helm upgrade --install minio oci://registry-1.docker.io/bitnamicharts/minio \
  --namespace minio \
  --version 13.8.4 \
  --create-namespace \
  --set defaultBuckets=platform-bucket \
  --set auth.rootUser=admin \
  --set auth.rootPassword=your-secure-password \
  --set provisioning.enabled=true \
  --set "provisioning.config[0].name=region" \
  --set "provisioning.config[0].options.name=us-east-1"

Create Service Account

mc admin user svcacct add minio platform-user

For Production Use:

Configure proper storage class
Set up backup procedures
Enable encryption
Configure monitoring

State encryption

### Generate encryption key bash openssl rand -base64 32

Store this encryption key securely - it's used to protect platform state data.

Information collection

Required values for platform installation

deploymentEngine:
  state:
    # AWS S3
    connectionUrl: 's3://bucket-name?region=us-east-1&endpoint=s3.amazonaws.com'

    # Azure Blob Storage
    connectionUrl: 'azblob://<container-path>'

    # Google Cloud Storage
    connectionUrl: 'gs://bucket-name'

    credentials:
      encryptionKey: 'your-generated-key' # From openssl command

      # AWS Credentials
      aws:
        accessKeyId: 'your-access-key'
        secretAccessKey: 'your-secret-key'
        region: 'us-east-1'

      # Azure Credentials
      azure:
        storageAccount: 'storage-account-name'
        storageKey: 'storage-account-key'

      # GCP Credentials
      google:
        project: 'project-id'
        credentials: |
          {
            "type": "service_account",
            "project_id": "your-project",
            "private_key_id": "key-id",
            "private_key": "-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n",
            "client_email": "[email protected]",
            "client_id": "client-id",
            "auth_uri": "https://accounts.google.com/o/oauth2/auth",
            "token_uri": "https://oauth2.googleapis.com/token",
            "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
            "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/[email protected]"
          }

Validation

Test AWS S3

aws s3 ls s3://your-bucket \
  --endpoint-url your-endpoint \
  --access-key your-access-key \
  --secret-key your-secret-key

Test azure storage

az storage blob list \
  --container-name your-container \
  --account-name your-storage-account \
  --account-key your-storage-key

Test google cloud storage

gsutil ls gs://your-bucket

Make sure you have installed and configured the respective CLI tools: - AWS CLI: aws configure - Azure CLI: az login - Google Cloud CLI: gcloud auth login