Skip to content

feat(helm)!: Update chart operator to 7.1.1 #319

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat(helm)!: Update chart operator to 7.1.1 #319

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 25, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
operator (source) major 5.0.11 → 7.1.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

minio/operator (operator)

v7.1.1: Version 7.1.1

Compare Source

Changelog

v7.1.0: Version 7.1.0

Compare Source

Changelog

v7.0.1: Version 7.0.1

Compare Source

Changelog

v7.0.0: Version 7.0.0

Compare Source

Changelog

v6.0.4: Version 6.0.4

Compare Source

Changelog

v6.0.3: Version 6.0.3

Compare Source

Changelog

v6.0.2: Version 6.0.2

Compare Source

Changelog

v6.0.1

Compare Source

What's Changed

Full Changelog: minio/operator@v6.0.0...v6.0.1

v6.0.0: Version 6.0.0

Compare Source

Changelog

v5.0.18: Version 5.0.18

Compare Source

Changelog

v5.0.17

Compare Source

v5.0.16

Compare Source

v5.0.15: Version 5.0.15

Compare Source

Changelog

v5.0.14: Version 5.0.14

Compare Source

Changelog

v5.0.13: Version 5.0.13

Compare Source

Changelog

v5.0.12: Version 5.0.12

Compare Source

Changelog

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link

github-actions bot commented Jan 25, 2025 •
edited
Loading 

--- kubernetes/apps/storage/minio-s3/operator Kustomization: flux-system/cluster-apps-storage-minio-operator HelmRelease: storage/minio

+++ kubernetes/apps/storage/minio-s3/operator Kustomization: flux-system/cluster-apps-storage-minio-operator HelmRelease: storage/minio

@@ -13,13 +13,13 @@

       chart: operator
       interval: 15m
       sourceRef:
         kind: HelmRepository
         name: minio-operator
         namespace: flux-system
-      version: 5.0.11
+      version: 7.1.1
   install:
     remediation:
       retries: 3
   interval: 15m
   maxHistory: 2
   uninstall:

@github-actions
Copy link

github-actions bot commented Jan 25, 2025 •
edited
Loading 

--- HelmRelease: storage/minio ServiceAccount: storage/console-sa

+++ HelmRelease: storage/minio ServiceAccount: storage/console-sa

@@ -1,7 +0,0 @@

----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: console-sa
-  namespace: storage
-
--- HelmRelease: storage/minio ServiceAccount: storage/minio-operator

+++ HelmRelease: storage/minio ServiceAccount: storage/minio-operator

@@ -2,10 +2,8 @@

 apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: minio-operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 
--- HelmRelease: storage/minio ConfigMap: storage/console-env

+++ HelmRelease: storage/minio ConfigMap: storage/console-env

@@ -1,10 +0,0 @@

----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: console-env
-  namespace: storage
-data:
-  CONSOLE_PORT: '9090'
-  CONSOLE_TLS_PORT: '9443'
-
--- HelmRelease: storage/minio ClusterRole: storage/console-sa-role

