MinIO serves as the S3-compatible object storage for CMP Platform, providing file storage capabilities to multiple services.
┌─────────────────────────────────────────────────────────────┐
│ Kubernetes Cluster │
│ Namespace: cmp │
│ │
│ ┌────────────────────────────────────────────────────────┐ │
│ │ minio Deployment │ │
│ │ (1 replica) │ │
│ │ │ │
│ │ ┌────────────────────────────────────────────────────┐ │ │
│ │ │ minio Container │ │ │
│ │ │ Image: minio/minio:RELEASE.2025-09-07T16-13-09Z │ │ │
│ │ │ │ │ │
│ │ │ Ports: │ │ │
│ │ │ - 9000 (S3 API) │ │ │
│ │ │ - 9001 (Console) │ │ │
│ │ └────────────────────────────────────────────────────┘ │ │
│ └─────────────────────────────────────────────────────────────┘ │
│ │ │
│ │ PersistentVolumeClaim │
│ ▼ │
│ ┌────────────────────────────────────────────────────────────┐ │
│ │ do-block-storage (10Gi) │ │
│ │ PersistentVolumeClaim: minio-data │ │
│ └────────────────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────────┘
Service: minio (ClusterIP)
├── Port 9000 → targetPort: 9000 (S3 API)
└── Port 9001 → targetPort: 9001 (Console)MinIO uses cmp-secrets Kubernetes Secret for authentication:
cmp-secrets
├── S3_ACCESS_KEY → MINIO_ROOT_USER
└── S3_SECRET_KEY → MINIO_ROOT_PASSWORD
- Purpose: Store BIM model files (.ifc, .rvt, etc.)
- Connection: S3 API (port 9000)
- Purpose: Store application attachment uploads
- Connection: S3 API (port 9000)
| Resource | Request | Limit |
|---|---|---|
| CPU | 100m | 500m |
| Memory | 256Mi | 512Mi |
| Storage | - | 10Gi |
Current configuration is single replica, suitable for:
- Development/testing environments
- Scenarios with external backup mechanisms
Note: Production environments should consider MinIO Operator for multi-replica cluster deployment.
Recommended integrations:
- Prometheus Metrics: Enable MinIO Prometheus endpoint
- Grafana Dashboard: Use official MinIO Dashboard
- Alerting: Monitor disk usage, API response times
Recommended backup methods:
- Volume Snapshot: Use Kubernetes VolumeSnapshot
- rclone: Scheduled sync to other S3-compatible storage
- Velero: Integrate with CMP Platform backup strategy
- Network Policy: Configure NetworkPolicy to restrict access
- TLS: Enable TLS encryption in production
- Secret Rotation: Passwords were rotated on 2026-02-26