RATATOSKRATATOSK
Sign in

Rook

v1.21.2Storage & Data
Nov 5, 2026

CHECK 1OTHER 14

A maintenance release with operator-visible behavior improvements, safer secret handling, configuration additions, dependency updates, and a stricter bucket ownership rule. It also updates storage and client behavior and adds protections for secret and credential handling.

Check if affected (1)

  • breakingRefusal of OBC relinking for another user's bucket

    Applies if you configure OBC.

    The object store refuses to relink an OBC bucket owned by another user.

All 14 other recorded changesvalue changes 13 · additions 1

value changes (13)

  • - operator: Disable msgr1 on osd, mgr, and mds when msgr2 is required (#18557, @trukhinyuri)
  • - osd: Filter RBD devices from LVM scans on host-based OSDs (#18413, @pujitha24)
  • - osd: Don't wipe metadata devices of existing OSDs (#18686, @lbarrosby)
  • - object: Log only the rgw zone fields rook reads (#18662, @jhoblitt)
  • - core: Redact secret flag values from reported commands (#18665, @jhoblitt)
  • - cephfsmirror: Stop embedding the peer bootstrap token in an error (#18661, @jhoblitt)
  • - nfs: Include cluster config overrides in client config (#18627, @taaahaaa)
  • - osd: Redact the lockbox secret from lvm zap output (#18670, @jhoblitt)
  • - security: Drop radosgw-admin output from object store errors (#18669, @jhoblitt)
  • - object: Redact credentials in CephBucketTopic endpoint logs (#18671, @jhoblitt)
  • - build: Bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.6 (#18677, @jhoblitt)
  • - kms: Migrate IBM Key Protect client to v1.0.1 (#18488, @travisn)
  • - operator: Retry CephCluster status update on conflict (#18639, @taraasrita10)

additions (1)

  • - object: Add VAULT_TRANSIT_BACKEND_PATH for the RGW SSE-S3 transit mount (#18598, @A-RYAN-1)
Add Rook to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Rook releases →