minio.yaml

---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: minio
  namespace: default
spec:
  interval: 30m
  chart:
    spec:
      chart: app-template
      version: 1.5.1
      sourceRef:
        kind: HelmRepository
        name: bjw-s
        namespace: flux-system
  maxHistory: 2
  install:
    createNamespace: true
    remediation:
      retries: 3
  upgrade:
    cleanupOnFail: true
    remediation:
      retries: 3
  uninstall:
    keepHistory: false
  values:
    image:
      repository: quay.io/minio/minio
      tag: RELEASE.2023-09-27T15-22-50Z

    controller:
      annotations:
        reloader.stakater.com/auto: "true"

    env:
      TZ: America/New_York
      MINIO_UPDATE: "off"
      MINIO_PROMETHEUS_URL: http://kube-prometheus-stack-prometheus.monitoring.svc.cluster.local:9090
      MINIO_PROMETHEUS_JOB_ID: minio
      MINIO_PROMETHEUS_AUTH_TYPE: public
      MINIO_BROWSER_REDIRECT_URL: https://minio.eviljungle.com
      MINIO_SERVER_URL: https://s3.eviljungle.com
      MINIO_API_CORS_ALLOW_ORIGIN: https://minio.eviljungle.com,https://s3.eviljungle.com
    envFrom:
      - secretRef:
          name: minio-secret

    service:
      main:
        ports:
          http:
            port: &console-port 9001
          api:
            enabled: true
            port: &api-port 9000
    args:
      - server
      - /data
      - --console-address
      - :9001

    persistence:
      config:
        enabled: true
        existingClaim: nfs-minio
        mountPath: /data

    ingress:
      main:
        enabled: true
        primary: true
        ingressClassName: 'nginx'
        annotations:
          nginx.ingress.kubernetes.io/whitelist-source-range: "10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 100.64.0.0/10"
          nginx.ingress.kubernetes.io/auth-url: "https://auth.eviljungle.com/oauth2/auth"
          nginx.ingress.kubernetes.io/auth-signin: https://auth.eviljungle.com/oauth2/start
        hosts:
          - host: minio.eviljungle.com
            paths:
              - path: /
                pathType: Prefix
                service:
                  port: *console-port
        tls:
          - hosts:
            - "minio.eviljungle.com"
      s3:
        enabled: true
        ingressClassName: 'nginx'
        annotations:
          nginx.ingress.kubernetes.io/whitelist-source-range: "10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 100.64.0.0/10"
        hosts:
          - host: s3.eviljungle.com
            paths:
              - path: /
                pathType: Prefix
                service:
                  port: *api-port
        tls:
          - hosts:
            - "s3.eviljungle.com"

    serviceMonitor:
      main:
        enabled: true
        endpoints:
          - port: api
            scheme: http
            path: /minio/v2/metrics/cluster
            interval: 1m
            scrapeTimeout: 10s