Skip to content

Commit

Permalink
Updates related to Operator 6.0.0 release
Browse files Browse the repository at this point in the history
Partially addresses #1273.
  • Loading branch information
djwfyi committed Aug 1, 2024
1 parent 23253dd commit 4e8563d
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 5 deletions.
12 changes: 9 additions & 3 deletions source/includes/k8s/deploy-operator.rst
Original file line number Diff line number Diff line change
Expand Up @@ -47,8 +47,13 @@ Each Tenant pod runs three containers:
- InitContainer that only exists during the launch of the pod to manage configuration secrets during startup.
Once startup completes, this container terminates.

- SideCar container that monitors configuration secrets for the tenant and updates them as they change.
This container also monitors for root credentials and creates an error if it does not find root credentials.
- Sidecar container used to initialize the MinIO tenant.
The sidecar retrieves and validates the configuration for each tenant and creates the necessary local resources in the pod.

.. versionchanged:: Operator 6.0.0

The Sidecar has its own image and release cycle separate from the rest of the MinIO Operator.
The MinIO Operator stores the tenant's environment variables in the sidecar, allowing the Operator to update the variables without requiring a rolling restart.

The tenant utilizes Persistent Volume Claims to talk to the Persistent Volumes that store the objects.

Expand Down Expand Up @@ -100,7 +105,8 @@ Kubernetes TLS Certificate API
- For :ref:`STS service <minio-security-token-service>` when :envvar:`OPERATOR_STS_ENABLED` environment variable is set to ``on``.
- For retrieving the health of the cluster.

The MinIO Operator reads certificates inside the ``operator-ca-tls`` secret and syncs this secret within the tenant namespace to trust private certificate authorities, such as when using cert-manager.
Beginning with Operator 6.0.0, the MinIO Operator reads certificates inside the ``operator-ca-tls`` secret to trust private certificate authorities throughout the Kubernetes cluster, such as when using cert-manager.
Previous versions of the Operator sync the ``operator-ca-tls`` certificates to each tenant.

For any of these circumstances, the MinIO Operator *requires* that the Kubernetes ``kube-controller-manager`` configuration include the following :kube-docs:`configuration settings <reference/command-line-tools-reference/kube-controller-manager/#options>`:

Expand Down
2 changes: 0 additions & 2 deletions source/includes/k8s/file-transfer-protocol-k8s.rst
Original file line number Diff line number Diff line change
Expand Up @@ -102,8 +102,6 @@ Procedure
spec:
configuration:
name: my-tenant-env-configuration
credsSecret:
name: my-tenant-secret
exposeServices:
console: true
minio: true
Expand Down

0 comments on commit 4e8563d

Please sign in to comment.