager
9 helm.toolkit.fluxcd.io/name: rook-ceph 9 helm.toolkit.fluxcd.io/name: rook-ceph
10 helm.toolkit.fluxcd.io/namespace: rook-ceph 10 helm.toolkit.fluxcd.io/namespace: rook-ceph
11 name: ceph-csi-controller-manager 11 name: ceph-csi-controller-manager
12 namespace: rook-ceph 12 namespace: rook-ceph
13 spec: 13 spec:
14 replicas: 1 14 replicas: 1
15 selector: 15 selector:
16 matchLabels: 16 matchLabels:
17 app.kubernetes.io/instance: rook-ceph 17 app.kubernetes.io/instance: rook-ceph
18 app.kubernetes.io/name: ceph-csi 18 app.kubernetes.io/name: ceph-csi
19 control-plane: ceph-csi-op-controller-manager 19 control-plane: ceph-csi-op-controller-manager
20 template: 20 template:
21 metadata: 21 metadata:
22 annotations: 22 annotations:
23 kubectl.kubernetes.io/default-container: manager 23 kubectl.kubernetes.io/default-container: manager
24 labels: 24 labels:
25 app.kubernetes.io/instance: rook-ceph 25 app.kubernetes.io/instance: rook-ceph
26 app.kubernetes.io/name: ceph-csi 26 app.kubernetes.io/name: ceph-csi
27 control-plane: ceph-csi-op-controller-manager 27 control-plane: ceph-csi-op-controller-manager
28 spec: 28 spec:
29 containers: 29 containers:
30 - args: 30 - args:
31 - --leader-elect 31 - --leader-elect
32 command: 32 command:
33 - /manager 33 - /manager
34 env: 34 env:
35 - name: OPERATOR_NAMESPACE 35 - name: OPERATOR_NAMESPACE
36 valueFrom: 36 valueFrom:
37 fieldRef: 37 fieldRef:
38 fieldPath: metadata.namespace 38 fieldPath: metadata.namespace
39 - name: CSI_SERVICE_ACCOUNT_PREFIX 39 - name: CSI_SERVICE_ACCOUNT_PREFIX
40 value: ceph-csi- 40 value: ""
41 - name: WATCH_NAMESPACE 41 - name: WATCH_NAMESPACE
42 value: "" 42 value: ""
43 - name: KUBERNETES_CLUSTER_DOMAIN 43 - name: KUBERNETES_CLUSTER_DOMAIN
44 value: cluster.local 44 value: cluster.local
45 image: quay.io/cephcsi/ceph-csi-operator:v0.6.0 45 image: quay.io/cephcsi/ceph-csi-operator:v1.0.1
46 livenessProbe: 46 livenessProbe:
47 httpGet: 47 httpGet:
48 path: /healthz 48 path: /healthz
49 port: 8081 49 port: 8081
50 initialDelaySeconds: 15 50 initialDelaySeconds: 15
51 periodSeconds: 20 51 periodSeconds: 20
52 name: manager 52 name: manager
53 readinessProbe: 53 readinessProbe:
54 httpGet: 54 httpGet:
55 path: /readyz 55 path: /readyz
56 port: 8081 56 port: 8081
57 initialDelaySeconds: 5 57 initialDelaySeconds: 5
58 periodSeconds: 10 58 periodSeconds: 10
59 resources: 59 resources:
60 limits: 60 limits:
61 cpu: 500m 61 cpu: 500m
62 memory: 128Mi 62 memory: 128Mi
63 requests: 63 requests:
64 cpu: 10m 64 cpu: 10m
65 memory: 64Mi 65 memory: 64Mi
66 securityContext: 66 securityContext:
67 allowPrivilegeEscalation: false 67 allowPrivilegeEscalation: false
68 capabilities: 68 capabilities:
69 drop: 69 drop:
70 - ALL 70 - ALL
71 readOnlyRootFilesystem: true 71 readOnlyRootFilesystem: true
72 imagePullSecrets: [] 72 imagePullSecrets: []
73 nodeSelector: {}
74 priorityClassName: null
73 securityContext: 75 securityContext:
74 runAsNonRoot: true 76 runAsNonRoot: true
75 serviceAccountName: ceph-csi-controller-manager 77 serviceAccountName: ceph-csi
76 terminationGracePeriodSeconds: 10 78 terminationGracePeriodSeconds: 10
79 tolerations: []
80 topologySpreadConstraints: []
77 81
1 1 apiVersion: apps/v1
2 2 kind: Deployment
3 3 metadata:
4 4 labels:
5 5 app.kubernetes.io/instance: rook-ceph
6 6 app.kubernetes.io/managed-by: Helm
7 7 app.kubernetes.io/name: ceph-csi
8 8 control-plane: controller-manager
9 9 helm.toolkit.fluxcd.io/name: rook-ceph
10 10 helm.toolkit.fluxcd.io/namespace: rook-ceph
11 11 name: ceph-csi-controller-manager
12 12 namespace: rook-ceph
13 13 spec:
14 14 replicas: 1
15 15 selector:
16 16 matchLabels:
17 17 app.kubernetes.io/instance: rook-ceph
18 18 app.kubernetes.io/name: ceph-csi
19 19 control-plane: ceph-csi-op-controller-manager
20 20 template:
21 21 metadata:
22 22 annotations:
23 23 kubectl.kubernetes.io/default-container: manager
24 24 labels:
25 25 app.kubernetes.io/instance: rook-ceph
26 26 app.kubernetes.io/name: ceph-csi
27 27 control-plane: ceph-csi-op-controller-manager
28 28 spec:
29 29 containers:
30 30 - args:
31 31 - --leader-elect
32 32 command:
33 33 - /manager
34 34 env:
35 35 - name: OPERATOR_NAMESPACE
36 36 valueFrom:
37 37 fieldRef:
38 38 fieldPath: metadata.namespace
39 39 - name: CSI_SERVICE_ACCOUNT_PREFIX
40 value: ceph-csi-
40 value: ""
41 41 - name: WATCH_NAMESPACE
42 42 value: ""
43 43 - name: KUBERNETES_CLUSTER_DOMAIN
44 44 value: cluster.local
45 image: quay.io/cephcsi/ceph-csi-operator:v0.6.0
45 image: quay.io/cephcsi/ceph-csi-operator:v1.0.1
46 46 livenessProbe:
47 47 httpGet:
48 48 path: /healthz
49 49 port: 8081
50 50 initialDelaySeconds: 15
51 51 periodSeconds: 20
52 52 name: manager
53 53 readinessProbe:
54 54 httpGet:
55 55 path: /readyz
56 56 port: 8081
57 57 initialDelaySeconds: 5
58 58 periodSeconds: 10
59 59 resources:
60 60 limits:
61 61 cpu: 500m
62 62 memory: 128Mi
63 63 requests:
64 64 cpu: 10m
65 65 memory: 64Mi
66 66 securityContext:
67 67 allowPrivilegeEscalation: false
68 68 capabilities:
69 69 drop:
70 70 - ALL
71 71 readOnlyRootFilesystem: true
72 72 imagePullSecrets: []
73 nodeSelector: {}
74 priorityClassName: null
73 75 securityContext:
74 76 runAsNonRoot: true
75 serviceAccountName: ceph-csi-controller-manager
77 serviceAccountName: ceph-csi
76 78 terminationGracePeriodSeconds: 10
79 tolerations: []
80 topologySpreadConstraints: []
77 81

