# Summary This pull adds back the OpenShift docs as a full dedicated platform The main changes are: - Adding the conditionals for OpenShift - Modifying the Makefile for the new platform - Adding the tutorials back in - Fixing up the navigation headers This was not too much trouble, which bodes well for the future.
5.4 KiB
Deploy a Tenant using the OpenShift Web Console
1) Access the MinIO Operator Interface
You can find the MinIO Operator Interface from the Operators
left-hand
navigation header.
- Go to
Operators
, thenInstalled Operators
. - For the
Project
dropdown, selectopenshift-operators
. - Select
MinIO Operators
from the list of installed operators.
Click Create Tenant
to begin the Tenant Creation
process.
2) Create the Tenant
The Form View
provides a user interface for configuring the new MinIO Tenant.
- Ensure the
Tenant Secret -> Name
is set to the name of the MinIO Root User Kubernetes Secret created as part of the prerequisites. - Ensure the
Console -> Console Secret -> Name
is set to the name of the MinIO Console Kubernetes Secret created as part of the prerequisites.
You can also use the YAML view to perform more granular configuration
of the MinIO Tenant. Refer to the MinIO Custom Resource Definition Documentation <operator/blob/master/docs/crd.adoc>
for guidance on setting specific fields. MinIO also publishes examples
for additional guidance in creating custom Tenant YAML objects. Note
that the OperatorHub YAML view supports creating only the MinIO Tenant
object. Do not specify any other objects as part of the YAML input.
Changes to one view are reflected in the other. For example, you can
make modifications in the YAML View
and see those changes in the Form View
.
Security Context Configuration
If your OpenShift cluster Security Context Configuration restricts
the supported pod security contexts, open the YAML View and locate the
spec.pools[n].securityContext
and
spec.console.securityContext
objects. Modify the
securityContext
settings to use a supported UID based on
the SCC of your OpenShift Cluster.
Click Create
to
create the MinIO Tenant using the specified configuration. Use the
credentials specified as part of the MinIO Root User secret to access
the MinIO Server.
3) Connect to the Tenant
The MinIO Operator creates services for the MinIO Tenant. Use the
oc get svc -n NAMESPACE
command to review the deployed
services:
oc get svc -n minio-tenant-1
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
minio LoadBalancer 10.97.114.60 <pending> 443:30979/TCP 2d3h
minio-tenant-1-console LoadBalancer 10.106.103.247 <pending> 9443:32095/TCP 2d3h
minio-tenant-1-hl ClusterIP None <none> 9000/TCP 2d3h
minio-tenant-1-log-hl-svc ClusterIP None <none> 5432/TCP 2d3h
minio-tenant-1-log-search-api ClusterIP 10.103.5.235 <none> 8080/TCP 2d3h
minio-tenant-1-prometheus-hl-svc ClusterIP None <none> 9090/TCP 7h39m
- The
minio
service corresponds to the MinIO Tenant service. Applications should use this service for performing operations against the MinIO Tenant. - The
*-console
service corresponds to theMinIO Console <console>
. Administrators should use this service for accessing the MinIO Console and performing administrative operations on the MinIO Tenant.
The remaining services support Tenant operations and are not intended for consumption by users or administrators.
By default each service is visible only within the Kubernetes
cluster. Applications deployed inside the cluster can access the
services using the CLUSTER-IP
.
Applications external to the Kubernetes cluster can access the
services using the EXTERNAL-IP
. This value is only
populated for Kubernetes clusters configured for Ingress or a similar
network access service. Kubernetes provides multiple options for
configuring external access to services. See the Kubernetes
documentation on Publishing Services (ServiceTypes) <concepts/services-networking/service/#publishing-services-service-types>
and Ingress <concepts/services-networking/ingress/>
for more complete information on configuring external access to
services.
4) Forward Ports
You can temporarily expose each service using the
oc port-forward
utility. Run the following examples to
forward traffic from the local host running oc
to the
services running inside the Kubernetes cluster.
MinIO Tenant
oc port-forward service/minio 443:443
MinIO Console
oc port-forward service/minio-tenant-1-console 9443:9443