Try putting minio tenant in different namespace

apps/infra/minio-tenant-1/kustomization.yml

@@ -1,13 +1,13 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: minio-operator
+namespace: vulfminio
 resources:
   - external-secrets.yml
 helmCharts:
   - name: tenant
     repo: https://operator.min.io
     version: "5.0.15"
     releaseName: tenant
-    namespace: minio-operator
+    namespace: vulfminio
     includeCRDs: true
     valuesFile: values.yml

apps/infra/minio-tenant-1/namespace.yml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: vulfminio

apps/infra/minio-tenant-1/values.yml

@@ -8,13 +8,13 @@ tenant:
   name: vulfminio
   configuration:
     name: minio-secret
-  features:
-    bucketDNS: true
-    domains:
-      minio:
-        - https://s3.vulf.haus
-      console: https://minio.vulf.haus
-    enableSFTP: false
+  # features:
+  #   bucketDNS: true
+  #   domains:
+  #     minio:
+  #       - https://s3.vulf.haus
+  #     console: https://minio.vulf.haus
+  #   enableSFTP: false
   pools:
     ###
     # The number of MinIO Tenant Pods / Servers in this pool.
@@ -25,23 +25,23 @@ tenant:
       volumesPerServer: 2
       size: 32Gi
       storageClassName: directpv-min-io
-ingress:
-  api:
-    enabled: true
-    ingressClassName: "traefik"
-    annotations:
-      traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-    tls:
-      - secretName: cm-shared-wildcard-vulfhaus-tls
+# ingress:
+#   api:
+#     enabled: false
+#     ingressClassName: "traefik"
+#     annotations:
+#       traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+#     tls:
+#       - secretName: cm-shared-wildcard-vulfhaus-tls
 
-    host: s3.vulf.haus
+#     host: s3.vulf.haus
 
-  console:
-    enabled: true
-    ingressClassName: "traefik"
-    annotations:
-      traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
-    tls:
-      - secretName: cm-shared-wildcard-vulfhaus-tls
+#   console:
+#     enabled: false
+#     ingressClassName: "traefik"
+#     annotations:
+#       traefik.ingress.kubernetes.io/router.entrypoints: "websecure"
+#     tls:
+#       - secretName: cm-shared-wildcard-vulfhaus-tls
 
-    host: minio.vulf.haus
+#     host: minio.vulf.haus

apps/infra/secrets/cluster-store.yml

@@ -28,4 +28,4 @@ spec:
         - atuin
         - minio-operator
         - gluetun
-        - rook-ceph
+        - vulfminio

apps/networking/certmanager/certificate.yml

@@ -15,4 +15,4 @@ spec:
     annotations:
       reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
       reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true"
-      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "media,authentik,traefik,argocd,development,longhorn-system,atuin,gluetun,minio-operator"
+      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "media,authentik,traefik,argocd,development,longhorn-system,atuin,gluetun,minio-operator,vulfminio"

apps/networking/certmanager/staging-certificate.yml

@@ -15,4 +15,4 @@ spec:
     annotations:
       reflector.v1.k8s.emberstack.com/reflection-allowed: "true"
       reflector.v1.k8s.emberstack.com/reflection-auto-enabled: "true"
-      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "media,authentik,traefik,argocd,default,development,atuin,gluetun,minio-operator"
+      reflector.v1.k8s.emberstack.com/reflection-auto-namespaces: "media,authentik,traefik,argocd,default,development,atuin,gluetun,minio-operator,vulfminio"

bootstrap/infra-project.yml

@@ -33,6 +33,8 @@ spec:
       server: "*"
     - namespace: minio-operator
       server: "*"
+    - namespace: vulfminio
+      server: "*"
 
   clusterResourceWhitelist:
     - group: "*"