Gen3 Admin Local Minio Backup Setup - GT-Edge-AI/GT-AI-OS GitHub Wiki

Local MinIO Portable Backup Setup

Connect GT AI OS portable backups (gt3-portable-backup-v1) to MinIO (on-prem or any S3-compatible MinIO endpoint).

Keep Backup & Restore → Object storage open while you work. All credential and bucket settings are saved from the Control Panel — you do not need command-line tools or repo scripts.

Quick checklist

  1. Have a MinIO S3 API URL reachable from inside the cluster (not localhost from your laptop).
  2. Have a bucket and access key / secret key from your MinIO administrator.
  3. On Object storage: provider MinIO → fill connection fields → paste keys → Save credentials to cluster → enable Backups → Save Object Storage.
  4. On the Backup tab: set Endpoint CA secret only if your installation guide requires it for private TLS → Test bucket.

Important: Use the MinIO API port (often 9000), not the web console port (9001).

Before you start

You need Example
MinIO S3 API URL https://minio.example.com:9000
Bucket name gt-ai-os-backups
Access key / secret key From your MinIO admin
Path prefix production (logical folder under the bucket)

MinIO server setup

  1. Run MinIO with HTTPS on a host reachable from cluster pods.
  2. Create a bucket and access key with read/write on that bucket.
  3. Prefer a TLS certificate trusted by the cluster (commercial or organizational CA). Private or self-signed MinIO CAs are supported only when your GT AI OS installation guide names an Endpoint CA secret for the Backup tab.

Control Panel Object storage

Go to Backup & Restore → Object storage.

Step 1 — Provider

Select MinIO.

Step 2 — Connection settings

Form field Example Notes
MinIO S3 API URL https://minio.example.com:9000 Must resolve and connect from inside the cluster
MinIO bucket name gt-ai-os-backups
Signing region (informational) us-east-1 MinIO SigV4 default
Path prefix in bucket production Logical prefix for this deployment's portable archives

Leave Advanced fields at their defaults unless your installation guide says otherwise.

Step 4 — Save MinIO credentials to the cluster

Paste Access key ID and Secret access key from MinIO → Save credentials to cluster.

GT AI OS writes these into the cluster for backup jobs. They are not stored in Settings JSON.

Step 5 — Enable usage and save

  1. Check Backups.
  2. Click Save Object Storage.

Backup tab — private TLS

If MinIO uses a private CA and your installation guide supplies an Endpoint CA secret name:

  1. Open the Backup tab.
  2. Expand Advanced backup settings.
  3. Enter that name in Endpoint CA secret (private S3 only).
  4. Click Save on the backup automation form (top of the tab).

Do this before Test bucket when private TLS applies.

Test on the Backup tab

  1. Click Test bucket — should report success.
  2. Optional: Run backup now → portable tar under {pathPrefix}/portable/ in MinIO.

If Test bucket fails

Problem What to check
Timeout MinIO S3 API URL must work from a pod, not only from your browser
TLS / certificate error Use a cluster-trusted certificate, or set Endpoint CA secret on the Backup tab per your installation guide
Wrong port API port 9000, not console 9001
Credentials Run Save credentials to cluster on Object storage before Save Object Storage

Related pages