fix(security): bind custom MinIO credentials to namespace #38

Merged
sean merged 1 commit from fix/secure-minio-connection into trunk 2026-08-06 10:03:46 +00:00
Owner

Close two confused-deputy paths in direct MinioRef connections: require explicit credentials instead of inheriting the operator default root identity for a user-selected endpoint, and reject root Secret references outside a namespaced CR owner namespace. Regenerate CRDs so rootSecretRef is required for direct connections. No live CR currently uses a custom MinioRef connection.

Close two confused-deputy paths in direct MinioRef connections: require explicit credentials instead of inheriting the operator default root identity for a user-selected endpoint, and reject root Secret references outside a namespaced CR owner namespace. Regenerate CRDs so rootSecretRef is required for direct connections. No live CR currently uses a custom MinioRef connection.
fix(security): bind custom MinIO credentials to namespace
All checks were successful
pipeline/ci CI green @ 5e2cc40484ea
5e2cc40484
sean merged commit 5e2cc40484 into trunk 2026-08-06 10:03:46 +00:00
sean deleted branch fix/secure-minio-connection 2026-08-06 10:03:47 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/minio-resource-operator!38
No description provided.