47 lines
997 B
YAML
47 lines
997 B
YAML
---
|
|
apiVersion: s3.onyxia.sh/v1alpha1
|
|
kind: Policy
|
|
metadata:
|
|
name: {{ .Release.name }}-policy
|
|
spec:
|
|
name: {{ .Release.name }}-policy
|
|
s3InstanceRef: minio/default
|
|
policyContent: >-
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"s3:ListBucket",
|
|
"s3:GetObject",
|
|
"s3:PutObject"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:s3:::{{ .Release.name }}",
|
|
"arn:aws:s3:::{{ .Release.name }}/*"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
---
|
|
apiVersion: s3.onyxia.sh/v1alpha1
|
|
kind: S3User
|
|
metadata:
|
|
name: {{ .Release.name }}-bucket
|
|
spec:
|
|
accessKey: {{ .Release.name }}-bucket # This is automatically created
|
|
policies:
|
|
- {{ .Release.name }}-policy
|
|
s3InstanceRef: minio/default
|
|
---
|
|
apiVersion: s3.onyxia.sh/v1alpha1
|
|
kind: Bucket
|
|
metadata:
|
|
name: {{ .Release.name }}
|
|
spec:
|
|
name: {{ .Release.name }}
|
|
s3InstanceRef: minio/default
|
|
quota:
|
|
default: 100000000
|