+++ HelmRelease: storage/minio ClusterRole: storage/console-sa-role

@@ -1,239 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: console-sa-role
-rules:
-- apiGroups:
-  - ''
-  resources:
-  - secrets
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-  - update
-  - delete
-  - deletecollection
-- apiGroups:
-  - ''
-  resources:
-  - namespaces
-  - services
-  - events
-  - resourcequotas
-  - nodes
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-- apiGroups:
-  - ''
-  resources:
-  - pods
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-  - delete
-  - deletecollection
-- apiGroups:
-  - ''
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - deletecollection
-  - list
-  - get
-  - watch
-  - update
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  verbs:
-  - get
-  - watch
-  - create
-  - list
-  - patch
-- apiGroups:
-  - apps
-  resources:
-  - statefulsets
-  - deployments
-  verbs:
-  - get
-  - create
-  - list
-  - patch
-  - watch
-  - update
-  - delete
-- apiGroups:
-  - batch
-  resources:
-  - jobs
-  verbs:
-  - get
-  - create
-  - list
-  - patch
-  - watch
-  - update
-  - delete
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  - certificatesigningrequests/approval
-  - certificatesigningrequests/status
-  verbs:
-  - update
-  - create
-  - get
-  - delete
-  - list
-- apiGroups:
-  - minio.min.io
-  resources:
-  - '*'
-  verbs:
-  - '*'
-- apiGroups:
-  - min.io
-  resources:
-  - '*'
-  verbs:
-  - '*'
-- apiGroups:
-  - ''
-  resources:
-  - persistentvolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - delete
-- apiGroups:
-  - ''
-  resources:
-  - persistentvolumeclaims
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - ''
-  resources:
-  - events
-  verbs:
-  - create
-  - list
-  - watch
-  - update
-  - patch
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshots
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - snapshot.storage.k8s.io
-  resources:
-  - volumesnapshotcontents
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - csinodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - volumeattachments
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ''
-  resources:
-  - endpoints
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - direct.csi.min.io
-  resources:
-  - volumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - direct.csi.min.io
-  resources:
-  - directcsidrives
-  - directcsivolumes
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - delete
-- apiGroups:
-  - ''
-  resources:
-  - pod
-  - pods/log
-  verbs:
-  - get
-  - list
-  - watch
-
--- HelmRelease: storage/minio ClusterRole: storage/minio-operator-role

+++ HelmRelease: storage/minio ClusterRole: storage/minio-operator-role

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
 metadata:
   name: minio-operator-role
+  labels:
+    app.kubernetes.io/managed-by: Helm
 rules:
 - apiGroups:
   - apiextensions.k8s.io
   resources:
   - customresourcedefinitions
   verbs:
@@ -16,13 +18,12 @@

   resources:
   - persistentvolumeclaims
   verbs:
   - get
   - update
   - list
-  - delete
 - apiGroups:
   - ''
   resources:
   - namespaces
   - nodes
   verbs:
@@ -139,12 +140,13 @@

   - tokenreviews
   verbs:
   - create
 - apiGroups:
   - minio.min.io
   - sts.min.io
+  - job.min.io
   resources:
   - '*'
   verbs:
   - '*'
 - apiGroups:
   - min.io
@@ -153,14 +155,17 @@

   verbs:
   - '*'
 - apiGroups:
   - monitoring.coreos.com
   resources:
   - prometheuses
+  - prometheusagents
   verbs:
-  - '*'
+  - get
+  - update
+  - list
 - apiGroups:
   - coordination.k8s.io
   resources:
   - leases
   verbs:
   - get
--- HelmRelease: storage/minio ClusterRoleBinding: storage/console-sa-binding

+++ HelmRelease: storage/minio ClusterRoleBinding: storage/console-sa-binding

@@ -1,14 +0,0 @@

----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: console-sa-binding
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: console-sa-role
-subjects:
-- kind: ServiceAccount
-  name: console-sa
-  namespace: storage
-
--- HelmRelease: storage/minio ClusterRoleBinding: storage/minio-operator-binding

+++ HelmRelease: storage/minio ClusterRoleBinding: storage/minio-operator-binding

@@ -1,11 +1,13 @@

 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: minio-operator-binding
+  labels:
+    app.kubernetes.io/managed-by: Helm
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: minio-operator-role
 subjects:
 - kind: ServiceAccount
--- HelmRelease: storage/minio Service: storage/console

+++ HelmRelease: storage/minio Service: storage/console

@@ -1,20 +0,0 @@

----
-apiVersion: v1
-kind: Service
-metadata:
-  name: console
-  namespace: storage
-  labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
-    app.kubernetes.io/managed-by: Helm
-spec:
-  ports:
-  - name: http
-    port: 9090
-  - name: https
-    port: 9443
-  selector:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio-console
-
--- HelmRelease: storage/minio Service: storage/operator

