### Prerequisites

- [Configuring keycloak](https://github.com/minio/minio/blob/master/docs/sts/keycloak.md) or [Configuring Casdoor](https://github.com/minio/minio/blob/master/docs/sts/casdoor.md)
- [Configuring etcd](https://github.com/minio/minio/blob/master/docs/sts/etcd.md)

### Setup MinIO with Identity Provider

package cmd

import (
	"bytes"
	"encoding/hex"
	"errors"
	"fmt"
	"hash"
	"io"

	"github.com/minio/highwayhash"
	"github.com/minio/minio/internal/hash/sha256"
	"golang.org/x/crypto/blake2b"

	xioutil "github.com/minio/minio/internal/ioutil"
	"github.com/minio/minio/internal/logger"
)

// magic HH-256 key as HH-256 hash of the first 100 decimals of π as utf-8 string with a zero key.

## others depend on enabled status of corresponding sections.
existingSecret: ""

## Directory on the MinIO pof
certsPath: "/etc/minio/certs/"
configPathmc: "/etc/minio/mc/"

## Path where PV would be mounted on the MinIO Pod
mountPath: "/export"
## Override the root directory which the minio server should serve from.
## If left empty, it defaults to the value of {{ .Values.mountPath }}

{{- if or .Values.buckets .Values.users .Values.policies .Values.customCommands .Values.svcaccts }}
apiVersion: batch/v1
kind: Job
metadata:
  name: {{ template "minio.fullname" . }}-post-job
  labels:
    app: {{ template "minio.name" . }}-post-job
    chart: {{ template "minio.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
  annotations:
    "helm.sh/hook": post-install,post-upgrade

package opa

import (
	"bytes"
	"encoding/json"
	"io"
	"net/http"

	"github.com/minio/minio/internal/config"
	"github.com/minio/pkg/v3/env"
	xnet "github.com/minio/pkg/v3/net"
	"github.com/minio/pkg/v3/policy"
)

// Env IAM OPA URL
const (
	URL       = "url"
	AuthToken = "auth_token"

	EnvPolicyOpaURL       = "MINIO_POLICY_OPA_URL"

# MinIO Deployment Quickstart Guide [![Slack](https://slack.min.io/slack?type=svg)](https://slack.min.io) [![Docker Pulls](https://img.shields.io/docker/pulls/minio/minio.svg?maxAge=604800)](https://hub.docker.com/r/minio/minio/)

	"github.com/minio/minio/internal/handlers"
	"github.com/minio/minio/internal/hash"
	xhttp "github.com/minio/minio/internal/http"
	ioutilx "github.com/minio/minio/internal/ioutil"
	"github.com/minio/minio/internal/logger"
	"github.com/minio/minio/internal/logger/message/audit"
	"github.com/minio/minio/internal/rest"
	"github.com/minio/mux"
	"github.com/minio/pkg/v3/certs"
	"github.com/minio/pkg/v3/env"
	xnet "github.com/minio/pkg/v3/net"

	MinioReleaseBaseURL = "https://dl.min.io/server/minio/release/"

	// MinioReleaseURL - release URL.
	MinioReleaseURL = MinioReleaseBaseURL + minioOSARCH + SlashSeparator

	// MinioStoreName - MinIO store name.
	MinioStoreName = "MinIO"

	// MinioUAName - MinIO user agent name.
	MinioUAName = "MinIO"

	// MinioBannerName - MinIO banner name for startup message.
	MinioBannerName = "MinIO Object Storage Server"

¨PartNums‘ ©PartETags‘ ©PartSizes‘Ò 'ªPartASizes‘Ò '¤SizeÒ 'Â¥MTimeÓ ¿W '’žÉ§MetaSys ¼X-Minio-Internal-actual-sizeÄ 141250§MetaUsr‚¤etagÙ"51fe09d68bacc8c5a68a-1¬content-type¸application/octet-streamÎöa‰ 10/xl.meta XL2 Æ b ¨Versions‘‚¤Type ¥V2ObjÞ ¢IDÄ ¤DDirÄ ÔLã°ê8EÒŸˆ”Ù Sé6¦EcAlgo £EcM £EcN §EcBSizeÒ §EcIndex ¦EcDistš ¨CSumAlgo ¨PartNums‘ ©PartETags‘ ©PartSizes‘Ò 'ªPartASizes‘Ò '¤SizeÒ 'Â¥MTimeÓ ¿W '’žÉ§MetaSys ¼X-Minio-Internal-actual-sizeÄ 141250§MetaUsr‚¬content-type¸application/octet-stream¤etag...

        init.setContextFlag(NegTokenInit.CONFIDENTIALITY, true);
        assertTrue(init.getContextFlag(NegTokenInit.CONFIDENTIALITY));
        assertEquals(NegTokenInit.CONFIDENTIALITY, init.getContextFlags());

        init.setContextFlag(NegTokenInit.INTEGRITY, true);
        assertTrue(init.getContextFlag(NegTokenInit.INTEGRITY));
        assertEquals(NegTokenInit.CONFIDENTIALITY | NegTokenInit.INTEGRITY, init.getContextFlags());