This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [headlamp](https://headlamp.dev/) ([source](https://github.com/kubernetes-sigs/headlamp)) | minor | `0.34.0` -> `0.35.0` |
---
### Release Notes
<details>
<summary>kubernetes-sigs/headlamp (headlamp)</summary>
### [`v0.35.0`](https://github.com/kubernetes-sigs/headlamp/releases/tag/v0.35.0): 0.35.0
[Compare Source](https://github.com/kubernetes-sigs/headlamp/compare/v0.34.0...v0.35.0)
#### ✨ Enhancements:
- Add Projects feature (namespace-based, a collection of Kubernetes resources for organizing deployed applications or workloads)
- Gateway API resources can be seen on the map view. Thanks to [@​userAdityaa](https://github.com/userAdityaa)
- Add copy to clipboard button on secrets view
- Add Kube config upload options. Thanks to [@​Exar04](https://github.com/Exar04)
- Can see more than 20 labels on Nodes and Pods now without clicking edit. Thanks to [@​shezaan-hashgraph](https://github.com/shezaan-hashgraph)
- Improvements to local cluster support on Mac, and with display of status on Home Overview
- Helm Chart is available on GHCR now. Thanks to [@​onedr0p](https://github.com/onedr0p) and [@​joryirving](https://github.com/joryirving)
- In the helm chart, ability to specify automountServiceAccountToken in the spec of the pod. Thanks to [@​vnea](https://github.com/vnea)
- Now it is possible to add annotations to services in the helm chart. Thanks to [@​lszczepaniak-XM](https://github.com/lszczepaniak-XM)
- Add oidc-callback-url flag to backend and chart
- Add link to minikube in plugin-catalog on the Add cluster view
- Add support for custom CA and skipping TLS verification to backend and chart, improving flexibility for users working with self-signed OIDC providers
- Improvements to filter, to allow filtering for broken pods and multi select. Thanks to [@​farodin91](https://github.com/farodin91)
- Handle new k8s feature, native sidecars
- i18n support in plugins
- Changing theme font in plugins. Thanks to [@​kirederik](https://github.com/kirederik)
- Optional cache for k8s API calls to reduce API server load. Thanks to [@​upsaurav12](https://github.com/upsaurav12)
- Expand grouped CRs in sidebar. Making installations with lots of CRs much more usable. Thanks to [@​farodin91](https://github.com/farodin91)
##### New Projects feature
<img width="1217" height="669" alt="Screenshot showing the new Project feature" src="https://github.com/user-attachments/assets/5a32663b-a9a8-483b-b679-b5070cde1ff0" />
##### Custom Resources are now grouped in the sidebar
For clusters with many Custom resources installed this makes it much easier to see them grouped in the sidebar.
<img width="1629" height="916" alt="Screenshot showing Custom Resources are now grouped in the sidebar" src="https://github.com/user-attachments/assets/60dd7191-a18c-4061-8a47-7ede4da8f27e" />
##### Gateway API resources can be seen on the map view.
<img width="666" height="654" alt="Selecting Gateway API resources on the map view" src="https://github.com/user-attachments/assets/4528d8cf-5cdf-4631-92fb-be5a80df6ba9" />
<img width="1440" height="899" alt="Showing the map view with the relationship between some Gateway API resources" src="https://github.com/user-attachments/assets/fb3fcfa6-4620-49b3-9af9-d7a35a6ed565" />
##### Copy to clipboard button on secrets view
<img width="782" height="195" alt="image" src="https://github.com/user-attachments/assets/7e8be611-5d91-4fa6-8860-d31e6c6920f1" />
##### New Kube config upload options
Now people can upload kube config files by URL
<img width="611" height="413" alt="Drop multiple files" src="https://github.com/user-attachments/assets/e326e3cf-33aa-46e8-86ad-638358957b90" />
#### 🐞 Bug fixes
* Mac app no longer needs reloading to show plugins on some laptops in cases like when Headlamp was first run
* Fix for realtime updates because of web socket error when telemetry was enabled. Thanks to @​wingerx
* App no longer needs to wait several seconds longer than necessary for clusters to display
* Sidebar a11y issue with focus on collapsed items was fixed. Thanks to @​andoriyaprashant
* Make monaco-editor work again in an offline/air-gapped environment and fix localisation. This improves security and i18n functionality. Thanks to @​DanielLeone
* Status Labels are wrapped incorrect (was "Pendin" on one line, "g" on the next)
* Fix for activity bar close button styling. Thanks to @​Exar04
* Contrast fix for actions notifier (cancel button was not visible)
* Cookies are used for token rather than local storage improving security
* The plugin settings works again to allow disabling/enabling plugins
* Fix on the cluster context menu on the Home Overview page to not show multiple delete actions when a plugin defines a delete action
* Fix for the network icon in map
* A number of now unused dependencies were trimmed from the frontend and from headlamp-plugin
* Fixes for shell escaping in script used for signing some binaries. Thanks to @​odaysec
* Fix display of accessModes on VolumeList detail view
* Fix fetchConfig to return a proper value removing error in web dev console. Thanks to @​wingerx
