For exploratory purposes, you can access the sample bucket that comes with watsonx.data through the user interface of MinIO. An
edge route is the recommended way to expose the MinIO console.
The out-of-the-box MinIO object storage is provided for exploratory purposes only. It does not
have all security features and is not configured to provide high-speed data access. You should
register your own s3 bucket that meet your security and performance requirements.
watsonx.data on Red Hat® OpenShift®
About this task
An edge route is a secure way of exposing a service through the Red Hat
OpenShift router. You can access the MinIO console from
outside the cluster through https
by using an edge route.
To access the buckets through the user interface of MinIO, complete the following steps:
Procedure
-
Copy the S3 credentials from the secret and save it.
oc extract secret/ibm-lh-config-secret -n ${PROJECT_CPD_INST_OPERANDS} --to=- --keys=env.properties | grep -E "LH_S3_ACCESS_KEY|LH_S3_SECRET_KEY"
Example:
oc extract secret/ibm-lh-config-secret -n ${PROJECT_CPD_INST_OPERANDS} --to=- --keys=env.properties | grep -E "LH_S3_ACCESS_KEY|LH_S3_SECRET_KEY"
# env.properties
LH_S3_ACCESS_KEY="mCD2fnzeabC58ipdc7E2a299"
LH_S3_SECRET_KEY="faE4dnelxi662v31wbsutybz"
- Create an edge route.
oc create route edge ibm-lh-lakehouse-minio-console --service=ibm-lh-lakehouse-minio-svc --port=9001 -n ${PROJECT_CPD_INST_OPERANDS}
oc get route ibm-lh-lakehouse-minio-console -n ${PROJECT_CPD_INST_OPERANDS}
Example:
oc create route edge ibm-lh-lakehouse-minio-console --service=ibm-lh-lakehouse-minio-svc --port=9001 -n ${PROJECT_CPD_INST_OPERANDS}
route.route.openshift.io/ibm-lh-lakehouse-minio-console created
oc get route ibm-lh-lakehouse-minio-console -n ${PROJECT_CPD_INST_OPERANDS}
NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD
ibm-lh-lakehouse-minio-console ibm-lh-lakehouse-minio-console-zen.apps.sprat.cp.fyre.ibm.com ibm-lh-lakehouse-minio-svc 9001 edge None
- Copy and paste the route hostname into your browser.
Remember: Ensure that the browser is using
https://
and not
http://
.
Example:
https://ibm-lh-lakehouse-minio-console-zen.apps.mycluster.com
Remember: Ensure that the port is either unspecified or 443.
- Log in to the MinIO console by using the credentials obtained in step 1.
Tip: The MinIO console uses the bucket's S3 access key as username and the S3 secret key
as password.