Ok. Here are my findings:
minio-operator by default is exposed with https only. I have not found the way to disable TLS.
So in the configuration of PSMDB Operator you should have https link:
If you try to take the backup by creating the CR - the backup will fail with the following error:
mongodump: write data: upload to S3: RequestError: send request failed
caused by: Put "https://minio.minio.svc.cluster.local:443/sp-test/2021-05-25T11%3A31%3A25Z_cfg.dump.gz": x509: certificate signed by unknown authority.
The fix is obvious - apply the valid certificate. Minio Operator has the option.
One of the features that we can implement in our PSMDB Operator though is to disable cert check for PBM. I will create the ticket for it.
- If I install Minio from old helm chart (which is considered deprecated):
helm repo add minio https://helm.min.io/
helm install \
--namespace minio \
--set accessKey=mykey \
--set secretKey=mysecretkey \
--set service.type=ClusterIP \
--set configPath=/tmp/.minio/ \
--set persistence.size=2G \
--set environment.MINIO_REGION=us-east-1 \
I can reach minio via http on port 9000 and my endpointUrl would look like this:
In that case backups work fine with no additional tweaks:
$ ./mc ls myminio/sp-test
[2021-05-25 15:19:07 MSK] 5B .pbm.init
[2021-05-25 15:19:31 MSK] 2.0KiB 2021-05-25T12:19:06Z.pbm.json
[2021-05-25 15:19:26 MSK] 106KiB 2021-05-25T12:19:06Z_cfg.dump.gz
[2021-05-25 15:19:29 MSK] 998B 2021-05-25T12:19:06Z_cfg.oplog.gz
[2021-05-25 15:19:25 MSK] 12KiB 2021-05-25T12:19:06Z_rs0.dump.gz
[2021-05-25 15:19:31 MSK] 216B 2021-05-25T12:19:06Z_rs0.oplog.gz
Now I’m confused with your configuration, @SpoorthiPalakshaiah .
- How have you deployed minio? Please provide detailed steps and show the Service objects in k8s that you have for minio.
- Do you have it exposed via http or https?
- If you say that mc client can work - how do you do it? What is the exact command with full connection string and ports that you use to add an alias? Do you use --insecure flag?
As you see minio works fine, so it depends on your config and has nothing to do with PSMDB Operator.