Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[RELEASE] Operator v5.0.8 #991

Closed
2 tasks done
djwfyi opened this issue Sep 6, 2023 · 2 comments · Fixed by #1002
Closed
2 tasks done

[RELEASE] Operator v5.0.8 #991

djwfyi opened this issue Sep 6, 2023 · 2 comments · Fixed by #1002
Assignees
@feorlen

Comments

@djwfyi
Copy link
Collaborator

djwfyi commented Sep 6, 2023 •
edited by feorlen
Loading

Operator v5.0.8 has changes that impact the docs:

  • Helm: Document how to use the extraResources section (PR #1739)
  • OpenShift: Supports certificates from service-ca (PR #1712)
@feorlen
Copy link
Collaborator

feorlen commented Sep 6, 2023

The comment in the Helm chart about extraResources seems sufficient.

@feorlen feorlen self-assigned this Sep 11, 2023
@feorlen
Copy link
Collaborator

feorlen commented Sep 13, 2023 •
edited
Loading

Notes about Openshift service certificates:

  • If you use Red Hat OperatorHub, certs are automagically handled because something something config maps mounts the volume containing the correct cert. service-ca docs about service serving certificates
  • If you do your own config with kustomize, you need to ensure the volumes are mounted and the envvars set appropriately. Celis' wiki page
  • Something similar is required for Helm chart users, details TBD (requires testing?)

@feorlen feorlen mentioned this issue Sep 13, 2023
Merged
ravindk89 added a commit that referenced this issue Sep 25, 2023
@feorlen @ravindk89
Document OpenShift service certificates for Operator deployments (#1002)
62e1447 
MinIO Operator on OpenShift may require manual configuration of TLS cert
management via the OpenShift `service-ca` Operator. (For deployments
that are _not_ done through Red Hat OperatorHub.)

Document the needed envvars, `volumes`, and `volumeMounts` to enable
`service-ca` and avoid the need to manually renew certs.

~Note: This presumes kustomize, additional research/testing required to
determine configuration for Helm chart deployments.~

Staged

http://192.241.195.202:9000/staging/DOCS-991/openshift/operations/installation.html#procedure

See also:
https://github.com/minio/wiki/wiki/Besides-MINIO_OPERATOR_RUNTIME-what-else-is-needed-in-Operator%3F

Fixes #991 (remaining item for
v5.0.8)

---------

Co-authored-by: Ravind Kumar <ravind@min.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@feorlen feorlen

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Document OpenShift service certificates for Operator deployments minio/docs
2 participants
@feorlen @djwfyi