Made minio setup more robustre

This commit is contained in:
Adrien Bouvais 2026-08-15 09:54:43 +02:00
parent 7e82888149
commit 4b3bb98bd5

View File

@ -52,15 +52,18 @@ spec:
- /bin/sh - /bin/sh
- -c - -c
- | - |
# Connect to MinIO using admin secret from env # Fail immediately if any command fails
mc alias set minioadmin http://minio.minio.svc.cluster.local:9000 $MINIO_ADMIN_USER $MINIO_ADMIN_PASS set -e
# Connect to MinIO using quotes to protect special characters in passwords
mc alias set minioadmin http://minio.minio.svc.cluster.local:9000 "$MINIO_ADMIN_USER" "$MINIO_ADMIN_PASS"
# Create buckets # Create buckets
mc mb --ignore-existing minioadmin/$BUCKET_REF mc mb --ignore-existing minioadmin/$BUCKET_REF
mc mb --ignore-existing minioadmin/$BUCKET_WORK mc mb --ignore-existing minioadmin/$BUCKET_WORK
# Create tenant user using randomly generated password # Create tenant user (REMOVED || true)
mc admin user add minioadmin $TENANT_USER $TENANT_PASS || true mc admin user add minioadmin "$TENANT_USER" "$TENANT_PASS"
# Apply IAM isolation policy # Apply IAM isolation policy
cat <<EOF > /tmp/policy.json cat <<EOF > /tmp/policy.json
@ -89,6 +92,7 @@ spec:
} }
EOF EOF
# The rest remains the same...
mc admin policy create minioadmin {{ .Values.name }}-policy /tmp/policy.json || mc admin policy update minioadmin {{ .Values.name }}-policy /tmp/policy.json mc admin policy create minioadmin {{ .Values.name }}-policy /tmp/policy.json || mc admin policy update minioadmin {{ .Values.name }}-policy /tmp/policy.json
mc admin policy attach minioadmin {{ .Values.name }}-policy --user=$TENANT_USER mc admin policy attach minioadmin {{ .Values.name }}-policy --user="$TENANT_USER"
echo "MinIO setup completed for {{ .Values.name }}" echo "MinIO setup completed for {{ .Values.name }}"