oc krew install minio # install minio plugin, pre-req: kubectl has krew installed
oc create ns tk-tenant

# secret from minio example

echo 'apiVersion: v1                           
kind: Secret
metadata:
  name: minio-creds-secret
type: Opaque
data:
  accesskey: bWluaW8=
  secretkey: bWluaW8xMjM=
' | oc create -n tk-tenant -f - 

oc minio tenant create tk-tenant --servers 1 --volumes 1 --namespace tk-tenant --capacity 100Gi
# minio displays username/password
# edit tenant secret name
oc edit tenant tk-tenant
# spec:
#   credsSecret:
#     name: minio-creds-secret

# minio eventually generated TLS certs stored in secret named tk-tenant-tls in ns tk-tenant.
# we would want to mount this in velero pod configured via dpa

# create BSL
# backup internal image