fix(minio): freeze the community image by digest and alert on pull failure (#57)

Co-authored-by: rock <[email protected]>
This commit was merged in pull request #57.
This commit is contained in:
2026-10-06 03:43:12 +00:00
committed by rock
parent b6e317b34c
commit 64cd1f2c4e
4 changed files with 25 additions and 4 deletions
+4 -1
View File
@@ -16,7 +16,10 @@ spec:
# backend could not resolve minio-cluster-hl. Official images now need registry auth
# (quay.io/minio/minio returns 401), so this pins a public mirror of the same upstream
# release; swap it for the official image once MinIO registry credentials exist.
image: coollabsio/minio:RELEASE.2025-10-15T17-29-55Z
# The digest freezes those bytes, so a retag or a deletion on the mirror cannot break
# the pull again. The same digest already sits in the containerd cache on talos-cp-1,
# so the first start needs no registry access.
image: docker.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z@sha256:69b55a1c1c5dc285ce04db96689f5b2102317fc77a50680a1874ca6efd1c87f9
# Disable operator auto-TLS: MinIO serves plain HTTP internally on 9000.
# External TLS is terminated at nginx ingress (wildcard riotpiao-com-tls cert).