Skip to content

Bump infrastructure images: Contour v1.33.3, Envoy v1.35.9, MinIO Oct 2022 #61

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
m-chau wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Bump infrastructure images: Contour v1.33.3, Envoy v1.35.9, MinIO Oct 2022 #61

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
df29672
Bump infrastructure images: Contour v1.33.3, Envoy v1.35.9, MinIO Oct…
Mar 31, 2026
67c42e6
Fix S3 endpoint URI: add http:// scheme for minio
Mar 31, 2026
b91de40
Fix S3 endpoint in test-pods namespace secret too
Mar 31, 2026
df9ee3c
Enable TLS for MinIO with self-signed cert
Mar 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
32 changes: 27 additions & 5 deletions config/prow/k8s/app/minio.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,3 @@

apiVersion: v1
kind: Secret
metadata:
Expand All @@ -9,7 +8,7 @@ stringData:
{
"region": "minio",
"access_key": "$AZURE_STORAGE_ACCOUNT_USER",
"endpoint": "minio.prow.svc.cluster.local",
"endpoint": "https://minio.prow.svc.cluster.local",
"insecure": true,
"s3_force_path_style": true,
"secret_key": "$AZURE_STORAGE_ACCOUNT_PASSWORD"
Expand All @@ -33,9 +32,24 @@ spec:
spec:
nodeSelector:
agentpool: prow
initContainers:
- name: generate-tls
image: alpine/openssl:latest
command: ["/bin/sh", "-c"]
args:
- |
openssl req -x509 -nodes -days 3650 \
-newkey rsa:2048 \
-keyout /certs/private.key \
-out /certs/public.crt \
-subj "/CN=minio.prow.svc.cluster.local" \
-addext "subjectAltName=DNS:minio,DNS:minio.prow,DNS:minio.prow.svc,DNS:minio.prow.svc.cluster.local"
volumeMounts:
- name: tls-certs
mountPath: /certs
containers:
- name: minio
image: minio/minio:RELEASE.2022-02-24T22-12-01Z # https://github.com/minio/minio/pull/14418
image: minio/minio:RELEASE.2022-10-24T18-35-07Z
args:
- gateway
- azure
Expand All @@ -53,11 +67,19 @@ spec:
httpGet:
path: /minio/health/ready
port: 9000
scheme: HTTPS
periodSeconds: 20
livenessProbe:
httpGet:
path: /minio/health/live
port: 9000
scheme: HTTPS
volumeMounts:
- name: tls-certs
mountPath: /root/.minio/certs
volumes:
- name: tls-certs
emptyDir: {}
---
apiVersion: v1
kind: Service
Expand All @@ -67,7 +89,7 @@ metadata:
spec:
type: ClusterIP
ports:
- port: 80
- port: 443
targetPort: 9000
protocol: TCP
selector:
Expand All @@ -85,4 +107,4 @@ spec:
targetPort: $MINIO_CONSOLE_PORT
protocol: TCP
selector:
app: minio
app: minio
Loading