* Fix for overflow on logs view Thanks to @​greedy-wudpeckr
* A11y fix for Alert contrast in dark-mode
* Refactor CRs to use existing components. Thanks @​farodin91
* Fix so plugins can be deleted again in Plugin settings
* Fix warnings, and bump node to 22 in Dockerfile. Thanks to @​LinPr
#### 💻 Development
* From 5x to 60x faster app load in development with `cd app && npm run star`
* Fix for running app on Windows with cd app && npm start
* Improved "releaser check" tool to so we can see which external release artefacts released correctly
* Remove unnecessary loop assignments which is possible in newer versions of golang. Thanks to @​LinPr
* Clean up some parse tests. Thanks to @​andoriyaprashant
* Fix bug in app for running long running javascripts use by minikube plugin
* Plugin manager can now download non tar.gz extra files
* Add gitignore for mac .DS_Store files
* Update golang version to 1.24.6. Thanks to @​mkm29
* Stories for the Overview component were added. Thanks to @​1012Charan
* Some unused functionality for plugins was removed "loadDevPlugins"
* Update storybook to 9.1.2
* Add registerClusterStatus for adding cluster status to the Overview cluster list
* Extract some auth related methods to new auth package with tests
* Add projects plugin example, for extending new Namespace Projects feature on Home
##### Plugins gain the ability to customise the font-family from a AppTheme. Thanks to @​kirederik
Theme registration:
```js
import './index.css'; // where the @​font-face is defined
registerAppTheme({
name: "My Custom Theme",
base: "light",
primary: "#ff0000",
secondary: "#​333",
fontFamily: ["Asimovian"],
})
```
<img width="1374" height="616" alt="Headlamp with a different font" src="https://github.com/user-attachments/assets/482a608c-2c8f-4647-8831-21bd56ebcee4" />
#### 📖 Documentation
- Document some functions in lib/k8s
- Add note about hack to get around issue installing with brew on Mac whilst binaries are not signed. Thanks to [@​kierr](https://github.com/kierr)
- Add GKE to user tested platform table. Thanks to [@​eranchetz](https://github.com/eranchetz)
<!-- end-release-notes -->
**Container image:** 🐳 [ghcr.io/headlamp-k8s/headlamp:v0.35.0](https://github.com/orgs/headlamp-k8s/packages/container/headlamp/475369027?tag=v0.35.0)
**Desktop Apps:**
🐧 [Flatpak / Linux (AMD64)](https://flathub.org/apps/details/io.kinvolk.Headlamp)
🐧 Linux AppImage [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-linux-x64.AppImage), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-linux-arm64.AppImage), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-linux-armv7l.AppImage)
🐧 Linux Tarball [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-linux-x64.tar.gz), [ARM64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-linux-arm64.tar.gz), [ARMv7l](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-linux-armv7l.tar.gz)
🐧 Debian / Linux [AMD64](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/headlamp_0.35.0-1_amd64.deb)
:green\_apple: [Mac (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-mac-x64.dmg)
:green\_apple: [Mac (ARM/M1)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-mac-arm64.dmg)
:blue\_square: [Windows (AMD64)](https://github.com/kubernetes-sigs/headlamp/releases/download/v0.35.0/Headlamp-0.35.0-win-x64.exe)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->
Reviewed-on: #1382
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [gatus](https://github.com/TwiN/gatus) ([source](https://github.com/TwiN/helm-charts)) | minor | `1.3.1` -> `1.4.0` |
---
### Release Notes
<details>
<summary>TwiN/helm-charts (gatus)</summary>
### [`v1.4.0`](https://github.com/TwiN/helm-charts/releases/tag/gatus-1.4.0)
[Compare Source](https://github.com/TwiN/helm-charts/compare/gatus-1.3.1...gatus-1.4.0)
Automated service health dashboard
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->
Reviewed-on: #1394
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| dpage/pgadmin4 | minor | `9.7` -> `9.8` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4wIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #1387
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| ghcr.io/actualbudget/actual | minor | `25.8.0` -> `25.9.0` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->
Reviewed-on: #1380
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.38.0` -> `6.39.0` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->
Reviewed-on: #1391
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/home-assistant/home-assistant](https://www.home-assistant.io/) ([source](https://github.com/home-assistant/core)) | minor | `2025.8.3` -> `2025.9.0` |
---
### Release Notes
<details>
<summary>home-assistant/core (ghcr.io/home-assistant/home-assistant)</summary>
### [`v2025.9.0`](https://github.com/home-assistant/core/releases/tag/2025.9.0)
[Compare Source](https://github.com/home-assistant/core/compare/2025.8.3...2025.9.0)
https://www.home-assistant.io/blog/2025/09/03/release-20259/
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->
Reviewed-on: #1379
