apiVersion: v1
kind: ServiceAccount
metadata:
  name: mc-job-sa
---
apiVersion: sts.min.io/v1alpha1
kind: PolicyBinding
metadata:
  name: mc-job-bingding
spec:
  application:
    serviceaccount: mc-job-sa
  policies:
    - consoleAdmin
---
apiVersion: v1
kind: Secret
metadata:
  name: mytestsecret
data:
  PASSWORD: ZGFuaWVsMTIz
---
apiVersion: v1
kind: Secret
metadata:
  name: mytestsecretenvs
data:
  USER: ZGFuaWVs
  PASSWORD: ZGFuaWVsMTIz
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: mytestconfig
data:
  policy.json:  |
    {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Effect": "Allow",
                "Action": [
                    "s3:*"
                ],
                "Resource": [
                    "arn:aws:s3:::memes",
                    "arn:aws:s3:::memes/*"
                ]
            }
        ]
    }
---
apiVersion: job.min.io/v1alpha1
kind: MinIOJob
metadata:
  name: minio-test-job
spec:
  serviceAccountName: mc-job-sa
  tenant:
    name: mytest-minio
  commands:
    - op: make-bucket
      args:
        name: memes
    - name: add-my-user-1
      op: admin/user/add
      args:
        user: ${USER}
        password: ${PASSWORD}
      envFrom:
        - secretRef:
            name: mytestsecretenvs
    - name: add-my-user-2
      op: admin/user/add
      args:
        user: pedro
        password: $PASSWORD
      env:
        - name: PASSWORD
          valueFrom:
            secretKeyRef:
              name: mytestsecret
              key: PASSWORD
    - name: add-my-policy
      op: admin/policy/create
      args:
        name: memes-access
        policy: /temp/policy.json
      volumeMounts:
        - name: policy
          mountPath: /temp
      volumes:
        - name: policy
          configMap:
            name: mytestconfig
            items:
              - key: policy.json
                path: policy.json
    - op: admin/policy/attach
      dependsOn:
        - add-my-user-1
        - add-my-user-2
        - add-my-policy
      args:
        policy: memes-access
        user: daniel
    - op: admin/policy/attach
      dependsOn:
        - add-my-user-1
        - add-my-user-2
        - add-my-policy
      args:
        policy: memes-access
        user: pedro