minio/docs/sts/docker-compose.yml

version: '2'
services:
  opa:
    image: openpolicyagent/opa:0.11.0
    ports:
      - 8181:8181
    command:
      - "run"
      - "--server"
      - "--log-level=debug"
  api_server:
    image: openpolicyagent/demo-restful-api:0.2
    ports:
      - 5000:5000
    environment:
      - OPA_ADDR=http://opa:8181
      - POLICY_PATH=/v1/data/httpapi/authz
Introduce STS client grants API and OPA policy integration (#6168) This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks 2018-10-09 23:00:01 +02:00			`version: '2'`
			`services:`
			`opa:`
Fix OPA result response handling (#7763) Also update the document with updated rego policy and updated OPA agent REST API. This PR is to fix a regression caused by PR #7637 2019-06-11 02:06:32 +02:00			`image: openpolicyagent/opa:0.11.0`
Introduce STS client grants API and OPA policy integration (#6168) This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks 2018-10-09 23:00:01 +02:00			`ports:`
			`- 8181:8181`
			`command:`
			`- "run"`
			`- "--server"`
			`- "--log-level=debug"`
			`api_server:`
			`image: openpolicyagent/demo-restful-api:0.2`
			`ports:`
			`- 5000:5000`
			`environment:`
			`- OPA_ADDR=http://opa:8181`
			`- POLICY_PATH=/v1/data/httpapi/authz`