#!/bin/bash

export ANT_OPTS=-Xmx512m

export DBFLUTE_HOME=../mydbflute/dbflute-1.x

```

This program, lets the admin user perform any action and prevents all other users from performing `s3:Put*` operations.

In another terminal start MinIO:

```sh
export MINIO_CI_CD=1
export MINIO_ROOT_USER=minio
export MINIO_ROOT_PASSWORD=minio123
export MINIO_POLICY_PLUGIN_URL=http://localhost:8080/
minio server /tmp/disk{1...4}
```

Now, let's test it out with `mc`:

```sh

	set -x
fi

pkill minio
docker rm -f $(docker ps -aq)
rm -rf /tmp/openid{1..4}

export MC_HOST_myminio="http://minioadmin:minioadmin@localhost:22000"
# The service account used below is already present in iam configuration getting imported
export MC_HOST_myminio1="http://dillon-service-2:dillon-service-2@localhost:22000"

# Start MinIO instance
export CI=true

if [ ! -f ./mc ]; then

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Action":["admin:*"]},{"Effect":"Allow","Action":["s3:*"],"Resource":["arn:aws:s3:::*"]}]}...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

{{- end }} minio/templates/_helper_policy.tpl {{- $statements_length := len .statements -}} {{- $statements_length := sub $statements_length 1 -}} { "Version": "2012-10-17", "Statement": [ {{- range $i, $statement := .statements }} { "Effect": "{{ $statement.effect | default "Allow" }}", "Action": [ "{{ $statement.actions | join "\",\n\"" }}" ]{{ if $statement.resources }}, "Resource": [ "{{ $statement.resources | join "\",\n\"" }}" ]{{ end }} {{- if $statement.conditions }} {{- $condition_len :=...