Hello together,
I am trying since days to get the Minio Helm chart working. Unfortunately, the documentation for it is everything but self explanatory. Would be great if someone could provide help on it. I am trying to make Minio accessible outside of the cluster via https. I use the stable helm chart with the following command line and config.yaml
helm upgrade -f config.yaml --namespace minio --install minio stable/minio
existingSecret: “minio-secret”
persistence:
size: 50Gi
and I provided minio-secret with accesskey and secretkey upfront. The minio deployment afterwords runs successful with a clusterIP service on port 9000. But I do not get a link to the minio webinterface by default. I now tried to make minio accessible via an ingress. Note, my ingress with cert-manager is working for other deployments. I now tried to setup in ingress for the minio service on port 9000 following the tutorial here.
Unfortunately, according to the tutorial even the first part for http access (without providing annotations and tls certificate) is not working. I get an ERR_SSL_PROTOCOL_ERROR when I try to access the webinterface.
I have seen that the minio helm chart comes with a lot of configuration options for tls and ingress. I tried a rich set of configuration options but could not make any progress with it. The documentation of the parameters seems to be impossible to understand for me. It would be great if someone could provide a values.yaml that I can see what would be required here and how I have to setup the ingress afterwards. Thanks for your help.
Update:
Hello together, I fortunately found a link which describes how the minio configuration is to be used. So following values.yaml solved my problem. I document it here for other running into the same issue
## https://www.ibm.com/support/knowledgecenter/en/SSBS6K_3.2.0/manage_cluster/configure_minio_during.html
existingSecret: "minio-secret"
persistence:
enabled: true
storageClass: "openebs-retained-hostpath"
accessMode: ReadWriteOnce
size: 50Gi
service:
type: ClusterIP
ingress:
enabled: true
annotations:
certmanager.k8s.io/cluster-issuer: letsencrypt-prod
kubernetes.io/tls-acme: "true"
path: /
hosts:
- minio.example.com
tls:
- hosts:
- minio..example.com
secretName: minio.example.com-crt
Best regards,
Christoph