minio

安装

services:
  minio:
    image: minio/minio:latest
    container_name: minio
    restart: always
    command: server /data --console-address ":9001" # 启动服务绑定控制端页面端口
    volumes:
    - ./minio/data:/data
    - ./minio/config:/root/.minio
    environment:
    - TZ=Asia/Shanghai
    - LANG=en_US.UTF-8
    - MINIO_PROMETHEUS_AUTH_TYPE=public
    - MINIO_ROOT_USER=root
    - MINIO_ROOT_PASSWORD=DL2022root
    - MINIO_SERVER_URL=http://minio.123.com
    ports:
    - 9000:9000
    - 9001:9001
    logging:
      options:
        max-size: "50M" # 最大日志文件限制
        max-file: "10"
      driver: json-file

用户管理

mc admin user add ALIAS ACCESSKEY SECRETKEY
mc admin user list ALIAS
mc admin user info ALIAS USERNAME
mc admin user remove ALIAS USERNAME
mc admin user disable ALIAS USERNAME
mc admin user enable ALIAS USERNAME
mc admin user add TARGET ACCESSKEY SECRETKEY
mc admin user list TARGET

Group

mc admin group add ALIAS GROUPNAME MEMBER [MEMBER...]
mc admin group list ALIAS
mc admin group info ALIAS GROUPNAME
mc admin group remove ALIAS GROUPNAME
mc admin group disable ALIAS GROUPNAME
mc admin group enable ALIAS GROUPNAME

policy

{
   "Version": "2012-10-17",
   "Statement": [
      {
         "Effect": "Allow",
         "Action": [
            "s3:ListAllMyBuckets"
         ],
         "Resource": [
            "arn:aws:s3:::*"
         ]
      }
   ]
}
mc admin policy add myminio listbucketsonly /path/to/listbucketsonly.json
mc admin policy list myminio
mc admin policy info myminio writeonly
mc admin policy remove myminio listbucketsonly
mc admin policy set myminio listbucketsonly user=<USER>
mc admin policy set myminio listbucketsonly group=<GROUP>
mc admin policy add TARGET POLICYNAME POLICYPATH
mc admin policy list TARGET
mc admin policy info TARGET POLICYNAME
mc admin policy set TARGET POLICYNAME[,POLICYNAME,...] [ user=USERNAME | group=GROUPNAME ]
mc admin policy remove TARGET POLICYNAME
# https://docs.min.io/minio/baremetal/reference/minio-mc-admin/mc-admin-policy.html