How to install tenant with tls in OpenShift

Objective:

To install a MinIO Tenant with TLS in OpenShift.

Steps:

1. Assuming you have a cluster ready

2. Install the operator:

oc apply -k github.com/minio/operator/resources/\?ref\=v4.5.4

3. Scale Down Operator Replicas to One

4. securityContext as empty in Operator Deployments.

5. Create the Operator Route to connect to the UI.

6. Install cert manager from Operator Hub.

7. Deploy the tenant with tls:

• File: ~/operator/examples/kustomization/tenant-certmanager/tenant.yaml

apiVersion: minio.min.io/v2
kind: Tenant
metadata:
  name: storage
  namespace: minio-tenant
spec:
  ## Disable default tls certificates.
  requestAutoCert: false
  ## Use certificates generated by cert-manager.
  externalCertSecret:
    - name: tenant-certmanager-tls
      type: cert-manager.io/v1
  ## Specification for MinIO Pool(s) in this Tenant.
  pools:
    - servers: 1
      name: pool-0
      volumesPerServer: 1
      ## Configure security context
      securityContext: {}
      volumeClaimTemplate:
        apiVersion: v1
        kind: persistentvolumeclaims
        metadata: { }
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 1Gi
          storageClassName: standard

oc apply -k ~/operator/examples/kustomization/tenant-certmanager

Result: