♻️ flux kustomizations

kubernetes/apps/volsync/readme.md

@@ -0,0 +1,65 @@
+# Volsync
+
+## S3 Configuration
+
+1. Create `~/.mc/config.json`
+
+   ```json
+   {
+     "version": "10",
+     "aliases": {
+       "minio": {
+         "url": "https://s3.<domain>",
+         "accessKey": "<access-key>",
+         "secretKey": "<secret-key>",
+         "api": "S3v4",
+         "path": "auto"
+       }
+     }
+   }
+   ```
+
+2. Create the volsync user and password
+
+   ```sh
+   mc admin user add minio volsync <super-secret-password>
+   ```
+
+3. Create the volsync bucket
+
+   ```sh
+   mc mb minio/volsync
+   ```
+
+4. Create `volsync-user-policy.json`
+
+   ```json
+   {
+     "Version": "2012-10-17",
+     "Statement": [
+       {
+         "Action": [
+           "s3:ListBucket",
+           "s3:PutObject",
+           "s3:GetObject",
+           "s3:DeleteObject"
+         ],
+         "Effect": "Allow",
+         "Resource": ["arn:aws:s3:::volsync/*", "arn:aws:s3:::volsync"],
+         "Sid": ""
+       }
+     ]
+   }
+   ```
+
+5. Apply the bucket policies
+
+    ```sh
+    mc admin policy add minio volsync-private volsync-user-policy.json
+    ```
+
+6. Associate private policy with the user
+
+    ```sh
+    mc admin policy set minio volsync-private user=volsync
+    ```