diff --git a/examples/tenant-lite.yaml b/examples/tenant-lite.yaml index 30a3ddbfeb6..728d8337eb7 100644 --- a/examples/tenant-lite.yaml +++ b/examples/tenant-lite.yaml @@ -118,6 +118,7 @@ spec: runAsUser: 1000 runAsGroup: 1000 runAsNonRoot: true + fsGroup: 1000 ## Mount path where PV will be mounted inside container(s). mountPath: /export @@ -189,3 +190,4 @@ spec: runAsUser: 1000 runAsGroup: 2000 runAsNonRoot: true + fsGroup: 2000 diff --git a/examples/tenant-tiny.yaml b/examples/tenant-tiny.yaml index 6b00abf8b18..39fc4da06dd 100644 --- a/examples/tenant-tiny.yaml +++ b/examples/tenant-tiny.yaml @@ -118,6 +118,7 @@ spec: runAsUser: 1000 runAsGroup: 1000 runAsNonRoot: true + fsGroup: 1000 ## Mount path where PV will be mounted inside container(s). mountPath: /export @@ -189,3 +190,4 @@ spec: runAsUser: 1000 runAsGroup: 2000 runAsNonRoot: true + fsGroup: 2000 diff --git a/examples/tenant-with-external-idp.yaml b/examples/tenant-with-external-idp.yaml index db9582db992..d12703c53a2 100644 --- a/examples/tenant-with-external-idp.yaml +++ b/examples/tenant-with-external-idp.yaml @@ -118,6 +118,7 @@ spec: runAsUser: 1000 runAsGroup: 1000 runAsNonRoot: true + fsGroup: 1000 ## Mount path where PV will be mounted inside container(s). mountPath: /export @@ -194,6 +195,7 @@ spec: runAsUser: 1000 runAsGroup: 2000 runAsNonRoot: true + fsGroup: 2000 env: - name: CONSOLE_IDP_URL value: "https://your-extenal-idp.com/" # Your external identity provide URL diff --git a/examples/tenant.yaml b/examples/tenant.yaml index cc1cb026f6c..b5042de008e 100644 --- a/examples/tenant.yaml +++ b/examples/tenant.yaml @@ -61,7 +61,21 @@ spec: ## For standalone mode, supply 1. For distributed mode, supply 4 or more. ## Note that the operator does not support upgrading from standalone to distributed mode. - servers: 4 - + affinity: + podAntiAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + - labelSelector: + matchExpressions: + - key: v1.min.io/tenant + operator: In + values: + - minio + - key: v1.min.io/pool + operator: In + values: + - pool-0 + topologyKey: kubernetes.io/hostname + name: pool-0 ## volumesPerServer specifies the number of volumes attached per MinIO Tenant Pod / Server. volumesPerServer: 4 @@ -75,7 +89,7 @@ spec: - ReadWriteOnce resources: requests: - storage: 1Ti + storage: 10Gi ## Used to specify a toleration for a pod # tolerations: @@ -127,6 +141,7 @@ spec: runAsUser: 1000 runAsGroup: 1000 runAsNonRoot: true + fsGroup: 1000 ## Mount path where PV will be mounted inside container(s). mountPath: /export @@ -207,3 +222,4 @@ spec: runAsUser: 1000 runAsGroup: 2000 runAsNonRoot: true + fsGroup: 2000 diff --git a/helm/minio-operator/values.yaml b/helm/minio-operator/values.yaml index 4d6b370aa42..fc5c736540a 100644 --- a/helm/minio-operator/values.yaml +++ b/helm/minio-operator/values.yaml @@ -13,6 +13,7 @@ operator: runAsUser: 1000 runAsGroup: 1000 runAsNonRoot: true + fsGroup: 1000 resources: requests: cpu: 200m