diff --git a/bundles/certified-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml b/bundles/certified-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml index 6c363af6dc0..f1215e4e6f5 100644 --- a/bundles/certified-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml +++ b/bundles/certified-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,12 +84,22 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" operatorframework.io/suggested-namespace: minio-operator operators.operatorframework.io/builder: operator-sdk-v1.22.2 operators.operatorframework.io/project_layout: unknown repository: https://github.com/minio/operator - containerImage: quay.io/minio/operator:v5.0.13 + containerImage: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee name: minio-operator.v5.0.13 namespace: minio-operator spec: @@ -576,7 +586,7 @@ spec: - args: - ui - --certs-dir=/tmp/certs - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: console ports: @@ -585,7 +595,6 @@ spec: - containerPort: 9443 name: https resources: {} - securityContext: {} volumeMounts: - mountPath: /tmp/certs name: tls-certificates @@ -656,7 +665,7 @@ spec: value: "on" - name: OPERATOR_STS_ENABLED value: "on" - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: minio-operator resources: @@ -664,7 +673,6 @@ spec: cpu: 200m ephemeral-storage: 500Mi memory: 256Mi - securityContext: {} volumeMounts: - mountPath: /tmp/service-ca name: openshift-service-ca @@ -773,5 +781,12 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: console version: 5.0.13 replaces: minio-operator.v5.0.12 diff --git a/bundles/certified-operators/5.0.13/manifests/minio.min.io_tenants.yaml b/bundles/certified-operators/5.0.13/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/bundles/certified-operators/5.0.13/manifests/minio.min.io_tenants.yaml +++ b/bundles/certified-operators/5.0.13/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: diff --git a/bundles/community-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml b/bundles/community-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml index 14756b6c435..28e088c09a7 100644 --- a/bundles/community-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml +++ b/bundles/community-operators/5.0.13/manifests/minio-operator.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,12 +84,22 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" operatorframework.io/suggested-namespace: minio-operator operators.operatorframework.io/builder: operator-sdk-v1.22.2 operators.operatorframework.io/project_layout: unknown repository: https://github.com/minio/operator - containerImage: quay.io/minio/operator:v5.0.13 + containerImage: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee name: minio-operator.v5.0.13 namespace: minio-operator spec: @@ -576,7 +586,7 @@ spec: - args: - ui - --certs-dir=/tmp/certs - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: console ports: @@ -585,7 +595,6 @@ spec: - containerPort: 9443 name: https resources: {} - securityContext: {} volumeMounts: - mountPath: /tmp/certs name: tls-certificates @@ -656,7 +665,7 @@ spec: value: "on" - name: OPERATOR_STS_ENABLED value: "on" - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: minio-operator resources: @@ -664,7 +673,6 @@ spec: cpu: 200m ephemeral-storage: 500Mi memory: 256Mi - securityContext: {} volumeMounts: - mountPath: /tmp/service-ca name: openshift-service-ca @@ -773,4 +781,11 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: console version: 5.0.13 diff --git a/bundles/community-operators/5.0.13/manifests/minio.min.io_tenants.yaml b/bundles/community-operators/5.0.13/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/bundles/community-operators/5.0.13/manifests/minio.min.io_tenants.yaml +++ b/bundles/community-operators/5.0.13/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: diff --git a/bundles/redhat-marketplace/5.0.13/manifests/minio-operator-rhmp.clusterserviceversion.yaml b/bundles/redhat-marketplace/5.0.13/manifests/minio-operator-rhmp.clusterserviceversion.yaml index 0330c5b26a1..3db9495ce14 100644 --- a/bundles/redhat-marketplace/5.0.13/manifests/minio-operator-rhmp.clusterserviceversion.yaml +++ b/bundles/redhat-marketplace/5.0.13/manifests/minio-operator-rhmp.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,6 +84,16 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" marketplace.openshift.io/remote-workflow: https://marketplace.redhat.com/en-us/operators/minio-operator-rhmp/pricing?utm_source=openshift_console marketplace.openshift.io/support-workflow: https://marketplace.redhat.com/en-us/operators/minio-operator-rhmp/support?utm_source=openshift_console @@ -91,7 +101,7 @@ metadata: operators.operatorframework.io/builder: operator-sdk-v1.22.2 operators.operatorframework.io/project_layout: unknown repository: https://github.com/minio/operator - containerImage: quay.io/minio/operator:v5.0.13 + containerImage: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee name: minio-operator-rhmp.v5.0.13 namespace: minio-operator spec: @@ -578,7 +588,7 @@ spec: - args: - ui - --certs-dir=/tmp/certs - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: