mirror of
https://github.com/bitnami/charts.git
synced 2026-08-10 14:15:55 +08:00
[bitnami/minio] Set usePasswordFiles=true by default (#32361)
* [bitnami/minio] Set `usePasswordFiles=true` by default Signed-off-by: Miguel Ruiz <miguel.ruiz@broadcom.com> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> --------- Signed-off-by: Miguel Ruiz <miguel.ruiz@broadcom.com> Signed-off-by: Bitnami Containers <bitnami-bot@vmware.com> Co-authored-by: Bitnami Containers <bitnami-bot@vmware.com>
This commit is contained in:
Miguel Ruiz
co-authored by
Bitnami Containers
Bitnami Containers
parent
7ea2171d3d
commit
4f1637923c
@@ -1,8 +1,13 @@
|
||||
# Changelog
|
||||
|
||||
## 15.0.7 (2025-03-12)
|
||||
## 16.0.0 (2025-03-13)
|
||||
|
||||
* [bitnami/minio] Release 15.0.7 ([#32425](https://github.com/bitnami/charts/pull/32425))
|
||||
* [bitnami/minio] Set `usePasswordFiles=true` by default ([#32361](https://github.com/bitnami/charts/pull/32361))
|
||||
|
||||
## <small>15.0.7 (2025-03-12)</small>
|
||||
|
||||
* [bitnami/*] Add tanzuCategory annotation (#32409) ([a8fba5c](https://github.com/bitnami/charts/commit/a8fba5cb01f6f4464ca7f69c50b0fbe97d837a95)), closes [#32409](https://github.com/bitnami/charts/issues/32409)
|
||||
* [bitnami/minio] Release 15.0.7 (#32425) ([48a854a](https://github.com/bitnami/charts/commit/48a854ac39c08841258ab185f7af68024ab8569e)), closes [#32425](https://github.com/bitnami/charts/issues/32425)
|
||||
|
||||
## <small>15.0.6 (2025-03-05)</small>
|
||||
|
||||
|
||||
@@ -35,4 +35,4 @@ maintainers:
|
||||
name: minio
|
||||
sources:
|
||||
- https://github.com/bitnami/charts/tree/main/bitnami/minio
|
||||
version: 15.0.7
|
||||
version: 16.0.0
|
||||
|
||||
+24
-2
@@ -287,7 +287,7 @@ You can enable this initContainer by setting `volumePermissions.enabled` to `tru
|
||||
| `auth.rootUserSecretKey` | Key where the MINIO_ROOT_USER username is being stored inside the existing secret `auth.existingSecret` | `""` |
|
||||
| `auth.rootPasswordSecretKey` | Key where the MINIO_ROOT_USER password is being stored inside the existing secret `auth.existingSecret` | `""` |
|
||||
| `auth.forcePassword` | Force users to specify required passwords | `false` |
|
||||
| `auth.useCredentialsFiles` | Mount credentials as a files instead of using an environment variable | `false` |
|
||||
| `auth.usePasswordFiles` | Mount credentials as a files instead of using an environment variable | `true` |
|
||||
| `auth.useSecret` | Uses a secret to mount the credential files. | `true` |
|
||||
| `auth.forceNewKeys` | Force root credentials (user and password) to be reconfigured every time they change in the secrets | `false` |
|
||||
| `defaultBuckets` | Comma, semi-colon or space separated list of buckets to create at initialization (only in standalone mode) | `""` |
|
||||
@@ -569,6 +569,16 @@ Find more information about how to deal with common errors related to Bitnami's
|
||||
|
||||
## Upgrading
|
||||
|
||||
### To 16.0.0
|
||||
|
||||
This major bump introduces the following changes:
|
||||
|
||||
- `auth.useCredentialsFiles` has been renamed to `auth.usePasswordFiles`. Its default value has been changed from `false` to `true`.
|
||||
|
||||
## To 15.0.0
|
||||
|
||||
This version updates MinIO® to major version 2025.
|
||||
|
||||
### To 14.9.0
|
||||
|
||||
This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
|
||||
@@ -584,6 +594,10 @@ This major bump changes the following security defaults:
|
||||
|
||||
This could potentially break any customization or init scripts used in your deployment. If this is the case, change the default values to the previous ones.
