Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates for two October releases #1065

Merged
merged 6 commits into from
Nov 15, 2023
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion source/operations/install-deploy-manage/deploy-minio-tenant.rst
Original file line number Diff line number Diff line change
Expand Up @@ -562,6 +562,21 @@ The :guilabel:`Security` section displays TLS certificate settings for the MinIO

MinIO also supports uploading Certificate Authority certificates for validating client certificates minted by that CA.

.. admonition:: Supported Secret Types
:class: note

MinIO supports three types of :kube-docs:`secrets in Kubernetes <concepts/configuration/secret/#secret-types>`.

#. ``opaque``

Using ``private.key`` and ``public.crt`` files.
#. ``tls``

Using ``tls.key`` and ``tls.crt`` files.
#. `cert-manager <https://cert-manager.io/>`__ 1.7.x or later

Running on Kubernetes 1.21 or later.

.. versionadded:: Console 0.23.1

A message displays under the certificate with the date of expiration and length of time until expiration.
Expand All @@ -576,7 +591,7 @@ The :guilabel:`Security` section displays TLS certificate settings for the MinIO

.. _create-tenant-encryption-section:

8) The :guilabel:`Encryption` Section
1) The :guilabel:`Encryption` Section
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The :guilabel:`Encryption` section displays the :ref:`Server-Side Encryption (SSE) <minio-sse>` settings for the MinIO Tenant.
Expand Down
21 changes: 21 additions & 0 deletions source/operations/network-encryption.rst
Original file line number Diff line number Diff line change
Expand Up @@ -207,6 +207,27 @@ Enabling TLS
You may also need to update URLs used by applications or clients.


.. cond:: k8s

Supported Secret Types
~~~~~~~~~~~~~~~~~~~~~~

MinIO supports three types of :kube-docs:`secrets in Kubernetes <concepts/configuration/secret/#secret-types>`.

#. ``opaque``

Using ``private.key`` and ``public.crt`` files.
#. ``tls``

Using ``tls.key`` and ``tls.crt`` files.
#. `cert-manager <https://cert-manager.io/>`__ 1.7.x or later

Running on Kubernetes 1.21 or later.

.. note::

For the best support of *tls* or *cert-manager* secrets, upgrade to Operator version 5.0.10 or later.

Multiple Domain-Based TLS Certificates
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Expand Down
18 changes: 18 additions & 0 deletions source/reference/minio-mc-admin/mc-admin-trace.rst
Original file line number Diff line number Diff line change
Expand Up @@ -233,6 +233,24 @@ Syntax

Returns calls of the specified HTTP status code.

.. mc-cmd:: --stats

Accumulate stats, such as name, count, duration, min time, max time, time to first byte, or errors.
Accumulates up to 15 stat entries.

The output resembles the following:

.. code-block:: shell

Duration: 1m18s ∙●∙
Call Count RPM Avg Time TTFB Time Min Time Max Time Errors RX Avg TX Avg
s3.HeadBucket 169 (79.3%) 130.8 1.395ms 0s 369.392µs 10.486821ms 0 135 B 0 B
s3.GetObject 34 (16.0%) 26.3 1.39ms 1.278ms 558.722µs 2.688192ms 0 90 B 759 B
s3.ListBuckets 4 (1.9%) 3.1 6.617ms 5.573ms 4.602269ms 7.708086ms 0 93 B 7.5 KiB
s3.ListObjectsV2 3 (1.4%) 2.3 34.621ms 34.393ms 2.015213ms 99.601832ms 0 93 B 2.6 KiB
s3.GetBucketLocation 2 (0.9%) 1.5 991µs 796µs 920.966µs 1.061579ms 0 122 B 245 B
s3.ListObjectsV1 1 (0.5%) 0.8 998µs 837µs 998.367µs 998.367µs 0 124 B 364 B

.. mc-cmd:: --verbose

Returns verbose output.
Expand Down