changedDeployment rook-ceph/rook-ceph-operator

HelmRelease rook-ceph/rook-ceph
1 apiVersion: apps/v1 1 apiVersion: apps/v1
2 kind: Deployment 2 kind: Deployment
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app.kubernetes.io/created-by: helm 5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph 6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm 7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph 8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator 9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph 10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph 11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook 12 operator: rook
13 storage-backend: ceph 13 storage-backend: ceph
14 name: rook-ceph-operator 14 name: rook-ceph-operator
15 namespace: rook-ceph 15 namespace: rook-ceph
16 spec: 16 spec:
17 replicas: 1 17 replicas: 1
18 selector: 18 selector:
19 matchLabels: 19 matchLabels:
20 app: rook-ceph-operator 20 app: rook-ceph-operator
21 strategy: 21 strategy:
22 type: Recreate 22 type: Recreate
23 template: 23 template:
24 metadata: 24 metadata:
25 labels: 25 labels:
26 app: rook-ceph-operator 26 app: rook-ceph-operator
27 spec: 27 spec:
28 containers: 28 containers:
29 - args: 29 - args:
30 - ceph 30 - ceph
31 - operator 31 - operator
32 env: 32 env:
33 - name: ROOK_CURRENT_NAMESPACE_ONLY 33 - name: ROOK_CURRENT_NAMESPACE_ONLY
34 value: "false" 34 value: "false"
35 - name: ROOK_RECONCILE_CONCURRENT_CLUSTERS 35 - name: ROOK_RECONCILE_CONCURRENT_CLUSTERS
36 value: "1" 36 value: "1"
37 - name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED 37 - name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
38 value: "false" 38 value: "false"
39 - name: ROOK_DISABLE_DEVICE_HOTPLUG 39 - name: ROOK_DISABLE_DEVICE_HOTPLUG
40 value: "false" 40 value: "false"
41 - name: ROOK_DISCOVER_DEVICES_INTERVAL 41 - name: ROOK_DISCOVER_DEVICES_INTERVAL
42 value: 60m 42 value: 60m
43 - name: ROOK_UNREACHABLE_NODE_TOLERATION_SECONDS 43 - name: ROOK_UNREACHABLE_NODE_TOLERATION_SECONDS
44 value: "5" 44 value: "5"
45 - name: NODE_NAME 45 - name: NODE_NAME
46 valueFrom: 46 valueFrom:
47 fieldRef: 47 fieldRef:
48 fieldPath: spec.nodeName 48 fieldPath: spec.nodeName
49 - name: POD_NAME 49 - name: POD_NAME
50 valueFrom: 50 valueFrom:
51 fieldRef: 51 fieldRef:
52 fieldPath: metadata.name 52 fieldPath: metadata.name
53 - name: POD_NAMESPACE 53 - name: POD_NAMESPACE
54 valueFrom: 54 valueFrom:
55 fieldRef: 55 fieldRef:
56 fieldPath: metadata.namespace 56 fieldPath: metadata.namespace
57 image: ghcr.io/rook/ceph:v1.19.6 57 image: ghcr.io/rook/ceph:v1.20.0
58 imagePullPolicy: IfNotPresent 58 imagePullPolicy: IfNotPresent
59 name: rook-ceph-operator 59 name: rook-ceph-operator
60 resources: 60 resources:
61 limits: 61 limits:
62 memory: 512Mi 62 memory: 512Mi
63 requests: 63 requests:
64 cpu: 100m 64 cpu: 100m
65 memory: 128Mi 65 memory: 128Mi
66 securityContext: 66 securityContext:
67 capabilities: 67 capabilities:
68 drop: 68 drop:
69 - ALL 69 - ALL
70 runAsGroup: 2016 70 runAsGroup: 2016
71 runAsNonRoot: true 71 runAsNonRoot: true
72 runAsUser: 2016 72 runAsUser: 2016
73 volumeMounts: 73 volumeMounts:
74 - mountPath: /var/lib/rook 74 - mountPath: /var/lib/rook
75 name: rook-config 75 name: rook-config
76 - mountPath: /etc/ceph 76 - mountPath: /etc/ceph
77 name: default-config-dir 77 name: default-config-dir
78 serviceAccountName: rook-ceph-system 78 serviceAccountName: rook-ceph-system
79 tolerations: 79 tolerations:
80 - effect: NoExecute 80 - effect: NoExecute
81 key: node.kubernetes.io/unreachable 81 key: node.kubernetes.io/unreachable
82 operator: Exists 82 operator: Exists
83 tolerationSeconds: 5 83 tolerationSeconds: 5
84 volumes: 84 volumes:
85 - emptyDir: {} 85 - emptyDir: {}
86 name: rook-config 86 name: rook-config
87 - emptyDir: {} 87 - emptyDir: {}
88 name: default-config-dir 88 name: default-config-dir
89 89
1 1 apiVersion: apps/v1
2 2 kind: Deployment
3 3 metadata:
4 4 labels:
5 5 app.kubernetes.io/created-by: helm
6 6 app.kubernetes.io/instance: rook-ceph
7 7 app.kubernetes.io/managed-by: Helm
8 8 app.kubernetes.io/name: rook-ceph
9 9 app.kubernetes.io/part-of: rook-ceph-operator
10 10 helm.toolkit.fluxcd.io/name: rook-ceph
11 11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 12 operator: rook
13 13 storage-backend: ceph
14 14 name: rook-ceph-operator
15 15 namespace: rook-ceph
16 16 spec:
17 17 replicas: 1
18 18 selector:
19 19 matchLabels:
20 20 app: rook-ceph-operator
21 21 strategy:
22 22 type: Recreate
23 23 template:
24 24 metadata:
25 25 labels:
26 26 app: rook-ceph-operator
27 27 spec:
28 28 containers:
29 29 - args:
30 30 - ceph
31 31 - operator
32 32 env:
33 33 - name: ROOK_CURRENT_NAMESPACE_ONLY
34 34 value: "false"
35 35 - name: ROOK_RECONCILE_CONCURRENT_CLUSTERS
36 36 value: "1"
37 37 - name: ROOK_HOSTPATH_REQUIRES_PRIVILEGED
38 38 value: "false"
39 39 - name: ROOK_DISABLE_DEVICE_HOTPLUG
40 40 value: "false"
41 41 - name: ROOK_DISCOVER_DEVICES_INTERVAL
42 42 value: 60m
43 43 - name: ROOK_UNREACHABLE_NODE_TOLERATION_SECONDS
44 44 value: "5"
45 45 - name: NODE_NAME
46 46 valueFrom:
47 47 fieldRef:
48 48 fieldPath: spec.nodeName
49 49 - name: POD_NAME
50 50 valueFrom:
51 51 fieldRef:
52 52 fieldPath: metadata.name
53 53 - name: POD_NAMESPACE
54 54 valueFrom:
55 55 fieldRef:
56 56 fieldPath: metadata.namespace
57 image: ghcr.io/rook/ceph:v1.19.6
57 image: ghcr.io/rook/ceph:v1.20.0
58 58 imagePullPolicy: IfNotPresent
59 59 name: rook-ceph-operator
60 60 resources:
61 61 limits:
62 62 memory: 512Mi
63 63 requests:
64 64 cpu: 100m
65 65 memory: 128Mi
66 66 securityContext:
67 67 capabilities:
68 68 drop:
69 69 - ALL
70 70 runAsGroup: 2016
71 71 runAsNonRoot: true
72 72 runAsUser: 2016
73 73 volumeMounts:
74 74 - mountPath: /var/lib/rook
75 75 name: rook-config
76 76 - mountPath: /etc/ceph
77 77 name: default-config-dir
78 78 serviceAccountName: rook-ceph-system
79 79 tolerations:
80 80 - effect: NoExecute
81 81 key: node.kubernetes.io/unreachable
82 82 operator: Exists
83 83 tolerationSeconds: 5
84 84 volumes:
85 85 - emptyDir: {}
86 86 name: rook-config
87 87 - emptyDir: {}
88 88 name: default-config-dir
89 89

removedRole rook-ceph/ceph-csi-cephfs-ctrlplugin-r

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - coordination.k8s.io
15 resources:
16 - leases
17 verbs:
18 - get
19 - watch
20 - list
21 - delete
22 - update
23 - create
24 - apiGroups:
25 - csiaddons.openshift.io
26 resources:
27 - csiaddonsnodes
28 verbs:
29 - get
30 - watch
31 - list
32 - create
33 - update
34 - delete
35 - apiGroups:
36 - ""
37 resources:
38 - pods
39 verbs:
40 - get
41 - apiGroups:
42 - apps
43 resources:
44 - replicasets
45 verbs:
46 - get
47 - apiGroups:
48 - apps
49 resources:
50 - deployments/finalizers
51 - daemonsets/finalizers
52 verbs:
53 - update
54 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - coordination.k8s.io
15 resources:
16 - leases
17 verbs:
18 - get
19 - watch
20 - list
21 - delete
22 - update
23 - create
24 - apiGroups:
25 - csiaddons.openshift.io
26 resources:
27 - csiaddonsnodes
28 verbs:
29 - get
30 - watch
31 - list
32 - create
33 - update
34 - delete
35 - apiGroups:
36 - ""
37 resources:
38 - pods
39 verbs:
40 - get
41 - apiGroups:
42 - apps
43 resources:
44 - replicasets
45 verbs:
46 - get
47 - apiGroups:
48 - apps
49 resources:
50 - deployments/finalizers
51 - daemonsets/finalizers
52 verbs:
53 - update
54 1

