Allow tenants to resolve ip from hostnames

[sironrod]

Is your feature request related to a problem? Please describe.
I can not resolve hosts from tenant when try to setup openId

Describe the solution you'd like
We can add on tenant.yaml hostAliases to applied them to the StatefulSet in order for the tenant pod resolved the hosts.

Describe alternatives you've considered
Another way is to support l dnsPolicy and dnsConfig on the tenant.yaml. All this can also be configure from the operator console

[cniackz]

First of all, thank you for opening this issue.

That said, if this issue is truly a problem for you, I have a few questions to better understand it. What do you mean by “I cannot resolve hosts from the tenant when trying to set up OpenID”? Could you elaborate on the problem you’re facing?

OpenID should work as expected. What steps did you follow to enable it? Please provide more details to help us identify the issue and determine the best solution.

Thank you!

[ramondeklein]

Do I understand correctly that you can't resolve your OpenID server from the MinIO pods and that you request that we support HostAliases to inject additional records into the /etc/hosts file to resolve them? OpenID servers should be publically available, because user that try to log on should also be able to be redirected to them.

You should ensure that MinIO should be able to resolve the OpenID hostnames. What's the use-case why can't do that? We won't be adding HostAliases to the tenant specification, if it's an edge-case that won't be widely used.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 21 days if no further activity occurs. Thank you for your contributions.

[eXist-FraGGer]

Basically it is needed for cases when for example it is running on minikube and on local machine created pdnsutil zone.
Istio + Keycloak + Minio is in kubernetes, to be able to setup oauth2 - need to add hostAliases to the deployment.
Istio is routing all to e.g. ${service}.dev.local and minio will not understand that because of keycloak.dev.local will be routing to 127.0.0.1, so need to add hostAliases with Istio ingress gateway ip and keycloak.dev.local.
It is really strange that it was not added yet.