Release v0.21.0 (#2389)

Signed-off-by: Benjamin Perez <benjamin@bexsoft.net>

.golangci.yml

@@ -14,24 +14,19 @@ linters-settings:
 linters:
   disable-all: true
   enable:
-    - typecheck
     - goimports
     - misspell
     - govet
     - revive
     - ineffassign
     - gosimple
-    - deadcode
-    - structcheck
     - gomodguard
     - gofmt
     - unused
-    - structcheck
     - unconvert
     - varcheck
     - gocritic
     - gofumpt
-    - tenv
     - durationcheck
 
 service:
@@ -51,4 +46,4 @@ run:
   skip-dirs:
     - pkg/clientgen
     - pkg/apis/networking.gke.io
-    - restapi/operations
+    - restapi/operations

.goreleaser.yml

@@ -13,7 +13,7 @@ release:
 before:
   hooks:
     # you may remove this if you don't use vgo
-    - go mod tidy -compat=1.17
+    - go mod tidy -compat=1.18
 
 builds:
   -

Dockerfile.release

@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/ubi-minimal:8.5
+FROM registry.access.redhat.com/ubi8/ubi-minimal:8.6
 
 ARG TAG
 

Makefile

@@ -28,10 +28,7 @@ verifiers: getdeps fmt lint
 
 fmt:
 	@echo "Running $@ check"
-	@GO111MODULE=on gofmt -d restapi/
-	@GO111MODULE=on gofmt -d pkg/
-	@GO111MODULE=on gofmt -d cmd/
-	@GO111MODULE=on gofmt -d cluster/
+	@(env bash $(PWD)/verify-gofmt.sh)
 
 crosscompile:
 	@(env bash $(PWD)/cross-compile.sh $(arg1))
@@ -46,9 +43,13 @@ install: console
 	@mkdir -p $(GOPATH)/bin && cp -f $(PWD)/console $(GOPATH)/bin/console
 	@echo "Installation successful. To learn more, try \"console --help\"."
 
-swagger-gen: clean-swagger swagger-console swagger-operator
+swagger-gen: clean-swagger swagger-console swagger-operator apply-gofmt
 	@echo "Done Generating swagger server code from yaml"
 
+apply-gofmt:
+	@echo "Applying gofmt to all generated an existing files"
+	@GO111MODULE=on gofmt -w .
+
 clean-swagger:
 	@echo "cleaning"
 	@rm -rf models

README.md

@@ -54,7 +54,7 @@ docker pull minio/console
 
 ### Build from source
 > You will need a working Go environment. Therefore, please follow [How to install Go](https://golang.org/doc/install).
-> Minimum version required is go1.17
+> Minimum version required is go1.18
 
 ```
 go install github.com/minio/console/cmd/console@latest

go.mod

@@ -1,55 +1,58 @@
 module github.com/minio/console
 
-go 1.17
+go 1.18
 
 require (
 	github.com/blang/semver/v4 v4.0.0
-	github.com/cheggaaa/pb/v3 v3.0.8
+	github.com/cheggaaa/pb/v3 v3.1.0
 	github.com/dustin/go-humanize v1.0.0
 	github.com/fatih/color v1.13.0
-	github.com/go-openapi/errors v0.20.2
-	github.com/go-openapi/loads v0.21.1
-	github.com/go-openapi/runtime v0.23.3
-	github.com/go-openapi/spec v0.20.5
-	github.com/go-openapi/strfmt v0.21.2
-	github.com/go-openapi/swag v0.21.1
-	github.com/go-openapi/validate v0.21.0
-	github.com/golang-jwt/jwt/v4 v4.4.1
+	github.com/go-openapi/errors v0.20.3
+	github.com/go-openapi/loads v0.21.2
+	github.com/go-openapi/runtime v0.24.1
+	github.com/go-openapi/spec v0.20.7
+	github.com/go-openapi/strfmt v0.21.3
+	github.com/go-openapi/swag v0.22.3
+	github.com/go-openapi/validate v0.22.0
+	github.com/golang-jwt/jwt/v4 v4.4.2
 	github.com/google/uuid v1.3.0
 	github.com/gorilla/websocket v1.5.0
 	github.com/jessevdk/go-flags v1.5.0
-	github.com/klauspost/compress v1.15.9
-	github.com/minio/cli v1.23.0
+	github.com/klauspost/compress v1.15.11
+	github.com/minio/cli v1.24.0
 	github.com/minio/directpv v1.4.4-0.20220805090942-948ca4731651
 	github.com/minio/highwayhash v1.0.2
-	github.com/minio/kes v0.19.2
-	github.com/minio/madmin-go v1.4.23
-	github.com/minio/mc v0.0.0-20220818165341-8c239d16aa37
-	github.com/minio/minio-go/v7 v7.0.34
-	github.com/minio/operator v0.0.0-20220414212219-ba4c097324b2
-	github.com/minio/pkg v1.2.0
-	github.com/minio/selfupdate v0.4.0
+	github.com/minio/kes v0.21.0
+	github.com/minio/madmin-go v1.6.3
+	github.com/minio/mc v0.0.0-20221007160339-ec8687d57e36
+	github.com/minio/minio-go/v7 v7.0.40
+	github.com/minio/operator v0.0.0-20220902184351-21e4073132b0
+	github.com/minio/pkg v1.5.1
+	github.com/minio/selfupdate v0.5.0
 	github.com/mitchellh/go-homedir v1.1.0
 	github.com/rs/xid v1.4.0
 	github.com/secure-io/sio-go v0.3.1
 	github.com/stretchr/testify v1.8.0
-	github.com/tidwall/gjson v1.14.0
-	github.com/unrolled/secure v1.10.0
-	golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa
+	github.com/tidwall/gjson v1.14.3
+	github.com/unrolled/secure v1.13.0
+	golang.org/x/crypto v0.0.0-20221005025214-4161e89ecf1b
 	golang.org/x/net v0.0.0-20220722155237-a158d28d115b
 	golang.org/x/oauth2 v0.0.0-20220411215720-9780585627b5
+	// Added to include security fix for
+	// https://github.com/golang/go/issues/56152
+	golang.org/x/text v0.3.8 // indirect
 	gopkg.in/yaml.v2 v2.4.0
-	k8s.io/api v0.24.3
-	k8s.io/apimachinery v0.24.3
-	k8s.io/client-go v0.24.3
-	k8s.io/utils v0.0.0-20220210201930-3a6ce19ff2f9
+	k8s.io/api v0.25.2
+	k8s.io/apimachinery v0.25.2
+	k8s.io/client-go v0.25.2
+	k8s.io/utils v0.0.0-20220922133306-665eaaec4324
 )
 
 require (
-	cloud.google.com/go v0.81.0 // indirect
+	cloud.google.com/go v0.99.0 // indirect
 	github.com/Azure/go-autorest v14.2.0+incompatible // indirect
-	github.com/Azure/go-autorest/autorest v0.11.18 // indirect
-	github.com/Azure/go-autorest/autorest/adal v0.9.13 // indirect
+	github.com/Azure/go-autorest/autorest v0.11.27 // indirect
+	github.com/Azure/go-autorest/autorest/adal v0.9.20 // indirect
 	github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
 	github.com/Azure/go-autorest/logger v0.2.1 // indirect