removedRole rook-ceph/ceph-csi-cephfs-nodeplugin-r

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - csiaddons.openshift.io
15 resources:
16 - csiaddonsnodes
17 verbs:
18 - get
19 - watch
20 - list
21 - create
22 - update
23 - delete
24 - apiGroups:
25 - ""
26 resources:
27 - pods
28 verbs:
29 - get
30 - apiGroups:
31 - apps
32 resources:
33 - replicasets
34 verbs:
35 - get
36 - apiGroups:
37 - apps
38 resources:
39 - deployments/finalizers
40 - daemonsets/finalizers
41 verbs:
42 - update
43 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - csiaddons.openshift.io
15 resources:
16 - csiaddonsnodes
17 verbs:
18 - get
19 - watch
20 - list
21 - create
22 - update
23 - delete
24 - apiGroups:
25 - ""
26 resources:
27 - pods
28 verbs:
29 - get
30 - apiGroups:
31 - apps
32 resources:
33 - replicasets
34 verbs:
35 - get
36 - apiGroups:
37 - apps
38 resources:
39 - deployments/finalizers
40 - daemonsets/finalizers
41 verbs:
42 - update
43 1

removedRole rook-ceph/ceph-csi-nvmeof-ctrlplugin-r

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - coordination.k8s.io
15 resources:
16 - leases
17 verbs:
18 - get
19 - watch
20 - list
21 - delete
22 - update
23 - create
24 - apiGroups:
25 - csiaddons.openshift.io
26 resources:
27 - csiaddonsnodes
28 verbs:
29 - get
30 - watch
31 - list
32 - create
33 - update
34 - delete
35 - apiGroups:
36 - ""
37 resources:
38 - pods
39 verbs:
40 - get
41 - apiGroups:
42 - apps
43 resources:
44 - replicasets
45 verbs:
46 - get
47 - apiGroups:
48 - apps
49 resources:
50 - deployments/finalizers
51 - daemonsets/finalizers
52 verbs:
53 - update
54 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - coordination.k8s.io
15 resources:
16 - leases
17 verbs:
18 - get
19 - watch
20 - list
21 - delete
22 - update
23 - create
24 - apiGroups:
25 - csiaddons.openshift.io
26 resources:
27 - csiaddonsnodes
28 verbs:
29 - get
30 - watch
31 - list
32 - create
33 - update
34 - delete
35 - apiGroups:
36 - ""
37 resources:
38 - pods
39 verbs:
40 - get
41 - apiGroups:
42 - apps
43 resources:
44 - replicasets
45 verbs:
46 - get
47 - apiGroups:
48 - apps
49 resources:
50 - deployments/finalizers
51 - daemonsets/finalizers
52 verbs:
53 - update
54 1

removedRole rook-ceph/ceph-csi-nvmeof-nodeplugin-r

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - csiaddons.openshift.io
15 resources:
16 - csiaddonsnodes
17 verbs:
18 - get
19 - watch
20 - list
21 - create
22 - update
23 - delete
24 - apiGroups:
25 - ""
26 resources:
27 - pods
28 verbs:
29 - get
30 - apiGroups:
31 - apps
32 resources:
33 - replicasets
34 verbs:
35 - get
36 - apiGroups:
37 - apps
38 resources:
39 - deployments/finalizers
40 - daemonsets/finalizers
41 verbs:
42 - update
43 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - csiaddons.openshift.io
15 resources:
16 - csiaddonsnodes
17 verbs:
18 - get
19 - watch
20 - list
21 - create
22 - update
23 - delete
24 - apiGroups:
25 - ""
26 resources:
27 - pods
28 verbs:
29 - get
30 - apiGroups:
31 - apps
32 resources:
33 - replicasets
34 verbs:
35 - get
36 - apiGroups:
37 - apps
38 resources:
39 - deployments/finalizers
40 - daemonsets/finalizers
41 verbs:
42 - update
43 1

removedRole rook-ceph/ceph-csi-rbd-ctrlplugin-r

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - coordination.k8s.io
15 resources:
16 - leases
17 verbs:
18 - get
19 - watch
20 - list
21 - delete
22 - update
23 - create
24 - apiGroups:
25 - csiaddons.openshift.io
26 resources:
27 - csiaddonsnodes
28 verbs:
29 - get
30 - watch
31 - list
32 - create
33 - update
34 - delete
35 - apiGroups:
36 - ""
37 resources:
38 - pods
39 verbs:
40 - get
41 - apiGroups:
42 - apps
43 resources:
44 - replicasets
45 verbs:
46 - get
47 - apiGroups:
48 - apps
49 resources:
50 - deployments/finalizers
51 - daemonsets/finalizers
52 verbs:
53 - update
54 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - coordination.k8s.io
15 resources:
16 - leases
17 verbs:
18 - get
19 - watch
20 - list
21 - delete
22 - update
23 - create
24 - apiGroups:
25 - csiaddons.openshift.io
26 resources:
27 - csiaddonsnodes
28 verbs:
29 - get
30 - watch
31 - list
32 - create
33 - update
34 - delete
35 - apiGroups:
36 - ""
37 resources:
38 - pods
39 verbs:
40 - get
41 - apiGroups:
42 - apps
43 resources:
44 - replicasets
45 verbs:
46 - get
47 - apiGroups:
48 - apps
49 resources:
50 - deployments/finalizers
51 - daemonsets/finalizers
52 verbs:
53 - update
54 1

removedRole rook-ceph/ceph-csi-rbd-nodeplugin-r

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - csiaddons.openshift.io
15 resources:
16 - csiaddonsnodes
17 verbs:
18 - get
19 - watch
20 - list
21 - create
22 - update
23 - delete
24 - apiGroups:
25 - ""
26 resources:
27 - pods
28 verbs:
29 - get
30 - apiGroups:
31 - apps
32 resources:
33 - replicasets
34 verbs:
35 - get
36 - apiGroups:
37 - apps
38 resources:
39 - deployments/finalizers
40 - daemonsets/finalizers
41 verbs:
42 - update
43 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-r
11 namespace: rook-ceph
12 rules:
13 - apiGroups:
14 - csiaddons.openshift.io
15 resources:
16 - csiaddonsnodes
17 verbs:
18 - get
19 - watch
20 - list
21 - create
22 - update
23 - delete
24 - apiGroups:
25 - ""
26 resources:
27 - pods
28 verbs:
29 - get
30 - apiGroups:
31 - apps
32 resources:
33 - replicasets
34 verbs:
35 - get
36 - apiGroups:
37 - apps
38 resources:
39 - deployments/finalizers
40 - daemonsets/finalizers
41 verbs:
42 - update
43 1

removedRole rook-ceph/cephfs-external-provisioner-cfg

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-external-provisioner-cfg
15 namespace: rook-ceph
16 rules:
17 - apiGroups:
18 - coordination.k8s.io
19 resources:
20 - leases
21 verbs:
22 - get
23 - watch
24 - list
25 - delete
26 - update
27 - create
28 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-external-provisioner-cfg
15 namespace: rook-ceph
16 rules:
17 - apiGroups:
18 - coordination.k8s.io
19 resources:
20 - leases
21 verbs:
22 - get
23 - watch
24 - list
25 - delete
26 - update
27 - create
28 1

removedRole rook-ceph/rbd-external-provisioner-cfg

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-external-provisioner-cfg
15 namespace: rook-ceph
16 rules:
17 - apiGroups:
18 - coordination.k8s.io
19 resources:
20 - leases
21 verbs:
22 - get
23 - watch
24 - list
25 - delete
26 - update
27 - create
28 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: Role
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-external-provisioner-cfg
15 namespace: rook-ceph
16 rules:
17 - apiGroups:
18 - coordination.k8s.io
19 resources:
20 - leases
21 verbs:
22 - get
23 - watch
24 - list
25 - delete
26 - update
27 - create
28 1

removedRoleBinding rook-ceph/ceph-csi-cephfs-ctrlplugin-rb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-cephfs-ctrlplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-cephfs-ctrlplugin-sa
19 namespace: rook-ceph
20 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-cephfs-ctrlplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-cephfs-ctrlplugin-sa
19 namespace: rook-ceph
20 1

