Skip to content

Commit 4e8563d

Browse files
committed
Updates related to Operator 6.0.0 release
Partially addresses #1273.
1 parent 23253dd commit 4e8563d

File tree

2 files changed

+9
-5
lines changed

2 files changed

+9
-5
lines changed

source/includes/k8s/deploy-operator.rst

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,8 +47,13 @@ Each Tenant pod runs three containers:
4747
- InitContainer that only exists during the launch of the pod to manage configuration secrets during startup.
4848
Once startup completes, this container terminates.
4949

50-
- SideCar container that monitors configuration secrets for the tenant and updates them as they change.
51-
This container also monitors for root credentials and creates an error if it does not find root credentials.
50+
- Sidecar container used to initialize the MinIO tenant.
51+
The sidecar retrieves and validates the configuration for each tenant and creates the necessary local resources in the pod.
52+
53+
.. versionchanged:: Operator 6.0.0
54+
55+
The Sidecar has its own image and release cycle separate from the rest of the MinIO Operator.
56+
The MinIO Operator stores the tenant's environment variables in the sidecar, allowing the Operator to update the variables without requiring a rolling restart.
5257

5358
The tenant utilizes Persistent Volume Claims to talk to the Persistent Volumes that store the objects.
5459

@@ -100,7 +105,8 @@ Kubernetes TLS Certificate API
100105
- For :ref:`STS service <minio-security-token-service>` when :envvar:`OPERATOR_STS_ENABLED` environment variable is set to ``on``.
101106
- For retrieving the health of the cluster.
102107

103-
The MinIO Operator reads certificates inside the ``operator-ca-tls`` secret and syncs this secret within the tenant namespace to trust private certificate authorities, such as when using cert-manager.
108+
Beginning with Operator 6.0.0, the MinIO Operator reads certificates inside the ``operator-ca-tls`` secret to trust private certificate authorities throughout the Kubernetes cluster, such as when using cert-manager.
109+
Previous versions of the Operator sync the ``operator-ca-tls`` certificates to each tenant.
104110

105111
For any of these circumstances, the MinIO Operator *requires* that the Kubernetes ``kube-controller-manager`` configuration include the following :kube-docs:`configuration settings <reference/command-line-tools-reference/kube-controller-manager/#options>`:
106112

source/includes/k8s/file-transfer-protocol-k8s.rst

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -102,8 +102,6 @@ Procedure
102102
spec:
103103
configuration:
104104
name: my-tenant-env-configuration
105-
credsSecret:
106-
name: my-tenant-secret
107105
exposeServices:
108106
console: true
109107
minio: true

0 commit comments

Comments
 (0)