From 546c7e2a7d531e16f130b2a0e34c10ed30997b94 Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Tue, 20 Jan 2026 20:59:00 +0000
Subject: [PATCH] Automated Manifest Update (#3344)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3344
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
---
 .../rook-ceph/CephCluster-rook-ceph.yaml          |  3 ++-
 .../rook-ceph/Deployment-rook-ceph-tools.yaml     |  2 +-
 .../manifests/rook-ceph/Role-rook-ceph-mgr.yaml   |  1 +
 .../ServiceAccount-rook-ceph-nvmeof.yaml          | 15 +++++++++++++++
 4 files changed, 19 insertions(+), 2 deletions(-)
 create mode 100644 clusters/cl01tl/manifests/rook-ceph/ServiceAccount-rook-ceph-nvmeof.yaml

diff --git a/clusters/cl01tl/manifests/rook-ceph/CephCluster-rook-ceph.yaml b/clusters/cl01tl/manifests/rook-ceph/CephCluster-rook-ceph.yaml
index 75d91aa11..7696aefb8 100644
--- a/clusters/cl01tl/manifests/rook-ceph/CephCluster-rook-ceph.yaml
+++ b/clusters/cl01tl/manifests/rook-ceph/CephCluster-rook-ceph.yaml
@@ -7,8 +7,9 @@ spec:
   monitoring:
     enabled: true
   cephVersion:
+    image: "quay.io/ceph/ceph:v19.2.3-20250717"
     allowUnsupported: false
-    image: quay.io/ceph/ceph:v19.2.3
+    imagePullPolicy:
   cleanupPolicy:
     allowUninstallWithVolumes: false
     confirmation: ""
diff --git a/clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-tools.yaml b/clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-tools.yaml
index e3cc334a6..ce31191db 100644
--- a/clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-tools.yaml
+++ b/clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-tools.yaml
@@ -18,7 +18,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: rook-ceph-tools
-          image: quay.io/ceph/ceph:v19.2.3
+          image: quay.io/ceph/ceph:v19.2.3-20250717
           command:
             - /bin/bash
             - -c
diff --git a/clusters/cl01tl/manifests/rook-ceph/Role-rook-ceph-mgr.yaml b/clusters/cl01tl/manifests/rook-ceph/Role-rook-ceph-mgr.yaml
index 76546c77a..6f84de798 100644
--- a/clusters/cl01tl/manifests/rook-ceph/Role-rook-ceph-mgr.yaml
+++ b/clusters/cl01tl/manifests/rook-ceph/Role-rook-ceph-mgr.yaml
@@ -47,6 +47,7 @@ rules:
       - cephblockpools
       - cephfilesystems
       - cephnfses
+      - cephnvmeofgateways
       - cephobjectstores
       - cephobjectstoreusers
       - cephobjectrealms
diff --git a/clusters/cl01tl/manifests/rook-ceph/ServiceAccount-rook-ceph-nvmeof.yaml b/clusters/cl01tl/manifests/rook-ceph/ServiceAccount-rook-ceph-nvmeof.yaml
new file mode 100644
index 000000000..f01cadf39
--- /dev/null
+++ b/clusters/cl01tl/manifests/rook-ceph/ServiceAccount-rook-ceph-nvmeof.yaml
@@ -0,0 +1,15 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: rook-ceph-nvmeof
+  namespace: rook-ceph
+  labels:
+    operator: rook
+    storage-backend: ceph
+    app.kubernetes.io/name: rook-ceph
+    app.kubernetes.io/instance: rook-ceph
+    app.kubernetes.io/version: v1.19.0
+    app.kubernetes.io/part-of: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/created-by: helm
+    helm.sh/chart: "rook-ceph-v1.19.0"