Important
Updated Ceph Base Image with AES256 Key Support
The v3.17.1 ceph-csi image includes an updated Ceph base image (v20.2.4) that provides AES256 key format support. This resolves authentication issues when connecting to Ceph clusters using the newer AES256k key format (#6493).
Kernel Requirements: AES256 key support requires Linux kernel 7.0 or later (backported to CentOS Stream 9 and 10). For more details, see the Ceph v20.2.4 release announcement.
Warning
- Ceph Tentacle v20.2.0 may have data loss with CephFS when readAffinity is enabled. Refer to #5772 for more details.
- Migration: Ceph-CSI v3.17+ officially recommends using Ceph-CSI-Operator as the supported deployment mechanism. Refer to Migration.md for more details.
What's Changed
Bug Fixes
- rbd: add missing rbdVol.Destroy() in replication handlers (backport #6451) by @mergify[bot] in #6456
- rbd: Fix connection leak when a non-nil volume is returned (backport #6432) by @mergify[bot] in #6440
- util: fix wrong key size for DEKStoreIntegrated (backport #6344) by @mergify[bot] in #6363
- rbd: open image read-only for DiffIterate in getUsedBytes (backport #6306) by @mergify[bot] in #6309
CI/Testing Improvements
- ci: disable ExtendWebSocketsToKubelet for K8s >= 1.36 (backport #6319) by @mergify[bot] in #6364
- e2e: validate volume stats metrics for block and filesystem PVCs (backport #6306) by @mergify[bot] in #6309
- ci: commitlint and markdownlint fix (backport #6307) by @mergify[bot] in #6308
- release: update templates and docs for v3.17.1 by @iPraveenParihar in #6470
Full Changelog: v3.17.0...v3.17.1