|
||||
|
||||
## To 13.0.0
|
||||
|
||||
This version updates MinIO® to major version 2024.
|
||||
|
||||
### To 12.0.0
|
||||
|
||||
This version updates MinIO® to major version 2023. All gateway features have been removed from Minio since upstream completely dropped this feature. The related options have been removed in version 12.1.0.
|
||||
@@ -594,6 +608,10 @@ This version deprecates the usage of `MINIO_ACCESS_KEY` and `MINIO_SECRET_KEY` e
|
||||
|
||||
If you were already using the new variables, no issues are expected during upgrade.
|
||||
|
||||
## To 10.0.0
|
||||
|
||||
This version updates MinIO® to major version 2022.
|
||||
|
||||
### To 9.0.0
|
||||
|
||||
This version updates MinIO® authentication parameters so they're aligned with the [current terminology](https://docs.min.io/minio/baremetal/security/minio-identity-management/user-management.html#minio-users-root). As a result the following parameters have been affected:
|
||||
@@ -619,6 +637,10 @@ Please note that Web UI, previously running on port 9000 will now use port 9001
|
||||
|
||||
This version introduces pod and container securityContext support. The previous configuration of `securityContext` has moved to `podSecurityContext` and `containerSecurityContext`. Apart from this case, no issues are expected to appear when upgrading.
|
||||
|
||||
## To 6.0.0
|
||||
|
||||
This version updates MinIO® to major version 2021.
|
||||
|
||||
### To 5.0.0
|
||||
|
||||
This version standardizes the way of defining Ingress rules. When configuring a single hostname for the Ingress rule, set the `ingress.hostname` value. When defining more than one, set the `ingress.extraHosts` array. Apart from this case, no issues are expected to appear when upgrading.
|
||||
@@ -662,4 +684,4 @@ Unless required by applicable law or agreed to in writing, software
|
||||
distributed under the License is distributed on an "AS IS" BASIS,
|
||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
See the License for the specific language governing permissions and
|
||||
limitations under the License.
|
||||
limitations under the License.
|
||||
|
||||
@@ -154,7 +154,7 @@ spec:
|
||||
value: {{ ternary "https" "http" .Values.tls.enabled | quote }}
|
||||
- name: MINIO_FORCE_NEW_KEYS
|
||||
value: {{ ternary "yes" "no" .Values.auth.forceNewKeys | quote }}
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: MINIO_ROOT_USER_FILE
|
||||
value: "/opt/bitnami/minio/secrets/root-user"
|
||||
- name: MINIO_ROOT_PASSWORD_FILE
|
||||
@@ -266,7 +266,7 @@ spec:
|
||||
- name: empty-dir
|
||||
mountPath: /.mc
|
||||
subPath: app-mc-dir
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: minio-credentials
|
||||
mountPath: /opt/bitnami/minio/secrets/
|
||||
{{- end }}
|
||||
@@ -292,7 +292,7 @@ spec:
|
||||
volumes:
|
||||
- name: empty-dir
|
||||
emptyDir: {}
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: minio-credentials
|
||||
secret:
|
||||
secretName: {{ include "minio.secretName" . }}
|
||||
|
||||
@@ -20,9 +20,9 @@ metadata:
|
||||
{{- include "common.tplvalues.render" ( dict "value" .Values.commonAnnotations "context" $ ) | nindent 4 }}
|
||||
{{- end }}
|
||||
spec:
|
||||
{{- if .Values.provisioning.cleanupAfterFinished.enabled }}
|
||||
ttlSecondsAfterFinished: {{ .Values.provisioning.cleanupAfterFinished.seconds }}
|
||||
{{- end }}
|
||||
{{- if .Values.provisioning.cleanupAfterFinished.enabled }}
|
||||
ttlSecondsAfterFinished: {{ .Values.provisioning.cleanupAfterFinished.seconds }}
