diff --git a/scc-updates.sh b/scc-updates.sh index 5a408b0..369b3f2 100755 --- a/scc-updates.sh +++ b/scc-updates.sh @@ -1,2 +1,4 @@ oc adm policy add-scc-to-user privileged -z minio-sa -n minio oc adm policy add-scc-to-user anyuid -z minio-sa -n minio +oc adm policy add-scc-to-user privileged -z default -n minio +oc adm policy add-scc-to-user anyuid -z default -n minio diff --git a/values.yaml b/values.yaml index 45cea89..4037a78 100644 --- a/values.yaml +++ b/values.yaml @@ -90,8 +90,8 @@ runtimeClassName: "" ## rootUser and rootPassword is generated when not set ## Distributed MinIO ref: https://min.io/docs/minio/linux/operations/install-deploy-manage/deploy-minio-multi-node-multi-drive.html ## -rootUser: "" -rootPassword: "" +rootUser: "minio" +rootPassword: "th1rt33nletterS." ## Use existing Secret that store following variables: ## @@ -162,7 +162,7 @@ persistence: storageClass: "nfs" #volumeName: "minio" accessMode: ReadWriteMany - size: 300Gi + size: 500Gi ## If subPath is set mount a sub folder of a volume instead of the root of the volume. ## This is especially handy for volume plugins that don't natively support sub mounting (like glusterfs). @@ -280,7 +280,7 @@ securityContext: #runAsUser: 1000 #runAsGroup: 1000 #fsGroup: 1000 - fsGroupChangePolicy: "OnRootMismatch" + #fsGroupChangePolicy: "OnRootMismatch" containerSecurityContext: readOnlyRootFilesystem: false @@ -503,19 +503,21 @@ postJob: annotations: {} securityContext: enabled: false - runAsUser: 1000 - runAsGroup: 1000 - fsGroup: 1000 + # runAsUser: 1000 + # runAsGroup: 1000 + # fsGroup: 1000 nodeSelector: {} tolerations: [] affinity: {} ## Use this field to add environment variables relevant to MinIO server. These fields will be passed on to MinIO container(s) ## when Chart is deployed +## Please refer for comprehensive list https://min.io/docs/minio/linux/reference/minio-server/minio-server.html +## MINIO_SUBNET_LICENSE: "License key obtained from https://subnet.min.io" +## MINIO_BROWSER: "off" environment: - ## Please refer for comprehensive list https://min.io/docs/minio/linux/reference/minio-server/minio-server.html - ## MINIO_SUBNET_LICENSE: "License key obtained from https://subnet.min.io" - ## MINIO_BROWSER: "off" + #MINIO_SERVER_URL: "https://minio.apilab.us" + #MINIO_BROWSER_REDIRECT_URL: "https://minio-console.apilab.us" ## The name of a secret in the same kubernetes namespace which contain secret values ## This can be useful for LDAP password, etc