minio: set the region to eu-west, matching where this mesh actually runs
Left at MinIO's us-east-1 default. Novox is hosted in Germany, the team is in Belgium -- eu-west is correct, and matters beyond labeling: it's part of the SigV4 signature, so a client using the wrong region fails auth even with valid credentials. Set on the server (MINIO_REGION), the served provision value, and the runtime sidecar's own client.
This commit is contained in:
@@ -46,7 +46,7 @@
|
|||||||
"serves": {
|
"serves": {
|
||||||
"s3-bucket": {
|
"s3-bucket": {
|
||||||
"scheme": "http",
|
"scheme": "http",
|
||||||
"region": "us-east-1",
|
"region": "eu-west",
|
||||||
"port": 9000
|
"port": 9000
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
@@ -112,7 +112,8 @@
|
|||||||
],
|
],
|
||||||
"env": {
|
"env": {
|
||||||
"MINIO_ROOT_PASSWORD_FILE": "/run/secrets/root",
|
"MINIO_ROOT_PASSWORD_FILE": "/run/secrets/root",
|
||||||
"MINIO_BROWSER_REDIRECT_URL": "https://files.novox.be"
|
"MINIO_BROWSER_REDIRECT_URL": "https://files.novox.be",
|
||||||
|
"MINIO_REGION": "eu-west"
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
@@ -129,6 +130,7 @@
|
|||||||
"MESH_MINIO_ENDPOINT": "http://minio:9000",
|
"MESH_MINIO_ENDPOINT": "http://minio:9000",
|
||||||
"MESH_MINIO_ROOT_USER": "meshroot",
|
"MESH_MINIO_ROOT_USER": "meshroot",
|
||||||
"MESH_MINIO_ROOT_PASSWORD_FILE": "/run/secrets/root",
|
"MESH_MINIO_ROOT_PASSWORD_FILE": "/run/secrets/root",
|
||||||
|
"MESH_MINIO_REGION": "eu-west",
|
||||||
"MESH_BROKER_FILE": "/run/secrets/broker",
|
"MESH_BROKER_FILE": "/run/secrets/broker",
|
||||||
"MESH_RECEIVES": "/var/lib/minio/grants/mesh.json"
|
"MESH_RECEIVES": "/var/lib/minio/grants/mesh.json"
|
||||||
},
|
},
|
||||||
|
|||||||
Reference in New Issue
Block a user