"github.com/minio/minio/internal/logger"
	"github.com/minio/pkg/v3/sync/errgroup"
	"github.com/puzpuzpuz/xsync/v3"
)

// IAMObjectStore implements IAMStorageAPI
type IAMObjectStore struct {
	// Protect access to storage within the current server.
	sync.RWMutex

	*iamCache

	usersSysType UsersSysType

	objAPI ObjectLayer
}

want it, that you can change the software or use pieces of it in new
free programs, and that you know you can do these things.

  Developers that use our General Public Licenses protect your rights
with two steps: (1) assert copyright on the software, and (2) offer
you this License which gives you legal permission to copy, distribute
and/or modify the software.

- kube-proxy: a configuration file specified via `--config` is now loaded with strict deserialization, which fails if the config file contains duplicate or unknown fields. This protects against accidentally running with config files that are malformed, mis-indented, or have typos in field names, and getting unexpected behavior. ([#82927](https://github.com/kubernetes/kubernetes/pull/82927), [@obitech](https://github.com/obitech))...

* change default azure file mount permission to 0777 ([#69854](https://github.com/kubernetes/kubernetes/pull/69854), [@andyzhangx](https://github.com/andyzhangx))
* Verify invalid secret/configmap/projected volumes before calling setup ([#68691](https://github.com/kubernetes/kubernetes/pull/68691), [@gnufied](https://github.com/gnufied))



# v1.10.9

[Documentation](https://docs.k8s.io)

.Values.postJob.securityContext.runAsUser }} runAsGroup: {{ .Values.postJob.securityContext.runAsGroup }} fsGroup: {{ .Values.postJob.securityContext.fsGroup }} {{- end }} volumes: - name: etc-path emptyDir: {} - name: tmp emptyDir: {} - name: minio-configuration projected: sources: - configMap: name: {{ template "minio.fullname" . }} - secret: name: {{ template "minio.secretName" . }} {{- range (concat .Values.users (default (list) .Values.svcaccts)) }} {{- if .existingSecret }} - secret: name: {{ tpl .existingSecret...

.Values.postJob.securityContext.runAsUser }} runAsGroup: {{ .Values.postJob.securityContext.runAsGroup }} fsGroup: {{ .Values.postJob.securityContext.fsGroup }} {{- end }} volumes: - name: etc-path emptyDir: {} - name: tmp emptyDir: {} - name: minio-configuration projected: sources: - configMap: name: {{ template "minio.fullname" . }} - secret: name: {{ template "minio.secretName" . }} {{- range (concat .Values.users (default (list) .Values.svcaccts)) }} {{- if .existingSecret }} - secret: name: {{ tpl .existingSecret...

.Values.postJob.securityContext.runAsUser }} runAsGroup: {{ .Values.postJob.securityContext.runAsGroup }} fsGroup: {{ .Values.postJob.securityContext.fsGroup }} {{- end }} volumes: - name: etc-path emptyDir: {} - name: tmp emptyDir: {} - name: minio-configuration projected: sources: - configMap: name: {{ template "minio.fullname" . }} - secret: name: {{ template "minio.secretName" . }} {{- range (concat .Values.users (default (list) .Values.svcaccts)) }} {{- if .existingSecret }} - secret: name: {{ tpl .existingSecret...

d }} securityContext: runAsUser: {{ .Values.postJob.securityContext.runAsUser }} runAsGroup: {{ .Values.postJob.securityContext.runAsGroup }} fsGroup: {{ .Values.postJob.securityContext.fsGroup }} {{- end }} volumes: - name: minio-configuration projected: sources: - configMap: name: {{ template "minio.fullname" . }} - secret: name: {{ template "minio.secretName" . }} {{- range (concat .Values.users (default (list) .Values.svcaccts)) }} {{- if .existingSecret }} - secret: name: {{ tpl .existingSecret...

</p>


<h3 id="advice">Advice</h3>

<p>
Programs that modify data being simultaneously accessed by multiple goroutines
must serialize such access.
</p>

<p>
To serialize access, protect the data with channel operations or other synchronization primitives
such as those in the <a href="/pkg/sync/"><code>sync</code></a>
and <a href="/pkg/sync/atomic/"><code>sync/atomic</code></a> packages.
</p>

<p>

{{- if .Values.postJob.securityContext.enabled }} securityContext: {{ omit .Values.postJob.securityContext "enabled" | toYaml | nindent 12 }} {{- end }} volumes: - name: etc-path emptyDir: {} - name: tmp emptyDir: {} - name: minio-configuration projected: sources: - configMap: name: {{ template "minio.fullname" . }} - secret: name: {{ template "minio.secretName" . }} {{- range (concat .Values.users (default (list) .Values.svcaccts)) }} {{- if .existingSecret }} - secret: name: {{ tpl .existingSecret...