54ae364def
This PR introduces two new features - AWS STS compatible STS API named AssumeRoleWithClientGrants ``` POST /?Action=AssumeRoleWithClientGrants&Token=<jwt> ``` This API endpoint returns temporary access credentials, access tokens signature types supported by this API - RSA keys - ECDSA keys Fetches the required public key from the JWKS endpoints, provides them as rsa or ecdsa public keys. - External policy engine support, in this case OPA policy engine - Credentials are stored on disks
159 lines
4.1 KiB
JSON
159 lines
4.1 KiB
JSON
{
|
|
"version": "30",
|
|
"credential": {
|
|
"accessKey": "USWUXHGYZQYFYFFIT3RE",
|
|
"secretKey": "MOJRH0mkL1IPauahWITSVvyDrQbEEIwljvmxdq03"
|
|
},
|
|
"region": "us-east-1",
|
|
"worm": "off",
|
|
"storageclass": {
|
|
"standard": "",
|
|
"rrs": ""
|
|
},
|
|
"cache": {
|
|
"drives": [],
|
|
"expiry": 90,
|
|
"exclude": [],
|
|
"maxuse": 80
|
|
},
|
|
"usage": {
|
|
"interval": "3h"
|
|
},
|
|
"notify": {
|
|
"amqp": {
|
|
"1": {
|
|
"enable": true,
|
|
"url": "amqp://myuser:mypassword@localhost:5672",
|
|
"exchange": "bucketevents",
|
|
"routingKey": "bucketlogs",
|
|
"exchangeType": "fanout",
|
|
"deliveryMode": 0,
|
|
"mandatory": false,
|
|
"immediate": false,
|
|
"durable": false,
|
|
"internal": false,
|
|
"noWait": false,
|
|
"autoDeleted": false
|
|
}
|
|
},
|
|
"nats": {
|
|
"1": {
|
|
"enable": true,
|
|
"address": "0.0.0.0:4222",
|
|
"subject": "bucketevents",
|
|
"username": "yourusername",
|
|
"password": "yoursecret",
|
|
"token": "",
|
|
"secure": false,
|
|
"pingInterval": 0,
|
|
"streaming": {
|
|
"enable": false,
|
|
"clusterID": "",
|
|
"clientID": "",
|
|
"async": false,
|
|
"maxPubAcksInflight": 0
|
|
}
|
|
}
|
|
},
|
|
"elasticsearch": {
|
|
"1": {
|
|
"enable": true,
|
|
"format": "namespace",
|
|
"url": "http://127.0.0.1:9200",
|
|
"index": "bucketevents"
|
|
}
|
|
},
|
|
"redis": {
|
|
"1": {
|
|
"enable": true,
|
|
"format": "namespace",
|
|
"address": "127.0.0.1:6379",
|
|
"password": "yoursecret",
|
|
"key": "bucketevents"
|
|
}
|
|
},
|
|
"postgresql": {
|
|
"1": {
|
|
"enable": true,
|
|
"format": "namespace",
|
|
"connectionString": "",
|
|
"table": "bucketevents",
|
|
"host": "127.0.0.1",
|
|
"port": "5432",
|
|
"user": "postgres",
|
|
"password": "mypassword",
|
|
"database": "bucketevents_db"
|
|
}
|
|
},
|
|
"kafka": {
|
|
"1": {
|
|
"enable": true,
|
|
"brokers": ["localhost:9092"],
|
|
"topic": "bucketevents",
|
|
"tls" : {
|
|
"enable" : true,
|
|
"skipVerify" : false,
|
|
"clientAuth" : 0
|
|
},
|
|
"sasl" : {
|
|
"enable" : true,
|
|
"username" : "kafka",
|
|
"password" : "kafkapasswd"
|
|
}
|
|
}
|
|
},
|
|
"webhook": {
|
|
"1": {
|
|
"enable": true,
|
|
"endpoint": "http://requestb.in/1525x9n1"
|
|
}
|
|
},
|
|
"mysql": {
|
|
"1": {
|
|
"enable": true,
|
|
"format": "namespace",
|
|
"dsnString": "",
|
|
"table": "minio_images",
|
|
"host": "172.17.0.1",
|
|
"port": "3306",
|
|
"user": "root",
|
|
"password": "password",
|
|
"database": "miniodb"
|
|
}
|
|
},
|
|
"mqtt": {
|
|
"1": {
|
|
"enable": false,
|
|
"broker": "tcp://localhost:1883",
|
|
"topic": "minio",
|
|
"qos": 1,
|
|
"clientId": "minio",
|
|
"username": "",
|
|
"password": ""
|
|
}
|
|
}
|
|
},
|
|
"logger": {
|
|
"console": {
|
|
"enabled": true
|
|
},
|
|
"http": {
|
|
"1": {
|
|
"enabled": false,
|
|
"endpoint": ""
|
|
}
|
|
}
|
|
},
|
|
"openid": {
|
|
"jwks": {
|
|
"url": ""
|
|
}
|
|
},
|
|
"policy": {
|
|
"opa": {
|
|
"url": "",
|
|
"authToken": ""
|
|
}
|
|
}
|
|
}
|