the MinIO service is being accessed by the browser at the URL `https://minio-node-1.example.org`, the redirect URL will be `https://minio-node-1.example.org/oauth_callback` and all is well.

For deployments with a load-balancer (LB), it is required that the LB is configured to send requests from the same user/client-app to the same backend MinIO server (at least for the initial login request and subsequent redirection, as the OpenID auth flow's state parameter is currently local to the MinIO...

		//       .appName("SparkByExample")
		//       .master("local[1]").getOrCreate()
		//
		//     spark.sparkContext.setLogLevel("ERROR")
		//     spark.sparkContext.hadoopConfiguration.set("fs.s3a.endpoint", "http://minio-lb:9000")
		//     spark.sparkContext.hadoopConfiguration.set("fs.s3a.path.style.access", "true")
		//     spark.sparkContext.hadoopConfiguration.set("fs.s3a.access.key", "minioadmin")

¡¯aLÛ}Ùk¤/ù Ó¡kYy¥žU™kC¸·Cg&’^¿ììµ6~µ97 ÙzùqÜ:m¾ €¦!;øò\ ¦Ðà Tòù³Gü¢`Ö ø‹gõ8Å›ähÇbêp¸ ù{ ôªWù A- I’“ª *ïÉf&Ñ´ ­ðê I-‚÷¥O„=uÉ€ ‚· Žv3$Äk Úœ9Øžu%?N •L6jDš¢ wr4(oƒâúÍÛ] †®DÕNt ‹ Ê\ ÃeþÂB˜þвü'Øù-<ä¢@ÕÏ ë Ý£ƒã—ò ´z •g}LjìjØaåú‘£„¸y ­M ª 'BÀ y_ ¦ìi6é´J J }v…Lb•‰ ½RWJ¿ohõL÷ne <¤‹e÷@ôåæ|6XÃ~I XoúØx${(û :¢ ôá "_Ä âùX ï³oƒóªÜ×U†´é{Ó“ËŒ ‘£ J9b h UÈ gF RÅ· šØ JbY·½“ú Õܯ0¼l mÝ Š¯> Ÿ—KS`ÒÁÿ®ºçu‘[O¥È µ@%{þ ª %Ñ› 1 $­À6÷e‰T§f?³ù©‹ßV multisitea/data/disterasure/xl2/.minio.sys/pool.bin/xl.meta XL2 Æ w Ä$•Ä Ó ÉŸþ¥¹...

docker-compose -f docker-compose-site1.yaml up -d
docker-compose -f docker-compose-site2.yaml up -d

./mc ready site1/
./mc ready site2/

for i in $(seq 1 10); do
	# mc admin heal -r --remove when used against a LB endpoint
	# behaves flaky, let this run 10 times before giving up
	./mc admin heal -r --remove --json site1/ 2>&1 >/dev/null
	./mc admin heal -r --remove --json site2/ 2>&1 >/dev/null
done

For deployments behind a load balancer, proxy, or ingress rule where the MinIO host IP address or port is not public, use the `MINIO_BROWSER_REDIRECT_URL` environment variable to specify the external hostname for the redirect. The LB/Proxy must have rules for directing traffic to the Console port specifically.

redirection to work. For deployments behind a load balancer, proxy, or ingress rule where the MinIO host IP address or port is not public, use the `MINIO_BROWSER_REDIRECT_URL` environment variable to specify the external hostname for the redirect. The LB/Proxy must have rules for directing traffic to the Console port specifically. For example, consider a MinIO deployment behind a proxy `https://minio.example.net`, `https://console.minio.example.net` with rules for forwarding traffic on port :9000 and...