Skip to content

api: add SecurityContextConstraints to nvmeof ServiceAccounts#6249

Merged
mergify[bot] merged 2 commits into
ceph:develfrom
nixpanic:nvmeof/api
Apr 28, 2026
Merged

api: add SecurityContextConstraints to nvmeof ServiceAccounts#6249
mergify[bot] merged 2 commits into
ceph:develfrom
nixpanic:nvmeof/api

Conversation

@nixpanic
Copy link
Copy Markdown
Member

The NVMe-oF ServiceAccounts need an SCC so that they can be used on OpenShift.

This also showed a minor bug in the api/ directory for NFS:

The RBAC for VolumeAttributesClasses was only added to the file under the deploy/ directory. Running

make containerized-build TARGET=generate-deploy

caused the RBAC to be removed. With the RBAC added to the template in
the api/ directory, the RBAC will be included when generating the
deploy/ directory.

Fixes: aaab765


Show available bot commands

These commands are normally not required, but in case of issues, leave any of
the following bot commands in an otherwise empty comment in this PR:

  • /retest ci/centos/<job-name>: retest the <job-name> after unrelated
    failure (please report the failure too!)

@nixpanic nixpanic added ci/skip/e2e skip running e2e CI jobs ci/skip/multi-arch-build skip building on multiple architectures labels Apr 22, 2026
@mergify mergify Bot added the component/nvme-of Issues and PRs related to NVMe-oF. label Apr 22, 2026
@nixpanic nixpanic requested a review from a team April 22, 2026 12:06
@nixpanic nixpanic requested a review from a team April 23, 2026 11:37
@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 28, 2026

Deprecation notice: This pull request comes from a fork and was queued with update_method=rebase and update_bot_account impersonation. This capability will be removed on July 1, 2026. After this date, the merge queue will no longer be able to rebase fork pull requests with this configuration. To avoid disruption, switch to update_method=merge in your queue rule.

@mergify
Copy link
Copy Markdown
Contributor

mergify Bot commented Apr 28, 2026

Merge Queue Status

  • Entered queue2026-04-28 05:18 UTC · Rule: default
  • Checks passed · in-place
  • Merged2026-04-28 05:23 UTC · at 1cddfafefb1bdd4b41298e21761699ae0d8bdc89 · rebase

This pull request spent 5 minutes 17 seconds in the queue, including 4 minutes 52 seconds running CI.

Required conditions to merge

The NVMe-oF ServiceAccounts need an SCC so that they can be used on
OpenShift.

Signed-off-by: Niels de Vos <ndevos@ibm.com>
The RBAC was only added to the file under the deploy/ directory. Running

    make containerized-build TARGET=generate-deploy

caused the RBAC to be removed. With the RBAC added to the template in
the api/ directory, the RBAC will be included when generating the
deploy/ directory.

Fixes: aaab765
Signed-off-by: Niels de Vos <ndevos@ibm.com>
@mergify mergify Bot added the queued label Apr 28, 2026
@mergify mergify Bot merged commit 72d0f53 into ceph:devel Apr 28, 2026
20 checks passed
@mergify mergify Bot removed the queued label Apr 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci/skip/e2e skip running e2e CI jobs ci/skip/multi-arch-build skip building on multiple architectures component/nvme-of Issues and PRs related to NVMe-oF.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants