.Values.persistence.subPath }}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- if .Values.metrics.serviceMonitor.public...

.Values.persistence.subPath }}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- if .Values.metrics.serviceMonitor.public...

	"sort"
	"strings"
	"sync"
	"time"

	"github.com/dustin/go-humanize"
	"github.com/minio/madmin-go/v3"
	"github.com/minio/minio-go/v7/pkg/set"
	"github.com/minio/minio/internal/config"
	"github.com/minio/pkg/v3/env"
)

const (
	defaultMonitorNewDiskInterval = time.Second * 10
	healingTrackerFilename        = ".healing.bin"
)

//go:generate msgp -file $GOFILE -unexported

```
mc encrypt info myminio/bucket/
Auto encryption 'sse-s3' is enabled
```

### Using environment (not-recommended)

MinIO automatically encrypts all objects on buckets if KMS is successfully configured and following ENV is enabled:

```
export MINIO_KMS_AUTO_ENCRYPTION=on
```

### Verify auto-encryption

> Note that auto-encryption only affects requests without S3 encryption headers. So, if a S3 client sends

	}
	writeSuccessResponseJSON(w, v)
}

// KMSCreateKeyHandler - POST /minio/kms/v1/key/create?key-id=<master-key-id>
func (a kmsAPIHandlers) KMSCreateKeyHandler(w http.ResponseWriter, r *http.Request) {
	// If env variable MINIO_KMS_SECRET_KEY is populated, prevent creation of new keys
	ctx := newContext(r, w, "KMSCreateKey")
	defer logger.AuditLog(ctx, w, r, mustGetClaimsFromToken(r))

	"runtime"
	"slices"
	"strings"

	"github.com/cespare/xxhash/v2"
	"github.com/minio/minio-go/v7/pkg/set"
	"github.com/minio/minio/internal/config"
	"github.com/minio/pkg/v3/ellipses"
	"github.com/minio/pkg/v3/env"
)

// This file implements and supports ellipses pattern for
// `minio server` command line arguments.

// Endpoint set represents parsed ellipses values, also provides
// methods to get the sets of endpoints.

.Values.persistence.subPath }}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment...

		},
	}
)

// Enabled returns if LDAP config is enabled.
func Enabled(kvs config.KVS) bool {
	return kvs.Get(ServerAddr) != ""
}

// Lookup - initializes LDAP config, overrides config, if any ENV values are set.
func Lookup(s config.Config, rootCAs *x509.CertPool) (l Config, err error) {
	l = Config{}

	// Purge all removed keys first
	kvs := s[config.IdentityLDAPSubSys][config.Default]
	if len(kvs) > 0 {

#!/usr/bin/env bash

echo "Running $0"

set -x

trap 'catch $LINENO' ERR

# shellcheck disable=SC2120
catch() {
	if [ $# -ne 0 ]; then
		echo "error on line $1"
		for site in sitea siteb; do
			echo "$site server logs ========="
			cat "/tmp/${site}_1.log"
			echo "==========================="
			cat "/tmp/${site}_2.log"
		done
	fi

	echo "Cleaning up instances of MinIO"
	pkill minio
	pkill -9 minio

.Values.persistence.subPath }}" {{- end }} {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} ports: - name: {{ $scheme }} containerPort: {{ .Values.minioAPIPort }} - name: {{ $scheme }}-console containerPort: {{ .Values.minioConsolePort }} env: - name: MINIO_ROOT_USER valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootUser - name: MINIO_ROOT_PASSWORD valueFrom: secretKeyRef: name: {{ template "minio.secretName" . }} key: rootPassword {{- range $key, $val := .Values.environment...