riotpiao-poimen/homelab-frontend
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(s3): correct MinIO service port and allow egress #14

Merged
rock merged 2 commits from fix/s3-adapter-port into main 2026-09-08 17:03:55 +00:00
Conversation 0 Commits 2 Files Changed 4
+19 -28
rock commented 2026-09-08 16:59:04 +00:00
Owner
Copy Link
Copy Source

Summary

Fix S3 adapter 502 timeout — gateway was connecting to MinIO on wrong port.

Root cause

MinIO ClusterIP service minio listens on port 80 (targetPort 9000). Config had :9000 which is only on the headless service minio-cluster-hl. Gateway connected to ClusterIP:9000, got no response, timed out at 30s, returned 502.

Changes

File Change
configmap.yaml S3 upstream :9000 → :80
gateway-config-secret.enc.yaml Same port fix (actual mounted config)
network-policy.yaml Add port 80 egress to storage namespace

Verified

Before: curl X-Service:s3 → 502 (30s timeout)
After:  curl X-Service:s3 → 403 AccessDenied (MinIO reached, auth issue separate)

Already applied live, this commit captures it in git.

## Summary Fix S3 adapter 502 timeout — gateway was connecting to MinIO on wrong port. ## Root cause MinIO ClusterIP service `minio` listens on **port 80** (targetPort 9000). Config had `:9000` which is only on the headless service `minio-cluster-hl`. Gateway connected to ClusterIP:9000, got no response, timed out at 30s, returned 502. ## Changes | File | Change | |------|--------| | `configmap.yaml` | S3 upstream `:9000` → `:80` | | `gateway-config-secret.enc.yaml` | Same port fix (actual mounted config) | | `network-policy.yaml` | Add port 80 egress to storage namespace | ## Verified ``` Before: curl X-Service:s3 → 502 (30s timeout) After: curl X-Service:s3 → 403 AccessDenied (MinIO reached, auth issue separate) ``` Already applied live, this commit captures it in git.
rock added 2 commits 2026-09-08 16:59:06 +00:00
ci: unified workflow - single job, DOCKER_HOST, build+push on all events
CI / CI (pull_request) Successful in 4m0s
Details
7e78519499
fix(s3): correct MinIO service port and allow egress
CI / CI (pull_request) Successful in 3m16s
Details
c87463c850 
MinIO ClusterIP service listens on port 80 (targetPort 9000).
Config had port 9000 which caused 30s timeout then 502 — gateway
connected to service port 9000 which doesn't exist on the ClusterIP.

Changes:
- configmap.yaml: S3 upstream :9000 → :80
- gateway-config-secret.enc.yaml: same
- network-policy.yaml: add port 80 egress to storage namespace

Verified: S3 adapter now reaches MinIO (403 AccessDenied = auth issue,
not connectivity).
rock merged commit 5dd76f3b49 into main 2026-09-08 17:03:55 +00:00
rock deleted branch fix/s3-adapter-port 2026-09-08 17:08:46 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/auth
Authentication & authorization
 area/authentik
Authentik OIDC provider config
 area/downstream
Downstream service changes
 area/gateway
API gateway code
 priority/high
Must have
 priority/low
Nice to have
 priority/medium
Should have
 status/blocked
Blocked by dependency
 status/done
Completed
 status/in-progress
Currently being worked on
 status/review
Ready for review
 status/todo
Not started
 type/docs
Documentation
 type/feature
New feature
 type/infra
Infrastructure change
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
poimen rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab-frontend#14