mirror of
https://github.com/pgsty/minio.git
synced 2026-08-10 00:03:29 +03:00
Eric
a2bc383e15
If the policy fails MinIO's minimum threshold for a valid policy, they'll still (correctly) fail, but policies with a : (and probably a /) should be allowed since they work with standard MC/MinIO Console interactions. This creates the files as policy_IDX.json instead of <name>.json to avoid any issues with the name + Kubernetes ConfigMaps since ConfigMap keys must be: [-._a-zA-Z0-9]+
25 lines
887 B
YAML
25 lines
887 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ template "minio.fullname" . }}
|
|
namespace: {{ .Release.Namespace | quote }}
|
|
labels:
|
|
app: {{ template "minio.name" . }}
|
|
chart: {{ template "minio.chart" . }}
|
|
release: {{ .Release.Name }}
|
|
heritage: {{ .Release.Service }}
|
|
data:
|
|
initialize: |-
|
|
{{ include (print $.Template.BasePath "/_helper_create_bucket.txt") . | indent 4 }}
|
|
add-user: |-
|
|
{{ include (print $.Template.BasePath "/_helper_create_user.txt") . | indent 4 }}
|
|
add-policy: |-
|
|
{{ include (print $.Template.BasePath "/_helper_create_policy.txt") . | indent 4 }}
|
|
{{- range $idx, $policy := .Values.policies }}
|
|
# {{ $policy.name }}
|
|
policy_{{ $idx }}.json: |-
|
|
{{ include (print $.Template.BasePath "/_helper_policy.tpl") . | indent 4 }}
|
|
{{ end }}
|
|
custom-command: |-
|
|
{{ include (print $.Template.BasePath "/_helper_custom_command.txt") . | indent 4 }}
|