This release mostly just bumps default images to their latest versions.
Of note are an update to DRBD which fixes a potential crash which was likely to be triggered in the Kubernets context.
An update to the LINSTOR CSI driver also fixes some caching related issues, notable a fix that affected users with both allowRemoteVolumeAccess policies with "diskless" worker nodes. Previous versions of the plugin could ignore the access policy palcing the diskful resource on unexpected nodes.
As a small new feature, it is possible to configure a separate trust chain for Piraeus-managed TLS resources, i.e. for internalTLS and apiTLS configurations.
Added
- Option to specify custom CA certificate resources for TLS configuration.
- Ensure all Certificate resources have
dnsNamesset.
Changed
- Updated images:
- LINSTOR 1.28.0
- LINSTOR CSI 1.6.3
- DRBD 9.2.10
- DRBD Reactor 1.4.1
- kTLS-utils 0.11
- Latest CSI sidecars
Fixed
- The operator will no longer restart reconciliation on every change to
ServiceAccountresources.