first commit

minio-ingress.yaml

@@ -0,0 +1,107 @@
+# Configuration Ingress pour MinIO RBER
+# Deux Ingress nécessaires : API S3 et Console Web
+
+---
+# Ingress pour l'API MinIO (S3) - Port 9000
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: minio-api-ingress
+  namespace: object-store
+  annotations:
+    haproxy.org/timeout-client: "3600s"
+    haproxy.org/timeout-server: "3600s"
+    haproxy.org/timeout-http-request: "3600s"
+    haproxy.org/timeout-http-keep-alive: "3600s"
+    # Augmenter la taille max pour les uploads
+    haproxy.org/request-set-header: |
+      X-Forwarded-Proto https if { ssl_fc }
+    # Désactiver le buffering pour les gros fichiers
+    haproxy.org/server-proto: "h1"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: s3.rber.bj
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: minio
+            port:
+              number: 9000
+  # Si vous avez configuré TLS
+  # tls:
+  # - hosts:
+  #   - s3.rber.bj
+  #   secretName: minio-tls-secret
+
+---
+# Ingress pour la Console MinIO (Interface Web) - Port 9001
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: minio-console-ingress
+  namespace: object-store
+  annotations:
+    haproxy.org/timeout-client: "3600s"
+    haproxy.org/timeout-server: "3600s"
+    haproxy.org/server-proto: "h1"
+    # Important pour WebSocket (console interactive)
+    haproxy.org/backend-config-snippet: |
+      option http-server-close
+      option forwardfor
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: console.s3.rber.bj
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: minio
+            port:
+              number: 9001
+  # Si vous avez configuré TLS
+  # tls:
+  # - hosts:
+  #   - console.s3.rber.bj
+  #   secretName: minio-console-tls-secret
+
+---
+# Alternative : Un seul Ingress avec path-based routing
+# (moins recommandé pour MinIO)
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: minio-unified-ingress
+  namespace: object-store
+  annotations:
+    haproxy.org/timeout-client: "3600s"
+    haproxy.org/timeout-server: "3600s"
+    haproxy.org/path-rewrite: "/console /"
+spec:
+  ingressClassName: haproxy
+  rules:
+  - host: s3.rber.bj
+    http:
+      paths:
+      # API S3
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: minio
+            port:
+              number: 9000
+      # Console (via sous-chemin)
+      - path: /console
+        pathType: Prefix
+        backend:
+          service:
+            name: minio
+            port:
+              number: 9001