Install minio to k8s cluster using helm chart

README.md

TLDR;

First install the operator

helm install --namespace minio-operator --create-namespace operator minio-operator/operator

Create persistent volume (pv)

kubectl apply -f pv01.yaml

Install the tenant

helm install --values minio-tenant-values.yaml minio-tenant-00 minio-operator/tenant

References:

• https://min.io/docs/minio/kubernetes/upstream/operations/install-deploy-manage/deploy-operator-helm.html
• https://min.io/docs/minio/kubernetes/upstream/operations/deploy-manage-tenants.html

minio-tenant-values.yaml

tenant:
  name: minio-tenant-00
  image:
    repository: quay.io/minio/minio
    tag: RELEASE.2024-10-02T17-50-41Z
    pullPolicy: IfNotPresent
  imagePullSecret: { }
  scheduler: { }
  configuration:
    name: myminio-env-configuration
  configSecret:
    name: myminio-env-configuration
    accessKey: minio
    secretKey: minio123

  poolsMetadata:
    annotations: { }
    labels: { }

  pools:
    - servers: 1
      name: pool-0
      volumesPerServer: 1
      size: 19Gi
      storageClassName: manual
      storageAnnotations: { }
      storageLabels: { }
      annotations: { }
      labels: { }
      tolerations: [ ]
      nodeSelector: { }
      affinity: { }
      resources: { }
      securityContext:
        runAsUser: 1000
        runAsGroup: 1000
        fsGroup: 1000
        fsGroupChangePolicy: "OnRootMismatch"
        runAsNonRoot: true
      containerSecurityContext:
        runAsUser: 1000
        runAsGroup: 1000
        runAsNonRoot: true
        allowPrivilegeEscalation: false
        capabilities:
          drop:
            - ALL
        seccompProfile:
          type: RuntimeDefault
      topologySpreadConstraints: [ ]
  mountPath: /export
  subPath: /data
  metrics:
    enabled: false
    port: 9000
    protocol: http
  certificate:
    externalCaCertSecret: [ ]
    externalCertSecret: [ ]
    requestAutoCert: true
    certConfig: { }
  features:
    bucketDNS: false
    domains: { }
    enableSFTP: false
  buckets: [ ]
  users: [ ]
  podManagementPolicy: Parallel
  liveness: { }
  readiness: { }
  startup: { }
  lifecycle: { }
  exposeServices: { }
  serviceAccountName: ""
  prometheusOperator: false
  logging: { }
  serviceMetadata: { }
  env: [ ]
  priorityClassName: ""
  additionalVolumes: [ ]
  additionalVolumeMounts: [ ]

ingress:
  api:
    enabled: false
    ingressClassName: ""
    labels: { }
    annotations: { }
    tls: [ ]
    host: minio.local
    path: /
    pathType: Prefix
  console:
    enabled: false
    ingressClassName: ""
    labels: { }
    annotations: { }
    tls: [ ]
    host: minio-console.local
    path: /
    pathType: Prefix

pv01.yaml

apiVersion: v1
kind: PersistentVolume
metadata:
  name: pv-01
spec:
  capacity:
    storage: 20Gi  # Size of the volume
  accessModes:
    - ReadWriteOnce  # Access modes: ReadWriteOnce, ReadOnlyMany, or ReadWriteMany
  persistentVolumeReclaimPolicy: Delete  # Retain, Recycle, or Delete
  storageClassName: manual # <-- Note the storage class we defined here is used in tenant values
  hostPath:
    path: /tmp/data/pv01  # Path to storage on the host (use only for testing)