github.com/piraeusdatastore/piraeus-operator

• Default images:
  • LINSTOR 1.26.2
  • LINSTOR CSI 1.4.0
  • DRBD 9.1.19
  • Latest CSI sidecars

Changed

• Default images:
  • LINSTOR 1.25.1
  • LINSTOR CSI 1.3.0
  • DRBD 9.1.17
  • DRBD Reactor 1.4.0
  • Latest CSI sidecars

Changed

• Package ha-controller chart from upstream.
• Default images:
  • LINSTOR 1.24.2
  • LINSTOR CSI 1.2.3
  • DRBD 9.1.16

Added

• Configure Monitoring for CSI Components if monitoring is enabled.

Fixed

• A crash caused by insufficient permissions on the LINSTOR Controller.
• Invalid use of "HTTP" protocol specification for prometheus monitoring, use "http" instead.

Updated

• Default images:
  • LINSTOR CSI 1.2.2

Added

• Option to set the dns policy used for satellites.

Changed

• Default images:
  • LINSTOR CSI 1.2.0
  • DRBD 9.1.15
  • external CSI images upgraded to latest

Changed

• Set User-Agent Header when querying LINSTOR.
• Skip registration of non-running Controller Pods.
• Default images:
  • LINSTOR 1.23.0
  • LINSTOR CSI 1.1.0
  • DRBD Reactor 1.2.0
  • external CSI images upgraded to latest versions

Changed

• Switch controller logging to be controlled by the zap-log-level flag.
• Default images:
  • LINSTOR 1.22.0
  • LINSTOR CSI 1.0.1
  • DRBD 9.1.14
  • DRBD Reactor 1.1.0
  • external CSI images upgraded to latest versions

Added

• Option controllerStrategy to describe how to replace existing pods with new ones for csi-controller

Changed

• Default images:
  • LINSTOR 1.20.3
  • LINSTOR CSI 0.22.1
  • DRBD 9.1.13
  • DRBD Reactor 1.0.0
  • external CSI images upgraded to latest versions

Changed

• Creating LVM thinpools no longer limits the ability to choose a VolumeGroup name.
• Default images:
  • LINSTOR 1.20.2
  • LINSTOR CSI 0.22.0
  • DRBD 9.1.12
  • DRBD Reactor 0.10.2
  • external CSI images upgraded to latest versions
  • changed k8s.gcr.io to registry.k8s.io

Added

• Can set the variable mountDrbdResourceDirectoriesFromHost in the Helm chart to create hostPath Volumes for DRBD and LINSTOR configuration directories for the satellite set.

Changed

• Change default bind address for satellite monitoring to use IPv6 anylocal [::]. This will still to work on IPv4 only systems with IPv6 disabled via sysctl.
• Default images:
  • LINSTOR 1.20.0
  • DRBD 9.1.11
  • DRBD Reactor 0.9.0
  • external CSI images upgraded to latest versions

Fixed

• Comparing IP addresses for registered components uses golang's built-in net.IP type.
• Restoring satellites after eviction only happens if the node is ready.

Fixed

• ServiceMonitor resources can't be patched, instead we recreate them.

Added

• Support for custom labels and annotations with added options to values.yaml.
• Instructions for deploying the affinity controller.

Changed

• Satellite operator now reports basic satellite status even if controller is not reachable
• Query single satellite devices to receive errors when the satellite is offline instead of assuming devices are already configured.
• Disabled the legacy HA Controller deployment by default. It has been replaced a separate chart.
• Default images:
  • LINSTOR 1.19.1
  • LINSTOR CSI 0.20.0
  • DRBD 9.1.8
  • DRBD Reactor 0.8.0
  • external CSI images to latest versions

Fixed

• last-applied-configuration annotation was never updated, so updating of some fields was not performed correctly.

Added

• Option to disable creating monitoring resources (Services and ServiceMonitors)
• Add options csi.controllerSidecars, csi.controllerExtraVolumes, csi.nodeSidecars, csi.nodeExtraVolumes, operator.controller.sidecars, operator.controller.extraVolumes, operator.satelliteSet.sidecars, operator.satelliteSet.extraVolumes to allow specifying extra sidecar containers.
• Add options operator.controller.httpBindAddress, operator.controller.httpsBindAddress, operator.satelliteSet.monitoringBindAddress to allow specifying bind address.
• Add example values and doc reference to run piraeus-operator with rbac-proxy.

Changed

• Default images:
  • LINSTOR 1.18.2
  • LINSTOR CSI 0.19.1
  • DRBD Reactor 0.7.0

Removed

• Get rid of operator-sdk binary, use native controller-gen instead

Changed

• Default images:
  • LINSTOR 1.18.1
  • LINSTOR CSI 0.19.0
  • DRBD 9.1.7
  • DRBD Reactor 0.6.1

Added

• Upgrades involving k8s databases no long require manually confirming a backup exists using --set IHaveBackedUpAllMyLinstorResources=true.

