feat #296: Pass S3 access keys from existent secret#297

Open

gcrm3 wants to merge 38 commits into

zilliztech:masterfrom

Contributor

gcrm3 commented May 28, 2026 •

edited

Loading

What this PR does / why we need it:

To make optional the loading of the S3 keys from a secret instead of being passed with the config map from the values. Closes #296.

Additionally enables the possibility to have a custom path for the certificate for S3 connection using the option minio.ssl.tlsCACert .

Checklist

[Place an '[x]' (no spaces) in all applicable fields. Please remove unrelated fields.]

Chart Version bumped
Variables are documented in the README.md
Title of the PR starts with chart name (e.g. [mychartname])
PR only contains changes for one chart

sre-ci-robot requested review from LoveEachDay and haorenfsa

May 28, 2026 07:40

Collaborator

sre-ci-robot commented May 28, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: gcrm3
To complete the pull request process, please assign loveeachday after the PR has been reviewed.
You can assign the PR to them by writing /assign @loveeachday in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

sre-ci-robot added the size/M label

Goncalo Maia and others added 26 commits

May 28, 2026 09:42


          add container security contex to all containers and init containers

161ca37

Signed-off-by: gmaia <goncalo.maia@satcen.europa.eu>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          update tei readme (zilliztech#219)

88f7309

Signed-off-by: zhuwenxing <wenxing.zhu@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          use tei chart instead of built-in templates (zilliztech#200)

ff31f24

Signed-off-by: haorenfsa <haorenfsa@gmail.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.5.13 (zilliztech#224)

94eb7ff

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          [milvus] - Add OpenShift route support for Attu UI (zilliztech#226)

387067a

* 🐾 Add OpenShift route support for Attu UI

Signed-off-by: Cansu Kavili <cansukavili@gmail.com>

* 🌱Chart version bumped and README updated

Signed-off-by: Cansu Kavili <cansukavili@gmail.com>

---------

Signed-off-by: Cansu Kavili <cansukavili@gmail.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          update kafka-exporter image (zilliztech#228)

c429ef7

* update kafka-exporter image

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* update readme to remove legacy link

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          update minio version (zilliztech#230)

c318ce2

* update minio version

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* update milvus producer_request_hold

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.5.14 (zilliztech#231)

743ca16

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          update minio version (zilliztech#232)

d481176

* update minio version

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* enhance: update minio to RELEASE.2024-05-28T17-19-04Z

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          fixes zilliztech#220: Adds runtimeClassName option to query and index…

77fd055

… deployments (zilliztech#233)

Signed-off-by: peterh <peter.mejl+gitlab@gmail.com>
Co-authored-by: peterh <peter.mejl+gitlab@gmail.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.5.15 (zilliztech#237)

6b1457c

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.5.16 (zilliztech#239)

f7189d8

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.0 and update minio (zilliztech#242)

c086bc1

* release tag 2.6.0

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* release tag 2.6.0 with update minio

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* * For 2.6 test:
    1. remove indexnode
    2. remove coordinator mode, only mixcoord mode supported
    3. streaming mode by default
    4. use woodpecker as default for standalone

    * fix message queue for standalone mode

    * preserve rocksmq for upgrade standalone with default mq

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* update readme

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* update readme

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* update readme

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          update bitnami image to use legacy bitnami repo (zilliztech#244)

7bd630c

* update bitnami image to use legacy bitnami repo

Signed-off-by: AlintaLu <yiqing.lu@zilliz.com>

* release tag 5.0.1

Signed-off-by: AlintaLu <yiqing.lu@zilliz.com>

---------

Signed-off-by: AlintaLu <yiqing.lu@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.1 (zilliztech#246)

8d2159e

* release tag 2.6.1

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* release tag 2.6.1

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* release tag 2.6.1

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          Release tag 2.6.2 (zilliztech#249)

4f4f49f

* release tag 2.6.2

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* release tag 2.6.2

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.3 (zilliztech#255)

4606db0

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          Upgrade etcd chart to v8.12.0 and update config (zilliztech#258)

3de58b7

Replaces etcd chart version 6.3.3 with 8.12.0 in Milvus Helm dependencies and updates related configuration in values.yaml. Adds new etcd options such as preUpgradeJob, global security, networkPolicy, and additional environment variables. Updates requirements.lock and requirements.yaml to reflect the new etcd version.

Signed-off-by: Sheldon <chuanfeng.liu@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.4 (zilliztech#261)

715b935

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.5 (zilliztech#263)

45f03ee

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          feat: add woodpecker component (zilliztech#254)

ca6e714

* feat: add woodpecker component

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* fix: remove unused service

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update intro

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* delete cluster_name env

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update minio address

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update component name

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* allow to mount user.yaml to customconfigmap

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* move minio configure to the _helpers.tpl

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* remove unnecessary code

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update configmap

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* add config setup for woodpecker

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* update

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

* add volume and volumemounts

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>

---------

Signed-off-by: Sammy Huang <sammy.huang@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          feat(milvus): add cdc component (zilliztech#264)

5e0cc8e

Signed-off-by: AlintaLu <yiqing.lu@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.6 (zilliztech#266)

1912d70

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          upgrade etcd, bump version (zilliztech#267)

fc6a384

Signed-off-by: AlintaLu <yiqing.lu@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.7 (zilliztech#269)

31ff951

* release tag 2.6.7

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* update etcd to 3.5.25-r1

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* release 2.6.7

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.8 (zilliztech#272)

507009f

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>

zhikunyao and others added 11 commits

May 28, 2026 09:42


          release tag 2.6.9 (zilliztech#277)

355e78d

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.10 (zilliztech#279)

bf753af

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.11 (zilliztech#280)

2ec81d4

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.12 (zilliztech#281)

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.13 (zilliztech#282)

da3e0a9

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          enhance: support replica resource group isolation in cluster mode (zi…

8968b0a

…lliztech#283)

Add replicaResourceGroups parameter (comma-separated RG names) that creates
per-RG querynode and streamingnode deployments with proper labels and env vars,
and auto-configures cluster-level multi-replica settings in milvus config.

Signed-off-by: chyezh <chyezh@outlook.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.14 (zilliztech#284)

3f42c00

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.15 (zilliztech#288)

ba72485

* release tag 2.6.15

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

* release tag 2.6.15

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>

---------

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.16 (zilliztech#292)

ed8ac74

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          release tag 2.6.17 (zilliztech#293)

8617ffe

Signed-off-by: Zhikun Yao <zhikun.yao@zilliz.com>
Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>


          S3 keys from a secret and custom cert path

baf5122

Signed-off-by: Goncalo Maia <Goncalo.Maia@satcen.europa.eu>

gcrm3 force-pushed the master branch from c37d37f to baf5122 Compare

May 28, 2026 07:43

sre-ci-robot added size/XXL and removed size/M labels


          Merge branch 'master' into master

dfdafb1

sre-ci-robot added size/M and removed size/XXL labels

mergify Bot added the ci-passed label

Contributor Author

gcrm3 commented Jun 1, 2026

/assign @LoveEachDay

sre-ci-robot assigned LoveEachDay

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci-passed size/M