122 lines
2.5 KiB
YAML
122 lines
2.5 KiB
YAML
|
---
|
||
|
|
# ------------------------------------------
|
||
|
|
# -- Istio extenstion. Just because I'm
|
||
|
|
# -- not using ingress nginx
|
||
|
|
# ------------------------------------------
|
||
|
|
istio:
|
||
|
|
enabled: true
|
||
|
|
istio:
|
||
|
|
- name: minio-http
|
||
|
|
gateway: badhouseplants-net
|
||
|
|
kind: http
|
||
|
|
hostname: minio.badhouseplants.net
|
||
|
|
service: minio-console
|
||
|
|
port: 9001
|
||
|
|
- name: s3-http
|
||
|
|
gateway: badhouseplants-net
|
||
|
|
kind: http
|
||
|
|
hostname: s3.badhouseplants.net
|
||
|
|
service: minio
|
||
|
|
port: 9000
|
||
|
|
|
||
|
|
rootUser: 'overlord'
|
||
|
|
replicas: 1
|
||
|
|
mode: standalone
|
||
|
|
environment:
|
||
|
|
MINIO_SERVER_URL: "https://s3.badhouseplants.net:443"
|
||
|
|
tls:
|
||
|
|
enabled: false
|
||
|
|
certSecret: ''
|
||
|
|
publicCrt: public.crt
|
||
|
|
privateKey: private.key
|
||
|
|
persistence:
|
||
|
|
enabled: true
|
||
|
|
accessMode: ReadWriteOnce
|
||
|
|
size: 10Gi
|
||
|
|
service:
|
||
|
|
type: ClusterIP
|
||
|
|
clusterIP: ~
|
||
|
|
port: '9000'
|
||
|
|
consoleService:
|
||
|
|
type: ClusterIP
|
||
|
|
clusterIP: ~
|
||
|
|
port: '9001'
|
||
|
|
resources:
|
||
|
|
requests:
|
||
|
|
memory: 2Gi
|
||
|
|
buckets:
|
||
|
|
- name: badhouseplants-net
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: badhouseplants-js
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: badhouseplants-net-main
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: sharing
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: allanger-music
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: badhouseplants-brew
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
metrics:
|
||
|
|
serviceMonitor:
|
||
|
|
enabled: false
|
||
|
|
public: true
|
||
|
|
additionalLabels: {}
|
||
|
|
policies:
|
||
|
|
- name: allanger
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "admin:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "kms:*"
|
||
|
|
- name: badhouseplants:owners
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "admin:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "kms:*"
|
||
|
|
- name: badhouseplants
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::badhouseplants-net'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::badhouseplants-net/*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- name: sharing
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::sharing'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::sharing/*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|