MinIO Operator Environment Variables

The MinIO Operator uses the following environment variables during startup to set configuration settings. Configure these variables in the minio-operator container.

Setting Environment Variables in Kubernetes

To set these environment variables, modify the operator container’s yaml at .spec.env or use the following kubectl command syntax:

kubectl set env -n minio-operator deployment/minio-operator <ENV_VARIABLE>=<value> ... <ENV_VARIABLE2>=<value2>

Replace:

  • minio-operator with the namespace for your Operator, if not using the default value.
  • deployment/minio-operator with the deployment for your Operator, if not the default value. (Most deployments use the default value.)
  • <ENV_VARIABLE> with the environment variable to set or modify.
  • <value> with the value to use for the environment variable.

You can set or modify multiple environment variables by separating each VARIABLE=value pair with a space.

Available MinIO Operator Environment Variables

MINIO_OPERATOR_CERTIFICATES_VERSION

envvar

Specifies the certificate API version to use.

Valid values are v1 or v1beta1.

When not specified, the default is the API Kubernetes provides.

MINIO_OPERATOR_RUNTIME

envvar

Specify the type of runtime to use.

Valid values are EKS, Rancher, or OpenShift. Leave blank if none of the options apply.

When set as EKS, the MINIO_OPERATOR_CSR_SIGNER_NAME must be beta.eks.amazonaws.com/app-serving.

MINIO_OPERATOR_CSR_SIGNER_NAME

envvar

Override the default signer for certificate signing requests (CSRs).

When not specified, the default value is kubernetes.io/kubelet-serving.

OPERATOR_CERT_PASSWD

envvar

Optional

The password Operator should use to decrypt the private key in the TLS certificate for Operator.

OPERATOR_STS_ENABLED

envvar

Toggle STS Service on or off.

For versions prior to Operator 5.0.11, the default value was off.

MINIO_CONSOLE_DEPLOYMENT_NAME

envvar

The name to use for the Operator Console.

When not specified, the default value is operator.

MINIO_CONSOLE_TLS_ENABLE

envvar

Toggle Console TLS service on or off.

When not specified, the default value is off.

MINIO_OPERATOR_IMAGE

envvar

Specify the image of the MinIO instance sidecar container loaded by the Operator.

Omit to use the Operator image.

WATCHED_NAMESPACE

envvar

A comma-separated list of the namespace(s) Operator should watch for tenants.

When not specified, the default value is "" to watch all namespaces.

Last modified August 2, 2026: init commit (8338d5b)

Portions of this page are adapted from the MinIO Object Storage Documentation, © 2020–Present MinIO, Inc., licensed under CC BY 4.0, converted and maintained by the Silo project. Attribution