# PSMDB Minio K8S

**URL:** <https://forums.percona.com/t/psmdb-minio-k8s/13573>\
**Category:** Percona Backup for MongoDB\
**Created:** [December 20, 2021, 8:38pm UTC](https://forums.percona.com/t/psmdb-minio-k8s/13573 "2021-12-20T20:38:55Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![SteelDI](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@SteelDI](https://forums.percona.com/u/SteelDI)\
**Post date:** [December 20, 2021, 8:38pm UTC](https://forums.percona.com/t/psmdb-minio-k8s/13573/1 "2021-12-20T20:38:55Z")

</div>

Hi. Please help. I trying to understand where error but my brain is explodes.  
In sidecar container “backup-agent” of mongod i see this error -

```auto
 check storage connecion: storage check failed with: get S3 object header: Forbidden: Forbidden
	status code: 403,

```

And i dig in docs and try to set differnet values. What i do wrong?  
Secret file

```auto
Name: mongo-backup
Namespace: mongo-auth
Labels: <none>
Annotations: <none>
Type: Opaque
Data
====
AWS_SECRET_ACCESS_KEY: 26 bytes
AWS_ACCESS_KEY_ID: 19 bytes

```

And part of storage config

```auto
    storages:
      minio:
        s3:
          bucket: ${BUCKET_NAME}
          credentialsSecret: mongo-backup
          endpointUrl: http://minio.minio.svc.cluster.local:9000/
          prefix: mongo/mongo-auth
          region: minio
        type: s3
    tasks:
      - compressionType: gzip
        enabled: true
        name: mongo-daily-backup
        schedule: '*/3 * * * *'
        storageName: minio

```

---

<div class="post-metadata">

**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\
**Post date:** [December 21, 2021, 9:02am UTC](https://forums.percona.com/t/psmdb-minio-k8s/13573/2 "2021-12-21T09:02:08Z")

</div>

Do the credentials that you have supplied to Operator are sufficient to get S3 objects from the bucket?  
Have you tried to connect to minio with these credentials manually?

From Operator side of things all looks okay. We run e2e tests for every PR for Minio and I see it passes.

---

<div class="post-metadata">

**Author:** ![SteelDI](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@SteelDI](https://forums.percona.com/u/SteelDI)\
**Post date:** [December 21, 2021, 10:42am UTC](https://forums.percona.com/t/psmdb-minio-k8s/13573/3 "2021-12-21T10:42:54Z")

</div>

Yes, of course. I tryed to login manually. I try to debug minio to check new connection, but one more thing, minio setupped like gcs proxy, maybe this do some changes.

---

<div class="post-metadata">

**Author:** ![SteelDI](https://avatars.discourse-cdn.com/v4/letter/s/f19dbf/32.png) [@SteelDI](https://forums.percona.com/u/SteelDI)\
**Post date:** [December 21, 2021, 10:50am UTC](https://forums.percona.com/t/psmdb-minio-k8s/13573/4 "2021-12-21T10:50:54Z")

</div>

```auto
[403 Forbidden] s3.HeadObject minio.minio:9000/${BUCKET_NAME}/mongo/mongo-auth/.pbm.init 10.101.23.198

```

But this file does not exist in the bucket.

---

<div class="post-metadata">

**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\
**Post date:** [December 23, 2021, 8:22am UTC](https://forums.percona.com/t/psmdb-minio-k8s/13573/5 "2021-12-23T08:22:40Z")

</div>

From Operator side your configuration is fine. Unfortunately I can’t help with debugging minio / gcs here.

As for pbm.init - it tries to create it and gets 403.