From 8bb8851a1ff9c9c9d96ef75851aa0025577c3844 Mon Sep 17 00:00:00 2001 From: rock Date: Tue, 6 Oct 2026 09:45:45 +0800 Subject: [PATCH] fix(storage): pin minio tenant to a published image release --- k8s/infra/minio/minio-tenant.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/k8s/infra/minio/minio-tenant.yaml b/k8s/infra/minio/minio-tenant.yaml index e756d30..810821e 100644 --- a/k8s/infra/minio/minio-tenant.yaml +++ b/k8s/infra/minio/minio-tenant.yaml @@ -11,7 +11,12 @@ metadata: prometheus.io/port: "9000" prometheus.io/scrape: "true" spec: - image: minio/minio:RELEASE.2025-07-23T15-54-02Z + # Was minio/minio:RELEASE.2025-07-23T15-54-02Z — that Docker Hub repository no longer + # exists (404 for every tag), so the tenant sat in ImagePullBackOff and Vault's S3 + # backend could not resolve minio-cluster-hl. Official images now need registry auth + # (quay.io/minio/minio returns 401), so this pins a public mirror of the same upstream + # release; swap it for the official image once MinIO registry credentials exist. + image: coollabsio/minio:RELEASE.2025-10-15T17-29-55Z # Disable operator auto-TLS: MinIO serves plain HTTP internally on 9000. # External TLS is terminated at nginx ingress (wildcard riotpiao-com-tls cert). -- 2.54.0