initialize: |- {{ include (print $.Template.BasePath "/_helper_create_bucket.txt") . | indent 4 }} add-user: |- {{ include (print $.Template.BasePath "/_helper_create_user.txt") . | indent 4 }} minio/templates/console-ingress.yaml {{- if .Values.consoleIngress.enabled -}} {{- $fullName := printf "%s-console" (include "minio.fullname" .) -}} {{- $servicePort := .Values.consoleService.port -}} {{- $ingressPath := .Values.consoleIngress.path -}} apiVersion: {{ template "minio.consoleIngress.apiVersion" . }}...

initialize: |- {{ include (print $.Template.BasePath "/_helper_create_bucket.txt") . | indent 4 }} add-user: |- {{ include (print $.Template.BasePath "/_helper_create_user.txt") . | indent 4 }} minio/templates/console-ingress.yaml {{- if .Values.consoleIngress.enabled -}} {{- $fullName := printf "%s-console" (include "minio.fullname" .) -}} {{- $servicePort := .Values.consoleService.port -}} {{- $ingressPath := .Values.consoleIngress.path -}} apiVersion: {{ template "minio.consoleIngress.apiVersion" . }}...

Dann könnten Sie OpenAPI (einschließlich der Dokumentationsoberflächen) deaktivieren, indem Sie die Umgebungsvariable `OPENAPI_URL` auf einen leeren String setzen, wie zum Beispiel:

<div class="termy">

```console
$ OPENAPI_URL= uvicorn main:app

<span style="color: green;">INFO</span>:     Uvicorn running on http://127.0.0.1:8000 (Press CTRL+C to quit)
```

</div>

    --name opa \
    --publish 8181:8181 \
    docker.io/openpolicyagent/opa:0.40.0-rootless \
       run --server \
           --log-format=json-pretty \
           --log-level=debug \
           --set=decision_logs.console=true
```

### 2. Create a sample OPA Policy

In another terminal, create a policy that allows root user all access and for all other users denies `PutObject`:

```sh
cat > example.rego <<EOF

type ServerConfigCommon struct {
	RootUser    string `yaml:"rootUser"`
	RootPwd     string `yaml:"rootPassword"`
	Addr        string `yaml:"address"`
	ConsoleAddr string `yaml:"console-address"`
	CertsDir    string `yaml:"certs-dir"`
	Options     Opts   `yaml:"options"`
}

// ServerConfigV1 represents a MinIO configuration file v1
type ServerConfigV1 struct {
	ServerConfigVersion

version: '3.7'

# Settings and configurations that are common for all containers
x-minio-common: &minio-common
  image: quay.io/minio/minio:${JOB_NAME}
  command: server --console-address ":9001" http://minio{1...4}/pdata{1...2} http://minio{5...8}/pdata{1...2}
  expose:
    - "9000"
    - "9001"
  environment:
    MINIO_CI_CD: "on"
    MINIO_ROOT_USER: "minio"
    MINIO_ROOT_PASSWORD: "minio123"

Starten Sie nun Traefik:

<div class="termy">

```console
$ ./traefik --configFile=traefik.toml

INFO[0000] Configuration loaded from file: /home/user/awesomeapi/traefik.toml
```

</div>

Und jetzt starten Sie Ihre Anwendung mit Uvicorn, indem Sie die Option `--root-path` verwenden:

<div class="termy">

```console
$ uvicorn main:app --root-path /api/v1

然后，它把请求重定位到运行在 `http://127.0.0.1:8000` 上的 Uvicorn。

现在，启动 Traefik：

<div class="termy">

```console
$ ./traefik --configFile=traefik.toml

INFO[0000] Configuration loaded from file: /home/user/awesomeapi/traefik.toml
```

</div>

接下来，使用 Uvicorn 启动应用，并使用 `--root-path` 选项：

<div class="termy">

```console
$ uvicorn main:app --root-path /api/v1

include (print $.Template.BasePath "/_helper_policy.tpl") . | indent 4 }} {{ end }} custom-command: |- {{ include (print $.Template.BasePath "/_helper_custom_command.txt") . | indent 4 }} minio/templates/console-ingress.yaml {{- if .Values.consoleIngress.enabled -}} {{- $fullName := printf "%s-console" (include "minio.fullname" .) -}} {{- $servicePort := .Values.consoleService.port -}} {{- $ingressPath := .Values.consoleIngress.path -}} apiVersion: {{ template "minio.consoleIngress.apiVersion" . }}...

echo "done"

# Start MinIO instances
echo -n "Starting MinIO instances ..."
minio server --certs-dir /tmp/certs --address ":9001" --console-address ":10000" /tmp/minio1/{1...4}/disk{1...4} /tmp/minio1/{5...8}/disk{1...4} >/tmp/minio1_1.log 2>&1 &
minio server --certs-dir /tmp/certs --address ":9002" --console-address ":11000" /tmp/minio2/{1...4}/disk{1...4} /tmp/minio2/{5...8}/disk{1...4} >/tmp/minio2_1.log 2>&1 &
echo "done"

if [ ! -f ./mc ]; then