---
# ------------------------------------------
# -- Istio extenstion. Just because I'm
# --  not using ingress nginx
# ------------------------------------------
istio:
  enabled: true
  istio:
    - name: minio-http
      gateway: badhouseplants-net
      kind: http
      hostname: minio.badhouseplants.net
      service: minio-console
      port: 9001
    - name: s3-http
      gateway: badhouseplants-net
      kind: http
      hostname: s3.badhouseplants.net
      service: minio
      port: 9000

rootUser: 'overlord'
replicas: 1
mode: standalone
environment:
  MINIO_SERVER_URL: "https://s3.badhouseplants.net:443"
tls:
  enabled: false
  certSecret: ''
  publicCrt: public.crt
  privateKey: private.key
persistence:
  enabled: true
  accessMode: ReadWriteOnce
  size: 10Gi
service:
  type: ClusterIP
  clusterIP: ~
  port: '9000'
consoleService:
  type: ClusterIP
  clusterIP: ~
  port: '9001'
resources:
  requests:
    memory: 2Gi
buckets:
  - name: badhouseplants-net
    policy: download
    purge: false
    versioning: false
  - name: badhouseplants-js
    policy: download
    purge: false
    versioning: false
  - name: badhouseplants-net-main
    policy: download
    purge: false
    versioning: false
  - name: sharing
    policy: download
    purge: false
    versioning: false
  - name: allanger-music
    policy: download
    purge: false
    versioning: false
  - name: badhouseplants-brew
    policy: download
    purge: false
    versioning: false
metrics:
  serviceMonitor:
    enabled: false
    public: true
    additionalLabels: {}
policies:
  - name: allanger
    statements:
      - resources:
          - 'arn:aws:s3:::*'
        actions:
          - "s3:*"
      - resources: []
        actions:
          - "admin:*"
      - resources: []
        actions:
          - "kms:*"
  - name: badhouseplants:owners
    statements:
      - resources:
          - 'arn:aws:s3:::*'
        actions:
          - "s3:*"
      - resources: []
        actions:
          - "admin:*"
      - resources: []
        actions:
          - "kms:*"
  - name: badhouseplants
    statements:
      - resources:
          - 'arn:aws:s3:::badhouseplants-net'
        actions:
          - "s3:*"
      - resources:
          - 'arn:aws:s3:::badhouseplants-net/*'
        actions:
          - "s3:*"
  - name: sharing
    statements:
      - resources:
          - 'arn:aws:s3:::sharing'
        actions:
          - "s3:*"
      - resources:
          - 'arn:aws:s3:::sharing/*'
        actions:
          - "s3:*"