mirror of
https://github.com/minio/docs.git
synced 2025-10-31 06:30:27 +03:00
265af648e2
# Summary We removed support for deploying via OpenShift operatorhub / marketplace a few months back. The burden of maintaining the certifications/process required was sufficient to pull that feature set out moving forward and migrate it to AIStor as part of a more complete enterprise offering. For now we need to remove references to the operator hub / marketplace. It is possible that the Openshift Kubernetes Engine may work w/ our stock kubernetes installation paths, but we do not have resources to test. So for the immediate term, we're just going to pull whats outdated. Also throwing in a fixup to the CRDs - I ran into a weird issue where I had to `pip3 install asciidoc` before the sync-operator-crd-docs job worked, am looking into that separately. Staged: http://192.241.195.202:9000/staging/openshift-fixup/openshift/index.html
188 lines
7.0 KiB
YAML
188 lines
7.0 KiB
YAML
###
|
|
# Root key for Operator Helm Chart
|
|
operator:
|
|
###
|
|
# An array of environment variables to pass to the Operator deployment.
|
|
# Pass an empty array to start Operator with defaults.
|
|
#
|
|
# For example:
|
|
#
|
|
# .. code-block:: yaml
|
|
#
|
|
# env:
|
|
# - name: CLUSTER_DOMAIN
|
|
# value: "cluster.domain"
|
|
# - name: WATCHED_NAMESPACE
|
|
# value: ""
|
|
# - name: MINIO_OPERATOR_RUNTIME
|
|
# value: "OpenShift"
|
|
#
|
|
# See `Operator environment variables <https://github.com/minio/operator/blob/master/docs/env-variables.md>`__ for a list of all supported values.
|
|
env:
|
|
- name: OPERATOR_STS_ENABLED
|
|
value: "on"
|
|
# An array of additional annotations to be applied to the operator service account
|
|
serviceAccountAnnotations: []
|
|
# additional labels to be applied to operator resources
|
|
additionalLabels: {}
|
|
###
|
|
# Specify the Operator container image to use for the deployment.
|
|
# ``image.tag``
|
|
# For example, the following sets the image to the ``quay.io/minio/operator`` repo and the v7.0.0 tag.
|
|
# The container pulls the image if not already present:
|
|
#
|
|
# .. code-block:: yaml
|
|
#
|
|
# image:
|
|
# repository: quay.io/minio/operator
|
|
# tag: v7.0.0
|
|
# pullPolicy: IfNotPresent
|
|
#
|
|
# The chart also supports specifying an image based on digest value:
|
|
#
|
|
# .. code-block:: yaml
|
|
#
|
|
# image:
|
|
# repository: quay.io/minio/operator@sha256
|
|
# digest: 28c80b379c75242c6fe793dfbf212f43c602140a0de5ebe3d9c2a3a7b9f9f983
|
|
# pullPolicy: IfNotPresent
|
|
#
|
|
image:
|
|
repository: quay.io/minio/operator
|
|
tag: v7.0.0
|
|
pullPolicy: IfNotPresent
|
|
###
|
|
# Specify the sidecar container image to deploy on tenant pods for init container and sidecar.
|
|
# Only need to change this if want to use a different version that the default, or want to set a custom registry.
|
|
# ``sidecarImage.tag``
|
|
# For example, the following sets the image to the ``quay.io/minio/operator-sidecar`` repo and the v7.0.0 tag.
|
|
# The container pulls the image if not already present:
|
|
#
|
|
# .. code-block:: yaml
|
|
#
|
|
# sidecarImage:
|
|
# repository: quay.io/minio/operator-sidecar
|
|
# tag: v7.0.0
|
|
# pullPolicy: IfNotPresent
|
|
#
|
|
# The chart also supports specifying an image based on digest value:
|
|
#
|
|
# .. code-block:: yaml
|
|
#
|
|
# sidecarImage:
|
|
# repository: quay.io/minio/operator-sidecar@sha256
|
|
# digest: a11947a230b80fb1b0bffa97173147a505d4f1207958f722e348d11ab9e972c1
|
|
# pullPolicy: IfNotPresent
|
|
#
|
|
sidecarImage: {}
|
|
###
|
|
#
|
|
# An array of Kubernetes secrets to use for pulling images from a private ``image.repository``.
|
|
# Only one array element is supported at this time.
|
|
imagePullSecrets: [ ]
|
|
###
|
|
#
|
|
# The name of a custom `Container Runtime <https://kubernetes.io/docs/concepts/containers/runtime-class/>`__ to use for the Operator pods.
