MinIO Server Certificates a.k.a externalCertSecret - cniackz/public GitHub Wiki

Save inside MinIO container at path: /tmp/certs

bash-4.4$ ls
CAs  hostname-1  private.key  public.crt

Secret name can be something like: main-storage-enqpg-external-server-certificate-0

  spec:
    externalCertSecret:
    - name: <tenant-name>-enqpg-external-server-certificate-0
      type: kubernetes.io/tls

apiVersion: v1
data:
  tls.crt: <base64value>
  tls.key: <base64value>
immutable: true
kind: Secret
metadata:
  labels:
    v1.min.io/tenant: main-storage
  name: <tenant-name>-enqpg-external-server-certificate-0
  namespace: <tenant-namespace>
type: kubernetes.io/tls