INTO-CPS-Association / INTO-CPS-Association/workspace

[FEATURE] Integrate minio into docker compose

Open
#46 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
0
Forks
5
PR merge metrics
No merged PRs in 30d

Description

### Describe the feature

As an **administrator** I want to **integrate minio into docker compose** So That **users have access to storage from workspace**

### Describe the problems your feature request solves

The workspace does not have a dedicated storage space. Create a storage service into which users can place their files.

### Describe the solution you'd like

The workspace does not have a dedicated storage space. The first goal is to put minio (S3 compatible storage) into single docker compose installation so that it can be integrated with workspace later.

### Describe alternatives you've considered

It is possible to have file-based volume mapping into the workspace. This is the solution currently being used in the DTaaS. However, it is not secure and the files do not have a centralized storage space. The OIDC authorization for storage will be of significant security improvement.

### Additional context

The minio service must have OIDC integration with keycloak. Please see [minio docs](https://github.com/minio/minio/blob/master/docs/sts/keycloak.md), [blog post](http://mindev.org/configure-keycloak-identity-management.html) and [tutorial](https://blog.min.io/integrate-minio-with-keycloak-oidc/)

### Success Criterion

Describe the final result with the help of a checklist if needed.

Checklist:

- [ ] S3 buckets are available to users from specific-urls served by Traefik gateway
- [ ] Users can access these URLs from outside and inside the workspaces
- [ ] minio authorization is linked to keyclock
- [ ] Documentation Updated

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the repository's Docker Compose and Traefik configuration, then read the linked MinIO and Keycloak OIDC documentation. The work is complete when S3 buckets are reachable through specific URLs inside and outside workspaces, MinIO authorization uses Keycloak, and the documentation is updated.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker-compose
Domain
authentication, cloud, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.