Made minio setup more robustre
This commit is contained in:
parent
7e82888149
commit
4b3bb98bd5
@ -52,15 +52,18 @@ spec:
|
|||||||
- /bin/sh
|
- /bin/sh
|
||||||
- -c
|
- -c
|
||||||
- |
|
- |
|
||||||
# Connect to MinIO using admin secret from env
|
# Fail immediately if any command fails
|
||||||
mc alias set minioadmin http://minio.minio.svc.cluster.local:9000 $MINIO_ADMIN_USER $MINIO_ADMIN_PASS
|
set -e
|
||||||
|
|
||||||
|
# Connect to MinIO using quotes to protect special characters in passwords
|
||||||
|
mc alias set minioadmin http://minio.minio.svc.cluster.local:9000 "$MINIO_ADMIN_USER" "$MINIO_ADMIN_PASS"
|
||||||
|
|
||||||
# Create buckets
|
# Create buckets
|
||||||
mc mb --ignore-existing minioadmin/$BUCKET_REF
|
mc mb --ignore-existing minioadmin/$BUCKET_REF
|
||||||
mc mb --ignore-existing minioadmin/$BUCKET_WORK
|
mc mb --ignore-existing minioadmin/$BUCKET_WORK
|
||||||
|
|
||||||
# Create tenant user using randomly generated password
|
# Create tenant user (REMOVED || true)
|
||||||
mc admin user add minioadmin $TENANT_USER $TENANT_PASS || true
|
mc admin user add minioadmin "$TENANT_USER" "$TENANT_PASS"
|
||||||
|
|
||||||
# Apply IAM isolation policy
|
# Apply IAM isolation policy
|
||||||
cat <<EOF > /tmp/policy.json
|
cat <<EOF > /tmp/policy.json
|
||||||
@ -89,6 +92,7 @@ spec:
|
|||||||
}
|
}
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
|
# The rest remains the same...
|
||||||
mc admin policy create minioadmin {{ .Values.name }}-policy /tmp/policy.json || mc admin policy update minioadmin {{ .Values.name }}-policy /tmp/policy.json
|
mc admin policy create minioadmin {{ .Values.name }}-policy /tmp/policy.json || mc admin policy update minioadmin {{ .Values.name }}-policy /tmp/policy.json
|
||||||
mc admin policy attach minioadmin {{ .Values.name }}-policy --user=$TENANT_USER
|
mc admin policy attach minioadmin {{ .Values.name }}-policy --user="$TENANT_USER"
|
||||||
echo "MinIO setup completed for {{ .Values.name }}"
|
echo "MinIO setup completed for {{ .Values.name }}"
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user