IBM Spectrum Scale Container Native v5.2.0.0 04/26/2024

--------------------------------------------

* IBM Spectrum Scale Operator v5.2.0.0
* IBM Spectrum Scale v5.2.0.0
* IBM Spectrum Scale Container Storage Interface 2.11.0

Signed-off-by: raulj-gespejo <[email protected]>

config/base/apis/scale/crd/kustomization.yaml

@@ -0,0 +1,43 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+# Uncomment to enable conversion webhook
+#patches:
+#  - patches/webhook_in_daemons.yaml
+# +kubebuilder:scaffold:crdkustomizewebhookpatch
+
+# Uncomment to enable certmanager injection for conversion webhook
+#- patches/cainjection_in_daemons.yaml
+# +kubebuilder:scaffold:crdkustomizecainjectionpatch
+
+configurations:
+- kustomizeconfig.yaml
+resources:
+- scale.spectrum.ibm.com_approvalrequests.yaml
+- scale.spectrum.ibm.com_asyncreplications.yaml
+- scale.spectrum.ibm.com_callhomes.yaml
+- scale.spectrum.ibm.com_cloudcsidisks.yaml
+- scale.spectrum.ibm.com_clusterinterconnects.yaml
+- scale.spectrum.ibm.com_clusters.yaml
+- scale.spectrum.ibm.com_compressionjobs.yaml
+- scale.spectrum.ibm.com_consistencygroups.yaml
+- scale.spectrum.ibm.com_daemons.yaml
+- scale.spectrum.ibm.com_diskjobs.yaml
+- scale.spectrum.ibm.com_dnsconfigs.yaml
+- scale.spectrum.ibm.com_dnss.yaml
+- scale.spectrum.ibm.com_encryptionconfigs.yaml
+- scale.spectrum.ibm.com_filesystems.yaml
+- scale.spectrum.ibm.com_grafanabridges.yaml
+- scale.spectrum.ibm.com_guis.yaml
+- scale.spectrum.ibm.com_localdisks.yaml
+- scale.spectrum.ibm.com_pmcollectors.yaml
+- scale.spectrum.ibm.com_recoverygroups.yaml
+- scale.spectrum.ibm.com_regionaldrexports.yaml
+- scale.spectrum.ibm.com_regionaldrs.yaml
+- scale.spectrum.ibm.com_remoteclusters.yaml
+- scale.spectrum.ibm.com_restripefsjobs.yaml
+- scale.spectrum.ibm.com_stretchclusterinitnodes.yaml
+- scale.spectrum.ibm.com_stretchclusters.yaml
+- scale.spectrum.ibm.com_stretchclustertiebreakers.yaml
+- scale.spectrum.ibm.com_upgradeapprovals.yaml
+- scale.spectrum.ibm.com_volumes.yaml

config/base/apis/scale/crd/patches/cainjection_in_daemons.yaml

@@ -0,0 +1,7 @@
+# The following patch adds a directive for certmanager to inject CA into the CRD
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
+  name: daemons.scale.spectrum.ibm.com

config/base/apis/scale/crd/patches/webhook_in_daemons.yaml

@@ -0,0 +1,14 @@
+# The following patch enables a conversion webhook for the CRD
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: daemons.scale.spectrum.ibm.com
+spec:
+  conversion:
+    strategy: Webhook
+    webhook:
+      clientConfig:
+        service:
+          namespace: system
+          name: webhook-service
+          path: /convert

config/base/apis/scale/v1beta1/crd/scale.spectrum.ibm.com_clusters.yaml → config/base/apis/scale/crd/scale.spectrum.ibm.com_clusters.yaml

@@ -205,6 +205,23 @@ spec:
                         type: string
                       tscCmdPortRange:
                         type: string
+                      verbsPorts:
+                        type: string
+                      verbsRdma:
+                        enum:
+                        - enable
+                        - disable
+                        type: string
+                      verbsRdmaCm:
+                        enum:
+                        - enable
+                        - disable
+                        type: string
+                      verbsRdmaSend:
+                        enum:
+                        - "yes"
+                        - "no"
+                        type: string
                     type: object
                   hostAliases:
                     description: hostAliases that will be added to the internal DNS
@@ -387,6 +404,23 @@ spec:
                               type: string
                             tscCmdPortRange:
                               type: string
+                            verbsPorts:
+                              type: string
+                            verbsRdma:
+                              enum:
+                              - enable
+                              - disable
+                              type: string
+                            verbsRdmaCm:
+                              enum:
+                              - enable
+                              - disable
+                              type: string
+                            verbsRdmaSend:
+                              enum:
+                              - "yes"
+                              - "no"
+                              type: string
                           type: object
                         resources:
                           description: The Memory/CPU resource requests that will
@@ -556,7 +590,7 @@ spec:
                 properties:
                   accept:
                     description: Read the license and specify "true" to accept or
-                      "false" to not accept. https://www.ibm.com/support/customer/csol/terms/?id=L-WTYD-L6XAV7
+                      "false" to not accept. https://www.ibm.com/support/customer/csol/terms/?id=L-YXLU-VTKFBH
                       BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, CLICKING ON
                       AN "ACCEPT" BUTTON, OR OTHERWISE USING THE PROGRAM, LICENSEE
                       AGREES TO THE TERMS OF THIS AGREEMENT. IF YOU ARE ACCEPTING

