v1.20 Pending Release Notes

Breaking Changes

• The minimum supported Kubernetes version is v1.31.
• The CSI operator is required for managing CSI driver settings.
  • The CSI settings are removed from the Rook operator configmap and helm chart
  • New installs must configure the CSI settings with the CSI CRs instead of Rook operator settings.
  • Upgrades will continue working with the existing settings that had been applied by Rook previously. Further updates to CSI settings will need to be updated by the Rook admin.

Features

• The latest supported Kubernetes version is v1.36.
• RGW Account support: Added CephObjectStoreAccount CRD for managing RGW accounts, and accountRef field in CephObjectStoreUser to associate users with accounts. This feature is experimental and currently only supported with the Ceph main branch image (quay.ceph.io/ceph-ci/ceph:main). See the Object Store Accounts documentation for more details.
• SSE-S3 with Vault Agent: Added support for server-side encryption with SSE-S3 using HashiCorp Vault Agent authentication. See the CephObjectStore Security Settings for more details.
• Unused CRUSH rule cleanup: Rook now deletes unused CRUSH rules by default after the Ceph mgr starts. Set ROOK_DELETE_UNUSED_CRUSH_RULES to false in the operator config to disable this cleanup.
• Declare stable the feature to concurrently reconcile multiple Ceph Clusters with the setting ROOK_RECONCILE_CONCURRENT_CLUSTERS.
• Containers within a pod are now consistently reconciled by name instead of relying on the order in which they are declared. This is a defensive measure against the declaration order changing due to manipulation by a mutating webhook.
• OSD resize with encrypted host-based OSDs: When using encryptedDevice: true with host-based (non-PVC) OSDs, resizing the underlying disk now automatically expands encrypted OSDs.