How to install MinIO Tenant using cert manager in k8s - cniackz/public GitHub Wiki

Tested:

Tue Jan 24 2023 at 5:34 pm
Thu Jun 08 2023 at 7:26 pm
Fri Oct 06 2023 at 3:43 pm

NOTE:

You were missing the operator-ca-tls secret modification for cert-manager as Operator has to also communicate using cert-manager: https://github.com/minio/operator/blob/master/docs/cert-manager.md#create-operator-ca-tls-secret

Objective:

Install MinIO Tenant using cert-manager in k8s

Steps:

Create cluster:

createcluster nodeport

Expected:

Cesars-MacBook-Pro:~ cniackz$ createcluster
Deleting cluster "kind" ...
Creating cluster "kind" ...
 ✓ Ensuring node image (kindest/node:v1.25.3) 🖼
 ✓ Preparing nodes 📦 📦 📦 📦 📦  
 ✓ Writing configuration 📜 
 ✓ Starting control-plane 🕹️ 
 ✓ Installing CNI 🔌 
 ✓ Installing StorageClass 💾 
 ✓ Joining worker nodes 🚜 
Set kubectl context to "kind-kind"
You can now use your cluster with:

kubectl cluster-info --context kind-kind

Have a question, bug, or feature request? Let us know! https://kind.sigs.k8s.io/#community 🙂

Install Operator:

installoperator nodeport

Expected:

Cesars-MacBook-Pro:~ cniackz$ installoperator
namespace/minio-operator created
customresourcedefinition.apiextensions.k8s.io/tenants.minio.min.io created
serviceaccount/console-sa created
serviceaccount/minio-operator created
clusterrole.rbac.authorization.k8s.io/console-sa-role created
clusterrole.rbac.authorization.k8s.io/minio-operator-role created
clusterrolebinding.rbac.authorization.k8s.io/console-sa-binding created
clusterrolebinding.rbac.authorization.k8s.io/minio-operator-binding created
configmap/console-env created
secret/console-sa-secret created
service/console created
service/operator created
deployment.apps/console created
deployment.apps/minio-operator created

Install cert-manager:

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.11.0/cert-manager.yaml

Install Tenant:

sleep 120 # wait 2 minutes
kustomize build github.com/minio/operator/examples/kustomization/tenant-certmanager\?ref\=v5.0.9 > tenant-certmanager.yaml
k apply -f tenant-certmanager.yaml

Expected:

Cesars-MacBook-Pro:~ cniackz$ k apply -k ~/operator/examples/kustomization/tenant-certmanager
namespace/tenant-certmanager created
secret/storage-configuration created
secret/storage-user created
certificate.cert-manager.io/tenant-certmanager-cert created
issuer.cert-manager.io/tenant-certmanager-issuer created
tenant.minio.min.io/storage-certmanager created

It get installed: