ميني آيو
نظره عامه
ميني آيو is the default object storage backend for إيلوم in the 6.7.x
line. The Bitnami ميني آيو chart is bundled as a sub-chart of helm_aio
and renders when minio.enabled هل صحيح, which is the chart default.
RustFS is bundled alongside it as an opt-in provider and is planned to
become the default in 6.8.0.
| Property | قيمة |
|---|---|
| ترخيص | AGPL-3.0 (server), Apache-2.0 (client mc) |
| Status in Ilum | Default in 6.7.x (opt-in from 6.8.0) |
| Bundled chart | Bitnami minio-15.0.7 (mirrored via bitnamilegacy/minio) |
Default in helm_aio | Enabled (minio.enabled=true) |
| Distributed mode | Supported, follow the Bitnami chart documentation |
| Console UX | Full administrative web console at / خارجي / مينيو / |
| OIDC integration | Supported via MINIO_IDENTITY_OPENID_* env vars (Hydra preconfigured) |
When to use MinIO
- An existing إيلوم install was provisioned before RustFS shipped and the operator prefers to keep the proven storage layer unchanged.
- The deployment depends on ميني آيو-specific features such as bucket replication, lifecycle policies, IAM policy variables, or KMS integration that the current RustFS alpha does not yet match.
- A clustered, erasure-coded, multi-node distributed configuration is required today.
Enable MinIO as the active provider
In the 6.7.x line ميني آيو is the default provider, so a net-new install runs on ميني آيو with no flags:
helm install ilum ilum/helm_aio
To pin ميني آيو explicitly (recommended for 6.8.0 and later, where
RustFS becomes the default), set the two Helm flags below. The
provider registry under objectStorage.providers.minio ships with
sensible defaults; the operator does not need to touch it for a standard
install.
helm upgrade ilum ilum/helm_aio \
--جبر rustfs.enabled=خطأ \
--جبر minio.enabled=صحيح
ال ilum-objectstorage Service alias selects pods with label
app.kubernetes.io/name: minio and routes both consumer S3 traffic and
the إيلوم UI's Object Storage iframe to ميني آيو.
Registry entry
The chart ships the following registry defaults for ميني آيو:
objectStorage:
providers:
مينيو:
consolePath: / خارجي / مينيو /
consoleMode: nginx-rewrite
ال consoleMode: nginx-rewrite instructs the إيلوم UI's nginx
reverse proxy to redirect requests for /external/object-storage/ ل
/ خارجي / مينيو /. ميني آيو pins its own console to that absolute URL
through the MINIO_BROWSER_REDIRECT_URL environment variable, so the
proxy cannot rewrite the path on the fly.
Prometheus metrics
ميني آيو exposes Prometheus-format metrics under /minio/metrics/v3,
with category-specific paths appended (for example, /minio/metrics/v3/api
و /minio/metrics/v3/cluster). Bearer-token authentication is
required by default. Generate a long-lived scrape token with the
bundled mc client:
كوبيكتل -ن إيلوم exec deploy/ilum-core -- \
mc admin prometheus generate ilum-objectstorage cluster
The command prints a sample Prometheus scrape_config block including
the bearer token. Splice the authorization.credentials value into the
Prometheus server's configuration.
Operators that prefer an unauthenticated endpoint can set
MINIO_PROMETHEUS_AUTH_TYPE=public on the ميني آيو deployment to
disable the bearer-token requirement. This change is irreversible
without a Pod restart.
For the full metrics catalog, refer to MinIO Prometheus metrics.
Known limitations
- Single-path console binding. ال ميني آيو console is reachable
only at
/ خارجي / مينيو /. Operators serving إيلوم behind a non-default base path must update both theMINIO_BROWSER_REDIRECT_URLvalue and theobjectStorage.providers.minio.consolePathentry. - Root credentials sealed at first install. ميني آيو records the
root user when its
Podstarts for the first time. Rotating the sharedilum-objectstorage-credentialsSecretafterwards does not change the live ميني آيو root user. To rotate ميني آيو credentials, follow the rotation procedure in Rotate Object Storage Credentials. - License. ال ميني آيو server is licensed under AGPL-3.0. Operators redistributing إيلوم مع ميني آيو enabled should review the obligations that the AGPL imposes on hosted services.
Disable MinIO
To stop running ميني آيو after a migration to another provider, set
minio.enabled=false. The chart's pre-upgrade hook detects the existing
ميني آيو PersistentVolumeClaim and refuses to proceed if disabling
ميني آيو would orphan it without an acknowledged cutover. Follow the
documented migration procedure in
Migrate Between Providers to disable
ميني آيو safely.
Reference
- Bitnami chart documentation: bitnami/minio
- ميني آيو server documentation: min.io/docs/minio
- Migration: Migrate Between Providers
- وثائق التفويض: Rotate Object Storage Credentials
- Helm values: Object Storage Helm Values