This is the third release candidate for Umbrella. All community feedback is welcome. It is our intention that this is the final release candidate for Umbrella. If no blockers are identified, we plan to release Umbrella around October 21st. Packages built for: - Ubuntu 22.04 - Ubuntu 24.04 - CentOS 9 - Rocky Linux 10 - Debian 12 (Bookworm) - Debian 13 (Trixie) Containers are built on a Rocky 10 base image, available at: https://quay.io/repository/ceph/ceph?tab=tags Please note: the full draft release notes for v21.2.0 are available at https://github.com/ceph/ceph/pull/70240 Compatibility requirements for this release: - CPU: Umbrella containers are based on el10 and require a CPU supporting x86-64-v3. - Python: Python 3.9+ is required on all host operating systems for cephadm. Notable changes from 21.1.1, the second release candidate: Security / CephX: - auth/cephx: harden service ticket verification (pr#72126) - cephadm: rotate OSD/MDS keyrings at upgrade time and based on health warnings (pr#72240) - rgw: bind GCM object keys to the bucket marker (pr#71038) - mgr/rbd_support: make schedule phase offset calculation FIPS compliant (pr#71167) RADOS / OSD: - OSDMap::calc_pg_maps: fix balancing for some important corner cases (pr#71916) - osd/scheduler: classify subOp reads by op priority for mClock, and bound high-priority drain to prevent starvation (pr#69761, pr#72179) - mgr/osd/mon: remove pg_upmap_primary mappings for PG merge targets (pr#71050) - osd/PeeringState: don't clear the PG rebuild latch on same-primary interval restart (pr#70990) - Reverted the ProtocolV2 connection speedup and netsplit grace-period changes (pr#71957) RGW: - Compress/decompress objects during lifecycle transitions (pr#70687) - Multisite: redirect to the endpoint of the bucket's zonegroup (pr#71524) - Honor CopyObject tagging-directive (pr#70681); read user usage log in S3 GetUsage (pr#71102) - S3: reject an empty x-amz-server-side-encryption header (pr#71536); allow completing a multipart upload without SSE-C headers (pr#71841) - Fix conditional writes on versioning-suspended buckets (pr#72048) - Fix use-after-free in shard_io async_reads (pr#71136); infinite loop in role-list pagination (pr#71312) - radosgw-admin: 'account rm --purge-data' removes OIDC by account id (pr#71532); 'bi list' honors --max-entries (pr#71043) cephadm / Orchestrator: - certmgr: support fullchain PEM (pr#71513) - Allow removing OSDs stuck in error state (pr#71729); zap raw OSD devices on rm-cluster (pr#71730); "ok-to-stop" check for OSD redeploy/reconfig (pr#72032) - Fix staggered upgrade (pr#69724); hardware monitoring shows "NO DATA" for missing categories (pr#71725); node-proxy no longer crashes on empty Redfish logout (pr#71727) Dashboard: - Angular 20 upgrade and HTML linter fixes (pr#70871) - Skip RGW daemons whose frontend is unreachable (pr#72047) CephFS: - cephfs-mirror bug-fix backports (pr#70957) - Reverted "mds: enable osdc op throttles" (pr#72186) - Git at git://github.com/ceph/ceph.git - Tarball at https://download.ceph.com/tarballs/ceph-21.1.2.tar.gz - Containers at https://quay.io/repository/ceph/ceph - For packages, see https://docs.ceph.com/en/latest/install/get-packages/ - Release git sha1: b6f98ed07f44274e393138ffbae442b7a3f7ec84 - Distribution matrix: https://docs.ceph.com/en/latest/start/os-recommendations/