apiVersion: v1 kind: PersistentVolume metadata: name: minio-storage-pv-volume namespace: default labels: type: local app: minio spec: storageClassName: standard capacity: storage: 1Gi accessModes: - ReadWriteOnce hostPath: path: "/var/kubeflow/minio" --- apiVersion: v1 kind: PersistentVolumeClaim metadata: name: minio-storage-pv-claim namespace: default labels: app: minio spec: storageClassName: standard accessModes: - ReadWriteOnce resources: requests: storage: 1Gi --- apiVersion: apps/v1 kind: Deployment metadata: name: minio namespace: default labels: run: minio spec: replicas: 1 selector: matchLabels: run: minio template: metadata: labels: run: minio prodtest: minio spec: containers: - name: minio image: minio/minio:latest imagePullPolicy: IfNotPresent ports: - name: tcpmain containerPort: 9000 - name: httpweb containerPort: 9001 args: - server - "--console-address" - ":9001" - /data env: - name: MINIO_ROOT_USER value: minio - name: MINIO_ROOT_PASSWORD value: minio123 - name: MINIO_IDENTITY_OPENID_CONFIG_URL value: http://keycloak:8080/realms/minio/.well-known/openid-configuration - name: MINIO_IDENTITY_OPENID_CLIENT_ID value: minio-cli - name: MINIO_IDENTITY_OPENID_CLIENT_SECRET value: YVZGoUdprHmqexlX30stzGWwZtT2SNll - name: MINIO_IDENTITY_OPENID_CLAIM_NAME value: policy - name: MINIO_IDENTITY_OPENID_CLAIM_PREFIX value: "" - name: MINIO_IDENTITY_OPENID_REDIRECT_URI value: http://minio:9001/oauth_callback volumeMounts: - name: minio-persistent-storage mountPath: /data - name : tmp-dir mountPath: /tmp volumes: - name: minio-persistent-storage persistentVolumeClaim: claimName: minio-storage-pv-claim - name: tmp-dir hostPath: path: /tmp type: Directory --- apiVersion: v1 kind: Service metadata: name: minio namespace: default labels: run: minio spec: type: LoadBalancer selector: run: minio ports: - name: tcpmain protocol: TCP port: 9000 targetPort: 9000 nodePort: 31768 - name: httpweb protocol: TCP port: 9001 targetPort: 9001 nodePort: 31769