console ports: @@ -587,7 +597,6 @@ spec: - containerPort: 9443 name: https resources: {} - securityContext: {} volumeMounts: - mountPath: /tmp/certs name: tls-certificates @@ -658,7 +667,7 @@ spec: value: "on" - name: OPERATOR_STS_ENABLED value: "on" - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: minio-operator resources: @@ -666,7 +675,6 @@ spec: cpu: 200m ephemeral-storage: 500Mi memory: 256Mi - securityContext: {} volumeMounts: - mountPath: /tmp/service-ca name: openshift-service-ca @@ -775,5 +783,12 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: console + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation version: 5.0.13 replaces: minio-operator-rhmp.v5.0.12 diff --git a/bundles/redhat-marketplace/5.0.13/manifests/minio.min.io_tenants.yaml b/bundles/redhat-marketplace/5.0.13/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/bundles/redhat-marketplace/5.0.13/manifests/minio.min.io_tenants.yaml +++ b/bundles/redhat-marketplace/5.0.13/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: diff --git a/certified-operators/manifests/minio-operator.clusterserviceversion.yaml b/certified-operators/manifests/minio-operator.clusterserviceversion.yaml index 6c363af6dc0..8163f536361 100644 --- a/certified-operators/manifests/minio-operator.clusterserviceversion.yaml +++ b/certified-operators/manifests/minio-operator.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,6 +84,16 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" operatorframework.io/suggested-namespace: minio-operator operators.operatorframework.io/builder: operator-sdk-v1.22.2 @@ -576,7 +586,7 @@ spec: - args: - ui - --certs-dir=/tmp/certs - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: console ports: @@ -656,7 +666,7 @@ spec: value: "on" - name: OPERATOR_STS_ENABLED value: "on" - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: minio-operator resources: @@ -773,5 +783,12 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: console version: 5.0.13 replaces: minio-operator.v5.0.12 diff --git a/certified-operators/manifests/minio.min.io_tenants.yaml b/certified-operators/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/certified-operators/manifests/minio.min.io_tenants.yaml +++ b/certified-operators/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: diff --git a/community-operators/manifests/minio-operator.clusterserviceversion.yaml b/community-operators/manifests/minio-operator.clusterserviceversion.yaml index 14756b6c435..09114d859e9 100644 --- a/community-operators/manifests/minio-operator.clusterserviceversion.yaml +++ b/community-operators/manifests/minio-operator.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,6 +84,16 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" operatorframework.io/suggested-namespace: minio-operator operators.operatorframework.io/builder: operator-sdk-v1.22.2 @@ -576,7 +586,7 @@ spec: - args: - ui - --certs-dir=/tmp/certs - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: console ports: @@ -656,7 +666,7 @@ spec: value: "on" - name: OPERATOR_STS_ENABLED value: "on" - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: minio-operator resources: @@ -773,4 +783,11 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: console version: 5.0.13 diff --git a/community-operators/manifests/minio.min.io_tenants.yaml b/community-operators/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/community-operators/manifests/minio.min.io_tenants.yaml +++ b/community-operators/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: diff --git a/config/manifests/bases/minio-operator-rhmp.clusterserviceversion.yaml b/config/manifests/bases/minio-operator-rhmp.clusterserviceversion.yaml index 5b1b4dcb66a..42dcd81fd17 100644 --- a/config/manifests/bases/minio-operator-rhmp.clusterserviceversion.yaml +++ b/config/manifests/bases/minio-operator-rhmp.clusterserviceversion.yaml @@ -2,6 +2,16 @@ apiVersion: operators.coreos.com/v1alpha1 kind: ClusterServiceVersion metadata: annotations: + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" alm-examples: '[]' categories: "AI/Machine Learning, Big Data, Cloud Provider, Storage" description: |- diff --git a/config/manifests/bases/minio-operator.clusterserviceversion.yaml b/config/manifests/bases/minio-operator.clusterserviceversion.yaml index c3c44e80a02..16bed1b741d 100644 --- a/config/manifests/bases/minio-operator.clusterserviceversion.yaml +++ b/config/manifests/bases/minio-operator.clusterserviceversion.yaml @@ -2,6 +2,16 @@ apiVersion: operators.coreos.com/v1alpha1 kind: ClusterServiceVersion metadata: annotations: + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" alm-examples: '[]' categories: "AI/Machine Learning, Big Data, Cloud Provider, Storage" description: |- diff --git a/manifests/minio-operator-rhmp.clusterserviceversion.yaml b/manifests/minio-operator-rhmp.clusterserviceversion.yaml index 0330c5b26a1..aeb49e82e3f 100644 --- a/manifests/minio-operator-rhmp.clusterserviceversion.yaml +++ b/manifests/minio-operator-rhmp.