MinIO Access Management Plugin Settings — MinIO Object Storage for Linux

This page documents settings for enabling external authorization management using the MinIO Access Management Plugin. See MinIO External Access Management Plugin for a tutorial on using these settings.

Examples

When setting up the MinIO Access Management plugin, you must define at minimum all required settings. The examples here represent the minimum required setting.

Environment Variables

MINIO_POLICY_PLUGIN_URL="https://authzservice.example.net:8080/authz"

Configuration Settings

policy_plugin

Use the mc admin config set command to create or update the access management plugin configuration. The policy_plugin url argument is required. Specify additional optional arguments as a whitespace (” “)-delimited list.

mc admin config set policy_plugin                     \
   url="https://authzservice.example.net:8080/authz"  \
   [ARGUMENT=VALUE] ...

Settings

URL

Required

Environment Variable

MINIO_POLICY_PLUGIN_URL

Configuration Setting

policy_plugin url

The webhook endpoint for the external access management service (https://authzservice.example.net:8080/authz).

Auth Token

Optional

Environment Variable

MINIO_POLICY_PLUGIN_AUTH_TOKEN

Configuration Setting

policy_plugin auth_token

An authentication token to present to the configured webhook endpoint.

Specify a supported HTTP Authentication scheme as a string value, such as "Bearer TOKEN". MinIO sends the token using the HTTP Authorization header.

HTTP2

Optional

Environment Variable

MINIO_POLICY_PLUGIN_ENABLE_HTTP2

Configuration Setting

policy_plugin enable_http2

Enable experimental HTTP2 support for connecting to the configure webhook service.

Defaults to off

Comment

Optional

Environment Variable

MINIO_POLICY_PLUGIN_COMMENT

Configuration Setting

policy_plugin comment

Specify a comment to associate to the external access management configuration.