removedRoleBinding rook-ceph/ceph-csi-cephfs-nodeplugin-rb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-cephfs-nodeplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-cephfs-nodeplugin-sa
19 namespace: rook-ceph
20 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-cephfs-nodeplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-cephfs-nodeplugin-sa
19 namespace: rook-ceph
20 1

changedRoleBinding rook-ceph/ceph-csi-leader-election-rolebinding

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1 1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding 2 kind: RoleBinding
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app.kubernetes.io/instance: rook-ceph 5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm 6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi 7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph 8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph 9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-leader-election-rolebinding 10 name: ceph-csi-leader-election-rolebinding
11 namespace: rook-ceph 11 namespace: rook-ceph
12 roleRef: 12 roleRef:
13 apiGroup: rbac.authorization.k8s.io 13 apiGroup: rbac.authorization.k8s.io
14 kind: Role 14 kind: Role
15 name: ceph-csi-leader-election-role 15 name: ceph-csi-leader-election-role
16 subjects: 16 subjects:
17 - kind: ServiceAccount 17 - kind: ServiceAccount
18 name: ceph-csi-controller-manager 18 name: ceph-csi
19 namespace: rook-ceph 19 namespace: rook-ceph
20 20
1 1 apiVersion: rbac.authorization.k8s.io/v1
2 2 kind: RoleBinding
3 3 metadata:
4 4 labels:
5 5 app.kubernetes.io/instance: rook-ceph
6 6 app.kubernetes.io/managed-by: Helm
7 7 app.kubernetes.io/name: ceph-csi
8 8 helm.toolkit.fluxcd.io/name: rook-ceph
9 9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 10 name: ceph-csi-leader-election-rolebinding
11 11 namespace: rook-ceph
12 12 roleRef:
13 13 apiGroup: rbac.authorization.k8s.io
14 14 kind: Role
15 15 name: ceph-csi-leader-election-role
16 16 subjects:
17 17 - kind: ServiceAccount
18 name: ceph-csi-controller-manager
18 name: ceph-csi
19 19 namespace: rook-ceph
20 20

removedRoleBinding rook-ceph/ceph-csi-nvmeof-ctrlplugin-rb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-nvmeof-ctrlplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-nvmeof-ctrlplugin-sa
19 namespace: rook-ceph
20 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-nvmeof-ctrlplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-nvmeof-ctrlplugin-sa
19 namespace: rook-ceph
20 1

removedRoleBinding rook-ceph/ceph-csi-nvmeof-nodeplugin-rb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-nvmeof-nodeplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-nvmeof-nodeplugin-sa
19 namespace: rook-ceph
20 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-nvmeof-nodeplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-nvmeof-nodeplugin-sa
19 namespace: rook-ceph
20 1

removedRoleBinding rook-ceph/ceph-csi-rbd-ctrlplugin-rb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-rbd-ctrlplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-rbd-ctrlplugin-sa
19 namespace: rook-ceph
20 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-rbd-ctrlplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-rbd-ctrlplugin-sa
19 namespace: rook-ceph
20 1

removedRoleBinding rook-ceph/ceph-csi-rbd-nodeplugin-rb

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-rbd-nodeplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-rbd-nodeplugin-sa
19 namespace: rook-ceph
20 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-rb
11 namespace: rook-ceph
12 roleRef:
13 apiGroup: rbac.authorization.k8s.io
14 kind: Role
15 name: ceph-csi-rbd-nodeplugin-r
16 subjects:
17 - kind: ServiceAccount
18 name: ceph-csi-rbd-nodeplugin-sa
19 namespace: rook-ceph
20 1

removedRoleBinding rook-ceph/cephfs-csi-provisioner-role-cfg

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-provisioner-role-cfg
15 namespace: rook-ceph
16 roleRef:
17 apiGroup: rbac.authorization.k8s.io
18 kind: Role
19 name: cephfs-external-provisioner-cfg
20 subjects:
21 - kind: ServiceAccount
22 name: rook-csi-cephfs-provisioner-sa
23 namespace: rook-ceph
24 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: cephfs-csi-provisioner-role-cfg
15 namespace: rook-ceph
16 roleRef:
17 apiGroup: rbac.authorization.k8s.io
18 kind: Role
19 name: cephfs-external-provisioner-cfg
20 subjects:
21 - kind: ServiceAccount
22 name: rook-csi-cephfs-provisioner-sa
23 namespace: rook-ceph
24 1

removedRoleBinding rook-ceph/rbd-csi-provisioner-role-cfg

HelmRelease rook-ceph/rook-ceph
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-provisioner-role-cfg
15 namespace: rook-ceph
16 roleRef:
17 apiGroup: rbac.authorization.k8s.io
18 kind: Role
19 name: rbd-external-provisioner-cfg
20 subjects:
21 - kind: ServiceAccount
22 name: rook-csi-rbd-provisioner-sa
23 namespace: rook-ceph
24 1
1 apiVersion: rbac.authorization.k8s.io/v1
2 kind: RoleBinding
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rbd-csi-provisioner-role-cfg
15 namespace: rook-ceph
16 roleRef:
17 apiGroup: rbac.authorization.k8s.io
18 kind: Role
19 name: rbd-external-provisioner-cfg
20 subjects:
21 - kind: ServiceAccount
22 name: rook-csi-rbd-provisioner-sa
23 namespace: rook-ceph
24 1

addedServiceAccount ceph-csi

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 automountServiceAccountToken: true
3 kind: ServiceAccount
4 metadata:
5 labels:
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: ceph-csi
9 helm.toolkit.fluxcd.io/name: rook-ceph
10 helm.toolkit.fluxcd.io/namespace: rook-ceph
11 name: ceph-csi
1 12
1 apiVersion: v1
2 automountServiceAccountToken: true
3 kind: ServiceAccount
4 metadata:
5 labels:
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: ceph-csi
9 helm.toolkit.fluxcd.io/name: rook-ceph
10 helm.toolkit.fluxcd.io/namespace: rook-ceph
11 name: ceph-csi
1 12

removedServiceAccount rook-ceph/ceph-csi-cephfs-ctrlplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-ctrlplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-cephfs-nodeplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-cephfs-nodeplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-controller-manager

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-controller-manager
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-controller-manager
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-nfs-ctrlplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-ctrlplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-ctrlplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-nfs-nodeplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-nodeplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nfs-nodeplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-nvmeof-ctrlplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-ctrlplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-nvmeof-nodeplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-nvmeof-nodeplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-rbd-ctrlplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-ctrlplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/ceph-csi-rbd-nodeplugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-sa
11 namespace: rook-ceph
12 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/instance: rook-ceph
6 app.kubernetes.io/managed-by: Helm
7 app.kubernetes.io/name: ceph-csi
8 helm.toolkit.fluxcd.io/name: rook-ceph
9 helm.toolkit.fluxcd.io/namespace: rook-ceph
10 name: ceph-csi-rbd-nodeplugin-sa
11 namespace: rook-ceph
12 1

removedServiceAccount rook-ceph/rook-csi-cephfs-plugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-cephfs-plugin-sa
15 namespace: rook-ceph
16 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-cephfs-plugin-sa
15 namespace: rook-ceph
16 1

removedServiceAccount rook-ceph/rook-csi-cephfs-provisioner-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-cephfs-provisioner-sa
15 namespace: rook-ceph
16 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-cephfs-provisioner-sa
15 namespace: rook-ceph
16 1

removedServiceAccount rook-ceph/rook-csi-rbd-plugin-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-rbd-plugin-sa
15 namespace: rook-ceph
16 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-rbd-plugin-sa
15 namespace: rook-ceph
16 1

removedServiceAccount rook-ceph/rook-csi-rbd-provisioner-sa

HelmRelease rook-ceph/rook-ceph
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-rbd-provisioner-sa
15 namespace: rook-ceph
16 1
1 apiVersion: v1
2 kind: ServiceAccount
3 metadata:
4 labels:
5 app.kubernetes.io/created-by: helm
6 app.kubernetes.io/instance: rook-ceph
7 app.kubernetes.io/managed-by: Helm
8 app.kubernetes.io/name: rook-ceph
9 app.kubernetes.io/part-of: rook-ceph-operator
10 helm.toolkit.fluxcd.io/name: rook-ceph
11 helm.toolkit.fluxcd.io/namespace: rook-ceph
12 operator: rook
13 storage-backend: ceph
14 name: rook-csi-rbd-provisioner-sa
15 namespace: rook-ceph
16 1