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,6 +84,16 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" marketplace.openshift.io/remote-workflow: https://marketplace.redhat.com/en-us/operators/minio-operator-rhmp/pricing?utm_source=openshift_console marketplace.openshift.io/support-workflow: https://marketplace.redhat.com/en-us/operators/minio-operator-rhmp/support?utm_source=openshift_console @@ -775,5 +785,12 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: minio/operator@sha256:12e5f7cb7fbe91a19d1f9749b46ed8ea0041b24de78d265b5c98227185070ad5 + name: console + - image: minio/operator@sha256:12e5f7cb7fbe91a19d1f9749b46ed8ea0041b24de78d265b5c98227185070ad5 + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation version: 5.0.13 replaces: minio-operator-rhmp.v5.0.12 diff --git a/manifests/minio.min.io_tenants.yaml b/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/manifests/minio.min.io_tenants.yaml +++ b/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: diff --git a/olm.sh b/olm.sh index cd3bbd8c9cb..84e9cfc67b5 100755 --- a/olm.sh +++ b/olm.sh @@ -63,6 +63,7 @@ for catalog in "${redhatCatalogs[@]}"; do --output-dir bundles/$catalog/$RELEASE \ --channels stable \ --overwrite \ + --use-image-digests \ --kustomize-dir config/manifests # Set the version, later in olm-post-script.sh we change for Digest form. diff --git a/redhat-marketplace/manifests/minio-operator-rhmp.clusterserviceversion.yaml b/redhat-marketplace/manifests/minio-operator-rhmp.clusterserviceversion.yaml index 0330c5b26a1..867c4bb35e0 100644 --- a/redhat-marketplace/manifests/minio-operator-rhmp.clusterserviceversion.yaml +++ b/redhat-marketplace/manifests/minio-operator-rhmp.clusterserviceversion.yaml @@ -32,7 +32,7 @@ metadata: "bucketDNS": false, "domains": {} }, - "image": "quay.io/minio/minio:RELEASE.2024-03-05T04-48-44Z", + "image": "quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320", "imagePullSecret": {}, "mountPath": "/export", "podManagementPolicy": "Parallel", @@ -84,6 +84,16 @@ metadata: MinIO is a Kubernetes-native high performance object store with an S3-compatible API. The MinIO Operator supports deploying MinIO Tenants onto any Kubernetes. + features.operators.openshift.io/cnf: "false" + features.operators.openshift.io/cni: "false" + features.operators.openshift.io/csi: "false" + features.operators.openshift.io/disconnected: "true" + features.operators.openshift.io/fips-compliant: "true" + features.operators.openshift.io/proxy-aware: "true" + features.operators.openshift.io/tls-profiles: "false" + features.operators.openshift.io/token-auth-aws: "false" + features.operators.openshift.io/token-auth-azure: "false" + features.operators.openshift.io/token-auth-gcp: "false" k8sMinVersion: "1.18" marketplace.openshift.io/remote-workflow: https://marketplace.redhat.com/en-us/operators/minio-operator-rhmp/pricing?utm_source=openshift_console marketplace.openshift.io/support-workflow: https://marketplace.redhat.com/en-us/operators/minio-operator-rhmp/support?utm_source=openshift_console @@ -578,7 +588,7 @@ spec: - args: - ui - --certs-dir=/tmp/certs - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: console ports: @@ -658,7 +668,7 @@ spec: value: "on" - name: OPERATOR_STS_ENABLED value: "on" - image: quay.io/minio/operator:v5.0.13 + image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee imagePullPolicy: IfNotPresent name: minio-operator resources: @@ -775,5 +785,12 @@ spec: provider: name: MinIO Inc url: https://min.io + relatedImages: + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: console + - image: quay.io/minio/operator@sha256:0a5688b6ac83800d61c32b3f8a19913278d9322ed8974f4e6b444074ecf3d3ee + name: minio-operator + - image: quay.io/minio/minio@sha256:ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320 + name: minio-ab5551aa2f7d8a950f83bf64c2bb53b7eae9e0b7ea906a5288d3bbf37fc3d320-annotation version: 5.0.13 replaces: minio-operator-rhmp.v5.0.12 diff --git a/redhat-marketplace/manifests/minio.min.io_tenants.yaml b/redhat-marketplace/manifests/minio.min.io_tenants.yaml index 3f1fc75edb3..778a306bf6a 100644 --- a/redhat-marketplace/manifests/minio.min.io_tenants.yaml +++ b/redhat-marketplace/manifests/minio.min.io_tenants.yaml @@ -2051,6 +2051,67 @@ spec: required: - name type: object + containerSecurityContext: + properties: + allowPrivilegeEscalation: + type: boolean + capabilities: + properties: + add: + items: + type: string + type: array + drop: + items: + type: string + type: array + type: object + privileged: + type: boolean + procMount: + type: string + readOnlyRootFilesystem: + type: boolean + runAsGroup: + format: int64 + type: integer + runAsNonRoot: + type: boolean + runAsUser: + format: int64 + type: integer + seLinuxOptions: + properties: + level: + type: string + role: + type: string + type: + type: string + user: + type: string + type: object + seccompProfile: + properties: + localhostProfile: + type: string + type: + type: string + required: + - type + type: object + windowsOptions: + properties: + gmsaCredentialSpec: + type: string + gmsaCredentialSpecName: + type: string + hostProcess: + type: boolean + runAsUserName: + type: string + type: object + type: object env: items: properties: