Please refer to how to encrypt your config and IAM credentials [here](https://github.com/minio/minio/blob/master/docs/kms/IAM.md).

> NOTE: if *path_prefix* is set then MinIO will not federate your buckets, namespaced IAM assets are assumed as isolated tenants, only buckets are considered globally unique but performing a lookup with a *bucket* which belongs to a different tenant will fail unlike federated setups where MinIO would port-forward and route the request to relevant cluster accordingly....

**Note**: this is a very technical detail that you probably can **just skip**.

---

The `APIRouter`s are not "mounted", they are not isolated from the rest of the application.

This is because we want to include their *path operations* in the OpenAPI schema and the user interfaces.

As we cannot just isolate them and "mount" them independently of the rest, the *path operations* are "cloned" (re-created), not included directly.

///

h3. Creation of an isolated classloader

      }
    } catch (ReflectiveOperationException e) {
      // Should be impossible, but we want to return *something* so that class init succeeds.
      return new ThrowingCreator();
    }

    // Android isolates apps' temporary directories since Jelly Bean:
    // https://github.com/google/guava/issues/4011#issuecomment-770020802
    // So we can create files there with any permissions and still get security from the isolation.

        System.setProperties(originalSystemProperties);
        resetHandlerState();
    }

    /**
     * Resets the static state of the Handler class using reflection.
     * This is crucial for ensuring that tests are isolated from each other.
     */
    private void resetHandlerState() throws Exception {
        // Reset the static factory field
        Field factoryField = Handler.class.getDeclaredField("factory");

testing/performance/                            @gradle/bt-developer-productivity
testing/smoke-test/                             @gradle/bt-product-operations
testing/smoke-test/src/**/*IsolatedProjects*    @gradle/bt-product-operations @gradle/bt-isolated-projects-project
testing/soak/                                   @gradle/bt-developer-productivity
testing/distributions-integ-tests               @gradle/bt-developer-productivity

  {
    "name": "io",
    "path": "platforms/core-runtime/io",
    "unitTests": true,
    "functionalTests": false,
    "crossVersionTests": false
  },
  {
    "name": "isolated-action-services",
    "path": "platforms/core-configuration/isolated-action-services",
    "unitTests": true,
    "functionalTests": false,
    "crossVersionTests": false
  },
  {
    "name": "ivy",
    "path": "platforms/software/ivy",

        opCodeField.setAccessible(true);
        opCodeField.set(nameQueryResponse, 7); // WACK opCode, which is not QUERY (0)

        // Ensure 'resultCode' is 0 for this test to isolate opCode condition
        Field resultCodeField = NameServicePacket.class.getDeclaredField("resultCode");
        resultCodeField.setAccessible(true);
        resultCodeField.set(nameQueryResponse, 0);

</details>

## What is a Container { #what-is-a-container }

Containers (mainly Linux containers) are a very **lightweight** way to package applications including all their dependencies and necessary files while keeping them isolated from other containers (other applications or components) in the same system.

            <option value="$PROJECT_DIR$/platforms/core-configuration/input-tracking" />
            <option value="$PROJECT_DIR$/platforms/core-configuration/isolated-action-services" />
            <option value="$PROJECT_DIR$/platforms/core-configuration/java-api-extractor" />
            <option value="$PROJECT_DIR$/platforms/core-configuration/kotlin-dsl" />