Initial commit: minio-env-loader

Adds Dockerfile_EnvLoader, Makefile, README, and CI workflow following
the same pattern as hasura/postgres-env-loader and hasura/redis-env-loader.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: dliub

.github/workflows/build-and-push.yaml

@@ -0,0 +1,47 @@
+name: Build and Push minio-env-loader
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GCP_SERVICE_ACCOUNT }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Configure Docker for GCP Artifact Registry
+        run: gcloud auth configure-docker us-docker.pkg.dev --quiet
+
+      - name: Set image tag
+        id: tag
+        run: |
+          MINIO_VERSION="RELEASE.2024-01-18T22-51-28Z"
+          REGISTRY="us-docker.pkg.dev/hasura-ddn/ddn"
+          echo "image=${REGISTRY}/minio:${MINIO_VERSION}-env-loader" >> "$GITHUB_OUTPUT"
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile_EnvLoader
+          platforms: linux/amd64
+          push: true
+          tags: ${{ steps.tag.outputs.image }}

Dockerfile_EnvLoader

@@ -0,0 +1,12 @@
+ARG MINIO_VERSION=RELEASE.2024-01-18T22-51-28Z
+FROM us-docker.pkg.dev/hasura-ddn/ddn/lux-env-loader-entrypoint:20250508.rc1 AS utilsource
+
+FROM minio/minio:${MINIO_VERSION}
+
+# Copy env-loader utilities from utilsource
+COPY --from=utilsource /usr/local/bin/docker-entrypoint.sh /usr/local/bin/env-loader-entrypoint.sh
+COPY --from=utilsource /app/jq /usr/local/bin/jq
+COPY --from=utilsource /usr/local/bin/inotifywait /usr/local/bin/inotifywait
+
+# Wrap the minio entrypoint
+ENTRYPOINT ["/usr/local/bin/env-loader-entrypoint.sh", "minio"]

Makefile

@@ -0,0 +1,19 @@
+.EXPORT_ALL_VARIABLES:
+
+VERSION ?= $(shell date +"%Y%m%d")
+MINIO_VERSION ?= RELEASE.2024-01-18T22-51-28Z
+REGISTRY ?= us-docker.pkg.dev/hasura-ddn/ddn
+
+.PHONY: build-env-loader
+build-env-loader:
+	docker build --platform=linux/amd64 \
+		--build-arg MINIO_VERSION=$(MINIO_VERSION) \
+		-t $(REGISTRY)/minio:$(MINIO_VERSION)-env-loader \
+		-f Dockerfile_EnvLoader .
+
+.PHONY: push-env-loader
+push-env-loader:
+	docker push $(REGISTRY)/minio:$(MINIO_VERSION)-env-loader
+
+.PHONY: env-loader
+env-loader: build-env-loader push-env-loader

README.md

@@ -0,0 +1,41 @@
+# minio-env-loader
+
+A Docker image that wraps `minio/minio:RELEASE.2024-01-18T22-51-28Z` with the [lux-env-loader-entrypoint](https://github.com/hasura/lux-env-loader-entrypoint) utility, enabling MinIO to load environment variables from external secrets files at startup.
+
+## Purpose
+
+This image is designed for environments where secrets are delivered as JSON files (e.g., mounted from a Kubernetes secret or a cloud secrets manager) rather than as plain environment variables. The env-loader reads `/secrets/*.json` at startup, exports the key-value pairs as environment variables, and then delegates to the original MinIO entrypoint.
+
+## How It Works
+
+1. The container starts with `env-loader-entrypoint.sh` as its entrypoint.
+2. The entrypoint reads all `*.json` files under `/secrets/` and exports each top-level key as an environment variable.
+3. Control is then handed to `minio` as the default command.
+
+## Building Locally
+
+```bash
+make build-env-loader
+```
+
+To build and push:
+
+```bash
+make env-loader
+```
+
+Override the registry or version:
+
+```bash
+make env-loader REGISTRY=my-registry MINIO_VERSION=RELEASE.2024-01-18T22-51-28Z
+```
+
+## Image Reference
+
+Base image: `minio/minio:RELEASE.2024-01-18T22-51-28Z`  
+Env-loader source: `us-docker.pkg.dev/hasura-ddn/ddn/lux-env-loader-entrypoint:20250508.rc1`  
+Published image: `us-docker.pkg.dev/hasura-ddn/ddn/minio:RELEASE.2024-01-18T22-51-28Z-env-loader`
+
+## Co-authors
+
+Co-authored-by: Tomasz Skawinski <tom@hasura.io>