diff --git a/docs/operator/CHANGELOG.md b/docs/operator/CHANGELOG.md index 35d12a5b5..d333d3eac 100644 --- a/docs/operator/CHANGELOG.md +++ b/docs/operator/CHANGELOG.md @@ -12,6 +12,11 @@ aliases: --- - [operator](https://docs.victoriametrics.com/operator/): updates default vm apps version to v1.103.0 +- [vmsingle/vlogs](https://docs.victoriametrics.com/operator/resources): makes better compatible with argo-cd by adding ownerReference to PersistentVolumeClaim. See this [issue](https://github.com/VictoriaMetrics/operator/issues/1091) for details. +- [operator](https://docs.victoriametrics.com/operator/): reduces reconcile latency. See this [commit](2a9d09d0131cc10a0f9e32f0e2e054687ada78f7) for details. +- [operator](https://docs.victoriametrics.com/operator/): reduces load on kubernetes api-server. See this commits: [commit-0](a0145b8a89dd5bb9051f8d4359b6a70c1d1a95ce), [commit-1](e2fbbd3e37146670f656d700ad0f64b2c299b0a0), [commit-2](184ba19a5f1d10dc2ac1bf018b2729f64e2a8c25). +- [operator](https://docs.victoriametrics.com/operator/): enables client cache back for `secrets` and `configmaps`. Adds new flag `-controller.disableCacheFor=seccret,configmap` to disable it if needed. +- [operator](https://docs.victoriametrics.com/operator/): made webhook port configurable. See [this issue](https://github.com/VictoriaMetrics/operator/issues/1106) for details. ## [v0.47.3](https://github.com/VictoriaMetrics/operator/releases/tag/v0.47.3) - 28 Aug 2024 diff --git a/docs/operator/_index.md b/docs/operator/_index.md index a7b1bdcb4..b43dd6b03 100644 --- a/docs/operator/_index.md +++ b/docs/operator/_index.md @@ -4,7 +4,6 @@ title: Operator menu: docs: weight: 0 - identifier: operator aliases: - /operator/ - /operator/index.html diff --git a/docs/operator/api.md b/docs/operator/api.md index d2178a87f..f96c5404f 100644 --- a/docs/operator/api.md +++ b/docs/operator/api.md @@ -2813,7 +2813,7 @@ _Appears in:_ -VMAuth is the Schema for the vmauth API +VMAuth is the Schema for the vmauths API diff --git a/docs/operator/logo.webp b/docs/operator/logo.webp index 3dc695ab9..bb4cf373b 100644 Binary files a/docs/operator/logo.webp and b/docs/operator/logo.webp differ diff --git a/docs/operator/logo_white.webp b/docs/operator/logo_white.webp new file mode 100644 index 000000000..6b271c13e Binary files /dev/null and b/docs/operator/logo_white.webp differ diff --git a/docs/operator/resources/README.md b/docs/operator/resources/README.md index 88629693e..bc7da39d6 100644 --- a/docs/operator/resources/README.md +++ b/docs/operator/resources/README.md @@ -55,7 +55,7 @@ Usage example: apiVersion: operator.victoriametrics.com/v1beta1 kind: VMSingle metadata: - name: vmsingle-example-exrtaargs + name: vmsingle-example-extraargs spec: retentionPeriod: "1" extraArgs: @@ -73,7 +73,7 @@ Usage example: ```yaml kind: VMSingle metadata: - name: vmsingle-example--extraenvs + name: vmsingle-example-extraenvs spec: retentionPeriod: "1" extraEnvs: @@ -107,7 +107,7 @@ Page for every custom resource contains examples section: - [VMUser examples](https://docs.victoriametrics.com/operator/resources/vmuser#examples) - [VMScrapeConfig examples](https://docs.victoriametrics.com/operator/resources/vmscrapeconfig#examples) -In addition, you can find examples of the custom resources for VictoriaMetrics operator in +In addition, you can find examples of the custom resources for VictoriaMetrics operator in the **[examples directory](https://github.com/VictoriaMetrics/operator/tree/master/config/examples) of operator