Merge pull request #6 from sighupio/feat/rook-v1-10-13

Rook v1.10.13

.drone.yml

@@ -0,0 +1,148 @@
+# Copyright (c) 2024-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
+kind: pipeline
+name: license
+
+steps:
+  - name: check
+    image: docker.io/library/golang:1.20
+    pull: always
+    commands:
+      - go install github.com/google/addlicense@v1.1.1
+      - addlicense -c "SIGHUP s.r.l" -v -l bsd -y "2017-present" --check .
+
+---
+kind: pipeline
+name: policeman
+
+platform:
+  os: linux
+  arch: amd64
+
+depends_on:
+  - license
+
+steps:
+  - name: lint
+    image: quay.io/sighup/policeman
+    pull: always
+    environment:
+      # Identifies false positives like missing 'selector'. On Kustomize is common to don't set them
+      VALIDATE_KUBERNETES_KUBEVAL: "false"
+      # We use a lot of copy paste in our code, is intended. So it important to don't use this linter
+      VALIDATE_JSCPD: "false"
+      VALIDATE_TERRAFORM_TFLINT: "false"
+      # hadolint already validated dockerfiles
+      VALIDATE_DOCKERFILE: "false"
+      VALIDATE_NATURAL_LANGUAGE: "false"
+    depends_on:
+      - clone
+
+  - name: render
+    image: quay.io/sighup/e2e-testing:1.1.0_0.7.0_3.1.1_1.9.4_1.21.12_3.8.7_4.21.1
+    pull: always
+    depends_on:
+      - clone
+    commands:
+      - kustomize build katalog/rook-hostcluster > rook-hostcluster.yml
+      - kustomize build katalog/rook-operator > rook-operator.yml
+
+  - &check-deprecated-apis
+    name: check-deprecated-apis-rook-hostcluster
+    image: us-docker.pkg.dev/fairwinds-ops/oss/pluto:v5
+    pull: always
+    depends_on:
+      - render
+    commands:
+      # we use --ignore-deprecations because we don't want the CI to fail when the API has not been removed yet.
+      - /pluto detect $${KUBERNETES_MANIFESTS} --ignore-deprecations --target-versions=k8s=v1.25.0
+    environment:
+      KUBERNETES_MANIFESTS: rook-hostcluster.yml
+
+  - <<: *check-deprecated-apis
+    name: check-deprecated-apis-rook-operator
+    environment:
+      KUBERNETES_MANIFESTS: rook-operator.yml
+
+---
+kind: pipeline
+name: release
+
+depends_on:
+  - policeman
+
+platform:
+  os: linux
+  arch: amd64
+
+trigger:
+  ref:
+    include:
+      - refs/tags/**
+
+steps:
+  - name: prepare-tar-gz
+    image: alpine:latest
+    pull: always
+    depends_on: [ clone ]
+    commands:
+      - tar -zcvf fury-kubernetes-storage-${DRONE_TAG}.tar.gz katalog/ LICENSE README.md
+
+  - name: prepare-release-notes
+    image: quay.io/sighup/fury-release-notes-plugin:3.7_2.8.4
+    pull: always
+    depends_on: [ clone ]
+    settings:
+      release_notes_file_path: release-notes.md
+
+  - name: publish-prerelease
+    image: plugins/github-release
+    pull: always
+    depends_on:
+      - prepare-tar-gz
+      - prepare-release-notes
+    settings:
+      api_key:
+        from_secret: github_token
+      file_exists: overwrite
+      files:
+        - fury-kubernetes-storage-${DRONE_TAG}.tar.gz
+      prerelease: true
+      overwrite: true
+      title: "Preview ${DRONE_TAG}"
+      note: release-notes.md
+      checksum:
+        - md5
+        - sha256
+    when:
+      ref:
+        include:
+          - refs/tags/v**-rc**
+
+  - name: publish-stable
+    image: plugins/github-release
+    pull: always
+    depends_on:
+      - prepare-tar-gz
+      - prepare-release-notes
+    settings:
+      api_key:
+        from_secret: github_token
+      file_exists: overwrite
+      files:
+        - fury-kubernetes-storage-${DRONE_TAG}.tar.gz
+      prerelease: false
+      overwrite: true
+      title: "Release ${DRONE_TAG}"
+      note: release-notes.md
+      checksum:
+        - md5
+        - sha256
+    when:
+      ref:
+        exclude:
+          - refs/tags/v**-rc**
+        include:
+          - refs/tags/v**

