fix(deps): update rook-ceph group (v1.19.2 → v1.19.4) (patch) by renovate[bot] · Pull Request #1015 · prehor/home-ops

renovate · 2026-03-27T01:14:28Z

This PR contains the following updates:

Package	Update	Change
rook-ceph	patch	`v1.19.2` → `v1.19.4`
rook-ceph-cluster	patch	`v1.19.2` → `v1.19.4`

Release Notes

rook/rook (rook-ceph)

`v1.19.4`

Compare Source

`v1.19.3`

Compare Source

Improvements

Rook v1.19.3 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

csi: Use ceph-csi-operator to deploy Ceph-CSI/NVMe-oF (#17154, @nixpanic)
csi: Update ceph-csi image to v3.16.2 (#17184, @black-dragon74)
csi: Update CSI sidecars to latest versions available (#17119, @iPraveenParihar)
pool: Clean up erasure code profile on pool deletion (#17208, @OdedViner)
pool: Set EC pool status to ready after reconcile (#17200, @OdedViner)
pool: Skip mirroring if the data pool is erasure-coded (#17143, @parth-gr)
exporter: Delete orphaned ceph-exporter deployments on reconcile (#17165, @adilGhaffarDev)
exporter: Reconcile as best effort during deletion and ensure all clusters reconciled (#17164, @travisn)
exporter: Add configurable port for ceph exporter (#17116, @OdedViner)
rgw: Create correct IPv6 formatted secret for object store users (#17161, @parth-gr)
helm: Allow annotations and labels for CephCluster (#17046, @sathieu)
osd: Check devlinks while cleaning osd disks (#17123, @sp98)
osd: Update lockbox key rotation for encrypted OSDs (#17112, @BlaineEXE)
osd: Set device-type label on update (#17113, @satoru-takeuchi)
rgw: Support new RGW pools in shared pools zone json config (#17102, @arttor)
rgw: ObjectStore controller to wait until zone and sharedPools are reconciled (#17101, @arttor)

Configuration

📅 Schedule: (in timezone Europe/Prague)

Branch creation
- "on friday and saturday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-03-27T01:14:59Z

--- kubernetes/main/apps/storage/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: storage/rook-ceph-operator

+++ kubernetes/main/apps/storage/rook-ceph/app Kustomization: flux-system/rook-ceph HelmRelease: storage/rook-ceph-operator

@@ -13,13 +13,13 @@

     spec:
       chart: rook-ceph
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
         namespace: flux-system
-      version: v1.19.2
+      version: v1.19.4
   dependsOn:
   - name: snapshot-controller
   install:
     remediation:
       retries: 3
   interval: 30m
--- kubernetes/main/apps/storage/rook-ceph/cluster Kustomization: flux-system/rook-ceph-cluster HelmRelease: storage/rook-ceph-cluster

+++ kubernetes/main/apps/storage/rook-ceph/cluster Kustomization: flux-system/rook-ceph-cluster HelmRelease: storage/rook-ceph-cluster

@@ -13,13 +13,13 @@

     spec:
       chart: rook-ceph-cluster
       sourceRef:
         kind: HelmRepository
         name: rook-ceph
         namespace: flux-system
-      version: v1.19.2
+      version: v1.19.4
   dependsOn:
   - name: multus
     namespace: kube-system
   - name: rook-ceph-operator
     namespace: storage
   install:

github-actions · 2026-03-27T01:15:00Z

--- HelmRelease: storage/rook-ceph-operator ConfigMap: storage/rook-ceph-operator-config

+++ HelmRelease: storage/rook-ceph-operator ConfigMap: storage/rook-ceph-operator-config