changedCephCluster rook-ceph/rook-ceph

HelmRelease rook-ceph/rook-ceph-cluster
1 apiVersion: ceph.rook.io/v1 1 apiVersion: ceph.rook.io/v1
2 kind: CephCluster 2 kind: CephCluster
3 metadata: 3 metadata:
4 labels: 4 labels:
5 helm.toolkit.fluxcd.io/name: rook-ceph-cluster 5 helm.toolkit.fluxcd.io/name: rook-ceph-cluster
6 helm.toolkit.fluxcd.io/namespace: rook-ceph 6 helm.toolkit.fluxcd.io/namespace: rook-ceph
7 name: rook-ceph 7 name: rook-ceph
8 namespace: rook-ceph 8 namespace: rook-ceph
9 spec: 9 spec:
10 cephVersion: 10 cephVersion:
11 allowUnsupported: false 11 allowUnsupported: false
12 image: quay.io/ceph/ceph:v19.2.3 12 image: quay.io/ceph/ceph:v20.2.1
13 cleanupPolicy: 13 cleanupPolicy:
14 allowUninstallWithVolumes: false 14 allowUninstallWithVolumes: false
15 confirmation: "" 15 confirmation: ""
16 sanitizeDisks: 16 sanitizeDisks:
17 dataSource: zero 17 dataSource: zero
18 iteration: 1 18 iteration: 1
19 method: quick 19 method: quick
20 wipeDevicesFromOtherClusters: true 20 wipeDevicesFromOtherClusters: true
21 continueUpgradeAfterChecksEvenIfNotHealthy: false 21 continueUpgradeAfterChecksEvenIfNotHealthy: false
22 crashCollector: 22 crashCollector:
23 disable: false 23 disable: false
24 csi: 24 csi:
25 readAffinity: 25 readAffinity:
26 enabled: false 26 enabled: false
27 dashboard: 27 dashboard:
28 enabled: true 28 enabled: true
29 prometheusEndpoint: http://prometheus-operated.o11y.svc.cluster.local:9090 29 prometheusEndpoint: http://prometheus-operated.o11y.svc.cluster.local:9090
30 ssl: false 30 ssl: false
31 urlPrefix: / 31 urlPrefix: /
32 dataDirHostPath: /var/lib/rook 32 dataDirHostPath: /var/lib/rook
33 disruptionManagement: 33 disruptionManagement:
34 managePodBudgets: true 34 managePodBudgets: true
35 osdMaintenanceTimeout: 30 35 osdMaintenanceTimeout: 30
36 healthCheck: 36 healthCheck:
37 daemonHealth: 37 daemonHealth:
38 mon: 38 mon:
39 disabled: false 39 disabled: false
40 interval: 45s 40 interval: 45s
41 osd: 41 osd:
42 disabled: false 42 disabled: false
43 interval: 60s 43 interval: 60s
44 status: 44 status:
45 disabled: false 45 disabled: false
46 interval: 60s 46 interval: 60s
47 livenessProbe: 47 livenessProbe:
48 mgr: 48 mgr:
49 disabled: false 49 disabled: false
50 mon: 50 mon:
51 disabled: false 51 disabled: false
52 osd: 52 osd:
53 disabled: false 53 disabled: false
54 logCollector: 54 logCollector:
55 enabled: true 55 enabled: true
56 maxLogSize: 500M 56 maxLogSize: 500M
57 periodicity: daily 57 periodicity: daily
58 mgr: 58 mgr:
59 allowMultiplePerNode: false 59 allowMultiplePerNode: false
60 count: 2 60 count: 2
61 modules: 61 modules:
62 - enabled: true 62 - enabled: true
63 name: pg_autoscaler 63 name: pg_autoscaler
64 mon: 64 mon:
65 allowMultiplePerNode: false 65 allowMultiplePerNode: false
66 count: 3 66 count: 3
67 monitoring: 67 monitoring:
68 enabled: true 68 enabled: true
69 network: 69 network:
70 connections: 70 connections:
71 compression: 71 compression:
72 enabled: false 72 enabled: false
73 encryption: 73 encryption:
74 enabled: false 74 enabled: false
75 requireMsgr2: true 75 requireMsgr2: true
76 provider: host 76 provider: host
77 priorityClassNames: 77 priorityClassNames:
78 mgr: system-cluster-critical 78 mgr: system-cluster-critical
79 mon: system-node-critical 79 mon: system-node-critical
80 osd: system-node-critical 80 osd: system-node-critical
81 removeOSDsIfOutAndSafeToRemove: false 81 removeOSDsIfOutAndSafeToRemove: false
82 resources: 82 resources:
83 cleanup: 83 cleanup:
84 limits: 84 limits:
85 memory: 1Gi 85 memory: 1Gi
86 requests: 86 requests:
87 cpu: 500m 87 cpu: 500m
88 memory: 100Mi 88 memory: 100Mi
89 cmd-reporter: 89 cmd-reporter:
90 limits: 90 limits:
91 memory: 1Gi 91 memory: 1Gi
92 requests: 92 requests:
93 cpu: 500m 93 cpu: 500m
94 memory: 100Mi 94 memory: 100Mi
95 crashcollector: 95 crashcollector:
96 limits: 96 limits:
97 memory: 60Mi 97 memory: 60Mi
98 requests: 98 requests:
99 cpu: 100m 99 cpu: 100m
100 memory: 60Mi 100 memory: 60Mi
101 exporter: 101 exporter:
102 limits: 102 limits:
103 memory: 128Mi 103 memory: 128Mi
104 requests: 104 requests:
105 cpu: 50m 105 cpu: 50m
106 memory: 50Mi 106 memory: 50Mi
107 logcollector: 107 logcollector:
108 limits: 108 limits:
109 memory: 1Gi 109 memory: 1Gi
110 requests: 110 requests:
111 cpu: 100m 111 cpu: 100m
112 memory: 100Mi 112 memory: 100Mi
113 mgr: 113 mgr:
114 limits: 114 limits:
115 memory: 1Gi 115 memory: 1Gi
116 requests: 116 requests:
117 cpu: 500m 117 cpu: 500m
118 memory: 512Mi 118 memory: 512Mi
119 mgr-sidecar: 119 mgr-sidecar:
120 limits: 120 limits:
121 memory: 100Mi 121 memory: 100Mi
122 requests: 122 requests:
123 cpu: 100m 123 cpu: 100m
124 memory: 40Mi 124 memory: 40Mi
125 mon: 125 mon:
126 limits: 126 limits:
127 memory: 2Gi 127 memory: 2Gi
128 requests: 128 requests:
129 cpu: 1000m 129 cpu: 1000m
130 memory: 1Gi 130 memory: 1Gi
131 osd: 131 osd:
132 limits: 132 limits:
133 memory: 8Gi 133 memory: 8Gi
134 requests: 134 requests:
135 cpu: 1000m 135 cpu: 1000m
136 memory: 4Gi 136 memory: 4Gi
137 prepareosd: 137 prepareosd:
138 requests: 138 requests:
139 cpu: 500m 139 cpu: 500m
140 memory: 50Mi 140 memory: 50Mi
141 skipUpgradeChecks: false 141 skipUpgradeChecks: false
142 storage: 142 storage:
143 devicePathFilter: /dev/disk/by-id/nvme-(SAMSUNG_MZVLW1T0HMLH-000H1_.*|Samsung_SSD_970_EVO_Plus_1TB_.*)_.* 143 devicePathFilter: /dev/disk/by-id/nvme-(SAMSUNG_MZVLW1T0HMLH-000H1_.*|Samsung_SSD_970_EVO_Plus_1TB_.*)_.*
144 useAllDevices: false 144 useAllDevices: false
145 useAllNodes: true 145 useAllNodes: true
146 upgradeOSDRequiresHealthyPGs: false 146 upgradeOSDRequiresHealthyPGs: false
147 waitTimeoutForHealthyOSDInMinutes: 10 147 waitTimeoutForHealthyOSDInMinutes: 10
148 148
1 1 apiVersion: ceph.rook.io/v1
2 2 kind: CephCluster
3 3 metadata:
4 4 labels:
5 5 helm.toolkit.fluxcd.io/name: rook-ceph-cluster
6 6 helm.toolkit.fluxcd.io/namespace: rook-ceph
7 7 name: rook-ceph
8 8 namespace: rook-ceph
9 9 spec:
10 10 cephVersion:
11 11 allowUnsupported: false
12 image: quay.io/ceph/ceph:v19.2.3
12 image: quay.io/ceph/ceph:v20.2.1
13 13 cleanupPolicy:
14 14 allowUninstallWithVolumes: false
15 15 confirmation: ""
16 16 sanitizeDisks:
17 17 dataSource: zero
18 18 iteration: 1
19 19 method: quick
20 20 wipeDevicesFromOtherClusters: true
21 21 continueUpgradeAfterChecksEvenIfNotHealthy: false
22 22 crashCollector:
23 23 disable: false
24 24 csi:
25 25 readAffinity:
26 26 enabled: false
27 27 dashboard:
28 28 enabled: true
29 29 prometheusEndpoint: http://prometheus-operated.o11y.svc.cluster.local:9090
30 30 ssl: false
31 31 urlPrefix: /
32 32 dataDirHostPath: /var/lib/rook
33 33 disruptionManagement:
34 34 managePodBudgets: true
35 35 osdMaintenanceTimeout: 30
36 36 healthCheck:
37 37 daemonHealth:
38 38 mon:
39 39 disabled: false
40 40 interval: 45s
41 41 osd:
42 42 disabled: false
43 43 interval: 60s
44 44 status:
45 45 disabled: false
46 46 interval: 60s
47 47 livenessProbe:
48 48 mgr:
49 49 disabled: false
50 50 mon:
51 51 disabled: false
52 52 osd:
53 53 disabled: false
54 54 logCollector:
55 55 enabled: true
56 56 maxLogSize: 500M
57 57 periodicity: daily
58 58 mgr:
59 59 allowMultiplePerNode: false
60 60 count: 2
61 61 modules:
62 62 - enabled: true
63 63 name: pg_autoscaler
64 64 mon:
65 65 allowMultiplePerNode: false
66 66 count: 3
67 67 monitoring:
68 68 enabled: true
69 69 network:
70 70 connections:
71 71 compression:
72 72 enabled: false
73 73 encryption:
74 74 enabled: false
75 75 requireMsgr2: true
76 76 provider: host
77 77 priorityClassNames:
78 78 mgr: system-cluster-critical
79 79 mon: system-node-critical
80 80 osd: system-node-critical
81 81 removeOSDsIfOutAndSafeToRemove: false
82 82 resources:
83 83 cleanup:
84 84 limits:
85 85 memory: 1Gi
86 86 requests:
87 87 cpu: 500m
88 88 memory: 100Mi
89 89 cmd-reporter:
90 90 limits:
91 91 memory: 1Gi
92 92 requests:
93 93 cpu: 500m
94 94 memory: 100Mi
95 95 crashcollector:
96 96 limits:
97 97 memory: 60Mi
98 98 requests:
99 99 cpu: 100m
100 100 memory: 60Mi
101 101 exporter:
102 102 limits:
103 103 memory: 128Mi
104 104 requests:
105 105 cpu: 50m
106 106 memory: 50Mi
107 107 logcollector:
108 108 limits:
109 109 memory: 1Gi
110 110 requests:
111 111 cpu: 100m
112 112 memory: 100Mi
113 113 mgr:
114 114 limits:
115 115 memory: 1Gi
116 116 requests:
117 117 cpu: 500m
118 118 memory: 512Mi
119 119 mgr-sidecar:
120 120 limits:
121 121 memory: 100Mi
122 122 requests:
123 123 cpu: 100m
124 124 memory: 40Mi
125 125 mon:
126 126 limits:
127 127 memory: 2Gi
128 128 requests:
129 129 cpu: 1000m
130 130 memory: 1Gi
131 131 osd:
132 132 limits:
133 133 memory: 8Gi
134 134 requests:
135 135 cpu: 1000m
136 136 memory: 4Gi
137 137 prepareosd:
138 138 requests:
139 139 cpu: 500m
140 140 memory: 50Mi
141 141 skipUpgradeChecks: false
142 142 storage:
143 143 devicePathFilter: /dev/disk/by-id/nvme-(SAMSUNG_MZVLW1T0HMLH-000H1_.*|Samsung_SSD_970_EVO_Plus_1TB_.*)_.*
144 144 useAllDevices: false
145 145 useAllNodes: true
146 146 upgradeOSDRequiresHealthyPGs: false
147 147 waitTimeoutForHealthyOSDInMinutes: 10
148 148

