feat(helm-chart): update rook ceph group to v1.13.0 (minor)

[trux-bot]

This PR contains the following updates:

Package	Update	Change
rook-ceph	minor	v1.12.9 -> v1.13.0
rook-ceph-cluster	minor	v1.12.9 -> v1.13.0

---

Release Notes

rook/rook (rook-ceph)

v1.13.0

Compare Source

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes

• Removed support for Ceph Pacific (v16). Ceph Quincy (v17) and Ceph Reef (v18) are the only currently supported versions.
• The minimum supported Kubernetes version is v1.23
• The minimum supported Ceph-CSI driver is 3.9
• The admission controller is removed. If the admission controller is enabled (it is disabled by default), it is recommended to be disabled before the upgrade. See the upgrade guide for more details.

Features

• Added experimental cephConfig to the CephCluster CR to allow setting Ceph config options in the Ceph MON config store via the CRD. These settings supersede the ceph.conf override settings.
• CephCSI v3.10 is now the default CSI driver version.
  • Per-cluster CSI settings for read affinity moved from the operator configmap settings to the CephCluster CR
• The default CephFS SubvolumeGroup has pinning enabled by default to distribute load across MDS ranks in predictable and stable ways.
• The Ceph exporter daemon is updated to use a Ceph keyring with reduced privileges instead of the admin keyring.
• If the host network setting changes in the CephCluster CR, the mons will now automatically failover to enable the new configuration.
• Allow for additional advanced maintenance and troubleshooting of Ceph daemons, by respecting the label ceph.rook.io/do-not-reconcile for all Ceph daemons. This is helpful when using the debug command in the kubectl rook-ceph plugin.

v1.12.10

Compare Source

Improvements

Rook v1.12.10 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• helm: Fix the namespace for the object store ingress (#​13312, @​jouve)
• external: Allow run as a user flag for a non-default external user (#​13383, @​parth-gr)
• mon: Proper detection of mon failover when the host path changes (#​13360, @​sp98)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[trux-bot]

Helm Release: kubernetes/apps/rook-ceph/rook-ceph/cluster/helmrelease.yaml

(file level)
    ---
    # Source: rook-ceph-cluster/templates/cephfilesystem.yaml
    apiVersion: ceph.rook.io/v1
    kind: CephFilesystemSubVolumeGroup
    metadata:
      name: ceph-filesystem-csi # lets keep the svg crd name same as `filesystem name + csi` for the default csi svg
      namespace: default # namespace:cluster
    spec:
      # The name of the subvolume group. If not set, the default is the name of the subvolumeGroup CR.
    name: csi
      # filesystemName is the metadata name of the CephFilesystem CR where the subvolume group will be created
    filesystemName: ceph-filesystem
      # reference https://docs.ceph.com/en/latest/cephfs/fs-volumes/#pinning-subvolumes-and-subvolume-groups
    # only one out of (export, distributed, random) can be set at a time
    # by default pinning is set with value: distributed=1
    # for disabling default values set (distributed=0)
    pinning:
        distributed: 1 # distributed=<0, 1> (disabled=0)
    # export:                 # export=<0-256> (disabled=-1)
    # random:                 # random=[0.0, 1.0](disabled=0.0)
    
  

spec.template.spec.containers.rook-ceph-tools  (apps/v1/Deployment/default/rook-ceph-tools)
  + one map entry added:
    securityContext:
      capabilities:
        drop:
        - ALL
      runAsGroup: 2016
      runAsNonRoot: true
      runAsUser: 2016

[trux-bot]

Helm Release: kubernetes/apps/rook-ceph/rook-ceph/operator/helmrelease.yaml

data  (v1/ConfigMap/default/rook-ceph-operator-config)
  - two map entries removed:
    ROOK_DISABLE_ADMISSION_CONTROLLER: "true"
    ROOK_CSI_ENABLE_GRPC_METRICS: "false"

rules  (rbac.authorization.k8s.io/v1/ClusterRole/rook-ceph-system)
  - one list entry removed:
    - resources:
      - validatingwebhookconfigurations
      apiGroups:
      - admissionregistration.k8s.io
      verbs:
      - create
      - delete
      - get
      - update

rules  (rbac.authorization.k8s.io/v1/ClusterRole/rook-ceph-global)
  - two list entries removed:      + two list entries added:
    - resources:                     - resources:
      - configmaps                     - configmaps
      - nodes                          - nodes
      - nodes/proxy                    - nodes/proxy
      - pods                           - pods
      - secrets                        - secrets
      - services                       apiGroups:
      apiGroups:                       -
      -                                verbs:
      verbs:                           - get
      - get                            - list
      - list                           - watch
      - watch                        - resources:
    - resources:                       - endpoints
      - endpoints                      - events
      - events                         - persistentvolumeclaims
      - persistentvolumeclaims         - persistentvolumes
      - persistentvolumes              - services
      apiGroups:                       apiGroups:
      -                                -
      verbs:                           verbs:
      - create                         - create
      - delete                         - delete
      - get                            - get
      - list                           - list
      - patch                          - patch
      - update                         - update
      - watch                          - watch

spec.template.spec  (apps/v1/Deployment/default/rook-ceph-operator)
  + one map entry added:
    tolerations:
    - key: node.kubernetes.io/unreachable
      effect: NoExecute
      operator: Exists
      tolerationSeconds: 5

spec.template.spec.containers.rook-ceph-operator  (apps/v1/Deployment/default/rook-ceph-operator)
  - one map entry removed:
    ports:
    - name: https-webhook
      containerPort: 9443
      protocol: TCP

spec.template.spec.containers.rook-ceph-operator.image  (apps/v1/Deployment/default/rook-ceph-operator)
  ± value change
    - rook/ceph:v1.12.9
    + rook/ceph:v1.13.0

spec.template.spec.containers.rook-ceph-operator.securityContext  (apps/v1/Deployment/default/rook-ceph-operator)
  + one map entry added:
    capabilities:
      drop:
      - ALL

spec.template.spec.containers.rook-ceph-operator.volumeMounts  (apps/v1/Deployment/default/rook-ceph-operator)
  - one list entry removed:
    - name: webhook-cert
      mountPath: /etc/webhook

spec.template.spec.volumes  (apps/v1/Deployment/default/rook-ceph-operator)
  - one list entry removed:
    - name: webhook-cert
      emptyDir: {}