geocrop-platform./plan/00B_minio_buckets.md

44 lines
1.5 KiB
Markdown

# Step 0.3: MinIO Bucket Verification
**Date:** 2026-02-28
**Executed by:** Roo (Code Agent)
## MinIO Client Setup
- **mc version:** RELEASE.2025-08-13T08-35-41Z
- **Alias:** `geocrop-minio` → http://localhost:9000 (via kubectl port-forward)
- **Access credentials:** minioadmin / minioadmin123
## Bucket Summary
| Bucket Name | Purpose | Status | Policy |
|-------------|---------|--------|--------|
| `geocrop-baselines` | DW baseline COGs | Already existed | Private |
| `geocrop-datasets` | Training datasets | Already existed | Private |
| `geocrop-models` | Trained ML models | Already existed | Private |
| `geocrop-results` | Output COGs from inference | **Created** | Private |
## Actions Performed
1. ✅ Verified mc client installed (v2025-08-13)
2. ✅ Set up MinIO alias using kubectl port-forward
3. ✅ Verified existing buckets: 3 found
4. ✅ Created missing bucket: `geocrop-results`
5. ✅ Set all bucket policies to private (no anonymous access)
## Final Bucket List
```
[2026-02-27 23:14:49 CET] 0B geocrop-baselines/
[2026-02-27 23:00:51 CET] 0B geocrop-datasets/
[2026-02-27 17:17:17 CET] 0B geocrop-models/
[2026-02-28 08:47:00 CET] 0B geocrop-results/
```
## Notes
- Access via Kubernetes internal DNS (`minio.geocrop.svc.cluster.local`) requires cluster-internal execution
- External access achieved via `kubectl port-forward -n geocrop svc/minio 9000:9000`
- All buckets are configured with private access - objects accessible only with valid credentials
- No public read access enabled on any bucket