Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 10, 2024

This PR contains the following updates:

Package Update Change
operator (source) patch 5.0.115.0.18

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

minio/operator (operator)

v5.0.18: Version 5.0.18

Compare Source

Changelog

v5.0.17

Compare Source

v5.0.16

Compare Source

v5.0.15: Version 5.0.15

Compare Source

Changelog

v5.0.14: Version 5.0.14

Compare Source

Changelog

v5.0.13: Version 5.0.13

Compare Source

Changelog

v5.0.12: Version 5.0.12

Compare Source

Changelog


Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

github-actions bot commented Feb 10, 2024

--- HelmRelease: storage/minio ServiceAccount: storage/console-sa

+++ HelmRelease: storage/minio ServiceAccount: storage/console-sa

@@ -1,7 +1,9 @@

 ---
 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: console-sa
   namespace: storage
+  labels:
+    app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: storage/minio ServiceAccount: storage/minio-operator

+++ HelmRelease: storage/minio ServiceAccount: storage/minio-operator

@@ -2,10 +2,8 @@

 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: minio-operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: storage/minio ConfigMap: storage/console-env

+++ HelmRelease: storage/minio ConfigMap: storage/console-env

@@ -1,10 +1,12 @@

 ---
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: console-env
   namespace: storage
+  labels:
+    app.kubernetes.io/managed-by: Helm
 data:
   CONSOLE_PORT: '9090'
   CONSOLE_TLS_PORT: '9443'
 
--- HelmRelease: storage/minio ClusterRole: storage/console-sa-role

+++ HelmRelease: storage/minio ClusterRole: storage/console-sa-role

@@ -1,21 +1,23 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: console-sa-role
+  labels:
+    app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - ''
   resources:
   - secrets
   verbs:
   - get
-  - watch
-  - create
-  - list
+  - list
+  - watch
+  - create
   - patch
   - update
   - delete
   - deletecollection
 - apiGroups:
   - ''
@@ -24,97 +26,99 @@

   - services
   - events
   - resourcequotas
   - nodes
   verbs:
   - get
-  - watch
-  - create
-  - list
+  - list
+  - watch
+  - create
   - patch
 - apiGroups:
   - ''
   resources:
   - pods
   verbs:
   - get
-  - watch
-  - create
-  - list
+  - list
+  - watch
+  - create
   - patch
   - delete
   - deletecollection
 - apiGroups:
   - ''
   resources:
   - persistentvolumeclaims
   verbs:
+  - get
+  - list
+  - watch
+  - update
   - deletecollection
-  - list
-  - get
-  - watch
-  - update
 - apiGroups:
   - storage.k8s.io
   resources:
   - storageclasses
   verbs:
   - get
-  - watch
-  - create
-  - list
+  - list
+  - watch
+  - create
   - patch
 - apiGroups:
   - apps
   resources:
   - statefulsets
   - deployments
   verbs:
   - get
-  - create
-  - list
-  - patch
-  - watch
+  - list
+  - watch
+  - create
+  - patch
   - update
   - delete
 - apiGroups:
   - batch
   resources:
   - jobs
   verbs:
   - get
-  - create
-  - list
-  - patch
-  - watch
+  - list
+  - watch
+  - create
+  - patch
   - update
   - delete
 - apiGroups:
   - certificates.k8s.io
   resources:
   - certificatesigningrequests
   - certificatesigningrequests/approval
   - certificatesigningrequests/status
   verbs:
-  - update
-  - create
-  - get
-  - delete
-  - list
+  - get
+  - list
+  - update
+  - create
+  - delete
 - apiGroups:
   - minio.min.io
   resources:
   - '*'
   verbs:
   - '*'
 - apiGroups:
   - min.io
   resources:
   - '*'
   verbs:
-  - '*'
+  - get
+  - list
+  - watch
 - apiGroups:
   - ''
   resources:
   - persistentvolumes
   verbs:
   - get
@@ -133,15 +137,15 @@

   - update
 - apiGroups:
   - ''
   resources:
   - events
   verbs:
-  - create
-  - list
-  - watch
+  - list
+  - watch
+  - create
   - update
   - patch
 - apiGroups:
   - snapshot.storage.k8s.io
   resources:
   - volumesnapshots
--- HelmRelease: storage/minio ClusterRole: storage/minio-operator-role

+++ HelmRelease: storage/minio ClusterRole: storage/minio-operator-role

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: minio-operator-role
+  labels:
+    app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   verbs:
@@ -139,12 +141,13 @@

   - tokenreviews
   verbs:
   - create
 - apiGroups:
   - minio.min.io
   - sts.min.io
+  - job.min.io
   resources:
   - '*'
   verbs:
   - '*'
 - apiGroups:
   - min.io
--- HelmRelease: storage/minio ClusterRoleBinding: storage/console-sa-binding

+++ HelmRelease: storage/minio ClusterRoleBinding: storage/console-sa-binding

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: console-sa-binding
+  labels:
+    app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: console-sa-role
 subjects:
 - kind: ServiceAccount
--- HelmRelease: storage/minio ClusterRoleBinding: storage/minio-operator-binding

+++ HelmRelease: storage/minio ClusterRoleBinding: storage/minio-operator-binding

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: minio-operator-binding
+  labels:
+    app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: minio-operator-role
 subjects:
 - kind: ServiceAccount
--- HelmRelease: storage/minio Service: storage/console

