iac/clusters/yc-k8s-test/infrastructure/patches/minio.yaml

64 lines
1.6 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: minio
namespace: minio
spec:
interval: 5m
timeout: 10m
values:
mode: standalone
imagePullSecrets:
- name: regcred
drivesPerNode: 1
replicas: 1
nodeSelector:
dedicated: s3
tolerations:
- key: dedicated
operator: Equal
value: s3
effect: NoSchedule
persistence:
storageClass: local-path
size: 100Gi
resources:
requests:
memory: 1Gi
buckets:
- name: dumps
policy: none
purge: false
versioning: false
objectlocking: false
policies:
- name: dumps-owner
statements:
- resources:
- 'arn:aws:s3:::dumps'
actions:
- "s3:GetBucketLocation"
- "s3:ListBucket"
- "s3:ListBucketMultipartUploads"
- "s3:PutBucketPolicy"
- "s3:GetBucketPolicy"
- resources:
- 'arn:aws:s3:::dumps/*'
actions:
- "s3:AbortMultipartUpload"
- "s3:GetObject"
- "s3:DeleteObject"
- "s3:PutObject"
- "s3:ListMultipartUploadParts"
users:
- existingSecret: minio-user-console
existingSecretAccessKeyKey: accessKey
existingSecretKey: secretKey
bucket: console
policy: consoleAdmin
- existingSecret: minio-user-s3-proxy
existingSecretAccessKeyKey: accessKey
existingSecretKey: secretKey
bucket: dumps
policy: dumps-owner