|
|
runtimeClassName: ~
|
|
###
|
|
# An array of `initContainers <https://kubernetes.io/docs/concepts/workloads/pods/init-containers/>`__ to start up before the Operator pods.
|
|
# Exercise care as ``initContainer`` failures prevent Operator pods from starting.
|
|
# Pass an empty array to start the Operator normally.
|
|
initContainers: [ ]
|
|
###
|
|
# The number of Operator pods to deploy.
|
|
# Higher values increase availability in the event of worker node failures.
|
|
#
|
|
# The cluster must have sufficient number of available worker nodes to fulfill the request.
|
|
# Operator pods deploy with pod anti-affinity by default, preventing Kubernetes from scheduling multiple pods onto a single Worker node.
|
|
replicaCount: 2
|
|
###
|
|
# The Kubernetes `SecurityContext <https://kubernetes.io/docs/tasks/configure-pod-container/security-context/>`__ to use for deploying Operator resources.
|
|
#
|
|
# You may need to modify these values to meet your cluster's security and access settings.
|
|
securityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
runAsNonRoot: true
|
|
fsGroup: 1000
|
|
###
|
|
# The Kubernetes `SecurityContext <https://kubernetes.io/docs/tasks/configure-pod-container/security-context/>`__ to use for deploying Operator containers.
|
|
# You may need to modify these values to meet your cluster's security and access settings.
|
|
containerSecurityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
###
|
|
# An array of `Volumes <https://kubernetes.io/docs/concepts/storage/volumes/>`__ which the Operator can mount to pods.
|
|
#
|
|
# The volumes must exist *and* be accessible to the Operator pods.
|
|
volumes: [ ]
|
|
###
|
|
# An array of volume mount points associated to each Operator container.
|
|
#
|
|
# Specify each item in the array as follows:
|
|
#
|
|
# .. code-block:: yaml
|
|
#
|
|
# volumeMounts:
|
|
# - name: volumename
|
|
# mountPath: /path/to/mount
|
|
#
|
|
# The ``name`` field must correspond to an entry in the ``volumes`` array.
|
|
volumeMounts: [ ]
|
|
###
|
|
# Any `Node Selectors <https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/>`__ to apply to Operator pods.
|
|
#
|
|
# The Kubernetes scheduler uses these selectors to determine which worker nodes onto which it can deploy Operator pods.
|
|
#
|
|
# If no worker nodes match the specified selectors, the Operator deployment will fail.
|
|
nodeSelector: { }
|
|
###
|
|
#
|
|
# The `Pod Priority <https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/>`__ to assign to Operator pods.
|
|
priorityClassName: ""
|
|
###
|
|
#
|
|
# The `affinity <https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes-using-node-affinity/>`__ or anti-affinity settings to apply to Operator pods.
|
|
#
|
|
# These settings determine the distribution of pods across worker nodes and can help prevent or allow colocating pods onto the same worker nodes.
|
|
affinity:
|
|
podAntiAffinity:
|
|
requiredDuringSchedulingIgnoredDuringExecution:
|
|
- labelSelector:
|
|
matchExpressions:
|
|
- key: name
|
|
operator: In
|
|
values:
|
|
- minio-operator
|
|
topologyKey: kubernetes.io/hostname
|
|
###
|
|
#
|
|
# An array of `Toleration labels <https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/>`__ to associate to Operator pods.
|
|
#
|
|
# These settings determine the distribution of pods across worker nodes.
|
|
tolerations: [ ]
|
|
###
|
|
#
|
|
# An array of `Topology Spread Constraints <https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/>`__ to associate to Operator pods.
|
|
#
|
|
# These settings determine the distribution of pods across worker nodes.
|
|
topologySpreadConstraints: [ ]
|
|
###
|
|
#
|
|
# The `Requests or Limits <https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/>`__ for resources to associate to Operator pods.
|
|
#
|
|
# These settings can control the minimum and maximum resources requested for each pod.
|
|
# If no worker nodes can meet the specified requests, the Operator may fail to deploy.
|
|
resources:
|
|
requests:
|
|
cpu: 200m
|
|
memory: 256Mi
|
|
ephemeral-storage: 500Mi
|