# How to secure access to MinIO on Kubernetes with TLS [![Slack](https://slack.min.io/slack?type=svg)](https://slack.min.io)

This document explains how to configure MinIO server with TLS certificates on Kubernetes.

## 1. Prerequisites

- Familiarity with [MinIO deployment process on Kubernetes](https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html).

- Kubernetes cluster with `kubectl` configured.

        return sb.toString();
    }

    // ===================================================================================
    //                                                                            Accessor
    //                                                                            ========
    public String getCreatedBy() {
        checkSpecifiedProperty("createdBy");
        return convertEmptyToNull(createdBy);

	echo "Initializing environment"
	mkdir -p "$WORK_DIR"
	mkdir -p "$MINIO_CONFIG_DIR"

	## version is purposefully set to '3' for minio to migrate configuration file
	echo '{"version": "3", "credential": {"accessKey": "minio", "secretKey": "minio123"}, "region": "us-east-1"}' >"$MINIO_CONFIG_DIR/config.json"

	if [ ! -f /tmp/mc ]; then
		wget --quiet -O /tmp/mc https://dl.minio.io/client/mc/release/linux-amd64/mc &&
			chmod +x /tmp/mc

     * @param fid the file identifier
     * @param attributes the file attributes to set
     * @param createTime the file creation time
     * @param lastWriteTime the last write time
     * @param lastAccessTime the last access time
     */
    public Trans2SetFileInformation(final Configuration config, final int fid, final int attributes, final long createTime,
            final long lastWriteTime, final long lastAccessTime) {

ECL0016=key[{0}] is not included in this BeanMap : {1}.
ECL0017=Exception occurred, because {0}
ECL0041={0}''s creation failure, because {1}
ECL0040=IOException occurred, because {0}
ECL0042=An illegal access was generated by {0}, because {1}
ECL0043=The target which {0} invoked is illegal, because {1}
ECL0044=Class not found, details are {0}
ECL0048=The constructor of {0} for arguments({1}) not found

/**
 * Unit test for {@link Trans2QueryFSInformation}. The class contains mostly
 * trivial wire-format helpers and a custom {@code toString()} implementation.
 * All tests are pure unit tests – no network or file system access is
 * required.
 */
class Trans2QueryFSInformationTest {

    /** Small helper to create a byte buffer larger than the maximum expected
     *  wire format so that we can observe only the bytes written by a method.

 */
public interface DcerpcError {

    /**
     * Generic fault code for other errors
     */
    int DCERPC_FAULT_OTHER = 0x00000001;
    /**
     * Access denied fault code
     */
    int DCERPC_FAULT_ACCESS_DENIED = 0x00000005;
    /**
     * Cannot perform operation fault code
     */
    int DCERPC_FAULT_CANT_PERFORM = 0x000006D8;
    /**

                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;
    sendfile        on;
    keepalive_timeout  65;

    # include /etc/nginx/conf.d/*.conf;

    upstream minio {
        server minio1:9000;
        server minio2:9000;
        server minio3:9000;

    /** Indicates processing child URLs due to an exception. */
    PROCESS_CHILD_URLS_BY_EXCEPTION,
    /** Indicates processing a child URL due to an exception. */
    PROCESS_CHILD_URL_BY_EXCEPTION,
    /** Indicates an access exception during crawling. */
    CRAWLING_ACCESS_EXCEPTION,
    /** Indicates a general exception during crawling. */
    CRAWLING_EXCEPTION,
    /** Indicates no URL is available in the queue. */
    NO_URL_IN_QUEUE,

             * global profile manager which is required to build a POM like a CLI invocation does. Failure to consider
             * the activated profiles can cause repo declarations to be lost which in turn will result in artifact
             * resolution failures, in particular when using the enhanced local repo which guards access to local files