iac/clusters/yc-k8s-test/infrastructure/patches/minio.yaml

60 lines
1.4 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: minio
namespace: minio
spec:
interval: 5m
timeout: 10m
values:
mode: standalone
imagePullSecrets:
- name: regcred
drivesPerNode: 1
replicas: 1
nodeSelector:
dedicated: s3
tolerations:
- key: dedicated
operator: Equal
value: s3
effect: NoSchedule
persistence:
storageClass: local-path
size: 100Gi
resources:
requests:
memory: 1Gi
buckets:
- name: dumps
policy: none
purge: false
versioning: false
objectlocking: false
policies:
- name: dumps-owner
statements:
- resources:
- 'arn:aws:s3:::dumps'
actions:
- "s3:GetBucketLocation"
- "s3:ListBucket"
- "s3:ListBucketMultipartUploads"
- "s3:PutBucketPolicy"
- "s3:GetBucketPolicy"
- resources:
- 'arn:aws:s3:::dumps/*'
actions:
- "s3:AbortMultipartUpload"
- "s3:GetObject"
- "s3:DeleteObject"
- "s3:PutObject"
- "s3:ListMultipartUploadParts"
users:
- accessKey: console
secretKey: console123
policy: consoleAdmin
- accessKey: s3-proxy
secretKey: s3-proxy-change-me-password
policy: dumps-owner