Skip to content

Conversation

@hardbyte
Copy link
Collaborator

This PR is mostly around the kubernetes deployment of minio it builds on #547 .

  • removes default minio credentials
  • provides info through the temp auth api about whether minio requires a secure connection
  • tweaks the temp auth api to return a 201 rather than 200 status code.
  • uses the external address of minio, if the user has configured an ingress
  • I updated the notes that are printed on deployment too.

Other than the e2e tests I've also drafted a branch of anonlink-client which uses a deployment of this expose-minio branch to fetch credentials and upload data directly to the object store.

@hardbyte hardbyte requested a review from wilko77 April 22, 2020 03:17
@hardbyte hardbyte marked this pull request as ready for review April 22, 2020 22:35
Copy link
Collaborator

@wilko77 wilko77 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks fine

config.UPLOAD_OBJECT_STORE_SERVER,
config.UPLOAD_OBJECT_STORE_ACCESS_KEY,
config.UPLOAD_OBJECT_STORE_SECRET_KEY,
region="us-east-1",
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why is region hard-coded when everything else is configurable?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It could be configurable but we'd probably have to introduce another minio/boto client just to connect to us-east-1 for the granting the temporary credentials.

Comment on lines 12 to 14
## Disable the feature providing client's with restricted upload access to the object store.
## By default we don't expose the Minio object store, however it needs to be exposed when
## enabling this feature. See section `minio.ingress`.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't understand this comment. So what do I have to set this to to enable client upload to our Minio object store?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'll clarify this

@hardbyte hardbyte merged commit e01a584 into develop Apr 27, 2020
@hardbyte hardbyte deleted the expose-minio branch April 27, 2020 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants