resource "random_password" "minio_access_key" {
  length  = 20
  special = false
}

resource "random_password" "minio_secret_key" {
  length  = 40
  special = true
}

resource "helm_release" "minio" {
  name             = "minio"
  repository       = "https://charts.bitnami.com/bitnami"
  chart            = "minio"
  namespace        = "minio"
  create_namespace = true

  set_sensitive {
    name  = "auth.rootUser"
    value = random_password.minio_access_key.result
  }

  set_sensitive {
    name  = "auth.rootPassword"
    value = random_password.minio_secret_key.result
  }



  values = [
    <<-EOT
    ingress:
      enabled: false
      ingressClassName: traefik
      tls: true
      hostname: ${local.hostname_admin}
      annotations:
        kubernetes.io/ingress.class: traefik
        cert-manager.io/cluster-issuer: letsencrypt
        traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
    apiIngress:
      enabled: true
      ingressClassName: traefik
      tls: true
      hostname: ${local.hostname_api}
      annotations:
        kubernetes.io/ingress.class: traefik
        cert-manager.io/cluster-issuer: letsencrypt
        traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
    EOT
  ]
}