values:
            - centos-8-packaging
            - ubuntu-20.04-packaging
      - axis:
          type: user-defined
          name: PACKAGING_TASK
          values:
            - 'destructiveDistroTest.docker'
            - 'destructiveDistroTest.packages'
            - 'destructiveDistroTest.archives'
    builders:
      - inject:
          properties-file: '.ci/java-versions.properties'
          properties-content: |

	locks := make([]string, len(restClnts))

	// Add total timeout
	ctx, cancel := context.WithTimeout(ctx, opts.Timeout)
	defer cancel()

	// Tolerance is not set, defaults to half of the locker clients.
	tolerance := len(restClnts) / 2

	// Quorum is effectively = total clients subtracted with tolerance limit
	quorum := len(restClnts) - tolerance
	if !isReadLock {

OPA is enabled through MinIO's Access Management Plugin feature.

## Get started

### 1. Start OPA in a container

```sh
podman run -it \
    --name opa \
    --publish 8181:8181 \
    docker.io/openpolicyagent/opa:0.40.0-rootless \
       run --server \
           --log-format=json-pretty \
           --log-level=debug \
           --set=decision_logs.console=true
```

### 2. Create a sample OPA Policy

    - Leaked File descriptors ([#275](https://github.com/docker/containerd/issues/275))
    - Additional memory overhead per container ([#21737]((https://github.com/docker/docker/issues/21737))
  * Docker version 1.12.1 [has been validated](https://github.com/kubernetes/kubernetes/issues/28698) through the Kubernetes docker automated validation framework as has Docker version 1.12.3

 * <p>
 * Example usage:
 * <pre>
 * public class CustomPackagingProvider implements PackagingProvider {
 *     public Collection&lt;Packaging&gt; provides() {
 *         return Arrays.asList(
 *             packaging("docker-image"),
 *             packaging("flatpak")
 *         );
 *     }
 * }
 * </pre>
 *
 * @see org.apache.maven.api.Packaging
 * @see org.apache.maven.api.spi.ExtensibleEnumProvider
 * @since 4.0.0
 */

x-minio-common: &minio-common
  image: minio/minio:${MINIO_VERSION}
  command: server http://minio{1...4}/data{1...3}
  env_file:
    - ./minio.env
  expose:
    - "9000"
    - "9001"

# starts 4 docker containers running minio server instances.
# using nginx reverse proxy, load balancing, you can access
# it through port 9000.
services:
  minio1:
    <<: *minio-common
    hostname: minio1
    volumes:

fi

TFCI_BAZEL_COMMON_ARGS="$TFCI_BAZEL_COMMON_ARGS --config rbe_$TFCI_BAZEL_TARGET_SELECTING_CONFIG_PREFIX"

if [[ `uname -s | grep -P '^MSYS_NT'` ]]; then
  if [[ "$TFCI_GITHUB_ACTIONS" != "true" ]]; then
    # Docker on Windows doesn't support the `host` networking mode, and so
    # port-forwarding is required for the container to detect it's running on GCE.

 * Example usage:
 * <pre>
 * public class CustomLifecycleProvider implements LifecycleProvider {
 *     public Collection&lt;Lifecycle&gt; provides() {
 *         return Collections.singleton(
 *             lifecycle("deploy-docker", Arrays.asList(
 *                 "build-image",
 *                 "tag-image",
 *                 "push-image"
 *             ))
 *         );
 *     }
 * }
 * </pre>
 *

 * public class CustomTypeProvider implements TypeProvider {
 *     public Collection<Type> provides() {
 *         return Arrays.asList(
 *             type("kotlin-library", "jar", "kotlin"),
 *             type("docker-image", "tar.gz", null)
 *         );
 *     }
 * }
 * </pre>
 *
 * @see org.apache.maven.api.Type
 * @see org.apache.maven.api.spi.ExtensibleEnumProvider
 * @since 4.0.0
 */
@Experimental
@Consumer

# MinIO Server Config Guide [![Slack](https://slack.min.io/slack?type=svg)](https://slack.min.io) [![Docker Pulls](https://img.shields.io/docker/pulls/minio/minio.svg?maxAge=604800)](https://hub.docker.com/r/minio/minio/)

## Configuration Directory