---
apiVersion: s3.onyxia.sh/v1alpha1
kind: Policy
metadata:
  name: aldo-memelord-policy
spec:
  name: aldo-memelord-policy
  s3InstanceRef: minio/default
  policyContent: >-
    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "s3:ListBucket",
            "s3:GetObject",
            "s3:PutObject"
          ],
          "Resource": [
            "arn:aws:s3:::aldo-memelord",
            "arn:aws:s3:::aldo-memelord/*"
          ]
        }
      ]
    }
---
apiVersion: s3.onyxia.sh/v1alpha1
kind: S3User
metadata:
  name: aldo-memelord-bucket
spec:
  accessKey: aldo-memelord-bucket # This is automatically created
  policies:
    - aldo-memelord-policy
  s3InstanceRef: minio/default
---
apiVersion: s3.onyxia.sh/v1alpha1
kind: Bucket
metadata:
  name: aldo-memelord
spec:
  name: aldo-memelord
  s3InstanceRef: minio/default
  quota:
    default: 100000000