@@ -34,18 +34,18 @@

   CSI_ENABLE_VOLUME_GROUP_SNAPSHOT: 'true'
   CSI_PLUGIN_PRIORITY_CLASSNAME: system-node-critical
   CSI_PROVISIONER_PRIORITY_CLASSNAME: system-cluster-critical
   CSI_RBD_FSGROUPPOLICY: File
   CSI_CEPHFS_FSGROUPPOLICY: File
   CSI_NFS_FSGROUPPOLICY: File
-  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.1
-  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.0
-  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.0.0
-  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0
-  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.10.0
-  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.0.0
+  ROOK_CSI_CEPH_IMAGE: quay.io/cephcsi/cephcsi:v3.16.2
+  ROOK_CSI_REGISTRAR_IMAGE: registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0
+  ROOK_CSI_PROVISIONER_IMAGE: registry.k8s.io/sig-storage/csi-provisioner:v6.1.1
+  ROOK_CSI_SNAPSHOTTER_IMAGE: registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0
+  ROOK_CSI_ATTACHER_IMAGE: registry.k8s.io/sig-storage/csi-attacher:v4.11.0
+  ROOK_CSI_RESIZER_IMAGE: registry.k8s.io/sig-storage/csi-resizer:v2.1.0
   ROOK_CSI_IMAGE_PULL_POLICY: IfNotPresent
   CSI_ENABLE_CSIADDONS: 'false'
   ROOK_CSIADDONS_IMAGE: quay.io/csiaddons/k8s-sidecar:v0.14.0
   CSI_ENABLE_CROSS_NAMESPACE_VOLUME_DATA_SOURCE: 'false'
   CSI_ENABLE_TOPOLOGY: 'false'
   ROOK_CSI_ENABLE_NFS: 'false'
--- HelmRelease: storage/rook-ceph-operator Deployment: storage/ceph-csi-controller-manager

+++ HelmRelease: storage/rook-ceph-operator Deployment: storage/ceph-csi-controller-manager

@@ -38,13 +38,13 @@

         - name: CSI_SERVICE_ACCOUNT_PREFIX
           value: ceph-csi-
         - name: WATCH_NAMESPACE
           value: ''
         - name: KUBERNETES_CLUSTER_DOMAIN
           value: cluster.local
-        image: quay.io/cephcsi/ceph-csi-operator:v0.5.0
+        image: quay.io/cephcsi/ceph-csi-operator:v0.6.0
         livenessProbe:
           httpGet:
             path: /healthz
             port: 8081
           initialDelaySeconds: 15
           periodSeconds: 20
--- HelmRelease: storage/rook-ceph-operator Deployment: storage/rook-ceph-operator

+++ HelmRelease: storage/rook-ceph-operator Deployment: storage/rook-ceph-operator

@@ -28,13 +28,13 @@

       - effect: NoExecute
         key: node.kubernetes.io/unreachable
         operator: Exists
         tolerationSeconds: 5
       containers:
       - name: rook-ceph-operator
-        image: docker.io/rook/ceph:v1.19.2
+        image: docker.io/rook/ceph:v1.19.4
         imagePullPolicy: IfNotPresent
         args:
         - ceph
         - operator
         securityContext:
           capabilities:
--- HelmRelease: storage/rook-ceph-operator ServiceAccount: storage/ceph-csi-nvmeof-ctrlplugin-sa

+++ HelmRelease: storage/rook-ceph-operator ServiceAccount: storage/ceph-csi-nvmeof-ctrlplugin-sa

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-sa
+  namespace: storage
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: storage/rook-ceph-operator ServiceAccount: storage/ceph-csi-nvmeof-nodeplugin-sa

+++ HelmRelease: storage/rook-ceph-operator ServiceAccount: storage/ceph-csi-nvmeof-nodeplugin-sa

@@ -0,0 +1,11 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-sa
+  namespace: storage
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/ceph-csi-nvmeof-ctrlplugin-cr

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/ceph-csi-nvmeof-ctrlplugin-cr

@@ -0,0 +1,125 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-cr
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - delete
+  - patch
+  - update
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumeclaims
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - events
+  verbs:
+  - list
+  - watch
+  - create
+  - update
+  - patch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments
+  verbs:
+  - get
+  - list
+  - watch
+  - patch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments/status
+  verbs:
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - csinodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumeclaims/status
+  verbs:
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+
--- HelmRelease: storage/rook-ceph-operator ClusterRole: storage/ceph-csi-nvmeof-nodeplugin-cr

+++ HelmRelease: storage/rook-ceph-operator ClusterRole: storage/ceph-csi-nvmeof-nodeplugin-cr

@@ -0,0 +1,78 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-cr
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - ''
+  resources:
+  - secrets
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumes
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - volumeattachments
+  verbs:
+  - get
+  - list
+- apiGroups:
+  - ''
+  resources:
+  - configmaps
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts
+  verbs:
+  - get
+- apiGroups:
+  - ''
+  resources:
+  - serviceaccounts/token
+  verbs:
+  - create
+- apiGroups:
+  - ''
+  resources:
+  - nodes
+  verbs:
+  - get
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - ''
+  resources:
+  - events
+  verbs:
+  - list
+  - watch
+  - create
+  - update
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - persistentvolumeclaims
+  verbs:
+  - get
+
--- HelmRelease: storage/rook-ceph-operator ClusterRoleBinding: storage/ceph-csi-nvmeof-ctrlplugin-crb

+++ HelmRelease: storage/rook-ceph-operator ClusterRoleBinding: storage/ceph-csi-nvmeof-ctrlplugin-crb

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-crb
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ceph-csi-nvmeof-ctrlplugin-cr
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-ctrlplugin-sa
+  namespace: storage
+
--- HelmRelease: storage/rook-ceph-operator ClusterRoleBinding: storage/ceph-csi-nvmeof-nodeplugin-crb

+++ HelmRelease: storage/rook-ceph-operator ClusterRoleBinding: storage/ceph-csi-nvmeof-nodeplugin-crb

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-crb
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: ceph-csi-nvmeof-nodeplugin-cr
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-nodeplugin-sa
+  namespace: storage
+
--- HelmRelease: storage/rook-ceph-operator Role: storage/ceph-csi-nvmeof-ctrlplugin-r

+++ HelmRelease: storage/rook-ceph-operator Role: storage/ceph-csi-nvmeof-ctrlplugin-r

@@ -0,0 +1,53 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-r
+  namespace: storage
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - watch
+  - list
+  - delete
+  - update
+  - create
+- apiGroups:
+  - csiaddons.openshift.io
+  resources:
+  - csiaddonsnodes
+  verbs:
+  - get
+  - watch
+  - list
+  - create
+  - update
+  - delete
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - deployments/finalizers
+  - daemonsets/finalizers
+  verbs:
+  - update
+
--- HelmRelease: storage/rook-ceph-operator Role: storage/ceph-csi-nvmeof-nodeplugin-r

+++ HelmRelease: storage/rook-ceph-operator Role: storage/ceph-csi-nvmeof-nodeplugin-r

@@ -0,0 +1,42 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-r
+  namespace: storage
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+rules:
+- apiGroups:
+  - csiaddons.openshift.io
+  resources:
+  - csiaddonsnodes
+  verbs:
+  - get
+  - watch
+  - list
+  - create
+  - update
+  - delete
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - replicasets
+  verbs:
+  - get
+- apiGroups:
+  - apps
+  resources:
+  - deployments/finalizers
+  - daemonsets/finalizers
+  verbs:
+  - update
+
--- HelmRelease: storage/rook-ceph-operator RoleBinding: storage/ceph-csi-nvmeof-ctrlplugin-rb

+++ HelmRelease: storage/rook-ceph-operator RoleBinding: storage/ceph-csi-nvmeof-ctrlplugin-rb

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ceph-csi-nvmeof-ctrlplugin-rb
+  namespace: storage
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ceph-csi-nvmeof-ctrlplugin-r
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-ctrlplugin-sa
+  namespace: storage
+
--- HelmRelease: storage/rook-ceph-operator RoleBinding: storage/ceph-csi-nvmeof-nodeplugin-rb

+++ HelmRelease: storage/rook-ceph-operator RoleBinding: storage/ceph-csi-nvmeof-nodeplugin-rb

@@ -0,0 +1,19 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ceph-csi-nvmeof-nodeplugin-rb
+  namespace: storage
+  labels:
+    app.kubernetes.io/name: ceph-csi
+    app.kubernetes.io/instance: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ceph-csi-nvmeof-nodeplugin-r
+subjects:
+- kind: ServiceAccount
+  name: ceph-csi-nvmeof-nodeplugin-sa
+  namespace: storage
+

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot added renovate/helm type/patch labels Mar 27, 2026

github-actions Bot added area/kubernetes cluster/main labels Mar 27, 2026

fix(deps): update rook-ceph group (v1.19.2 → v1.19.4)

63a665f

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot force-pushed the renovate/main-patch-rook-ceph branch from ebe375f to 63a665f Compare April 15, 2026 01:23

renovate Bot changed the title ~~fix(deps): update rook-ceph group (v1.19.2 → v1.19.3) (patch)~~ fix(deps): update rook-ceph group (v1.19.2 → v1.19.4) (patch) Apr 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update rook-ceph group (v1.19.2 → v1.19.4) (patch)#1015

fix(deps): update rook-ceph group (v1.19.2 → v1.19.4) (patch)#1015
renovate[bot] wants to merge 1 commit intomainfrom
renovate/main-patch-rook-ceph

renovate Bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.19.4

v1.19.3

Improvements

Configuration

Uh oh!

github-actions Bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 27, 2026 •

edited

Loading

`v1.19.4`

`v1.19.3`

github-actions Bot commented Mar 27, 2026 •

edited

Loading

github-actions Bot commented Mar 27, 2026 •

edited

Loading