234 lines
4.5 KiB
Markdown
234 lines
4.5 KiB
Markdown
> 本文作者：丁辉
|
|
|
|
# Helm 部署 Minio
|
|
|
|
## 介绍
|
|
|
|
**Minio 是一个高性能、开源的云存储和对象存储服务器，适用于任何规模的应用**。
|
|
|
|
## 开始部署
|
|
|
|
[官方仓库](https://github.com/minio/minio/tree/master/helm/minio)
|
|
|
|
1. 添加仓库
|
|
|
|
```bash
|
|
helm repo add minio https://charts.min.io/
|
|
helm repo update
|
|
```
|
|
|
|
2. 创建命名空间
|
|
|
|
```bash
|
|
kubectl create namespace minio
|
|
```
|
|
|
|
3. 编写 Yaml 文件
|
|
|
|
```bash
|
|
vi minio-values.yaml
|
|
```
|
|
|
|
内容如下
|
|
|
|
```yaml
|
|
# 开启 ingress 对外访问
|
|
consoleIngress:
|
|
enabled: true
|
|
ingressClassName: # 指定 ingress 控制器, 不指定则需要集群内存在默认的 ingress 控制器
|
|
annotations:
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "1024m" # 调整文件上传允许传输大小
|
|
path: /
|
|
hosts:
|
|
- # 域名
|
|
tls:
|
|
- secretName: minio-tls
|
|
hosts:
|
|
- # 域名
|
|
|
|
# 配置镜像加速
|
|
image:
|
|
repository: quay.io/minio/minio
|
|
tag: latest
|
|
pullPolicy: IfNotPresent
|
|
|
|
# 配置 Minio 用户密码
|
|
rootUser: "填写账户"
|
|
rootPassword: "填写密码"
|
|
replicas: 1
|
|
|
|
# 开启持久化存储
|
|
persistence:
|
|
enabled: true
|
|
storageClass: "" # 指定存储卷, 不指定则需要集群内存在默认的存储卷
|
|
|
|
# 独立部署模式
|
|
mode: standalone
|
|
resources:
|
|
requests:
|
|
memory: 512Mi
|
|
|
|
# 指定分享访问地址
|
|
environment:
|
|
MINIO_SERVER_URL: "https://域名:9000"
|
|
```
|
|
|
|
4. 创建 Nginx 证书 secret
|
|
|
|
> cert为.pem和.crt文件都可以
|
|
|
|
```bash
|
|
kubectl create secret tls minio-tls --key nginx.key --cert nginx.pem -n minio
|
|
```
|
|
|
|
5. 安装
|
|
|
|
```bash
|
|
helm install --namespace minio minio minio/minio -f minio-values.yaml
|
|
```
|
|
|
|
6. 部署 Nginx 代理
|
|
|
|
```bash
|
|
vi default.conf
|
|
```
|
|
|
|
内容如下
|
|
|
|
```nginx
|
|
server {
|
|
listen 9000 ssl;
|
|
server_name localhost; # 这里替换自己的域名
|
|
|
|
client_max_body_size 1024m; # 限制上传文件大小
|
|
|
|
ssl_certificate /etc/nginx/conf.d/cert/tls.crt;
|
|
ssl_certificate_key /etc/nginx/conf.d/cert/tls.key;
|
|
|
|
location / {
|
|
proxy_set_header X-FORWARDED-FOR $remote_addr;
|
|
proxy_set_header X-FORWARDED-PROTO $scheme;
|
|
proxy_set_header Host $http_host;
|
|
proxy_pass http://minio:9000;
|
|
}
|
|
}
|
|
```
|
|
|
|
7. 编辑 Dockerfile
|
|
|
|
```bash
|
|
vi Dockerfile
|
|
```
|
|
|
|
内容如下
|
|
|
|
```dockerfile
|
|
FROM nginx:alpine-slim
|
|
|
|
COPY ./default.conf /etc/nginx/conf.d/default.conf
|
|
|
|
EXPOSE 9000
|
|
```
|
|
|
|
8. 构建镜像
|
|
|
|
```bash
|
|
docker build -t minio-gateway:v1.0 .
|
|
```
|
|
|
|
9. 查看 Minio SVC IP
|
|
|
|
```bash
|
|
kubectl get svc -n minio | grep 9000 | awk '{print $3}'
|
|
```
|
|
|
|
10. 编辑 Yaml
|
|
|
|
```bash
|
|
vi minio-gateway.yaml
|
|
```
|
|
|
|
内容如下
|
|
|
|
```yaml
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
namespace: minio
|
|
name: minio-gateway
|
|
labels:
|
|
app: minio-gateway
|
|
spec:
|
|
selector:
|
|
matchLabels:
|
|
app: minio-gateway
|
|
template:
|
|
metadata:
|
|
labels:
|
|
app: minio-gateway
|
|
spec:
|
|
hostNetwork: true
|
|
hostAliases:
|
|
- ip: "" #填入 Minio SVC IP
|
|
hostnames:
|
|
- "minio"
|
|
containers:
|
|
- name: minio-gateway
|
|
image: minio-gateway:v1.0
|
|
imagePullPolicy: IfNotPresent
|
|
ports:
|
|
- containerPort: 9000
|
|
protocol: TCP
|
|
readinessProbe:
|
|
failureThreshold: 3
|
|
initialDelaySeconds: 5
|
|
periodSeconds: 3
|
|
successThreshold: 1
|
|
tcpSocket:
|
|
port: 9000
|
|
timeoutSeconds: 10
|
|
resources:
|
|
limits:
|
|
memory: 128Mi
|
|
volumeMounts:
|
|
- name: ssl
|
|
mountPath: "/etc/nginx/conf.d/cert/"
|
|
volumes:
|
|
- name: ssl
|
|
secret:
|
|
secretName: minio-ssl
|
|
```
|
|
|
|
11. 部署
|
|
|
|
```bash
|
|
kubectl apply -f minio-gateway.yaml
|
|
```
|
|
|
|
## 卸载
|
|
|
|
1. 卸载网关
|
|
|
|
```bash
|
|
kubectl delete -f minio-gateway.yaml
|
|
```
|
|
|
|
2. 卸载 minio
|
|
|
|
```bash
|
|
helm uninstall minio -n minio
|
|
```
|
|
|
|
3. 删除 secret
|
|
|
|
```bash
|
|
kubectl delete secret minio-tls -n minio
|
|
```
|
|
|
|
4. 删除命名空间
|
|
|
|
```bash
|
|
kubectl delete namespace minio
|
|
```
|
|
|