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/haveagitgat/tdarr_node](https://github.com/linuxserver/docker-baseimage-ubuntu/packages) ([source](https://github.com/linuxserver/docker-baseimage-ubuntu)) | minor | `2.45.01` -> `2.46.01` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->
Reviewed-on: #1352
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/haveagitgat/tdarr](https://github.com/linuxserver/docker-baseimage-ubuntu/packages) ([source](https://github.com/linuxserver/docker-baseimage-ubuntu)) | minor | `2.45.01` -> `2.46.01` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->
Reviewed-on: #1351
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.37.0` -> `6.38.0` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->
Reviewed-on: #1335
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [ghcr.io/linuxserver/prowlarr](https://github.com/linuxserver/docker-prowlarr/packages) ([source](https://github.com/linuxserver/docker-prowlarr)) | major | `1.37.0` -> `2.0.5` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #1300
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [rook-ceph-cluster](https://github.com/rook/rook) | minor | `v1.17.8` -> `v1.18.0` |
---
### Release Notes
<details>
<summary>rook/rook (rook-ceph-cluster)</summary>
### [`v1.18.0`](https://github.com/rook/rook/releases/tag/v1.18.0)
[Compare Source](https://github.com/rook/rook/compare/v1.17.8...v1.18.0)
#### Upgrade Guide
To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.18/Upgrade/rook-upgrade/).
#### Breaking Changes
- Kubernetes v1.29 is now the minimum version supported by Rook through the soon-to-be K8s release v1.34.
- Helm versions 3.13 and newer are supported. Previously, only the latest version of helm was tested and the docs stated only version 3.x of helm as a prerequisite. Now rook supports the six most recent minor versions of helm along with their their patch updates.
- Rook now validates node topology during CephCluster creation to prevent misconfigured CRUSH hierarchies for OSDs. If child labels like `topology.rook.io/rack` are duplicated across zones, cluster creation will fail. The check applies only to new clusters without OSDs. Clusters with existing OSDs will only log a warning and continue. If the checks are invalid in your topology, they can be suppressed by setting `ROOK_SKIP_OSD_TOPOLOGY_CHECK=true` in the `rook-ceph-operator-config` configmap.
#### Features
- The Ceph CSI operator is now the default and recommended component for configuring CSI drivers for RBD, CephFS, and NFS volumes. The CSI operator has been factored out of Rook to run independently to manage the Ceph-CSI driver.
- During the upgrade and throughout the v1.18.x releases, Rook will automatically convert any Rook CSI settings to the new CSI operator CRs. This transition is expected to be completely transparent. In the future v1.19 release, Rook will relinquish direct control of these settings so advanced users can have more flexibility when configuring the CSI drivers. At that time, we will have a guide on configuring these new Ceph CSI operator CRs directly.
- During install, as mentioned in the [Quickstart Guide](https://rook.io/docs/rook/latest-release/Getting-Started/quickstart/#deploy-the-rook-operator), there is a new manifest to be created: csi-operator.yaml
- If installing with the helm chart, the Ceph CSI operator will automatically be installed by default with the new helm setting `csi.rookUseCsiOperator` in the rook-ceph chart.
- If a blocking issue is found, the previous CSI driver can be re-enabled by setting `ROOK_USE_CSI_OPERATOR: false` in operator.yaml or by applying the helm setting `csi.rookUseCsiOperator: false`.
- [Ceph CSI v3.15](https://github.com/ceph/ceph-csi/releases/tag/v3.15.0) has a range of features and improvements for the RBD, CephFS, and NFS drivers. This release is supported both by the Ceph CSI operator and Rook's direct mode of configuration. Starting in the next release (at the end of the year), the Ceph CSI operator will be required to configure the CSI driver.
- [CephX key rotation](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx) is now available as an **experimental** feature for the CephX authentication keys used by Ceph daemons and clients. Users will begin to see new cephx status items on some Rook resources in newly-deployed Rook clusters. Users can also find `spec.security.cephx` settings that allow initiating CephX key rotation for various Ceph components. Full documentation for key rotation can be found [here](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx).
- Ceph version v19.2.3+ is required for key rotation.
- The Ceph admin and mon keys cannot yet be rotated. Implementation is still in progress while in experimental mode.
- Add support for specifying the clusterID in the [CephBlockPoolRadosNamespace](https://rook.io/docs/rook/v1.18/CRDs/Block-Storage/ceph-block-pool-rados-namespace-crd/#creating-a-storage-class) and the [CephFilesystemSubVolumeGroup](https://rook.io/docs/rook/v1.18/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd/#create-a-storage-class-for-the-subvolume-group) CR.
- When a mon is being [failed over](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-mon-health/#failing-over-a-monitor), if the assigned node no longer exists, the mon is failed over immediately instead of waiting for a
20 minute timeout.
- Support for Ceph Tentacle v20 will be available as soon as it is released.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->
Reviewed-on: #1281
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| dpage/pgadmin4 | minor | `9.6` -> `9.7` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4zNS4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzUuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->
Reviewed-on: #1285
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [rook-ceph](https://github.com/rook/rook) | minor | `v1.17.8` -> `v1.18.0` |
---
### Release Notes
<details>
<summary>rook/rook (rook-ceph)</summary>
### [`v1.18.0`](https://github.com/rook/rook/releases/tag/v1.18.0)
[Compare Source](https://github.com/rook/rook/compare/v1.17.8...v1.18.0)
#### Upgrade Guide
To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.18/Upgrade/rook-upgrade/).
#### Breaking Changes
- Kubernetes v1.29 is now the minimum version supported by Rook through the soon-to-be K8s release v1.34.
- Helm versions 3.13 and newer are supported. Previously, only the latest version of helm was tested and the docs stated only version 3.x of helm as a prerequisite. Now rook supports the six most recent minor versions of helm along with their their patch updates.
- Rook now validates node topology during CephCluster creation to prevent misconfigured CRUSH hierarchies for OSDs. If child labels like `topology.rook.io/rack` are duplicated across zones, cluster creation will fail. The check applies only to new clusters without OSDs. Clusters with existing OSDs will only log a warning and continue. If the checks are invalid in your topology, they can be suppressed by setting `ROOK_SKIP_OSD_TOPOLOGY_CHECK=true` in the `rook-ceph-operator-config` configmap.
#### Features
- The Ceph CSI operator is now the default and recommended component for configuring CSI drivers for RBD, CephFS, and NFS volumes. The CSI operator has been factored out of Rook to run independently to manage the Ceph-CSI driver.
- During the upgrade and throughout the v1.18.x releases, Rook will automatically convert any Rook CSI settings to the new CSI operator CRs. This transition is expected to be completely transparent. In the future v1.19 release, Rook will relinquish direct control of these settings so advanced users can have more flexibility when configuring the CSI drivers. At that time, we will have a guide on configuring these new Ceph CSI operator CRs directly.
- During install, as mentioned in the [Quickstart Guide](https://rook.io/docs/rook/latest-release/Getting-Started/quickstart/#deploy-the-rook-operator), there is a new manifest to be created: csi-operator.yaml
- If installing with the helm chart, the Ceph CSI operator will automatically be installed by default with the new helm setting `csi.rookUseCsiOperator` in the rook-ceph chart.
- If a blocking issue is found, the previous CSI driver can be re-enabled by setting `ROOK_USE_CSI_OPERATOR: false` in operator.yaml or by applying the helm setting `csi.rookUseCsiOperator: false`.
- [Ceph CSI v3.15](https://github.com/ceph/ceph-csi/releases/tag/v3.15.0) has a range of features and improvements for the RBD, CephFS, and NFS drivers. This release is supported both by the Ceph CSI operator and Rook's direct mode of configuration. Starting in the next release (at the end of the year), the Ceph CSI operator will be required to configure the CSI driver.
- [CephX key rotation](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx) is now available as an **experimental** feature for the CephX authentication keys used by Ceph daemons and clients. Users will begin to see new cephx status items on some Rook resources in newly-deployed Rook clusters. Users can also find `spec.security.cephx` settings that allow initiating CephX key rotation for various Ceph components. Full documentation for key rotation can be found [here](https://rook.io/docs/rook/v1.18/Storage-Configuration/Advanced/cephx-key-rotation/?h=cephx).
- Ceph version v19.2.3+ is required for key rotation.
- The Ceph admin and mon keys cannot yet be rotated. Implementation is still in progress while in experimental mode.
- Add support for specifying the clusterID in the [CephBlockPoolRadosNamespace](https://rook.io/docs/rook/v1.18/CRDs/Block-Storage/ceph-block-pool-rados-namespace-crd/#creating-a-storage-class) and the [CephFilesystemSubVolumeGroup](https://rook.io/docs/rook/v1.18/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd/#create-a-storage-class-for-the-subvolume-group) CR.
- When a mon is being [failed over](https://rook.io/docs/rook/latest-release/Storage-Configuration/Advanced/ceph-mon-health/#failing-over-a-monitor), if the assigned node no longer exists, the mon is failed over immediately instead of waiting for a
20 minute timeout.
- Support for Ceph Tentacle v20 will be available as soon as it is released.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->
Reviewed-on: #1280
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
