charts/.vib/minio-operator/runtime-parameters.yaml

# Adding an extra initial delay to avoid race conditions with the
# deployment and goss stages
readinessProbe:
  initialDelaySeconds: 30
extraDeploy:
# Taken from https://github.com/minio/operator/tree/master/examples
- |
  apiVersion: v1
  kind: Secret
  metadata:
    name: storage-configuration
    namespace: {{ include "common.names.namespace" . | quote }}
  stringData:
    config.env: |-
      export MINIO_ROOT_USER="minio"
      export MINIO_ROOT_PASSWORD="minio123"
      export MINIO_STORAGE_CLASS_STANDARD="EC:2"
      export MINIO_BROWSER="on"
      export NAMESPACE={{ include "common.names.namespace" . | quote }}
  type: Opaque
- |
  apiVersion: v1
  stringData:
    CONSOLE_ACCESS_KEY: console
    CONSOLE_SECRET_KEY: console123
  kind: Secret
  metadata:
    name: storage-user
    namespace: {{ include "common.names.namespace" . | quote }}
  type: Opaque
- |
  apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: vib-service-account
    namespace: {{ include "common.names.namespace" . | quote }}
  {{ include "minio-operator.imagePullSecrets" . }}
- |
  apiVersion: minio.min.io/v2
  kind: Tenant
  metadata:
    labels:
      app: minio
    name: vib-minio
    namespace: {{ include "common.names.namespace" . | quote }}
  spec:
    serviceAccountName: vib-service-account
    certConfig: {}
    configuration:
      name: storage-configuration
    env: []
    externalCaCertSecret: []
    externalCertSecret: []
    externalClientCertSecrets: []
    features:
      bucketDNS: false
      domains: {}
    mountPath: /export
    podManagementPolicy: Parallel
    pools:
    - affinity:
        nodeAffinity: {}
        podAffinity: {}
        podAntiAffinity: {}
      containerSecurityContext:
        allowPrivilegeEscalation: false
        capabilities:
          drop:
          - ALL
        seccompProfile:
          type: RuntimeDefault
        runAsNonRoot: true
        {{- if not (include "common.compatibility.isOpenshift" .) }}
        runAsGroup: 1001
        runAsUser: 1001
        {{- end }}
      name: pool-0
      nodeSelector: {}
      resources: {}
      securityContext:
        fsGroupChangePolicy: OnRootMismatch
        runAsNonRoot: true
        {{- if not (include "common.compatibility.isOpenshift" .) }}
        fsGroup: 1001
        runAsGroup: 1001
        runAsUser: 1001
        {{- end }}
      servers: 2
      tolerations: []
      topologySpreadConstraints: []
      volumeClaimTemplate:
        apiVersion: v1
        kind: persistentvolumeclaims
        metadata: {}
        spec:
          accessModes:
          - ReadWriteOnce
          resources:
            requests:
              storage: 8Gi
        status: {}
      volumesPerServer: 2
    priorityClassName: ""
    requestAutoCert: true
    serviceMetadata:
      consoleServiceAnnotations: {}
      consoleServiceLabels: {}
      minioServiceAnnotations: {}
      minioServiceLabels: {}
    subPath: ""
    users:
    - name: storage-user