| [AWS-KMS + SecretsManager](https://github.com/minio/kes/wiki/AWS-SecretsManager)             | Cloud KMS. MinIO in combination with a managed KMS installation   |
| [Gemalto KeySecure /Thales CipherTrust](https://github.com/minio/kes/wiki/Gemalto-KeySecure) | Local KMS. MinIO and KMS On-Premises.                             |

    int NT_STATUS_INVALID_COMPUTER_NAME = 0xC0000122;
    /** The pipe operation has failed because the other end of the pipe has been closed */
    int NT_STATUS_PIPE_BROKEN = 0xC000014b;
    /** The specified local group does not exist */
    int NT_STATUS_NO_SUCH_ALIAS = 0xC0000151;
    /** The user has not been granted the requested logon type at this computer */
    int NT_STATUS_LOGON_TYPE_NOT_GRANTED = 0xC000015b;

     */
    public ExecJob timeout(final int timeout) {
        this.timeout = timeout;
        return this;
    }

    /**
     * Sets whether to use local Fesen instance.
     *
     * @param useLocalFesen true to use local Fesen, false otherwise
     * @return this ExecJob instance for method chaining
     */
    public ExecJob useLocalFesen(final boolean useLocalFesen) {

## Consequences

* X
* Y
* Z
```

## Status

ACCEPTED

## Consequences

* We start to use Architectural Decision Records
* We use the proposed template from this ADR
* We locate `.md` files in the folder `/architecture/standards`
* We highly encourage usage of ADR to communicate decisions

		"Please add TLS certificate or use HTTP endpoints only",
		"Refer to https://docs.min.io/community/minio-object-store/operations/network-encryption.html for information about how to load a TLS certificate in your server",
	)

	ErrCertsAndHTTPEndpoints = newErrFn(
		"HTTP specified in endpoints, but the server in the local machine is configured with a TLS certificate",

    builders:
      - inject:
          properties-file: '.ci/java-versions.properties'
          properties-content: |
            JAVA_HOME=$HOME/.java/$ES_BUILD_JAVA
      - shell: |
          #!/usr/local/bin/runbld --redirect-stderr

		t, err := d.Token()
		if err != nil {
			if err == io.EOF {
				break
			}
			return err
		}

		if se, ok := t.(xml.StartElement); ok {
			tagName := se.Name.Local
			switch tagName {
			case "AllowQuotedRecordDelimiter":
				var b bool
				if err = d.DecodeElement(&b, &se); err != nil {
					return err
				}
				args.AllowQuotedRecordDelimiter = b
			default:

            version = constructVersion(repoMetadata.getVersioning(), artifact.getBaseVersion());
        }

        if (version == null) {
            // use the local copy, or if it doesn't exist - go to the remote repo for it
            version = artifact.getBaseVersion();
        }

        // TODO also do this logging for other metadata?

            assertEquals(transport, result);
            verify(transportPool).getSmbTransport(context, address, DEFAULT_PORT, false, true);
        }

        @Test
        @DisplayName("Should get transport with local binding")
        void testGetSmbTransportWithLocalBinding() {
            // Given
            when(transportPool.getSmbTransport(context, address, DEFAULT_PORT, localAddr, LOCAL_PORT, TEST_HOST, false))

import org.apache.maven.repository.Proxy;

/**
 * Abstraction of an artifact repository. Artifact repositories can be remote, local, or even build reactor or
 * IDE workspace.
 */
// TODO completely separate local and remote artifact repositories
public class MavenArtifactRepository implements ArtifactRepository {
    private static final String LS = System.lineSeparator();