README.md

@@ -3,7 +3,7 @@
     Kubernetes Fury Storage
 </h1>
 
-![Release](https://img.shields.io/badge/Latest%20Release-v0.1.0-blue)
+![Release](https://img.shields.io/badge/Latest%20Release-v0.2.0-blue)
 ![License](https://img.shields.io/github/license/sighupio/fury-kubernetes-logging?label=License)
 ![Slack](https://img.shields.io/badge/slack-@kubernetes/fury-yellow.svg?logo=slack&label=Slack)
 
@@ -25,7 +25,7 @@ The following packages are included in the Fury Kubernetes Storage katalog:
 
 | Package                                      | Version   | Description                                                                                                                                          |
 |----------------------------------------------|-----------|-------------------------------------------------------------------------------------------------|
-| [rook-operator](katalog/rook-operator)       | `v1.10.5` | Rook provides a way to run a highly available, durable Ceph storage in your Kubernetes cluster. |
+| [rook-operator](katalog/rook-operator)       | `v1.10.13`| Rook provides a way to run a highly available, durable Ceph storage in your Kubernetes cluster. |
 | [rook-hostcluster](katalog/rook-hostcluster) | `NA`      | Rook CRDs to run a production ready Ceph cluster providing Block and File storage.              |                                                                                                 |
 
 Click on each package to see its full documentation.
@@ -37,6 +37,7 @@ Click on each package to see its full documentation.
 | `1.22.x`           | :white_check_mark: | No known issues                                     |
 | `1.23.x`           | :white_check_mark: | No known issues                                     |
 | `1.24.x`           | :white_check_mark: | No known issues                                     |
+| `1.25.x`           | :white_check_mark: | No known issues                                     |
 
 Check the [compatibility matrix][compatibility-matrix] for additional information about previous releases of the modules.
 
