132 lines
2.9 KiB
YAML
132 lines
2.9 KiB
YAML
|
---
|
||
|
|
ingress:
|
||
|
|
enabled: true
|
||
|
|
ingressClassName: ~
|
||
|
|
annotations:
|
||
|
|
kubernetes.io/ingress.class: traefik
|
||
|
|
kubernetes.io/tls-acme: "true"
|
||
|
|
kubernetes.io/ingress.allow-http: "false"
|
||
|
|
kubernetes.io/ingress.global-static-ip-name: ""
|
||
|
|
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
||
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||
|
|
path: /
|
||
|
|
hosts:
|
||
|
|
- s3.3.badhouseplants.net
|
||
|
|
tls:
|
||
|
|
- secretName: s3.e.badhouseplants.net
|
||
|
|
hosts:
|
||
|
|
- s3.e.badhouseplants.net
|
||
|
|
consoleIngress:
|
||
|
|
enabled: true
|
||
|
|
ingressClassName: ~
|
||
|
|
annotations:
|
||
|
|
kubernetes.io/ingress.class: traefik
|
||
|
|
kubernetes.io/tls-acme: "true"
|
||
|
|
kubernetes.io/ingress.allow-http: "false"
|
||
|
|
kubernetes.io/ingress.global-static-ip-name: ""
|
||
|
|
cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
|
||
|
|
traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
|
||
|
|
path: /
|
||
|
|
hosts:
|
||
|
|
- minio.e.badhouseplants.net
|
||
|
|
tls:
|
||
|
|
- secretName: minio.e.badhouseplants.net
|
||
|
|
hosts:
|
||
|
|
- minio.e.badhouseplants.net
|
||
|
|
|
||
|
|
rootUser: 'overlord'
|
||
|
|
replicas: 1
|
||
|
|
mode: standalone
|
||
|
|
environment:
|
||
|
|
MINIO_SERVER_URL: "https://s3.e.badhouseplants.net:443"
|
||
|
|
tls:
|
||
|
|
enabled: false
|
||
|
|
certSecret: ''
|
||
|
|
publicCrt: public.crt
|
||
|
|
privateKey: private.key
|
||
|
|
persistence:
|
||
|
|
enabled: true
|
||
|
|
accessMode: ReadWriteOnce
|
||
|
|
size: 100Gi
|
||
|
|
service:
|
||
|
|
type: ClusterIP
|
||
|
|
clusterIP: ~
|
||
|
|
port: '9000'
|
||
|
|
consoleService:
|
||
|
|
type: ClusterIP
|
||
|
|
clusterIP: ~
|
||
|
|
port: '9001'
|
||
|
|
resources:
|
||
|
|
requests:
|
||
|
|
memory: 2Gi
|
||
|
|
buckets:
|
||
|
|
- name: badhouseplants-net
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: badhouseplants-js
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: badhouseplants-net-main
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: sharing
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
versioning: false
|
||
|
|
- name: allanger-music
|
||
|
|
policy: download
|
||
|
|
purge: false
|
||
|
|
metrics:
|
||
|
|
serviceMonitor:
|
||
|
|
enabled: false
|
||
|
|
public: true
|
||
|
|
additionalLabels: {}
|
||
|
|
policies:
|
||
|
|
- name: allanger
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "admin:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "kms:*"
|
||
|
|
- name: Admins
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "admin:*"
|
||
|
|
- resources: []
|
||
|
|
actions:
|
||
|
|
- "kms:*"
|
||
|
|
- name: DevOps
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::badhouseplants-net'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::badhouseplants-net/*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- name: sharing
|
||
|
|
statements:
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::sharing'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|
||
|
|
- resources:
|
||
|
|
- 'arn:aws:s3:::sharing/*'
|
||
|
|
actions:
|
||
|
|
- "s3:*"
|