This release brings a few existing new features.
First of all, DRBD 9.2.6 gained support for encrypting traffic with TLS. This needs a user space component to set up. This can now automatically be set up by setting .spec.internalTLS.tlsHandshakeDaemon: true in the LinstorSatelliteConfiguration.
Next, sometimes you may want to disable specific components such as the HA Controller. This can be achieved by setting .spec.highAvailabilityController.enabled: false in the LinstorCluster resource. This also works for the controller, csiController´ and csiNode` components.
There is also now an easy way to update the Pod Template used for all components. See the various podTemplate: values in the API reference. This works the same as creating a patch manually, but should be much more user friendly.
Next, we ripped out the NetworkPolicy from the default deployment: This caused users trouble when using some CNIs. There is now a specific guide.
Talking about guides, there are guides on how to set up basic monitoring with Prometheus.
Added
- Add a new option
.spec.internalTLS.tlsHandshakeDaemonto enable deployment oftlshdalongside the LINSTOR
Satellite. - Shortcuts to configure specific components. Components can be disabled by setting
enabled: false, and the deployed
workload can be influenced using thepodTemplatevalue. Available components:LinstorCluster.spec.controllerLinstorCluster.spec.csiControllerLinstorCluster.spec.csiNodeLinstorCluster.spec.highAvailabilityController
- Shortcut to modify the pod of a satellite by adding a
LinstorSatelliteConfiguration.spec.podTemplate, which is
a shortcut for creating a.spec.patchespatch.
Changed
- Fixed service resources relying on default protocol version.
- Moved NetworkPolicy for DRBD out of default deployed resources.
- Updated images:
- LINSTOR 1.25.1
- LINSTOR CSI 1.3.0
- DRBD Reactor 1.4.0
- Latest CSI sidecars
- Add a default toleration for the HA Controller taints to the operator.