+++ HelmRelease: storage/minio Service: storage/console

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: console
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   ports:
   - name: http
     port: 9090
   - name: https
--- HelmRelease: storage/minio Service: storage/operator

+++ HelmRelease: storage/minio Service: storage/operator

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 4221
     name: http
--- HelmRelease: storage/minio Service: storage/sts

+++ HelmRelease: storage/minio Service: storage/sts

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: sts
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 4223
     name: https
--- HelmRelease: storage/minio Deployment: storage/console

+++ HelmRelease: storage/minio Deployment: storage/console

@@ -2,29 +2,29 @@

 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: console
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
   selector:
     matchLabels:
       app.kubernetes.io/name: operator
       app.kubernetes.io/instance: minio-console
   template:
     metadata:
       labels:
+        app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: operator
         app.kubernetes.io/instance: minio-console
     spec:
       serviceAccountName: console-sa
       securityContext:
+        runAsGroup: 1000
         runAsNonRoot: true
         runAsUser: 1000
       affinity:
         podAntiAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
           - labelSelector:
@@ -33,13 +33,13 @@

                 operator: In
                 values:
                 - minio-operator
             topologyKey: kubernetes.io/hostname
       containers:
       - name: operator
-        image: quay.io/minio/operator:v5.0.11
+        image: quay.io/minio/operator:v5.0.17
         imagePullPolicy: IfNotPresent
         ports:
         - containerPort: 9090
           name: http
         - containerPort: 9443
           name: https
@@ -48,14 +48,21 @@

         - --certs-dir=/tmp/certs
         resources:
           requests:
             cpu: 0.25
             memory: 512Mi
         securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsGroup: 1000
           runAsNonRoot: true
           runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - mountPath: /tmp/certs/CAs
           name: tmp
           readOnly: false
       volumes:
       - emptyDir: {}
--- HelmRelease: storage/minio Deployment: storage/minio-operator

+++ HelmRelease: storage/minio Deployment: storage/minio-operator

@@ -2,24 +2,23 @@

 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: minio-operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 2
   selector:
     matchLabels:
       app.kubernetes.io/name: operator
       app.kubernetes.io/instance: minio
   template:
     metadata:
       labels:
+        app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: operator
         app.kubernetes.io/instance: minio
     spec:
       serviceAccountName: minio-operator
       securityContext:
         fsGroup: 1000
@@ -35,23 +34,31 @@

                 operator: In
                 values:
                 - minio-operator
             topologyKey: kubernetes.io/hostname
       containers:
       - name: operator
-        image: quay.io/minio/operator:v5.0.11
+        image: quay.io/minio/operator:v5.0.17
         imagePullPolicy: IfNotPresent
         args:
         - controller
         env:
         - name: OPERATOR_STS_ENABLED
           value: 'on'
+        - name: MINIO_CONSOLE_TLS_ENABLE
+          value: 'off'
         resources:
           requests:
             cpu: 200m
             ephemeral-storage: 500Mi
             memory: 256Mi
         securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
           runAsGroup: 1000
           runAsNonRoot: true
           runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
 

@github-actions
Copy link

github-actions bot commented Feb 10, 2024

--- kubernetes/apps/storage/minio-s3/operator Kustomization: flux-system/cluster-apps-storage-minio-operator HelmRelease: storage/minio

+++ kubernetes/apps/storage/minio-s3/operator Kustomization: flux-system/cluster-apps-storage-minio-operator HelmRelease: storage/minio

@@ -13,13 +13,13 @@

       chart: operator
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: minio-operator
         namespace: flux-system
-      version: 5.0.11
+      version: 5.0.18
   install:
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 2
   uninstall:

@renovate renovate bot force-pushed the renovate/operator-5.x branch from 8dc6ea9 to 97bece9 Compare March 5, 2024 01:07
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.12 fix(helm): update chart operator to 5.0.13 Mar 5, 2024
@renovate renovate bot force-pushed the renovate/operator-5.x branch from 97bece9 to 596d69d Compare March 16, 2024 00:09
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.13 fix(helm): update chart operator to 5.0.14 Mar 16, 2024
@renovate renovate bot force-pushed the renovate/operator-5.x branch from 596d69d to 00aebe2 Compare May 7, 2024 23:10
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.14 fix(helm): update chart operator to 5.0.15 May 7, 2024
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.15 fix(helm): update chart operator to 5.0.15 - autoclosed Aug 25, 2024
@renovate renovate bot closed this Aug 25, 2024
@renovate renovate bot deleted the renovate/operator-5.x branch August 25, 2024 22:42
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.15 - autoclosed fix(helm): update chart operator to 5.0.15 Aug 26, 2024
@renovate renovate bot restored the renovate/operator-5.x branch August 26, 2024 02:36
@renovate renovate bot reopened this Aug 26, 2024
@renovate renovate bot force-pushed the renovate/operator-5.x branch from 00aebe2 to 7021e32 Compare September 11, 2024 11:35
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.15 fix(helm): update chart operator to 5.0.17 Sep 11, 2024
@renovate renovate bot force-pushed the renovate/operator-5.x branch from 7021e32 to cb1ca4f Compare May 6, 2025 04:06
@renovate renovate bot changed the title fix(helm): update chart operator to 5.0.17 fix(helm): update chart operator to 5.0.18 May 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant