---
ingress:
  enabled: true
  ingressClassName: ~
  annotations:
    kubernetes.io/ingress.class: traefik
    kubernetes.io/tls-acme: "true"
    kubernetes.io/ingress.allow-http: "false"
    kubernetes.io/ingress.global-static-ip-name: ""
    cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
  path: /
  hosts:
    - s3.3.badhouseplants.net
  tls:
    - secretName: s3.e.badhouseplants.net
      hosts:
        - s3.e.badhouseplants.net
consoleIngress:
  enabled: true
  ingressClassName: ~
  annotations:
    kubernetes.io/ingress.class: traefik
    kubernetes.io/tls-acme: "true"
    kubernetes.io/ingress.allow-http: "false"
    kubernetes.io/ingress.global-static-ip-name: ""
    cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
  path: /
  hosts:
    - minio.e.badhouseplants.net
  tls:
    - secretName: minio.e.badhouseplants.net
      hosts:
        - minio.e.badhouseplants.net

rootUser: 'overlord'
replicas: 1
mode: standalone
environment:
  MINIO_SERVER_URL: "https://s3.e.badhouseplants.net:443"
tls:
  enabled: false
  certSecret: ''
  publicCrt: public.crt
  privateKey: private.key
persistence:
  enabled: true
  accessMode: ReadWriteOnce
  size: 100Gi
service:
  type: ClusterIP
  clusterIP: ~
  port: '9000'
consoleService:
  type: ClusterIP
  clusterIP: ~
  port: '9001'
resources:
  requests:
    memory: 2Gi
buckets:
  - name: badhouseplants-net
    policy: download
    purge: false
    versioning: false
  - name: badhouseplants-js
    policy: download
    purge: false
    versioning: false
  - name: badhouseplants-net-main
    policy: download
    purge: false
    versioning: false
  - name: sharing
    policy: download
    purge: false
    versioning: false
  - name: allanger-music
    policy: download
    purge: false
metrics:
  serviceMonitor:
    enabled: false
    public: true
    additionalLabels: {}
policies:
  - name: allanger
    statements:
      - resources:
          - 'arn:aws:s3:::*'
        actions:
          - "s3:*"
      - resources: []
        actions:
          - "admin:*"
      - resources: []
        actions:
          - "kms:*"
  - name: Admins
    statements:
      - resources:
          - 'arn:aws:s3:::*'
        actions:
          - "s3:*"
      - resources: []
        actions:
          - "admin:*"
      - resources: []
        actions:
          - "kms:*"
  - name: DevOps
    statements:
      - resources:
          - 'arn:aws:s3:::badhouseplants-net'
        actions:
          - "s3:*"
      - resources:
          - 'arn:aws:s3:::badhouseplants-net/*'
        actions:
          - "s3:*"
  - name: sharing
    statements:
      - resources:
          - 'arn:aws:s3:::sharing'
        actions:
          - "s3:*"
      - resources:
          - 'arn:aws:s3:::sharing/*'
        actions:
          - "s3:*"