}}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment }} -...

}}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment }} -...

    </Credentials>
  </AssumeRoleWithWebIdentityResult>
  <ResponseMetadata/>
</AssumeRoleWithWebIdentityResponse>
```

## Using WebIdentity API

```
export MINIO_ROOT_USER=minio
export MINIO_ROOT_PASSWORD=minio123
export MINIO_IDENTITY_OPENID_CONFIG_URL=https://accounts.google.com/.well-known/openid-configuration
export MINIO_IDENTITY_OPENID_CLIENT_ID="843351d4-1080-11ea-aa20-271ecba3924a"

	// in-place update is off.
	globalInplaceUpdateDisabled = strings.EqualFold(env.Get(config.EnvUpdate, config.EnableOn), config.EnableOff)

	// Check if the supported credential env vars,
	// "MINIO_ROOT_USER" and "MINIO_ROOT_PASSWORD" are provided
	// Warn user if deprecated environment variables,
	// "MINIO_ACCESS_KEY" and "MINIO_SECRET_KEY", are defined
	// Check all error conditions first
	//nolint:gocritic

}

cleanup

unset MINIO_KMS_KES_CERT_FILE
unset MINIO_KMS_KES_KEY_FILE
unset MINIO_KMS_KES_ENDPOINT
unset MINIO_KMS_KES_KEY_NAME

export MINIO_CI_CD=1
export MINIO_BROWSER=off
export MINIO_ROOT_USER="minio"
export MINIO_ROOT_PASSWORD="minio123"
export MINIO_KMS_AUTO_ENCRYPTION=off
export MINIO_PROMETHEUS_AUTH_TYPE=public
export MINIO_KMS_SECRET_KEY=my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=

	rm -rf /tmp/multisitec
	rm -rf /tmp/multisited
	rm -rf /tmp/data
	if [ $# -ne 0 ]; then
		exit $#
	fi
}

catch

set -e
export MINIO_CI_CD=1
export MINIO_BROWSER=off
export MINIO_ROOT_USER="minio"
export MINIO_ROOT_PASSWORD="minio123"
export MINIO_KMS_AUTO_ENCRYPTION=off
export MINIO_PROMETHEUS_AUTH_TYPE=public
export MINIO_KMS_SECRET_KEY=my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=

}}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment }} -...

  <ResponseMetadata/>
</AssumeRoleWithLDAPIdentityResponse>
```

## Using LDAP STS API

With multiple OU hierarchies for users, and multiple group search base DN's.

```
export MINIO_ROOT_USER=minio
export MINIO_ROOT_PASSWORD=minio123
export MINIO_IDENTITY_LDAP_SERVER_ADDR='my.ldap-active-dir-server.com:636'
export MINIO_IDENTITY_LDAP_LOOKUP_BIND_DN='cn=admin,dc=min,dc=io'

}}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment }} -...

}}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment }} -...