REFACTOR(minio): integrate API ingress

- Add API ingress (s3.minio0213.kro.kr) to helm-values.yaml
- Move storage-class.yaml, persistent-volumes.yaml to manifests/
- Move console-deployment.yaml to manifests/
- Create console-ingress.yaml in manifests/ for custom console

minio/helm-values.yaml

@@ -53,10 +53,20 @@ environment:
   MINIO_BROWSER_REDIRECT_URL: "https://minio.minio0213.kro.kr"
   MINIO_PROMETHEUS_AUTH_TYPE: "public"
 
-# Ingress disabled (managed separately)
+# API Ingress (S3 endpoint)
 ingress:
-  enabled: false
+  enabled: true
+  ingressClassName: traefik
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+  hosts:
+    - s3.minio0213.kro.kr
+  tls:
+    - secretName: minio-api-tls
+      hosts:
+        - s3.minio0213.kro.kr
 
+# Console Ingress disabled (using custom console-deployment in manifests/)
 consoleIngress:
   enabled: false
 

minio/kustomization.yaml

@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-- storage-class.yaml
-- persistent-volumes.yaml
 - vault/minio-root-password.yaml
-- ingress.yaml
+- manifests/storage-class.yaml
-- console-deployment.yaml
+- manifests/persistent-volumes.yaml
+- manifests/console-deployment.yaml
+- manifests/console-ingress.yaml

minio/manifests/console-ingress.yaml

@@ -1,30 +1,5 @@
 apiVersion: networking.k8s.io/v1
 kind: Ingress
-metadata:
-  name: minio-api
-  namespace: minio
-  annotations:
-    cert-manager.io/cluster-issuer: letsencrypt-prod
-spec:
-  ingressClassName: traefik
-  tls:
-  - hosts:
-    - s3.minio0213.kro.kr
-    secretName: minio-api-tls
-  rules:
-  - host: s3.minio0213.kro.kr
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: minio
-            port:
-              number: 9000
----
-apiVersion: networking.k8s.io/v1
-kind: Ingress
 metadata:
   name: minio-console
   namespace: minio