Files
deployment/README.configure.md
T
Cédric VerstraetenandCopilot 8619bb1965 Use Garage environment secrets and document S3 setup
Avoid Garage's root-owned secret-file permission incompatibility with non-root Kubernetes mounts. Validate generated secret formats and document fresh installation, Vault provider configuration and preservation of existing MinIO data.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 10:51:01 +00:00

3.4 KiB

Configuration

After completing the installation using one of the provided methods, you can proceed with the configuration and setup of the various components. Depending on your deployment method, refer to the appropriate README for detailed instructions:

Access through ingress or NodePort

Taking into account your installation you should be able to access the different applications using their relative Ingress or NodePort. For example when following the Kustomize installation

Login to Vault

Once you have access to the Vault user interface, you should be able to login with a username and password. You will find the username and password here.

Configure the Vault

With the Vault installed, we can proceed to configure the various components. Currently, this must be done through the Vault UI, but we plan to make it configurable via environment variables, eliminating the need for manual UI configurations.

Configure Vault

  • Navigate to the Storage Providers menu and select the (+ Add Storage Provider) button. Verify and add the provider using the Garage setup guide. These settings apply to the default Kubernetes installation; retain the matching provider settings for an existing MinIO or Docker installation.

    • MinIO/S3-compatible provider type (Garage backend)
      • Enabled: true
      • Provider name: garage
      • Bucket name: mybucket
      • Region: garage
      • Hostname: garage.garage:3900
      • SSL: false
      • Access key: access-key from Secret garage/garage-credentials
      • Secret key: secret-key from the same Secret
  • Navigate to the Integrations menu and select the (+ Add Integration) button. A modal will appear where you can input the required details. After entering the information, click the "Verify" button to ensure the configuration is valid. Once you receive a "Configuration is valid and working" message, click the "Add Integration" button to complete the process. (!You are advised to generate more complex username and password for RabbitMQ, this is just for demo purposes, do not use this in production)

    • RabbitMQ
      • Enabled: true
      • Integration name: rabbitmq
      • Broker: rabbitmq.rabbitmq:5672
      • Exchange:
      • Queue: data-filtering
      • Username: yourusername
      • Password: yourpassword
  • Navigate to the Accounts menu and click the (+ Add Account) button. A modal will appear where you can input the required details. After entering the information, click the "Add Account" button to complete the process.

    • Enabled: true
    • Account name: myaccount
    • Main provider: garage
    • Day limit: 30
    • Integration: rabbitmq
    • Directory: *
    • Access key: XJoi2@bgSOvOYBy# (or generate new keys, but don't forget to update them in the next steps)
    • Secret key: OGGqat4lXRpL@9XBYc8FUaId@5 (or generate new keys, but don't forget to update them in the next steps)