[Feature] add init container (include volume mount)

[vipcxj]

Search before asking

• I had searched in the issues and found no similar issues.

Description

I am trying to deploy a compute-storage separated cluster where the storage layer is MinIO, and MinIO is deployed using the MinIO Operator. It enforces HTTPS for communication; for internal communication it defaults to using the Kubernetes CA, which Kubernetes mounts into all pods. The problem is Java does not trust that CA in the pod, so I need Doris to provide support for a custom init container so I can import that certificate into $JAVA_HOME/lib/security/cacerts.

Use case

With minio

Related issues

No response

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[vipcxj]

I manually went into all the FEs, imported the certificate into the JVM keystore, and then the create s3 vault succeeded. This is obviously only a temporary workaround. Besides, I'm not sure whether the BEs also need the certificate handled. There are three layers—MS, FE, BE—so which of those layers actually communicate with MinIO?