Minio S3 Compatible Object Storage

# Docker
docker run -p 9000:9000 -p 9001:9001 \
  -e MINIO_ROOT_USER=admin \
  -e MINIO_ROOT_PASSWORD=changeme123 \
  minio/minio server /data --console-address ":9001"

helm install minio minio/minio \
  --namespace minio --create-namespace \
  --set replicas=4 \
  --set persistence.size=100Gi \
  --set resources.requests.memory=1Gi

# Configure alias
mc alias set myminio http://minio.myminio:9000 admin changeme123

# Create bucket
mc mb myminio/backups

# Upload files
mc cp backup.tar.gz myminio/backups/

# List contents
mc ls myminio/backups/

# Mirror a directory (sync)
mc mirror ./artifacts myminio/ci-artifacts/

terraform {
  backend "s3" {
    bucket   = "terraform-state"
    key      = "production/terraform.tfstate"
    endpoint = "http://minio.internal:9000"
    region   = "us-east-1"

    skip_credentials_validation = true
    skip_metadata_api_check     = true
    skip_region_validation      = true
    force_path_style            = true

    access_key = "admin"
    secret_key = "changeme123"
  }
}

velero install \
  --provider aws \
  --plugins velero/velero-plugin-for-aws:v1.9.0 \
  --bucket velero-backups \
  --secret-file ./minio-credentials \
  --backup-location-config \
    region=us-east-1,s3ForcePathStyle=true,s3Url=http://minio.internal:9000

# Loki config
storage_config:
  aws:
    s3: http://admin:changeme123@minio.internal:9000/loki-logs
    s3forcepathstyle: true

export MLFLOW_S3_ENDPOINT_URL=http://minio.internal:9000
export AWS_ACCESS_KEY_ID=admin
export AWS_SECRET_ACCESS_KEY=changeme123

mlflow server --artifacts-destination s3://mlflow-artifacts/

# Public read access
mc anonymous set download myminio/public-assets

# Bucket-level policy
mc admin policy create myminio ci-upload ci-policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": ["s3:PutObject"],
      "Resource": ["arn:aws:s3:::ci-artifacts/*"]
    }
  ]
}

# Delete objects older than 30 days
mc ilm rule add myminio/ci-artifacts \
  --expiry-days 30

# Move to cold storage after 7 days (tiering)
mc ilm rule add myminio/logs \
  --transition-days 7 \
  --storage-class COLD

# Setup replication from primary to DR site
mc admin bucket remote add myminio/backups \
  http://admin:changeme123@dr-minio.internal:9000/backups \
  --service replication

mc replicate add myminio/backups