---
apiVersion: minio.min.io/v2
kind: Tenant
metadata:
  labels:
    app: minio
  name: default-minio-tenant
  namespace: minio-tenant-default
spec:
  buckets:
    - name: default-bucket
    - name: cluster-forge-loki
    - name: cluster-forge-mimir
    - name: cluster-forge-tempo
    - name: models
  configuration:
    name: default-minio-tenant-env-configuration
  env:
    - name: MINIO_PROMETHEUS_AUTH_TYPE
      value: public
    - name: MINIO_IDENTITY_OPENID_CLIENT_SECRET
      value: defaultsecret
    - name: MINIO_IDENTITY_OPENID_SCOPES
      value: openid,profile,email,policy
    - name: MINIO_BROWSER_REDIRECT_URL
      value: https://minio.not-a-domain
    - name: MINIO_SERVER_URL
      value: https://minio.not-a-domain
    - name: MINIO_IDENTITY_OPENID_CLIENT_ID
      value: minio
    - name: MINIO_IDENTITY_OPENID_CONFIG_URL
      value: https://kc.not-a-domain/realms/airm/.well-known/openid-configuration
  features:
    bucketDNS: false
    enableSFTP: false
  image: quay.io/minio/minio:RELEASE.2024-11-07T00-52-20Z
  imagePullPolicy: IfNotPresent
  mountPath: /export
  podManagementPolicy: Parallel
  pools:
    - name: pool-0
      servers: 1
      volumeClaimTemplate:
        metadata:
          name: data
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 500Gi
          storageClassName: direct
      volumesPerServer: 1
  poolsMetadata:
    annotations: {}
    labels: {}
  prometheusOperator: false
  requestAutoCert: false
  subPath: /data
  users:
    - name: default-user