minio-sa
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/01-namespace.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/01-namespace.yaml
new file mode 100644
index 0000000..96d5c48
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/01-namespace.yaml
@@ -0,0 +1,7 @@
+####################################################
+# namespace
+####################################################
+apiVersion: v1
+kind: Namespace
+metadata:
+ name: minio-sa-test
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/02-registry.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/02-registry.yaml
new file mode 100644
index 0000000..5571be2
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/02-registry.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+type: kubernetes.io/dockerconfigjson
+metadata:
+ name: harbor-supwisdom
+ namespace: minio-sa-test
+data:
+ # 替换成自己的仓库用户名密码配置
+ .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3Iuc3Vwd2lzZG9tLmNvbSI6eyJwYXNzd29yZCI6IlBXTWdQODVxaUxGQzIwIiwidXNlcm5hbWUiOiJyYW5jaGVyLmRldm9wcyJ9fX0=
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-1-configmap.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-1-configmap.yaml
new file mode 100644
index 0000000..f86d3c4
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-1-configmap.yaml
@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+ namespace: minio-sa-test
+ name: minio-sa-config
+data:
+ # Minio参数
+ MINIO_ENDPOINT: op-minio-sa-test.paas.newcapec.cn
+ MINIO_USE_SSL: "false"
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-2-secret.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-2-secret.yaml
new file mode 100644
index 0000000..3f89721
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-2-secret.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Secret
+metadata:
+ namespace: minio-sa-test
+ name: minio-sa-secret
+type: Opaque
+data:
+ # Minio参数
+ MINIO_ACCESS_KEY: bWluaW9hZG1pbg==
+ MINIO_SECRET_KEY: bWluaW9hZG1pbg==
+ # API Http basic auth参数
+ SA_API_USERNAME: cHByb2ZhZG1pbg==
+ SA_API_PASSWORD: cHByb2ZhZG1pbg==
+ # Pprof参数
+ PPROF_USERNAME: cHByb2ZhZG1pbg==
+ PPROF_PASSWORD: cHByb2ZhZG1pbg==
+
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-3-svc.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-3-svc.yaml
new file mode 100644
index 0000000..8f7fe5a
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-3-svc.yaml
@@ -0,0 +1,19 @@
+apiVersion: v1
+kind: Service
+metadata:
+ namespace: minio-sa-test
+ name: minio-sa-svc
+ labels:
+ app: minio-sa-svc
+spec:
+ ports:
+ - port: 9090
+ targetPort: http
+ protocol: TCP
+ name: http
+ - port: 6060
+ targetPort: http-metrics
+ protocol: TCP
+ name: http-metrics
+ selector:
+ app: minio-sa
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-4-deployment.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-4-deployment.yaml
new file mode 100644
index 0000000..8e21724
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/03-4-deployment.yaml
@@ -0,0 +1,39 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: minio-sa
+ namespace: minio-sa-test
+spec:
+ selector:
+ matchLabels:
+ app: minio-sa
+ replicas: 1
+ template:
+ metadata:
+ labels:
+ app: minio-sa
+ spec:
+ containers:
+ - name: minio-sa
+ # 根据情况修改镜像地址
+ image: harbor.supwisdom.com/institute/minio-sa:0.1.0
+ imagePullPolicy: Always
+ ports:
+ - containerPort: 9090
+ name: http
+ - containerPort: 6060
+ name: http-metrics
+ envFrom:
+ - configMapRef:
+ name: minio-sa-config
+ - secretRef:
+ name: minio-sa-secret
+ resources:
+ requests:
+ cpu: 100m
+ memory: "64Mi"
+ limits:
+ cpu: 1000m
+ memory: "128Mi"
+ imagePullSecrets:
+ - name: harbor-supwisdom
diff --git a/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/04-ingress.yaml b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/04-ingress.yaml
new file mode 100644
index 0000000..4088278
--- /dev/null
+++ b/deploy-manifests/k8s-rancher/open-platfprm/minio-sa/04-ingress.yaml
@@ -0,0 +1,24 @@
+apiVersion: extensions/v1beta1
+kind: Ingress
+metadata:
+ name: minio-sa-ingress
+ namespace: minio-sa-test
+ # annotations:
+ # cert-manager.io/cluster-issuer: "letsencrypt-prod"
+ # 如果采用letsencrypt自动签发证书
+ # nginx.ingress.kubernetes.io/ssl-redirect: "true"
+spec:
+ # tls:
+ ## 替换成正确的域名
+ # - hosts:
+ # - minio-sa-test.paas.<xxx>.edu.cn
+ # secretName: minio-sa-tls
+ rules:
+ # 替换成正确的域名
+ - host: op-minio-sa-test.paas.newcapec.cn
+ http:
+ paths:
+ - path: /
+ backend:
+ serviceName: minio-sa-svc
+ servicePort: http
\ No newline at end of file