apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: minio
  namespace: minio
spec:
  interval: 5m
  timeout: 10m
  values:
    mode: standalone
    imagePullSecrets:
      - name: regcred
    drivesPerNode: 1
    replicas: 1
    nodeSelector:
      dedicated: s3
    tolerations:
      - key: dedicated
        operator: Equal
        value: s3
        effect: NoSchedule
    persistence:
      storageClass: local-path
      size: 100Gi
    resources:
      requests:
        memory: 1Gi
    buckets:
      - name: dumps
        policy: none
        purge: false
        versioning: false
        objectlocking: false
    policies:
      - name: dumps-owner
        statements:
          - resources:
              - 'arn:aws:s3:::dumps'
            actions:
              - "s3:GetBucketLocation"
              - "s3:ListBucket"
              - "s3:ListBucketMultipartUploads"
              - "s3:PutBucketPolicy"
              - "s3:GetBucketPolicy"
          - resources:
              - 'arn:aws:s3:::dumps/*'
            actions:
              - "s3:AbortMultipartUpload"
              - "s3:GetObject"
              - "s3:DeleteObject"
              - "s3:PutObject"
              - "s3:ListMultipartUploadParts"
    users:
      - accessKey: console
        secretKey: console123
        policy: consoleAdmin
      - accessKey: s3-proxy
        secretKey: s3-proxy-change-me-password
        policy: dumps-owner