{{- end }} minio/templates/_helper_policy.tpl {{- $statements_length := len .statements -}} {{- $statements_length := sub $statements_length 1 -}} { "Version": "2012-10-17", "Statement": [ {{- range $i, $statement := .statements }} { "Effect": "{{ $statement.effect | default "Allow" }}", "Action": [ "{{ $statement.actions | join "\",\n\"" }}" ]{{ if $statement.resources }}, "Resource": [ "{{ $statement.resources | join "\",\n\"" }}" ]{{ end }} {{- if $statement.conditions }} {{- $condition_len :=...

{{- end }} minio/templates/_helper_policy.tpl {{- $statements_length := len .statements -}} {{- $statements_length := sub $statements_length 1 -}} { "Version": "2012-10-17", "Statement": [ {{- range $i, $statement := .statements }} { "Effect": "{{ $statement.effect | default "Allow" }}", "Action": [ "{{ $statement.actions | join "\",\n\"" }}" ]{{ if $statement.resources }}, "Resource": [ "{{ $statement.resources | join "\",\n\"" }}" ]{{ end }} {{- if $statement.conditions }} {{- $condition_len :=...

#### Credentials

On MinIO admin credentials or root credentials are only allowed to be changed using ENVs namely `MINIO_ROOT_USER` and `MINIO_ROOT_PASSWORD`.

```sh
export MINIO_ROOT_USER=minio
export MINIO_ROOT_PASSWORD=minio13
minio server /data
```

#### Site

```
KEY:
site  label the server and its location

ARGS:
name     (string)    name for the site e.g. "cal-rack0"

When set, environment variables override the defined `compress` config settings in the server config.

```bash
export MINIO_COMPRESSION_ENABLE="on"
export MINIO_COMPRESSION_EXTENSIONS=".txt,.log,.csv,.json,.tar,.xml,.bin"
export MINIO_COMPRESSION_MIME_TYPES="text/*,application/json,application/xml"
```

> [!NOTE]

```

This program, lets the admin user perform any action and prevents all other users from performing `s3:Put*` operations.

In another terminal start MinIO:

```sh
export MINIO_CI_CD=1
export MINIO_ROOT_USER=minio
export MINIO_ROOT_PASSWORD=minio123
export MINIO_POLICY_PLUGIN_URL=http://localhost:8080/
minio server /tmp/disk{1...4}
```

Now, let's test it out with `mc`:

```sh

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

	rm -rf /tmp/multisitec
	if [ $# -ne 0 ]; then
		exit $#
	fi
}

catch

set -e
export MINIO_CI_CD=1
export MINIO_BROWSER=off
export MINIO_ROOT_USER="minio"
export MINIO_ROOT_PASSWORD="minio123"
export MINIO_KMS_AUTO_ENCRYPTION=off
export MINIO_PROMETHEUS_AUTH_TYPE=public
export MINIO_KMS_SECRET_KEY=my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw=
unset MINIO_KMS_KES_CERT_FILE

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...

.Values.minioConsolePort }} {{- template `minio.extraArgs` . }}" ] volumeMounts: {{- if $penabled }} {{- if (gt $drivesPerNode 1) }} {{- range $i := until $drivesPerNode }} - name: export-{{ $i }} mountPath: {{ $mountPath }}-{{ $i }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- else }} - name: export mountPath: {{ $mountPath }} {{- if and $penabled $subPath }} subPath: {{ $subPath }} {{- end }} {{- end }} {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath:...