For exploratory purposes, you can access the sample storage that comes with watsonx.data™ through the user interface of MinIO.
An edge route is the recommended way to expose the MinIO console.
The out-of-the-box MinIO object storage is provided for exploratory purposes only. It does not
have all security features and is not configured to provide high-speed data access. You should
register your own s3 storage that meet your security and performance requirements.
About this task
An edge route is a secure way of exposing a service through the Red Hat®
OpenShift® router. You can access the MinIO console from
outside the cluster through https by using an edge route.
To access the storages through the user interface of MinIO, complete the following steps:
Procedure
-
Copy the S3 credentials from the secret and save it.
oc extract secret/ibm-lh-config-secret -n ${PROJECT_CPD_INST_OPERANDS} --to=- --keys=env.properties | grep -E "LH_S3_ACCESS_KEY|LH_S3_SECRET_KEY"
Example:
oc extract secret/ibm-lh-config-secret -n ${PROJECT_CPD_INST_OPERANDS} --to=- --keys=env.properties | grep -E "LH_S3_ACCESS_KEY|LH_S3_SECRET_KEY"
# env.properties
LH_S3_ACCESS_KEY="mCD2fnzeabC58ipdc7E2a299"
LH_S3_SECRET_KEY="faE4dnelxi662v31wbsutybz"
- Create an edge route.
oc create route edge ibm-lh-lakehouse-minio-console --service=ibm-lh-lakehouse-minio-svc --port=9001 -n ${PROJECT_CPD_INST_OPERANDS}
oc get route ibm-lh-lakehouse-minio-console -n ${PROJECT_CPD_INST_OPERANDS}
Example:
oc create route edge ibm-lh-lakehouse-minio-console --service=ibm-lh-lakehouse-minio-svc --port=9001 -n ${PROJECT_CPD_INST_OPERANDS}
route.route.openshift.io/ibm-lh-lakehouse-minio-console created
oc get route ibm-lh-lakehouse-minio-console -n ${PROJECT_CPD_INST_OPERANDS}
NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD
ibm-lh-lakehouse-minio-console ibm-lh-lakehouse-minio-console-zen.apps.sprat.cp.fyre.ibm.com ibm-lh-lakehouse-minio-svc 9001 edge None
- Copy and paste the route hostname into your browser.
Remember: Ensure that the browser is using
https:// and not
http://.
Example:
https://ibm-lh-lakehouse-minio-console-zen.apps.mycluster.com
Remember: Ensure that the port is either unspecified or 443.
- Log in to the MinIO console by using the credentials obtained in step 1.
Tip: The MinIO console uses the storage's S3 access key as username and the S3 secret
key as password.