changedDeployment rook-ceph/rook-ceph-tools

HelmRelease rook-ceph/rook-ceph-cluster
1 apiVersion: apps/v1 1 apiVersion: apps/v1
2 kind: Deployment 2 kind: Deployment
3 metadata: 3 metadata:
4 labels: 4 labels:
5 app: rook-ceph-tools 5 app: rook-ceph-tools
6 helm.toolkit.fluxcd.io/name: rook-ceph-cluster 6 helm.toolkit.fluxcd.io/name: rook-ceph-cluster
7 helm.toolkit.fluxcd.io/namespace: rook-ceph 7 helm.toolkit.fluxcd.io/namespace: rook-ceph
8 name: rook-ceph-tools 8 name: rook-ceph-tools
9 namespace: rook-ceph 9 namespace: rook-ceph
10 spec: 10 spec:
11 replicas: 1 11 replicas: 1
12 selector: 12 selector:
13 matchLabels: 13 matchLabels:
14 app: rook-ceph-tools 14 app: rook-ceph-tools
15 template: 15 template:
16 metadata: 16 metadata:
17 labels: 17 labels:
18 app: rook-ceph-tools 18 app: rook-ceph-tools
19 spec: 19 spec:
20 containers: 20 containers:
21 - command: 21 - command:
22 - /bin/bash 22 - /bin/bash
23 - -c 23 - -c
24 - | 24 - |
25 # Replicate the script from toolbox.sh inline so the ceph image 25 # Replicate the script from toolbox.sh inline so the ceph image
26 # can be run directly, instead of requiring the rook toolbox 26 # can be run directly, instead of requiring the rook toolbox
27 CEPH_CONFIG="/etc/ceph/ceph.conf" 27 CEPH_CONFIG="/etc/ceph/ceph.conf"
28 MON_CONFIG="/etc/rook/mon-endpoints" 28 MON_CONFIG="/etc/rook/mon-endpoints"
29 KEYRING_FILE="/etc/ceph/keyring" 29 KEYRING_FILE="/etc/ceph/keyring"
30 CONFIG_OVERRIDE="/etc/rook-config-override/config" 30 CONFIG_OVERRIDE="/etc/rook-config-override/config"
31 31
32 # create a ceph config file in its default location so ceph/rados tools can be used 32 # create a ceph config file in its default location so ceph/rados tools can be used
33 # without specifying any arguments 33 # without specifying any arguments
34 write_endpoints() { 34 write_endpoints() {
35 endpoints=$(cat ${MON_CONFIG}) 35 endpoints=$(cat ${MON_CONFIG})
36 36
37 # filter out the mon names 37 # filter out the mon names
38 # external cluster can have numbers or hyphens in mon names, handling them in regex 38 # external cluster can have numbers or hyphens in mon names, handling them in regex
39 # shellcheck disable=SC2001 39 # shellcheck disable=SC2001
40 mon_endpoints=$(echo "${endpoints}"| sed 's/[a-z0-9_-]\+=//g') 40 mon_endpoints=$(echo "${endpoints}"| sed 's/[a-z0-9_-]\+=//g')
41 41
42 DATE=$(date) 42 DATE=$(date)
43 echo "$DATE writing mon endpoints to ${CEPH_CONFIG}: ${endpoints}" 43 echo "$DATE writing mon endpoints to ${CEPH_CONFIG}: ${endpoints}"
44 cat <<EOF > ${CEPH_CONFIG} 44 cat <<EOF > ${CEPH_CONFIG}
45 [global] 45 [global]
46 mon_host = ${mon_endpoints} 46 mon_host = ${mon_endpoints}
47 47
48 [client.admin] 48 [client.admin]
49 keyring = ${KEYRING_FILE} 49 keyring = ${KEYRING_FILE}
50 EOF 50 EOF
51 51
52 # Merge the config override if it exists and is not empty 52 # Merge the config override if it exists and is not empty
53 if [ -f "${CONFIG_OVERRIDE}" ] && [ -s "${CONFIG_OVERRIDE}" ]; then 53 if [ -f "${CONFIG_OVERRIDE}" ] && [ -s "${CONFIG_OVERRIDE}" ]; then
54 echo "$DATE merging config override from ${CONFIG_OVERRIDE}" 54 echo "$DATE merging config override from ${CONFIG_OVERRIDE}"
55 echo "" >> ${CEPH_CONFIG} 55 echo "" >> ${CEPH_CONFIG}
56 cat ${CONFIG_OVERRIDE} >> ${CEPH_CONFIG} 56 cat ${CONFIG_OVERRIDE} >> ${CEPH_CONFIG}
57 fi 57 fi
58 } 58 }
59 59
60 # watch the endpoints config file and update if the mon endpoints ever change 60 # watch the endpoints config file and update if the mon endpoints ever change
61 watch_endpoints() { 61 watch_endpoints() {
62 # get the timestamp for the target of the soft link 62 # get the timestamp for the target of the soft link
63 real_path=$(realpath ${MON_CONFIG}) 63 real_path=$(realpath ${MON_CONFIG})
64 initial_time=$(stat -c %Z "${real_path}") 64 initial_time=$(stat -c %Z "${real_path}")
65 while true; do 65 while true; do
66 real_path=$(realpath ${MON_CONFIG}) 66 real_path=$(realpath ${MON_CONFIG})
67 latest_time=$(stat -c %Z "${real_path}") 67 latest_time=$(stat -c %Z "${real_path}")
68 68
69 if [[ "${latest_time}" != "${initial_time}" ]]; then 69 if [[ "${latest_time}" != "${initial_time}" ]]; then
70 write_endpoints 70 write_endpoints
71 initial_time=${latest_time} 71 initial_time=${latest_time}
72 fi 72 fi
73 73
74 sleep 10 74 sleep 10
75 done 75 done
76 } 76 }
77 77
78 # read the secret from an env var (for backward compatibility), or from the secret file 78 # read the secret from an env var (for backward compatibility), or from the secret file
79 ceph_secret=${ROOK_CEPH_SECRET} 79 ceph_secret=${ROOK_CEPH_SECRET}
80 if [[ "$ceph_secret" == "" ]]; then 80 if [[ "$ceph_secret" == "" ]]; then
81 ceph_secret=$(cat /var/lib/rook-ceph-mon/secret.keyring) 81 ceph_secret=$(cat /var/lib/rook-ceph-mon/secret.keyring)
82 fi 82 fi
83 83
84 # create the keyring file 84 # create the keyring file
85 cat <<EOF > ${KEYRING_FILE} 85 cat <<EOF > ${KEYRING_FILE}
86 [${ROOK_CEPH_USERNAME}] 86 [${ROOK_CEPH_USERNAME}]
87 key = ${ceph_secret} 87 key = ${ceph_secret}
88 EOF 88 EOF
89 89
90 # write the initial config file 90 # write the initial config file
91 write_endpoints 91 write_endpoints
92 92
93 # continuously update the mon endpoints if they fail over 93 # continuously update the mon endpoints if they fail over
94 watch_endpoints 94 watch_endpoints
95 env: 95 env:
96 - name: ROOK_CEPH_USERNAME 96 - name: ROOK_CEPH_USERNAME
97 valueFrom: 97 valueFrom:
98 secretKeyRef: 98 secretKeyRef:
99 key: ceph-username 99 key: ceph-username
100 name: rook-ceph-mon 100 name: rook-ceph-mon
101 image: quay.io/ceph/ceph:v19.2.3 101 image: quay.io/ceph/ceph:v20.2.1
102 imagePullPolicy: IfNotPresent 102 imagePullPolicy: IfNotPresent
103 name: rook-ceph-tools 103 name: rook-ceph-tools
104 resources: 104 resources:
105 limits: 105 limits:
106 memory: 1Gi 106 memory: 1Gi
107 requests: 107 requests:
108 cpu: 100m 108 cpu: 100m
109 memory: 128Mi 109 memory: 128Mi
110 securityContext: 110 securityContext:
111 capabilities: 111 capabilities:
112 drop: 112 drop:
113 - ALL 113 - ALL
114 runAsGroup: 2016 114 runAsGroup: 2016
115 runAsNonRoot: true 115 runAsNonRoot: true
116 runAsUser: 2016 116 runAsUser: 2016
117 tty: true 117 tty: true
118 volumeMounts: 118 volumeMounts:
119 - mountPath: /etc/ceph 119 - mountPath: /etc/ceph
120 name: ceph-config 120 name: ceph-config
121 - mountPath: /etc/rook 121 - mountPath: /etc/rook
122 name: mon-endpoint-volume 122 name: mon-endpoint-volume
123 - mountPath: /var/lib/rook-ceph-mon 123 - mountPath: /var/lib/rook-ceph-mon
124 name: ceph-admin-secret 124 name: ceph-admin-secret
125 - mountPath: /etc/rook-config-override 125 - mountPath: /etc/rook-config-override
126 name: rook-config-override 126 name: rook-config-override
127 readOnly: true 127 readOnly: true
128 dnsPolicy: ClusterFirstWithHostNet 128 dnsPolicy: ClusterFirstWithHostNet
129 hostNetwork: true 129 hostNetwork: true
130 serviceAccountName: rook-ceph-default 130 serviceAccountName: rook-ceph-default
131 tolerations: 131 tolerations:
132 - effect: NoExecute 132 - effect: NoExecute
133 key: node.kubernetes.io/unreachable 133 key: node.kubernetes.io/unreachable
134 operator: Exists 134 operator: Exists
135 tolerationSeconds: 5 135 tolerationSeconds: 5
136 volumes: 136 volumes:
137 - name: ceph-admin-secret 137 - name: ceph-admin-secret
138 secret: 138 secret:
139 items: 139 items:
140 - key: ceph-secret 140 - key: ceph-secret
141 path: secret.keyring 141 path: secret.keyring
142 optional: false 142 optional: false
143 secretName: rook-ceph-mon 143 secretName: rook-ceph-mon
144 - configMap: 144 - configMap:
145 items: 145 items:
146 - key: data 146 - key: data
147 path: mon-endpoints 147 path: mon-endpoints
148 name: rook-ceph-mon-endpoints 148 name: rook-ceph-mon-endpoints
149 name: mon-endpoint-volume 149 name: mon-endpoint-volume
150 - configMap: 150 - configMap:
151 name: rook-config-override 151 name: rook-config-override
152 optional: true 152 optional: true
153 name: rook-config-override 153 name: rook-config-override
154 - emptyDir: {} 154 - emptyDir: {}
155 name: ceph-config 155 name: ceph-config
156 156
1 1 apiVersion: apps/v1
2 2 kind: Deployment
3 3 metadata:
4 4 labels:
5 5 app: rook-ceph-tools
6 6 helm.toolkit.fluxcd.io/name: rook-ceph-cluster
7 7 helm.toolkit.fluxcd.io/namespace: rook-ceph
8 8 name: rook-ceph-tools
9 9 namespace: rook-ceph
10 10 spec:
11 11 replicas: 1
12 12 selector:
13 13 matchLabels:
14 14 app: rook-ceph-tools
15 15 template:
16 16 metadata:
17 17 labels:
18 18 app: rook-ceph-tools
19 19 spec:
20 20 containers:
21 21 - command:
22 22 - /bin/bash
23 23 - -c
24 24 - |
25 25 # Replicate the script from toolbox.sh inline so the ceph image
26 26 # can be run directly, instead of requiring the rook toolbox
27 27 CEPH_CONFIG="/etc/ceph/ceph.conf"
28 28 MON_CONFIG="/etc/rook/mon-endpoints"
29 29 KEYRING_FILE="/etc/ceph/keyring"
30 30 CONFIG_OVERRIDE="/etc/rook-config-override/config"
31 31
32 32 # create a ceph config file in its default location so ceph/rados tools can be used
33 33 # without specifying any arguments
34 34 write_endpoints() {
35 35 endpoints=$(cat ${MON_CONFIG})
36 36
37 37 # filter out the mon names
38 38 # external cluster can have numbers or hyphens in mon names, handling them in regex
39 39 # shellcheck disable=SC2001
40 40 mon_endpoints=$(echo "${endpoints}"| sed 's/[a-z0-9_-]\+=//g')
41 41
42 42 DATE=$(date)
43 43 echo "$DATE writing mon endpoints to ${CEPH_CONFIG}: ${endpoints}"
44 44 cat <<EOF > ${CEPH_CONFIG}
45 45 [global]
46 46 mon_host = ${mon_endpoints}
47 47
48 48 [client.admin]
49 49 keyring = ${KEYRING_FILE}
50 50 EOF
51 51
52 52 # Merge the config override if it exists and is not empty
53 53 if [ -f "${CONFIG_OVERRIDE}" ] && [ -s "${CONFIG_OVERRIDE}" ]; then
54 54 echo "$DATE merging config override from ${CONFIG_OVERRIDE}"
55 55 echo "" >> ${CEPH_CONFIG}
56 56 cat ${CONFIG_OVERRIDE} >> ${CEPH_CONFIG}
57 57 fi
58 58 }
59 59
60 60 # watch the endpoints config file and update if the mon endpoints ever change
61 61 watch_endpoints() {
62 62 # get the timestamp for the target of the soft link
63 63 real_path=$(realpath ${MON_CONFIG})
64 64 initial_time=$(stat -c %Z "${real_path}")
65 65 while true; do
66 66 real_path=$(realpath ${MON_CONFIG})
67 67 latest_time=$(stat -c %Z "${real_path}")
68 68
69 69 if [[ "${latest_time}" != "${initial_time}" ]]; then
70 70 write_endpoints
71 71 initial_time=${latest_time}
72 72 fi
73 73
74 74 sleep 10
75 75 done
76 76 }
77 77
78 78 # read the secret from an env var (for backward compatibility), or from the secret file
79 79 ceph_secret=${ROOK_CEPH_SECRET}
80 80 if [[ "$ceph_secret" == "" ]]; then
81 81 ceph_secret=$(cat /var/lib/rook-ceph-mon/secret.keyring)
82 82 fi
83 83
84 84 # create the keyring file
85 85 cat <<EOF > ${KEYRING_FILE}
86 86 [${ROOK_CEPH_USERNAME}]
87 87 key = ${ceph_secret}
88 88 EOF
89 89
90 90 # write the initial config file
91 91 write_endpoints
92 92
93 93 # continuously update the mon endpoints if they fail over
94 94 watch_endpoints
95 95 env:
96 96 - name: ROOK_CEPH_USERNAME
97 97 valueFrom:
98 98 secretKeyRef:
99 99 key: ceph-username
100 100 name: rook-ceph-mon
101 image: quay.io/ceph/ceph:v19.2.3
101 image: quay.io/ceph/ceph:v20.2.1
102 102 imagePullPolicy: IfNotPresent
103 103 name: rook-ceph-tools
104 104 resources:
105 105 limits:
106 106 memory: 1Gi
107 107 requests:
108 108 cpu: 100m
109 109 memory: 128Mi
110 110 securityContext:
111 111 capabilities:
112 112 drop:
113 113 - ALL
114 114 runAsGroup: 2016
115 115 runAsNonRoot: true
116 116 runAsUser: 2016
117 117 tty: true
118 118 volumeMounts:
119 119 - mountPath: /etc/ceph
120 120 name: ceph-config
121 121 - mountPath: /etc/rook
122 122 name: mon-endpoint-volume
123 123 - mountPath: /var/lib/rook-ceph-mon
124 124 name: ceph-admin-secret
125 125 - mountPath: /etc/rook-config-override
126 126 name: rook-config-override
127 127 readOnly: true
128 128 dnsPolicy: ClusterFirstWithHostNet
129 129 hostNetwork: true
130 130 serviceAccountName: rook-ceph-default
131 131 tolerations:
132 132 - effect: NoExecute
133 133 key: node.kubernetes.io/unreachable
134 134 operator: Exists
135 135 tolerationSeconds: 5
136 136 volumes:
137 137 - name: ceph-admin-secret
138 138 secret:
139 139 items:
140 140 - key: ceph-secret
141 141 path: secret.keyring
142 142 optional: false
143 143 secretName: rook-ceph-mon
144 144 - configMap:
145 145 items:
146 146 - key: data
147 147 path: mon-endpoints
148 148 name: rook-ceph-mon-endpoints
149 149 name: mon-endpoint-volume
150 150 - configMap:
151 151 name: rook-config-override
152 152 optional: true
153 153 name: rook-config-override
154 154 - emptyDir: {}
155 155 name: ceph-config
156 156

