clusters/cl01tl/manifests/rook-ceph/CephCluster-rook-ceph.yaml

@@ -7,8 +7,9 @@ spec:
   monitoring:
     enabled: true
   cephVersion:
+    image: "quay.io/ceph/ceph:v19.2.3-20250717"
     allowUnsupported: false
-    image: quay.io/ceph/ceph:v19.2.3
+    imagePullPolicy:
   cleanupPolicy:
     allowUninstallWithVolumes: false
     confirmation: ""

clusters/cl01tl/manifests/rook-ceph/Deployment-rook-ceph-tools.yaml

@@ -18,7 +18,7 @@ spec:
       dnsPolicy: ClusterFirstWithHostNet
       containers:
         - name: rook-ceph-tools
-          image: quay.io/ceph/ceph:v19.2.3
+          image: quay.io/ceph/ceph:v19.2.3-20250717
           command:
             - /bin/bash
             - -c

clusters/cl01tl/manifests/rook-ceph/Role-rook-ceph-mgr.yaml

@@ -47,6 +47,7 @@ rules:
       - cephblockpools
       - cephfilesystems
       - cephnfses
+      - cephnvmeofgateways
       - cephobjectstores
       - cephobjectstoreusers
       - cephobjectrealms

clusters/cl01tl/manifests/rook-ceph/ServiceAccount-rook-ceph-nvmeof.yaml

@@ -0,0 +1,15 @@
+kind: ServiceAccount
+apiVersion: v1
+metadata:
+  name: rook-ceph-nvmeof
+  namespace: rook-ceph
+  labels:
+    operator: rook
+    storage-backend: ceph
+    app.kubernetes.io/name: rook-ceph
+    app.kubernetes.io/instance: rook-ceph
+    app.kubernetes.io/version: v1.19.0
+    app.kubernetes.io/part-of: rook-ceph-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/created-by: helm
+    helm.sh/chart: "rook-ceph-v1.19.0"