MinIOJob with Tenant in different namespace not working

[chrmang]

I want to run a MinIOJob to create users and buckets in a different namespace than Tenant.
I followed documentation https://github.com/minio/operator/blob/master/docs/minio-job.md for creating resources
and https://min.io/docs/minio/kubernetes/upstream/developers/sts-for-operator.html to configure it for cross namespace.

access with mc works without any issues.

The configuration:

namespace minio-tenant

apiVersion: minio.min.io/v2
kind: Tenant
metadata:
  name: mytenant
  namespace: minio-tenant
spec:
  requestAutoCert: false
  env:
    - name: MINIO_DOMAIN
      value: <set according to doc>
    - name: MINIO_BROWSER_REDIRECT_URL
      value: <set according to doc>
    - name: MINIO_SERVER_URL
      value: <set according to doc>
  configuration:
    name: tenant-config
  pools:
    - name: pool-0
      servers: 1
      volumesPerServer: 1
      volumeClaimTemplate:
        metadata:
          name: data
        spec:
          accessModes:
            - ReadWriteOnce
          resources:
            requests:
              storage: 20Gi

apiVersion: sts.min.io/v1alpha1
kind: PolicyBinding
metadata:
  name: minio-job
  namespace: minio-tenant
spec:
  application:
    serviceaccount: minio-job
    namespace: dev
  policies:
    - consoleAdmin

namespace dev (using minio-tenant)

apiVersion: v1
kind: ServiceAccount
metadata:
  name: minio-job
  namespace: dev

apiVersion: job.min.io/v1alpha1
kind: MinIOJob
metadata:
  name: minio-job
  namespace: dev
spec:
  #  mcImage: quay.io/minio/mc:latest
  serviceAccountName: minio-job
  securityContext: {}
  containerSecurityContext: {}
  tenant:
    name: mytenant
    namespace: minio-tenant
  commands:
    - name: create-bucket
      op: make-bucket
      args:
        name: dev

Expected Behavior

The MinIOJob is running

Current Behavior

MinIOJob ressource got status.message: no policybinding found

Steps to Reproduce (for bugs)

Apply provided config to 2 namespaces.

Your Environment

• MinIO operator: kubectl apply -k https://github.com/minio/operator?ref=v6.0.2
• Kubernetes v1.30.3
• Operating System and version (uname -a):
  Linux storebot 6.6.0-odroid-arm64 #1 SMP PREEMPT Wed, 08 May 2024 07:36:13 +0000 aarch64 aarch64 aarch64 GNU/Linux

[ramondeklein]

Be careful. It looks like a bot reply wants you to execute a shell script.

I have reported the replies to Github, removed the comments and redacted the quotes. Unfortunately, we can't do much about this bots...

[jiuker]

Looks like you met a bug. MinioJob should have the namespace as tenant.

[jiuker]

Will sent a pr to fix that

[chrmang]

Will sent a pr to fix that

Thank you for your fast response and the fix.

[jiuker]

Will sent a pr to fix that

Thank you for your fast response and the fix.

Now, you can set them with the same namespace. @chrmang