config/base/apis/scale/v1beta1/crd/scale.spectrum.ibm.com_daemons.yaml → config/base/apis/scale/crd/scale.spectrum.ibm.com_daemons.yaml

@@ -41,10 +41,6 @@ spec:
       name: Terminating
       priority: 10
       type: string
-    - jsonPath: .status.podsStatus.waitingForDelete
-      name: Waiting Delete
-      priority: 10
-      type: string
     - jsonPath: .status.quorumPods.total
       name: Quorum
       priority: 10
@@ -240,6 +236,23 @@ spec:
                     type: string
                   tscCmdPortRange:
                     type: string
+                  verbsPorts:
+                    type: string
+                  verbsRdma:
+                    enum:
+                    - enable
+                    - disable
+                    type: string
+                  verbsRdmaCm:
+                    enum:
+                    - enable
+                    - disable
+                    type: string
+                  verbsRdmaSend:
+                    enum:
+                    - "yes"
+                    - "no"
+                    type: string
                 type: object
               edition:
                 description: It specifies the IBM Spectrum Scale edition, "data-access"
@@ -440,6 +453,23 @@ spec:
                           type: string
                         tscCmdPortRange:
                           type: string
+                        verbsPorts:
+                          type: string
+                        verbsRdma:
+                          enum:
+                          - enable
+                          - disable
+                          type: string
+                        verbsRdmaCm:
+                          enum:
+                          - enable
+                          - disable
+                          type: string
+                        verbsRdmaSend:
+                          enum:
+                          - "yes"
+                          - "no"
+                          type: string
                       type: object
                     resources:
                       description: The Memory/CPU resource requests that will be set
@@ -599,6 +629,69 @@ spec:
                   - type
                   type: object
                 type: array
+              cordonAndDrain:
+                description: Details about nodes that are cordoned and drained and
+                  pods that are evicted by Scale operator.
+                properties:
+                  nodesCordonedByOperator:
+                    description: List of nodes that are cordoned by Scale operator.
+                      These nodes have status SchedulingDisabled. Nodes that are cordoned
+                      by third party like machine config operator are not listed.
+                    type: string
+                  nodesCordonedByOthers:
+                    description: List of nodes that are cordoned by third party like
+                      machine config operator. These nodes have status SchedulingDisabled.
+                      Nodes that are cordoned by Scale operator are not listed.
+                    type: string
+                  nodesDraining:
+                    description: List of nodes on which the Scale operator is currently
+                      evicting pods
+                    items:
+                      properties:
+                        node:
+                          description: The node that is currently drained by the Scale
+                            operator
+                          type: string
+                        ongoingPodEvictions:
+                          description: The pods that the Scale operator is currently
+                            evicting
+                          items:
+                            type: string
+                          type: array
+                        podEvictionsFailed:
+                          description: The pods that failed to evict. The Scale operator
+                            continues to try to evict these pods.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - node
+                      - ongoingPodEvictions
+                      - podEvictionsFailed
+                      type: object
+                    type: array
+                  podEvictionRequests:
+                    description: List of daemon core pod evictions that are requested
+                      by third party (like machine config operator).
+                    items:
+                      properties:
+                        pods:
+                          description: Scale core pods that has been requested for
+                            eviction.
+                          type: string
+                        requestor:
+                          description: Name of requestor that requests the eviction
+                            of the pod.
+                          type: string
+                      required:
+                      - pods
+                      - requestor
+                      type: object
+                    type: array
+                required:
+                - nodesCordonedByOperator
+                - nodesCordonedByOthers
+                type: object
               failureGroup:
                 description: FailureGroup whose pods are upgraded next
                 type: string
@@ -708,9 +801,38 @@ spec:
                     description: List of core pods with unknown status. Pods scheduled
                       on unreachable nodes are listed here.
                     type: string
-                  podsWaitingForDelete:
+                  podsUnsafeToDelete:
+                    description: List of core pods that can currently not be deleted
+                      because deleting the pods would result in an unsafe condition.
+                    items:
+                      properties:
+                        deleteUnsafeReason:
+                          description: The reason why the pods are unsafe to be deleted
+                          type: string
+                        pods:
+                          description: List of core pods that are not safe to be deleted
+                            by the Storage Scale operator
+                          type: string
+                      required:
+                      - deleteUnsafeReason
+                      - pods
+                      type: object
+                    type: array
+                  podsWaitingToBeDeleted:
                     description: List of core pods that will be deleted soon
-                    type: string
+                    items:
+                      properties:
+                        deleteReason:
+                          description: Reason for deleting the core pods
+                          type: string
+                        pods:
+                          description: List of core pods that will be deleted soon
+                          type: string
+                      required:
+                      - deleteReason
+                      - pods
+                      type: object
+                    type: array
                   quorumPods:
                     description: List of pods that act as quorum node for Spectrum
                       Scale
@@ -722,7 +844,6 @@ spec:
                 - podsStarting
                 - podsTerminating
                 - podsUnknown
-                - podsWaitingForDelete
                 - quorumPods
                 type: object
               versions:

config/base/apis/scale/v1beta1/crd/scale.spectrum.ibm.com_encryptionconfigs.yaml → config/base/apis/scale/crd/scale.spectrum.ibm.com_encryptionconfigs.yaml

@@ -172,6 +172,8 @@ spec:
                   - type
                   type: object
                 type: array
+              rkmId:
+                type: string
             type: object
         type: object
     served: true

config/base/apis/scale/v1beta1/crd/scale.spectrum.ibm.com_remoteclusters.yaml → config/base/apis/scale/crd/scale.spectrum.ibm.com_remoteclusters.yaml

@@ -20,9 +20,6 @@ spec:
   scope: Namespaced
   versions:
   - additionalPrinterColumns:
-    - jsonPath: .spec.gui.host
-      name: Host
-      type: string
     - jsonPath: .status.conditions[?(@.type=="Ready")].status
       name: Ready
       type: string
@@ -52,8 +49,10 @@ spec:
               contactNodes:
                 description: This property is optional and provides a list of nodes
                   from the storage cluster to be used as the remote cluster contact
-                  nodes. The names should be the daemon node names. If not specified,
-                  the operator uses any 3 nodes detected from the storage cluster.
+                  nodes. The names must be the daemon node names. If not specified,
+                  the operator uses all quorum nodes detected from the storage cluster.
+                  If the contact node names are not resolvable in local cluster, configure
+                  the 'hostAliases' with node name and IP in Cluster CR.
                 items:
                   type: string
                 type: array
@@ -71,14 +70,38 @@ spec:
                       namespace.
                     type: string
                   host:
-                    description: host of the remote cluster REST API endpoint.  This
-                      must be resolvable by DNS.
+                    description: host references a REST API endpoint on the remote
+                      cluster. This must be resolvable by DNS. This field is DEPRECATED
+                      and will be removed in a future release. Use field 'hosts' instead.
                     type: string
+                  hosts:
+                    description: hosts references one or more REST API endpoints on
+                      the remote cluster. Up to 3 endpoints can be specified. The
+                      hosts must be resolvable by DNS.
+                    items:
+                      type: string
+                    maxItems: 3
+                    type: array
                   insecureSkipVerify:
                     description: insecureSkipVerify controls whether a client verifies
                       the server's certificate chain and host name. If set true, TLS
                       is susceptible to machine-in-the-middle attacks.
                     type: boolean
+                  passwordRotation:
+                    description: passwordRotation allows to configure automatic password
+                      rotation of the container operator and CSI admin GUI users.
+                      Automatic password rotation is disabled if this section is not
+                      specified.
+                    properties:
+                      passwordChangeInterval:
+                        default: "80"
+                        description: 'passwordChangeInterval allows the configuration
+                          in days for the operator to change the user passwords on
+                          the storage cluster. Specify the value surrounded by double
+                          quotes (like passwordChangeFrequency: "30"). The default
+                          value is 80 days.'
+                        type: string
+                    type: object
                   port:
                     default: 443
                     description: It specifies the port of the Remote Cluster.
@@ -96,7 +119,6 @@ spec:
                     type: string
                 required:
                 - csiSecretName
-                - host
                 - secretName
                 type: object
             required:
@@ -173,6 +195,11 @@ spec:
                   - type
                   type: object
                 type: array
+              lastPasswordChange:
+                description: lastPasswordChange indicates when the passwords for the
+                  remote storage users was last changed by the operator. This field
+                  is only present if the automatic password rotation function is enabled.
+                type: string
               localKeySHADigest:
                 description: localKeySHADigest is the digest of the public access
                   key that must be used by the remote cluster in order to communicate