You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: source/includes/k8s/deploy-operator.rst
+9-3Lines changed: 9 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -47,8 +47,13 @@ Each Tenant pod runs three containers:
47
47
- InitContainer that only exists during the launch of the pod to manage configuration secrets during startup.
48
48
Once startup completes, this container terminates.
49
49
50
-
- SideCar container that monitors configuration secrets for the tenant and updates them as they change.
51
-
This container also monitors for root credentials and creates an error if it does not find root credentials.
50
+
- Sidecar container used to initialize the MinIO tenant.
51
+
The sidecar retrieves and validates the configuration for each tenant and creates the necessary local resources in the pod.
52
+
53
+
.. versionchanged:: Operator 6.0.0
54
+
55
+
The Sidecar has its own image and release cycle separate from the rest of the MinIO Operator.
56
+
The MinIO Operator stores the tenant's environment variables in the sidecar, allowing the Operator to update the variables without requiring a rolling restart.
52
57
53
58
The tenant utilizes Persistent Volume Claims to talk to the Persistent Volumes that store the objects.
54
59
@@ -100,7 +105,8 @@ Kubernetes TLS Certificate API
100
105
- For :ref:`STS service <minio-security-token-service>` when :envvar:`OPERATOR_STS_ENABLED` environment variable is set to ``on``.
101
106
- For retrieving the health of the cluster.
102
107
103
-
The MinIO Operator reads certificates inside the ``operator-ca-tls`` secret and syncs this secret within the tenant namespace to trust private certificate authorities, such as when using cert-manager.
108
+
Beginning with Operator 6.0.0, the MinIO Operator reads certificates inside the ``operator-ca-tls`` secret to trust private certificate authorities throughout the Kubernetes cluster, such as when using cert-manager.
109
+
Previous versions of the Operator sync the ``operator-ca-tls`` certificates to each tenant.
104
110
105
111
For any of these circumstances, the MinIO Operator *requires* that the Kubernetes ``kube-controller-manager`` configuration include the following :kube-docs:`configuration settings <reference/command-line-tools-reference/kube-controller-manager/#options>`:
0 commit comments