secureCodeBox
diff --git a/‎operator/README.md‎
Lines changed: 1 addition & 0 deletions b/‎operator/README.md‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎operator/templates/manager/manager.yaml‎
Lines changed: 1 addition & 1 deletion b/‎operator/templates/manager/manager.yaml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎operator/tests/operator_test.yaml‎
Lines changed: 14 additions & 0 deletions b/‎operator/tests/operator_test.yaml‎
Lines changed: 14 additions & 0 deletions
diff --git a/‎operator/values.yaml‎
Lines changed: 3 additions & 0 deletions b/‎operator/values.yaml‎
Lines changed: 3 additions & 0 deletions
@@ -70,6 +70,7 @@ helm install securecodebox-operator oci://ghcr.io/securecodebox/helm/operator
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
 | allowIstioSidecarInjectionInJobs | bool | `false` | Sets the value of the istio sidecar annotation ("sidecar.istio.io/inject") for jobs started by the operator (scans, parser and hooks). defaults to false to prevent jobs hanging indefinitely due to the sidecar never terminating. If you aren't using istio this setting/annotation has no effect. |
+| clusterDomain | string | `"cluster.local"` | The cluster domain to use when building the in-cluster Minio endpoint (`<release>-minio.<namespace>.svc.<clusterDomain>`). Override this if your cluster uses a custom domain instead of the Kubernetes default `cluster.local`. |
 | customCACertificate | object | `{"certificate":"public.crt","existingCertificate":null}` | Setup for Custom CA certificates. These are automatically mounted into every secureCodeBox component (lurker, parser & hooks). Requires that every namespace has a configmap with the CA certificate(s) |
 | customCACertificate.certificate | string | `"public.crt"` | key in the configmap holding the certificate(s) |
 | customCACertificate.existingCertificate | string | `nil` | name of the configMap holding the ca certificate(s), needs to be the same across all namespaces |
 
@@ -75,7 +75,7 @@ spec:
             - name: S3_USE_SSL
               value: "{{ .Values.minio.tls.enabled }}"
             - name: S3_ENDPOINT
-              value: "{{ .Release.Name }}-minio.{{ .Release.Namespace }}.svc.cluster.local"
+              value: "{{ .Release.Name }}-minio.{{ .Release.Namespace }}.svc.{{ .Values.clusterDomain }}"
             - name: S3_PORT
               value: '9000'
             - name:  MINIO_ACCESS_KEY
 
@@ -91,6 +91,20 @@ tests:
       - equal:
           path: spec.template.spec.containers[0].env[?(@.name=="S3_ENDPOINT")].value
           value: "RELEASE-NAME-minio.NAMESPACE.svc.cluster.local"
+  - it: allows overriding the cluster domain used for the minio endpoint
+    templates:
+      - manager/manager.yaml
+    chart:
+      version: 0.0.0
+      appVersion: 0.0.0
+    set:
+      minio:
+        enabled: true
+      clusterDomain: custom.local
+    asserts:
+      - equal:
+          path: spec.template.spec.containers[0].env[?(@.name=="S3_ENDPOINT")].value
+          value: "RELEASE-NAME-minio.NAMESPACE.svc.custom.local"
   - it: configures manager deployment for external s3
     templates:
       - manager/manager.yaml
 
@@ -9,6 +9,9 @@
 # telemetryEnabled -- The Operator sends anonymous telemetry data, to give the team an overview how much the secureCodeBox is used. Find out more at https://www.securecodebox.io/telemetry
 telemetryEnabled: true
 
+# -- The cluster domain to use when building the in-cluster Minio endpoint (`<release>-minio.<namespace>.svc.<clusterDomain>`). Override this if your cluster uses a custom domain instead of the Kubernetes default `cluster.local`.
+clusterDomain: cluster.local
+
 # -- Define imagePullSecrets when a private registry is used (see: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/)
 imagePullSecrets: []