+++ HelmRelease: storage/minio Service: storage/operator

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 4221
     name: http
--- HelmRelease: storage/minio Service: storage/sts

+++ HelmRelease: storage/minio Service: storage/sts

@@ -2,14 +2,12 @@

 apiVersion: v1
 kind: Service
 metadata:
   name: sts
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   type: ClusterIP
   ports:
   - port: 4223
     name: https
--- HelmRelease: storage/minio Deployment: storage/console

+++ HelmRelease: storage/minio Deployment: storage/console

@@ -1,63 +0,0 @@

----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: console
-  namespace: storage
-  labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
-    app.kubernetes.io/managed-by: Helm
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: operator
-      app.kubernetes.io/instance: minio-console
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: operator
-        app.kubernetes.io/instance: minio-console
-    spec:
-      serviceAccountName: console-sa
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
-      affinity:
-        podAntiAffinity:
-          requiredDuringSchedulingIgnoredDuringExecution:
-          - labelSelector:
-              matchExpressions:
-              - key: name
-                operator: In
-                values:
-                - minio-operator
-            topologyKey: kubernetes.io/hostname
-      containers:
-      - name: operator
-        image: quay.io/minio/operator:v5.0.11
-        imagePullPolicy: IfNotPresent
-        ports:
-        - containerPort: 9090
-          name: http
-        - containerPort: 9443
-          name: https
-        args:
-        - ui
-        - --certs-dir=/tmp/certs
-        resources:
-          requests:
-            cpu: 0.25
-            memory: 512Mi
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 1000
-        volumeMounts:
-        - mountPath: /tmp/certs/CAs
-          name: tmp
-          readOnly: false
-      volumes:
-      - emptyDir: {}
-        name: tmp
-
--- HelmRelease: storage/minio Deployment: storage/minio-operator

+++ HelmRelease: storage/minio Deployment: storage/minio-operator

@@ -2,24 +2,23 @@

 apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: minio-operator
   namespace: storage
   labels:
-    app.kubernetes.io/name: operator
-    app.kubernetes.io/instance: minio
     app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 2
   selector:
     matchLabels:
       app.kubernetes.io/name: operator
       app.kubernetes.io/instance: minio
   template:
     metadata:
       labels:
+        app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: operator
         app.kubernetes.io/instance: minio
     spec:
       serviceAccountName: minio-operator
       securityContext:
         fsGroup: 1000
@@ -35,23 +34,29 @@

                 operator: In
                 values:
                 - minio-operator
             topologyKey: kubernetes.io/hostname
       containers:
       - name: operator
-        image: quay.io/minio/operator:v5.0.11
+        image: quay.io/minio/operator:v7.1.1
         imagePullPolicy: IfNotPresent
         args:
         - controller
         env:
         - name: OPERATOR_STS_ENABLED
           value: 'on'
         resources:
           requests:
             cpu: 200m
             ephemeral-storage: 500Mi
             memory: 256Mi
         securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
           runAsGroup: 1000
           runAsNonRoot: true
           runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault

@renovate renovate bot force-pushed the renovate/operator-7.x branch from 87874d7 to ed0da7e Compare March 21, 2025 19:28
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 7.0.0 feat(helm)!: Update chart operator to 7.0.1 Mar 21, 2025
@renovate renovate bot force-pushed the renovate/operator-7.x branch from ed0da7e to ab6414c Compare April 19, 2025 02:04
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 7.0.1 feat(helm)!: Update chart operator to 7.1.0 Apr 19, 2025
@renovate renovate bot force-pushed the renovate/operator-7.x branch from ab6414c to 4ac3525 Compare April 23, 2025 22:56
@renovate renovate bot changed the title feat(helm)!: Update chart operator to 7.1.0 feat(helm)!: Update chart operator to 7.1.1 Apr 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate/helm type/major

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant