chmod +x /go/bin/minio

# Download mc binary and signature file
RUN curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/mc -o /go/bin/mc && \
    curl -s -q https://dl.min.io/client/mc/release/linux-${TARGETARCH}/mc.minisig -o /go/bin/mc.minisig && \
    chmod +x /go/bin/mc

RUN if [ "$TARGETARCH" = "amd64" ]; then \

	NATSTLSSkipVerify = "tls_skip_verify"
	NATSPingInterval  = "ping_interval"
	NATSQueueDir      = "queue_dir"
	NATSQueueLimit    = "queue_limit"
	NATSCertAuthority = "cert_authority"
	NATSClientCert    = "client_cert"
	NATSClientKey     = "client_key"

	// Streaming constants - deprecated
	NATSStreaming                   = "streaming"
	NATSStreamingClusterID          = "streaming_cluster_id"
	NATSStreamingAsync              = "streaming_async"

.Values.etcd.endpoints }} - name: MINIO_ETCD_ENDPOINTS value: {{ join "," .Values.etcd.endpoints | quote }} {{- if .Values.etcd.clientCert }} - name: MINIO_ETCD_CLIENT_CERT value: "/tmp/credentials/etcd_client_cert.pem" {{- end }} {{- if .Values.etcd.clientCertKey }} - name: MINIO_ETCD_CLIENT_CERT_KEY value: "/tmp/credentials/etcd_client_cert_key.pem" {{- end }} {{- if .Values.etcd.pathPrefix }} - name: MINIO_ETCD_PATH_PREFIX value: {{ .Values.etcd.pathPrefix }} {{- end }} {{- if .Values.etcd.corednsPathPrefix...

.Values.etcd.endpoints }} - name: MINIO_ETCD_ENDPOINTS value: {{ join "," .Values.etcd.endpoints | quote }} {{- if .Values.etcd.clientCert }} - name: MINIO_ETCD_CLIENT_CERT value: "/tmp/credentials/etcd_client_cert.pem" {{- end }} {{- if .Values.etcd.clientCertKey }} - name: MINIO_ETCD_CLIENT_CERT_KEY value: "/tmp/credentials/etcd_client_cert_key.pem" {{- end }} {{- if .Values.etcd.pathPrefix }} - name: MINIO_ETCD_PATH_PREFIX value: {{ .Values.etcd.pathPrefix }} {{- end }} {{- if .Values.etcd.corednsPathPrefix...

.Values.etcd.endpoints }} - name: MINIO_ETCD_ENDPOINTS value: {{ join "," .Values.etcd.endpoints | quote }} {{- if .Values.etcd.clientCert }} - name: MINIO_ETCD_CLIENT_CERT value: "/tmp/credentials/etcd_client_cert.pem" {{- end }} {{- if .Values.etcd.clientCertKey }} - name: MINIO_ETCD_CLIENT_CERT_KEY value: "/tmp/credentials/etcd_client_cert_key.pem" {{- end }} {{- if .Values.etcd.pathPrefix }} - name: MINIO_ETCD_PATH_PREFIX value: {{ .Values.etcd.pathPrefix }} {{- end }} {{- if .Values.etcd.corednsPathPrefix...

	"golang.org/x/exp/slices"
)

// http Header "x-amz-content-sha256" == "UNSIGNED-PAYLOAD" indicates that the
// client did not calculate sha256 of the payload.
const unsignedPayload = "UNSIGNED-PAYLOAD"

// http Header "x-amz-content-sha256" == "STREAMING-UNSIGNED-PAYLOAD-TRAILER" indicates that the
// client did not calculate sha256 of the payload and there is a trailer.
const unsignedPayloadTrailer = "STREAMING-UNSIGNED-PAYLOAD-TRAILER"

			// write error response only if no data or headers has been written to client yet
			writeErrorResponse(ctx, w, toAPIError(ctx, err), r.URL)
			return
		}
		return
	}

	if err = httpWriter.Close(); err != nil {
		if !httpWriter.HasWritten() && !statusCodeWritten { // write error response only if no data or headers has been written to client yet
			writeErrorResponse(ctx, w, toAPIError(ctx, err), r.URL)
			return
		}

        - port: {{ .Values.minioConsolePort }}
      {{- if not .Values.networkPolicy.allowExternal }}
      from:
        - podSelector:
            matchLabels:
              {{ template "minio.name" . }}-client: "true"
      {{- end }}

		}
		if len(params) >= 2 {
			apiErr.Object = decodeDirObject(params[1])
		}
		return apiErr
	}
	return err
}

// SignatureDoesNotMatch - when content md5 does not match with what was sent from client.
type SignatureDoesNotMatch struct{}

func (e SignatureDoesNotMatch) Error() string {
	return "The request signature we calculated does not match the signature you provided. Check your key and signing method."
}

	groups=$(echo "$output" | jq -r '.result.policyMappings[] | select(.policy == "readwrite") | .groups[]')
	if [ "$groups" != "cn=project.c,ou=groups,ou=swengg,dc=min,dc=io" ]; then
		echo "Failed to verify groups: $groups"
		exit 1
	fi

	users=$(echo "$output" | jq -r '.result.policyMappings[] | select(.policy == "readwrite") | .users[]')