Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: RookClear ×

Rookv1.20.6Storage & DataAug 20, 2026

CHECK 2OTHER 1View full analysis

A maintenance release with a Ceph security advisory, a disabled Rook manager module, and clearer CephX fallback errors. Users of Ceph are advised to upgrade, while CephX key fallback failures now report the actual error.

Check if affected (2)

securityCeph CVE-2025–30156 upgrade advisory
Applies if you depend on Ceph.
The advisory recommends upgrading Rook to v1.20.6 or v1.19.10 and Ceph to v20.2.4 or v19.2.6. It also provides instructions for rotating CephX keys.
breakingThe rook mgr module, disabled
Applies if you enable the rook mgr module.
The rook mgr module is disabled in this release.

Source ↗

Rookv1.19.10Storage & DataAug 20, 2026

ACTION 1CHECK 1OTHER 2View full analysis

A maintenance release with a security-driven Ceph upgrade recommendation and a disabled Rook manager module. It also adds or changes CephCluster and CephX error-reporting behavior.

Action needed (1)

breakingThe Rook manager module, disabled
The Rook manager module is disabled in this release.

Check if affected (1)

securityCeph upgrade recommendation for CVE-2025-30156
Applies if you use Ceph.
The release calls attention to CVE-2025-30156 in Ceph and includes a Ceph upgrade recommendation.

Source ↗

Rookv1.20.5Storage & DataAug 19, 2026

CHECK 1OTHER 3View full analysis

A security-focused release with an advisory requiring Rook and Ceph upgrades. It also adds support for the new cephx key type, changes external version validation to ignore Ceph commit IDs, and fixes monitor registration in the v1 failover path.

Check if affected (1)

securityCeph CVE-2025–30156 advisory
Applies if you use Ceph.
The release includes a security advisory for CVE-2025–30156 in Ceph, requiring Rook and Ceph upgrades.

Source ↗

Rookv1.20.1Storage & DataJun 16, 2026

CHECK 2OTHER 6View full analysis

A release with operator-facing configuration and behavior changes, including a new default and cleanup of stale resources. It also includes dependency and feature updates, with no security advisory disclosed.

Check if affected (2)

breakingStale MDS and RGW pdbs removed
Applies if you configure MDS and RGW pdbs.
The stale MDS and RGW pdbs are deleted in this release.
breakingcsi-addons disabled by default
Applies if you enable csi-addons.
csi-addons is disabled by default in this release.

Source ↗

Rookv1.19.7Storage & DataJun 16, 2026

CHECK 2OTHER 4View full analysis

This release updates the default Ceph version and changes operational handling for Helm ownership, stale PDB cleanup, OSD device classes, and post-upgrade releases. It contains no disclosed security advisories.

Check if affected (2)

breakingDefault Ceph version 19.2.4
Applies if you use Ceph.
The build configuration sets the default Ceph version to 19.2.4.
breakingStale MDS and RGW PDB cleanup
Applicability is not stated in the release notes.
The core component deletes stale MDS and RGW PDBs.

Source ↗

Rookv1.20.0Storage & DataJun 2, 2026

CHECK 2OTHER 8View full analysis

A breaking release for CSI configuration also changes unused CRUSH rule handling and supported Kubernetes versions. It adds storage and object-store capabilities, including SSE-S3 with Vault Agent authentication, object-store account management, and encrypted OSD disk expansion.

Check if affected (2)

breakingCeph CSI operator for driver settings
Applies if you configure CSI driver settings.
The Ceph CSI operator is required for managing Driver settings, replacing the rook-ceph-operator-config configuration with OperatorConfig.
breakingROOK_DELETE_UNUSED_CRUSH_RULES default
Applies if the Ceph mgr is running.
Rook now deletes unused CRUSH rules by default after the Ceph mgr starts. This changes the default associated with ROOK_DELETE_UNUSED_CRUSH_RULES.

Source ↗

Rookv1.18.10Storage & DataMar 24, 2026

CHECK 1OTHER 7View full analysis

A maintenance release with an RBAC grant removal, behavioral fixes, and new CephNFS API fields. It also updates exporter and OSD handling, including log collection, reconciliation, cancellation, encrypted OSD key rotation, and container selection.

Check if affected (1)

breakingThe nodes/proxy RBAC grant, removed
Applies if you use nodes/proxy.
The nodes/proxy RBAC grant is removed from Rook. This change ships in the RBAC configuration.

Source ↗

Rookv1.19.2Storage & DataFeb 24, 2026

CHECK 1OTHER 10View full analysis

This release includes operator-facing behavior and API updates, along with default, image, and dependency changes. It also contains an internal build-tooling update and fixes for storage and gateway handling.

Check if affected (1)

breakingDefault gateway topology spread constraints for nvmeof
Applies if you use nvmeof.
The nvmeof subsystem adds default gateway topology spread constraints in this release.

Source ↗

Rookv1.19.1Storage & DataFeb 5, 2026

ACTION 1CHECK 2OTHER 8View full analysis

A maintenance release with operator-facing removals, default and behavior changes, new CRD fields, expanded configuration support, and dependency updates. No security advisory is disclosed.

Action needed (1)

breakingNodes/proxy RBAC enablement removal
The unnecessary nodes/proxy RBAC enablement is removed.

Check if affected (2)

breakingDefault Ceph image pull policy
Applies if you do not configure ceph image pull policy.
The Helm chart sets a default ceph image pull policy.
breakingAutomated node fencing code removal
Applies if automated node fencing runs.
The CSI component removes obsolete automated node fencing code.

Source ↗

Rookv1.19.0Storage & DataJan 20, 2026

CHECK 4OTHER 7View full analysis

A breaking release changes supported Kubernetes versions and configuration behavior and removes automatic CSI client creation in external mode. It also adds storage features, reconciliation improvements, and operational changes including experimental NVMe-oF support, block volume statistics, encryption settings, and improved fencing and logging.

Check if affected (4)

breakingSupported Kubernetes versions
Applies if you run Kubernetes v1.30 through v1.35.
This release supports Kubernetes versions v1.30 through v1.35.
breakingactiveStandby behavior in the CephFilesystem CRD
Applies if activeStandby is set to false.
In the CephFilesystem CRD, setting activeStandby to false now scales down and removes the standby MDS daemon deployment instead of only disabling the standby cache while leaving the daemon running.
breakingCeph image settings in the rook-ceph-cluster chart
Applies if you use the rook-ceph-cluster chart.
The rook-ceph-cluster Helm chart now defines the Ceph image in a different location, with separate settings for the repository and tag.
+ 1 more on the release page

Source ↗

Browse by month