@@ -64,9 +65,9 @@ bases:
   - name: monitoring/promtheus-operator
     version: "v2.0.1"
   - name: storage/rook-operator
-    version: "v0.1.0"
+    version: "v0.2.0"
   - name: storage/rook-hostcluster
-    version: "v0.1.0"
+    version: "v0.2.0"
 ```
 
 > See `furyctl` [documentation][furyctl-repo] for additional details about `Furyfile.yml` format.

docs/COMPATIBILITY_MATRIX.md

@@ -2,14 +2,16 @@
 
 ## Tested Kubernetes versions
 
-| Module Version / Kubernetes Version | 1.22.X             | 1.23.X             | 1.24.X             |
-|-------------------------------------|:------------------:|--------------------|--------------------|
-| v0.1.0                              | :white_check_mark: | :white_check_mark: | :white_check_mark: |
+| Module Version / Kubernetes Version | 1.22.X             | 1.23.X             | 1.24.X             | 1.25.X             |
+|-------------------------------------|:------------------:|--------------------|--------------------|--------------------|
+| v0.1.0                              | :white_check_mark: | :white_check_mark: | :white_check_mark: |                    |
+| v0.2.0                              | :white_check_mark: | :white_check_mark: | :white_check_mark: | :white_check_mark: |
 
 ## Rook Operator compatibility against Ceph cluster versions
 
-| Module Version / Ceph Cluster Version | >= 16.2.0          | >= 17.2.0          |
+| Module Version / Ceph Cluster Version  | >= 16.2.0          | >= 17.2.0          |
 |----------------------------------------|--------------------|--------------------|
 | v0.1.0                                 | :white_check_mark: | :white_check_mark: |
+| v0.2.0                                 | :white_check_mark: | :white_check_mark: |
 
 For more information, visit: [Rook Compatibility Matrix](https://rook.io/docs/rook/v1.10/Upgrade/ceph-upgrade/#supported-versions)

docs/releases/v0.2.0.md

@@ -0,0 +1,17 @@
+# Storage Add-On Module Release 0.2.0
+
+Welcome to the latest release of the `storage` add-on module for the [`Kubernetes Fury Distribution`](https://github.com/sighupio/fury-distribution), maintained by team SIGHUP.
+
+This release includes a new version of Rook Operator.
+
+## Component Images 🚢
+
+| Component             | Supported Version                                                | Previous Version |
+| --------------------- | ---------------------------------------------------------------- | ---------------- |
+| `rook-operator`       | [`v1.10.13`](https://github.com/rook/rook/releases/tag/v1.10.13) | `v1.10.5`        |
+
+> Please refer the individual release notes to get a detailed info on the releases.
+
+## Deploy 🚀
+
+To deploy this module, please refer to the [deployment section](../../README.md#deployment) of the main README.

katalog/rook-hostcluster/ceph-blockpool.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: ceph.rook.io/v1
 kind: CephBlockPool

katalog/rook-hostcluster/ceph-cluster.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: ceph.rook.io/v1
 kind: CephCluster

katalog/rook-hostcluster/ceph-filesystem.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 apiVersion: ceph.rook.io/v1
 kind: CephFilesystem
 metadata:

katalog/rook-hostcluster/kustomization.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

katalog/rook-hostcluster/monitoring/dashboards/kustomization.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

katalog/rook-hostcluster/monitoring/kustomization.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization

katalog/rook-hostcluster/monitoring/localrules.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule

katalog/rook-hostcluster/monitoring/patches/localrules-labels.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: monitoring.coreos.com/v1
 kind: PrometheusRule

katalog/rook-hostcluster/monitoring/rbac.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role

katalog/rook-hostcluster/sc-cephfs.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: storage.k8s.io/v1
 kind: StorageClass

katalog/rook-hostcluster/sc-rbd.yml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 ---
 apiVersion: storage.k8s.io/v1
 kind: StorageClass

katalog/rook-operator/MAINTENANCE.md

@@ -5,7 +5,7 @@ To prepare a new release of this package:
 1. Get the current upstream release
 
 ```bash
-export ROOK_RELEASE=v1.10.5
+export ROOK_RELEASE=v1.10.13
 wget -c https://raw.githubusercontent.com/rook/rook/${ROOK_RELEASE}/deploy/examples/common.yaml \
   https://raw.githubusercontent.com/rook/rook/${ROOK_RELEASE}/deploy/examples/crds.yaml \
   https://raw.githubusercontent.com/rook/rook/${ROOK_RELEASE}/deploy/examples/toolbox.yaml \

katalog/rook-operator/cephfs-csi-nodeplugin-cr.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 # TODO: remove this, once https://github.com/rook/rook/issues/10141
 # is resolved.
 kind: ClusterRole

katalog/rook-operator/cephfs-csi-nodeplugin-crb.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

katalog/rook-operator/cephfs-csi-provisioner-role-cfg-rb.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 kind: RoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

katalog/rook-operator/cephfs-csi-provisioner-role-crb.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

katalog/rook-operator/cephfs-external-provisioner-cfg-role.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 kind: Role
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:

katalog/rook-operator/cephfs-external-provisioner-runner-cr.yaml

@@ -1,3 +1,7 @@
+# Copyright (c) 2017-present SIGHUP s.r.l All rights reserved.
+# Use of this source code is governed by a BSD-style
+# license that can be found in the LICENSE file.
+
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -6,12 +10,15 @@ rules:
   - apiGroups: [""]
     resources: ["secrets"]
     verbs: ["get", "list"]
+  - apiGroups: [""]
+    resources: ["nodes"]
+    verbs: ["get", "list", "watch"]
   - apiGroups: [""]
     resources: ["persistentvolumes"]
     verbs: ["get", "list", "watch", "create", "delete", "patch"]
   - apiGroups: [""]
     resources: ["persistentvolumeclaims"]
-    verbs: ["get", "list", "watch", "patch"]
+    verbs: ["get", "list", "watch", "patch", "update"]
   - apiGroups: ["storage.k8s.io"]
     resources: ["storageclasses"]
     verbs: ["get", "list", "watch"]