repository**. ## Managing versions of VM diff --git a/docs/operator/vars.md b/docs/operator/vars.md index e26096567..7496ee155 100644 --- a/docs/operator/vars.md +++ b/docs/operator/vars.md @@ -10,12 +10,12 @@ aliases: - /operator/vars/index.html --- - updated at Mon Sep 2 21:11:44 UTC 2024 + updated at Mon Sep 16 09:04:10 UTC 2024 | variable name | variable default value | variable required | variable description | | --- | --- | --- | --- | -| VM_USECUSTOMCONFIGRELOADER | false | false | enables custom config reloader for vmauth and vmagent,it should speed-up config reloading process. | +| VM_USECUSTOMCONFIGRELOADER | false | false | enables custom config reloader for vmauth and vmagent, it should speed-up config reloading process. | | VM_CONTAINERREGISTRY | - | false | container registry name prefix, e.g. docker.io | | VM_CUSTOMCONFIGRELOADERIMAGE | victoriametrics/operator:config-reloader-v0.47.2 | false | - | | VM_PSPAUTOCREATEENABLED | false | false | - | @@ -136,5 +136,5 @@ aliases: | VM_PODWAITREADYINTERVALCHECK | 5s | false | - | | VM_PODWAITREADYINITDELAY | 10s | false | - | | VM_FORCERESYNCINTERVAL | 60s | false | configures force resync interval for VMAgent, VMAlert, VMAlertmanager and VMAuth. | -| VM_ENABLESTRICTSECURITY | false | false | EnableStrictSecurity will add default `securityContext` to pods and containers created by operatorDefault PodSecurityContext include:1. RunAsNonRoot: true2. RunAsUser/RunAsGroup/FSGroup: 65534'65534' refers to 'nobody' in all the used default images like alpine, busybox.If you're using customize image, please make sure '65534' is a valid uid in there or specify SecurityContext.3. FSGroupChangePolicy: &onRootMismatchIf KubeVersion>=1.20, use `FSGroupChangePolicy="onRootMismatch"` to skip the recursive permission changewhen the root of the volume already has the correct permissions4. SeccompProfile:type: RuntimeDefaultUse `RuntimeDefault` seccomp profile by default, which is defined by the container runtime,instead of using the Unconfined (seccomp disabled) mode.Default container SecurityContext include:1. AllowPrivilegeEscalation: false2. ReadOnlyRootFilesystem: true3. Capabilities:drop:- allturn off `EnableStrictSecurity` by default, see https://github.com/VictoriaMetrics/operator/issues/749 for details | -[envconfig-sum]: 4560053e758cdaf3d11170e5bf296de4 \ No newline at end of file +| VM_ENABLESTRICTSECURITY | false | false | EnableStrictSecurity will add default `securityContext` to pods and containers created by operator Default PodSecurityContext include: 1. RunAsNonRoot: true 2. RunAsUser/RunAsGroup/FSGroup: 65534 '65534' refers to 'nobody' in all the used default images like alpine, busybox. If you're using customize image, please make sure '65534' is a valid uid in there or specify SecurityContext. 3. FSGroupChangePolicy: &onRootMismatch If KubeVersion>=1.20, use `FSGroupChangePolicy="onRootMismatch"` to skip the recursive permission change when the root of the volume already has the correct permissions 4. SeccompProfile: type: RuntimeDefault Use `RuntimeDefault` seccomp profile by default, which is defined by the container runtime, instead of using the Unconfined (seccomp disabled) mode. Default container SecurityContext include: 1. AllowPrivilegeEscalation: false 2. ReadOnlyRootFilesystem: true 3. Capabilities: drop: - all turn off `EnableStrictSecurity` by default, see https://github.com/VictoriaMetrics/operator/issues/749 for details | +[envconfig-sum]: b82e81d45e7a9fe6a06ef0a77736d4c3 \ No newline at end of file