changedOCIRepository rook-ceph/rook-ceph

Kustomization rook-ceph/rook-ceph (kubernetes/apps/rook-ceph/rook-ceph/app)
1 apiVersion: source.toolkit.fluxcd.io/v1 1 apiVersion: source.toolkit.fluxcd.io/v1
2 kind: OCIRepository 2 kind: OCIRepository
3 metadata: 3 metadata:
4 labels: 4 labels:
5 kustomize.toolkit.fluxcd.io/name: rook-ceph 5 kustomize.toolkit.fluxcd.io/name: rook-ceph
6 kustomize.toolkit.fluxcd.io/namespace: rook-ceph 6 kustomize.toolkit.fluxcd.io/namespace: rook-ceph
7 name: rook-ceph 7 name: rook-ceph
8 namespace: rook-ceph 8 namespace: rook-ceph
9 spec: 9 spec:
10 interval: 15m 10 interval: 15m
11 layerSelector: 11 layerSelector:
12 mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip 12 mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
13 operation: copy 13 operation: copy
14 ref: 14 ref:
15 tag: v1.19.6 15 tag: v1.20.0
16 url: oci://ghcr.io/rook/rook-ceph 16 url: oci://ghcr.io/rook/rook-ceph
17 17
1 1 apiVersion: source.toolkit.fluxcd.io/v1
2 2 kind: OCIRepository
3 3 metadata:
4 4 labels:
5 5 kustomize.toolkit.fluxcd.io/name: rook-ceph
6 6 kustomize.toolkit.fluxcd.io/namespace: rook-ceph
7 7 name: rook-ceph
8 8 namespace: rook-ceph
9 9 spec:
10 10 interval: 15m
11 11 layerSelector:
12 12 mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
13 13 operation: copy
14 14 ref:
15 tag: v1.19.6
15 tag: v1.20.0
16 16 url: oci://ghcr.io/rook/rook-ceph
17 17

changedOCIRepository rook-ceph/rook-ceph-cluster

Kustomization rook-ceph/rook-ceph-cluster (kubernetes/apps/rook-ceph/rook-ceph/cluster)
1 apiVersion: source.toolkit.fluxcd.io/v1 1 apiVersion: source.toolkit.fluxcd.io/v1
2 kind: OCIRepository 2 kind: OCIRepository
3 metadata: 3 metadata:
4 labels: 4 labels:
5 kustomize.toolkit.fluxcd.io/name: rook-ceph-cluster 5 kustomize.toolkit.fluxcd.io/name: rook-ceph-cluster
6 kustomize.toolkit.fluxcd.io/namespace: rook-ceph 6 kustomize.toolkit.fluxcd.io/namespace: rook-ceph
7 name: rook-ceph-cluster 7 name: rook-ceph-cluster
8 namespace: rook-ceph 8 namespace: rook-ceph
9 spec: 9 spec:
10 interval: 15m 10 interval: 15m
11 layerSelector: 11 layerSelector:
12 mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip 12 mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
13 operation: copy 13 operation: copy
14 ref: 14 ref:
15 tag: v1.19.6 15 tag: v1.20.0
16 url: oci://ghcr.io/rook/rook-ceph-cluster 16 url: oci://ghcr.io/rook/rook-ceph-cluster
17 17
1 1 apiVersion: source.toolkit.fluxcd.io/v1
2 2 kind: OCIRepository
3 3 metadata:
4 4 labels:
5 5 kustomize.toolkit.fluxcd.io/name: rook-ceph-cluster
6 6 kustomize.toolkit.fluxcd.io/namespace: rook-ceph
7 7 name: rook-ceph-cluster
8 8 namespace: rook-ceph
9 9 spec:
10 10 interval: 15m
11 11 layerSelector:
12 12 mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
13 13 operation: copy
14 14 ref:
15 tag: v1.19.6
15 tag: v1.20.0
16 16 url: oci://ghcr.io/rook/rook-ceph-cluster
17 17