Added

• Allow setting the number of parallel requests created by the CSI sidecars. This limits the load on the LINSTOR backend, which could easily overload when creating many volumes at once.
• Unify certificates format for SSL enabled installation, no more java tooling required.
• Automatic certificates generation using Helm or Cert-manager
• HA Controller and CSI components now wait for the LINSTOR API to be initialized using InitContainers.

Changed

• Create backups of LINSTOR resource if the "k8s" database backend is used and an image change is detected. Backups are stored in Secret resources as a tar.gz. If the secret would get too big, the backup can be downloaded from the operator pod.
• Default images:
  • LINSTOR 1.18.0
  • LINSTOR CSI 0.18.0
  • DRBD 9.1.6
  • DRBD Reactor 0.5.3
  • LINSTOR HA Controller 0.3.0
  • CSI Attacher v3.4.0
  • CSI Node Driver Registrar v2.4.0
  • CSI Provisioner v3.1.0
  • CSI Snapshotter v5.0.1
  • CSI Resizer v1.4.0
  • Stork v2.8.2
• Stork updated to support Kubernetes v1.22+.
• Satellites no longer have a readiness probe defined. This caused issues in the satellites by repeatedly opening unexpected connections, especially when using SSL.
• Only query node devices if a storage pool needs to be created.
• Use cached storage pool response to avoid causing excessive load on LINSTOR satellites.
• Protect LINSTOR passphrase from accidental deletion by using a finalizer.

Breaking

• If you have SSL configured, then the certificates must be regenerated in PEM format. Learn more in the upgrade guide.

Added

• Allow setting the number of parallel requests created by the CSI sidecars. This limits the load on the LINSTOR backend, which could easily overload when creating many volumes at once.
• Unify certificates format for SSL enabled installation, no more java tooling required.
• Automatic certificates generation using Helm or Cert-manager
• HA Controller and CSI components now wait for the LINSTOR API to be initialized using InitContainers.

Changed

• Create backups of LINSTOR resource if the "k8s" database backend is used and an image change is detected. Backups are stored in Secret resources as a tar.gz. If the secret would get too big, the backup can be downloaded from the operator pod.
• Default images:
  • LINSTOR 1.18.0
  • LINSTOR CSI 0.18.0
  • DRBD 9.1.6
  • DRBD Reactor 0.5.3
  • LINSTOR HA Controller 0.3.0
  • CSI Attacher v3.4.0
  • CSI Node Driver Registrar v2.4.0
  • CSI Provisioner v3.1.0
  • CSI Snapshotter v5.0.1
  • CSI Resizer v1.4.0
  • Stork v2.8.2
• Stork updated to support Kubernetes v1.22+.
• Satellites no longer have a readiness probe defined. This caused issues in the satellites by repeatedly opening unexpected connections, especially when using SSL.
• Only query node devices if a storage pool needs to be created.
• Use cached storage pool response to avoid causing excessive load on LINSTOR satellites.
• Protect LINSTOR passphrase from accidental deletion by using a finalizer.

Breaking

• If you have SSL configured, then the certificates must be regenerated in PEM format. Learn more in the upgrade guide.

Added

• Allow the external-provisioner and external-snapshotter access to secrets. This is required to support StorageClass and SnapshotClass secrets.
• Instruct external-provisioner to pass PVC name+namespace to the CSI driver, enabling optional support for PVC based names for LINSTOR volumes.
• Allow setting the log level of LINSTOR components via CRs. Other components are left using their default log level. The new default log level is INFO (was DEBUG previously, which was often too verbose).
• Override the kernel source directory used when compiling DRBD (defaults to /usr/src). See operator.satelliteSet.kernelModuleInjectionAdditionalSourceDirectory
• etcd-chart: add option to set priorityClassName.

Fixed

• Use correct secret name when setting up TLS for satellites
• Correctly configure ServiceMonitor resource if TLS is enabled for LINSTOR Controller.

Added

• Allow the external-provisioner and external-snapshotter access to secrets. This is required to support StorageClass and SnapshotClass secrets.
• Instruct external-provisioner to pass PVC name+namespace to the CSI driver, enabling optional support for PVC based names for LINSTOR volumes.
• Allow setting the log level of LINSTOR components via CRs. Other components are left using their default log level. The new default log level is INFO (was DEBUG previously, which was often too verbose).
• Override the kernel source directory used when compiling DRBD (defaults to /usr/src). See operator.satelliteSet.kernelModuleInjectionAdditionalSourceDirectory
• etcd-chart: add option to set priorityClassName.

Fixed

• Use correct secret name when setting up TLS for satellites
• Correctly configure ServiceMonitor resource if TLS is enabled for LINSTOR Controller.