|
||||
{{- end }}
|
||||
parallelism: 1
|
||||
template:
|
||||
metadata:
|
||||
@@ -142,8 +142,8 @@ spec:
|
||||
};
|
||||
|
||||
{{- $minioUrl := printf "$MINIO_SCHEME://%s:%d" (include "common.names.fullname" .) (.Values.service.ports.api | int) }}
|
||||
{{- $minioRootUser := ternary ("$(<$MINIO_ROOT_USER_FILE)") ("$MINIO_ROOT_USER") (.Values.auth.useCredentialsFiles) }}
|
||||
{{- $minioRootPassword := ternary ("$(<$MINIO_ROOT_PASSWORD_FILE)") ("$MINIO_ROOT_PASSWORD") (.Values.auth.useCredentialsFiles) }}
|
||||
{{- $minioRootUser := ternary ("$(<$MINIO_ROOT_USER_FILE)") ("$MINIO_ROOT_USER") (.Values.auth.usePasswordFiles) }}
|
||||
{{- $minioRootPassword := ternary ("$(<$MINIO_ROOT_PASSWORD_FILE)") ("$MINIO_ROOT_PASSWORD") (.Values.auth.usePasswordFiles) }}
|
||||
mc alias set {{ $minioAlias }} {{ $minioUrl }} {{ $minioRootUser }} {{ $minioRootPassword }};
|
||||
|
||||
{{- range $config := .Values.provisioning.config }}
|
||||
@@ -256,7 +256,7 @@ spec:
|
||||
env:
|
||||
- name: MINIO_SCHEME
|
||||
value: {{ ternary "https" "http" .Values.tls.enabled | quote }}
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: MINIO_ROOT_USER_FILE
|
||||
value: "/opt/bitnami/minio/secrets/root-user"
|
||||
- name: MINIO_ROOT_PASSWORD_FILE
|
||||
@@ -305,7 +305,7 @@ spec:
|
||||
- name: minio-provisioning
|
||||
mountPath: /etc/ilm
|
||||
{{- end }}
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: minio-credentials
|
||||
mountPath: /opt/bitnami/minio/secrets/
|
||||
{{- end }}
|
||||
@@ -336,7 +336,7 @@ spec:
|
||||
configMap:
|
||||
name: {{ $fullname }}
|
||||
{{- end }}
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: minio-credentials
|
||||
secret:
|
||||
secretName: {{ include "minio.secretName" . }}
|
||||
|
||||
@@ -121,7 +121,7 @@ spec:
|
||||
value: {{ ternary "yes" "no" .Values.auth.forceNewKeys | quote }}
|
||||
- name: MINIO_API_PORT_NUMBER
|
||||
value: {{ .Values.containerPorts.api | quote }}
|
||||
{{- if .Values.auth.useCredentialsFiles }}
|
||||
{{- if .Values.auth.usePasswordFiles }}
|
||||
- name: MINIO_ROOT_USER_FILE
|
||||
value: "/opt/bitnami/minio/secrets/root-user"
|
||||
- name: MINIO_ROOT_PASSWORD_FILE
|
||||
@@ -231,7 +231,7 @@ spec:
|
||||
- name: empty-dir
|
||||
mountPath: /.mc
|
||||
subPath: app-mc-dir
|
||||
{{- if and .Values.auth.useSecret .Values.auth.useCredentialsFiles }}
|
||||
{{- if and .Values.auth.useSecret .Values.auth.usePasswordFiles }}
|
||||
- name: minio-credentials
|
||||
mountPath: /opt/bitnami/minio/secrets/
|
||||
{{- end }}
|
||||
@@ -250,7 +250,7 @@ spec:
|
||||
volumes:
|
||||
- name: empty-dir
|
||||
emptyDir: {}
|
||||
{{- if and .Values.auth.useSecret .Values.auth.useCredentialsFiles }}
|
||||
{{- if and .Values.auth.useSecret .Values.auth.usePasswordFiles }}
|
||||
- name: minio-credentials
|
||||
secret:
|
||||
secretName: {{ include "minio.secretName" . }}
|
||||
|
||||
@@ -129,9 +129,9 @@ auth:
|
||||
## @param auth.forcePassword Force users to specify required passwords
|
||||
##
|
||||
forcePassword: false
|
||||
## @param auth.useCredentialsFiles Mount credentials as a files instead of using an environment variable
|
||||
## @param auth.usePasswordFiles Mount credentials as a files instead of using an environment variable
|
||||
##
|
||||
useCredentialsFiles: false
|
||||
usePasswordFiles: true
|
||||
## @param auth.useSecret Uses a secret to mount the credential files.
|
||||
##
|
||||
useSecret: true
|
||||
|
||||
Reference in New Issue
Block a user