995b46a680
Move all compiled binary uploads/downloads from public Scaleway S3 to MinIO running inside Kapsule. Keeps proprietary binaries and trained models off the public internet. - CI compile/upload jobs: Scaleway → MinIO endpoint + credentials - train.sh: all 3 rclone blocks → RCLONE_CONFIG_MINIO_* - Deploy stage: apply MinIO manifests + wait for readiness before rollout - Add infra/k8s/minio/ (Deployment, Service, Secret, PVC, init-buckets Job) - Update s3-credentials.secret.example → minio-credentials format IaC Terragrunt jobs and SCW registry pulls intentionally unchanged. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
25 lines
814 B
Plaintext
25 lines
814 B
Plaintext
# MinIO credentials for rclone output sync in training jobs.
|
|
# No longer needed as a standalone secret — training jobs now use minio-credentials
|
|
# (deployed via infra/k8s/minio/minio.yaml).
|
|
#
|
|
# If you need to recreate manually:
|
|
# kubectl -n foxhunt create secret generic minio-credentials \
|
|
# --from-literal=access-key=<MINIO_ACCESS_KEY> \
|
|
# --from-literal=secret-key=<MINIO_SECRET_KEY> \
|
|
# --from-literal=root-user=<MINIO_ACCESS_KEY> \
|
|
# --from-literal=root-password=<MINIO_SECRET_KEY>
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: minio-credentials
|
|
namespace: foxhunt
|
|
labels:
|
|
app.kubernetes.io/name: minio-credentials
|
|
app.kubernetes.io/part-of: foxhunt
|
|
type: Opaque
|
|
stringData:
|
|
access-key: REPLACE_ME
|
|
secret-key: REPLACE_ME
|
|
root-user: REPLACE_ME
|
|
root-password: REPLACE_ME
|