Skip to content

fix(e2e): run MinIO from the Chainguard images - #155

Open
ermakov-oleg wants to merge 1 commit into
operasoftware:mainfrom
ermakov-oleg:fix-e2e-minio-image
Open

ermakov-oleg wants to merge 1 commit into
operasoftware:mainfrom
ermakov-oleg:fix-e2e-minio-image

Conversation

@ermakov-oleg

@ermakov-oleg ermakov-oleg commented Sep 25, 2026 •

Copy link
Copy Markdown
Contributor

Run the e2e MinIO from the Chainguard images

Every e2e run currently fails before a single spec can pass: the MinIO pods stay in ImagePullBackOff and every backup ends up failed.

  • minio/minio is gone from Docker Hub (404).
  • quay.io/minio/minio, the obvious replacement, now requires authentication. The registry answers 401 even with an anonymous pull token. It still worked on 2026-09-23, so this is a recent change.

The object store now uses cgr.dev/chainguard/minio:latest for the server and cgr.dev/chainguard/minio-client:latest-dev for bucket provisioning. Both are public multi-arch builds (amd64 and arm64). Because they run as the non-root user 65532, the manifests change as follows:

  • The MinIO pod runs as 65532 with fsGroup 65532, so the certificates written by the alpine/openssl init container can be read by the server.
  • The certificates live in /certs and are passed explicitly with --certs-dir; ${HOME}/.minio/certs no longer applies.
  • The provisioning job uses /bin/sh, because the Chainguard client image has no bash.

This unblocks #152 and #154, which are stacked on this branch.

CI on this PR alone is still red, and that is expected. With MinIO fixed, the four non-recovery specs pass. The three recovery specs (backup and restore, PITR, replica cluster) fail because e2e installs CloudNativePG main, which bootstraps instances through an init container (cloudnative-pg/cloudnative-pg#11319) that this plugin cannot serve yet. #154 fixes that, and its CI, which includes this commit, is green (8/8). Merging #154 lands both changes; alternatively merge this first and then #154.

https://claude.ai/code/session_01MK4vZ6U6TZvXVLPViN1crd

Claude-Session: https://claude.ai/code/session_01MK4vZ6U6TZvXVLPViN1crd
Signed-off-by: ermakov-oleg <ermakovolegs@gmail.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 28, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 28, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 28, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 28, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 28, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 28, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 29, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
melancholictheory added a commit to melancholictheory/cnpg-plugin-pgbackrest that referenced this pull request Sep 29, 2026
…fork CI

Fork-only commit for running CI on melancholictheory branches, never part of a PR. It takes
the MinIO change from operasoftware#155, installs CloudNativePG 1.30.0 instead of main, whose bootstrap
changes need operasoftware#154, and skips publishing images, which needs registry secrets.

Signed-off-by: Vasiliy Fakunin <61789920+melancholictheory@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant