add minio

roles/minio/defaults/main.yaml

@@ -0,0 +1,61 @@
+minio_enabled: true
+minio_publish: false
+minio_console_publish: false
+minio_chart_ref: "minio/minio"
+minio_short_name: "minio"
+minio_console_short_name: "console"
+minio_default_values:
+  mode: distributed ## other supported values are "standalone"
+  resources:
+    requests:
+      memory: 512Mi
+  replicas: 4
+
+  rootUser: "admin"
+  rootPassword: "{{ minio_admin_password }}"
+
+  persistence:
+    enabled: true
+    storageClass: "{{ minio_storage | default('nfs-hdd') }}"
+    accessMode: "{{ minio_storage_mode | default('ReadWriteOnce') }}"
+    size: "{{ minio_size | default('100Gi') }}"
+  
+  ingress:
+    enabled: true
+    ingressClassName: "{{ external_ingress_class if minio_publish else internal_ingress_class }}"
+    annotations:
+      cert-manager.io/cluster-issuer: "letsencrypt-prod"
+      nginx.ingress.kubernetes.io/proxy-body-size: "0"
+      nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
+      nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
+      # kubernetes.io/ingress.class: nginx
+      # kubernetes.io/tls-acme: "true"
+      # kubernetes.io/ingress.allow-http: "false"
+      # kubernetes.io/ingress.global-static-ip-name: ""
+      # nginx.ingress.kubernetes.io/secure-backends: "true"
+      # nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
+      # nginx.ingress.kubernetes.io/whitelist-source-range: 0.0.0.0/0
+    path: /
+    hosts:
+      - "{{ minio_short_name }}.{{ domain }}"
+    tls:
+      - secretName: "{{ minio_short_name }}.{{ domain }}-tls"
+        hosts:
+          - "{{ minio_short_name }}.{{ domain }}"
+  
+  consoleIngress:
+    enabled: true
+    ingressClassName: "{{ external_ingress_class if minio_console_publish else internal_ingress_class }}"
+    annotations:
+      cert-manager.io/cluster-issuer: "letsencrypt-prod"
+      nginx.ingress.kubernetes.io/proxy-body-size: "0"
+      nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
+      nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
+    path: /
+    hosts:
+      - "{{ minio_console_short_name }}.{{ minio_short_name }}.{{ domain }}"
+    tls:
+      - secretName: "{{ minio_console_short_name }}.{{ minio_short_name }}.{{ domain }}-tls"
+        hosts:
+          - "{{ minio_console_short_name }}.{{ minio_short_name }}.{{ domain }}"
+

roles/minio/tasks/main.yaml

@@ -0,0 +1,12 @@
+- set_fact:
+    minio_combined_values: "{{ minio_default_values | combine(minio_values, recursive=true) }}"
+
+- name: Deploy MinIO
+  kubernetes.core.helm:
+    create_namespace: true
+    release_namespace: "{{ minio_namespace | default(namespace) }}"
+    release_name: "{{ minio_name | default('minio') }}"
+    chart_ref: "{{ minio_chart_ref }}"
+    chart_version: "{{ minio_version | default(omit) }}"
+    release_values: "{{ minio_combined_values | from_yaml }}"
+    wait: true

roles/pwgen/defaults/main.yaml

@@ -14,6 +14,7 @@ default_accounts:
   - { name: mastodon_ldap }
   - { name: harbor_admin }
   - { name: systemuser }
+  - { name: minio_admin }
 
 secret_keys:
   - { name: peertube }

roles/pypiserver/tasks/main.yaml

@@ -1,7 +1,7 @@
 - set_fact:
     pypiserver_combined_values: "{{ pypiserver_default_values | combine(pypiserver_values, recursive=true) }}"
 
-- name: Deploy Docker pypiserver
+- name: Deploy pypiserver
   kubernetes.core.helm:
     create_namespace: true
     release_namespace: "{{ pypiserver_namespace | default(namespace) }}"