feat(minio): enable minion (#258)

truxnell · Apr 5, 2022 · fb45add · fb45add
1 parent e0f9d56
commit fb45add
Show file tree

Hide file tree

Showing 4 changed files with 28 additions and 45 deletions.
diff --git a/k8s/clusters/hegira/flux/orchestration/services.yaml b/k8s/clusters/hegira/flux/orchestration/services.yaml
@@ -67,3 +67,21 @@ spec:
   sourceRef:
     kind: GitRepository
     name: home-cluster
+
+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1beta2
+kind: Kustomization
+metadata:
+  name: services-minio
+  namespace: flux-system
+spec:
+  dependsOn:
+    - name: services-namespace
+    - name: network-system-traefik
+  interval: 5m
+  path: "./k8s/manifests/services/minio"
+  prune: true
+  wait: true
+  sourceRef:
+    kind: GitRepository
+    name: home-cluster
diff --git a/k8s/manifests/services/minio/helmrelease.yaml b/k8s/manifests/services/minio/helmrelease.yaml
@@ -39,15 +39,15 @@ spec:
         volumeSpec:
           nfs:
             server: "${NAS_ADDRESS}"
-            path: /volume1/Minio/.minio
+            path: /volume1/minio/.minio
         mountPath: /root/.minio
       data:
         enabled: true
         type: custom
         volumeSpec:
           nfs:
             server: "${NAS_ADDRESS}"
-            path: /volume1/Minio
+            path: /volume1/minio
         mountPath: /data
 
     service:
@@ -65,18 +65,21 @@ spec:
         enabled: true
         ingressClassName: "traefik"
         annotations:
-          cert-manager.io/cluster-issuer: letsencrypt-production
-          external-dns.alpha.kubernetes.io/target: ingress.${INGRESS_DOMAIN}
+          kubernetes.io/ingress.class: traefik
+          cert-manager.io/cluster-issuer: ${CLUSTER_CERT}
+          external-dns/is-public: "false"
           traefik.ingress.kubernetes.io/router.entrypoints: websecure
-          traefik.ingress.kubernetes.io/router.middlewares: network-rfc1918-ips@kubernetescrd
+          traefik.ingress.kubernetes.io/router.middlewares: network-system-rfc1918-ips@kubernetescrd
+          hajimari.io/enable: "true"
+          hajimari.io/icon: storage
         hosts:
-          - host: &host-minio "minio.${INGRESS_DOMAIN}"
+          - host: &host-minio "minio.${CLUSTER_DOMAIN}"
             paths:
               - path: /
                 pathType: Prefix
                 service:
                   port: 9001
-          - host: &host-s3 "s3.${INGRESS_DOMAIN}"
+          - host: &host-s3 "s3.${CLUSTER_DOMAIN}"
             paths:
               - path: /
                 pathType: Prefix

diff --git a/k8s/manifests/services/minio/kustomization.yaml b/k8s/manifests/services/minio/kustomization.yaml
@@ -2,5 +2,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./secret.sops.yaml
   - ./helmrelease.yaml
diff --git a/k8s/manifests/services/minio/secret.sops.yaml b/k8s/manifests/services/minio/secret.sops.yaml