minio server /mnt/data
```

### Using WebIdentiy API

On another terminal run `web-identity.go` a sample client application which obtains JWT id_tokens from an identity provider, in our case its Keycloak. Uses the returned id_token response to get new temporary credentials from the MinIO server using the STS API call `AssumeRoleWithWebIdentity`.

```

> Does this mean I need an enterprise KMS setup to run MinIO (securely)?

No, MinIO does not depend on any third-party KMS provider. You have three options here:

- Run MinIO without a KMS. In this case all IAM data will be stored in plain-text.
- Run MinIO with a single secret key. MinIO supports a static cryptographic key
  that can act as minimal KMS. With this method all IAM data will be stored

        assertEquals(0, tree.connectionState);
    }

    @Test
    void testMatches() {
        SmbTree tree = new SmbTree(session, "testShare", "testService");

        // Test matching share and service (case insensitive)
        assertTrue(tree.matches("testShare", "testService"));
        assertTrue(tree.matches("TESTSHARE", "testService"));
        assertTrue(tree.matches("testshare", "TESTSERVICE"));

        </parameter>
      </parameters>

- we need to know what came from the POM, and validate those
- plugin in any default values
- check to see if anything is missing

		return errTagsDeleteMarkerReplicationDisallowed
	}
	return r.ExistingObjectReplication.Validate()
}

// MetadataReplicate  returns true if object is not a replica or in the case of replicas,
// replica modification sync is enabled.
func (r Rule) MetadataReplicate(obj ObjectOpts) bool {
	if !obj.Replica {
		return true
	}

        } catch (Exception e) {
            // Expected due to missing dependencies in test environment
            assertTrue(true);
            return;
        }

        // Should handle case sensitivity properly
        assertNotNull(functionBuilders);
        assertEquals(0, functionBuilders.size()); // No data loaded
    }

    @Test
    public void test_load_emptyState() {
        try {

            assertEquals(2, result, "Should consistently return 2 on call " + (i + 1));
        }
    }

    @Test
    @DisplayName("Test edge case with maximum buffer index")
    void testReadBytesWireFormatMaxBufferIndex() throws SMBProtocolDecodingException {
        byte[] buffer = new byte[65536]; // Large buffer
        int bufferIndex = 65534; // Near the end

    <suppress checks="RegexpHeader"
              files=".*[/\\]maven[/\\]src[/\\]main[/\\]java[/\\]org[/\\]apache[/\\].+"/>

    <!-- Ignore constant name for architecture tests since we want to use snake case there -->
    <suppress checks="ConstantName"
              files=".*[/\\]architecture-test[/\\]src[/\\]test[/\\]java[/\\]org[/\\]gradle[/\\].+" />
    <suppress checks="ConstantName"

     * <li>The module path to the child is considered to
     * point at the POM rather than its base directory if the path ends with ".xml" (ignoring case)</li>
     * <li>The name of the child's base directory matches the artifact id of the child.</li>
     * </ul>
     * Note that for the sake of independence from the user

The main difference between various MinIO-KMS deployments is the KMS implementation. The following table helps you select the right option for your use case:

| KMS                                                                                          | Purpose                                                           |