apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: rook-ceph resources: - https://raw.githubusercontent.com/rook/rook/refs/tags/v1.18.2/deploy/examples/crds.yaml - https://raw.githubusercontent.com/rook/rook/refs/tags/v1.18.2/deploy/examples/common.yaml - https://raw.githubusercontent.com/rook/rook/refs/tags/v1.18.2/deploy/examples/csi-operator.yaml - https://raw.githubusercontent.com/rook/rook/refs/tags/v1.18.2/deploy/examples/operator.yaml - https://raw.githubusercontent.com/rook/rook/refs/tags/v1.18.2/deploy/examples/cluster.yaml - https://raw.githubusercontent.com/rook/rook/refs/tags/v1.18.2/deploy/examples/toolbox.yaml - filesystem.yaml - objectstore.yaml - storageclass.yaml patches: - target: kind: Namespace patch: |- kind: Namespace metadata: name: rook-ceph labels: pod-security.kubernetes.io/enforce: privileged - target: group: ceph.rook.io version: v1 kind: CephCluster name: rook-ceph namespace: rook-ceph patch: |- apiVersion: ceph.rook.io/v1 kind: CephCluster metadata: name: rook-ceph namespace: rook-ceph spec: cephVersion: image: urr.uia.no/proxy-quay.io/ceph/ceph:v19.2.3 placement: mon: tolerations: - key: node-role.kubernetes.io/control-plane operator: Exists effect: "NoSchedule" nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: node-role.kubernetes.io/control-plane operator: Exists mgr: tolerations: - key: node-role.kubernetes.io/control-plane operator: Exists effect: "NoSchedule" nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchExpressions: - key: node-role.kubernetes.io/control-plane operator: Exists resources: mgr: limits: memory: "1024Mi" requests: cpu: "500m" memory: "256Mi" mon: limits: memory: "1Gi" requests: cpu: "1000m" memory: "512Mi" osd: limits: memory: "2Gi" requests: cpu: "1000m" memory: "2Gi"