Important
Updated Ceph Base Image with AES256 Key Support
The v3.17.2 ceph-csi image includes an updated Ceph base image (v20.2.4) that provides AES256 key format support. This resolves authentication issues when connecting to Ceph clusters using the newer AES256k key format (#6493).
Kernel Requirements: AES256 key support requires Linux kernel 7.0 or later (backported to CentOS Stream 9 and 10). For more details, see the Ceph v20.2.4 release announcement.
Warning
- Ceph Tentacle v20.2.0 may have data loss with CephFS when readAffinity is enabled. Refer to #5772 for more details.
- Migration: Ceph-CSI v3.17+ officially recommends using Ceph-CSI-Operator as the supported deployment mechanism. Refer to Migration.md for more details.
What's Changed
- ci: use Rook v1.19.9 with new Ceph key format support (backport #6487) by @mergify[bot] in #6502
- rbd: replace O(n) trash list scan with O(1) ID-based trash removal (backport #6472) by @mergify[bot] in #6484
- rbd: remove snapshot lock from restore path (backport #6354) by @mergify[bot] in #6601
- fix: return success when backend image/volume is missing on unpublish (backport #6589) by @mergify[bot] in #6607
- journal: report missing journal object on DeleteVolume retry (backport #6582) by @YiteGu in #6597
- ci: exclude attestation meta from generated manifests (backport #6696) by @mergify[bot] in #6697
- build: update templates and docs for v3.17.2 by @black-dragon74 in #6714
Full Changelog: v3.17.1...v3.17.2