 	github.com/Azure/go-autorest/tracing v0.6.0 // indirect
@@ -70,16 +73,14 @@ require (
 	github.com/emicklei/go-restful/v3 v3.8.0 // indirect
 	github.com/evanphx/json-patch v5.6.0+incompatible // indirect
 	github.com/fatih/structs v1.1.0 // indirect
-	github.com/form3tech-oss/jwt-go v3.2.3+incompatible // indirect
 	github.com/fsnotify/fsnotify v1.5.1 // indirect
 	github.com/gdamore/encoding v1.0.0 // indirect
 	github.com/gdamore/tcell/v2 v2.4.1-0.20210905002822-f057f0a857a1 // indirect
-	github.com/go-logr/logr v1.2.2 // indirect
+	github.com/go-logr/logr v1.2.3 // indirect
 	github.com/go-ole/go-ole v1.2.6 // indirect
-	github.com/go-openapi/analysis v0.21.2 // indirect
+	github.com/go-openapi/analysis v0.21.4 // indirect
 	github.com/go-openapi/jsonpointer v0.19.5 // indirect
 	github.com/go-openapi/jsonreference v0.20.0 // indirect
-	github.com/go-stack/stack v1.8.1 // indirect
 	github.com/goccy/go-json v0.9.4 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/golang-jwt/jwt v3.2.2+incompatible // indirect
@@ -97,6 +98,7 @@ require (
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
 	github.com/klauspost/cpuid/v2 v2.1.0 // indirect
+	github.com/kr/pretty v0.2.1 // indirect
 	github.com/lestrrat-go/backoff/v2 v2.0.8 // indirect
 	github.com/lestrrat-go/blackmagic v1.0.0 // indirect
 	github.com/lestrrat-go/httpcc v1.0.0 // indirect
@@ -113,6 +115,7 @@ require (
 	github.com/mattn/go-runewidth v0.0.13 // indirect
 	github.com/matttproud/golang_protobuf_extensions v1.0.2-0.20181231171920-c182affec369 // indirect
 	github.com/mb0/glob v0.0.0-20160210091149-1eb79d2de6c4 // indirect
+	github.com/miekg/dns v1.1.48 // indirect
 	github.com/minio/colorjson v1.0.2 // indirect
 	github.com/minio/filepath v1.0.0 // indirect
 	github.com/minio/md5-simd v1.1.2 // indirect
@@ -128,7 +131,7 @@ require (
 	github.com/navidys/tvxwidgets v0.1.0 // indirect
 	github.com/oklog/ulid v1.3.1 // indirect
 	github.com/olekukonko/tablewriter v0.0.5 // indirect
-	github.com/pelletier/go-toml v1.9.3 // indirect
+	github.com/pelletier/go-toml v1.9.4 // indirect
 	github.com/philhofer/fwd v1.1.2-0.20210722190033-5c56ac6d0bb9 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pkg/xattr v0.4.5 // indirect
@@ -146,10 +149,10 @@ require (
 	github.com/shirou/gopsutil/v3 v3.22.7 // indirect
 	github.com/sirupsen/logrus v1.9.0 // indirect
 	github.com/spf13/afero v1.6.0 // indirect
-	github.com/spf13/cast v1.3.1 // indirect
+	github.com/spf13/cast v1.4.1 // indirect
 	github.com/spf13/jwalterweatherman v1.1.0 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
-	github.com/spf13/viper v1.8.1 // indirect
+	github.com/spf13/viper v1.10.0 // indirect
 	github.com/subosito/gotenv v1.2.0 // indirect
 	github.com/tidwall/match v1.1.1 // indirect
 	github.com/tidwall/pretty v1.2.0 // indirect
@@ -160,28 +163,29 @@ require (
 	go.etcd.io/etcd/api/v3 v3.5.2 // indirect
 	go.etcd.io/etcd/client/pkg/v3 v3.5.2 // indirect
 	go.etcd.io/etcd/client/v3 v3.5.2 // indirect
-	go.mongodb.org/mongo-driver v1.9.1 // indirect
+	go.mongodb.org/mongo-driver v1.10.0 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/multierr v1.8.0 // indirect
 	go.uber.org/zap v1.21.0 // indirect
-	golang.org/x/sync v0.0.0-20210220032951-036812b2e83c // indirect
+	golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4 // indirect
+	golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4 // indirect
 	golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f // indirect
 	golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 // indirect
-	golang.org/x/text v0.3.7 // indirect
 	golang.org/x/time v0.0.0-20220224211638-0e9765cccd65 // indirect
+	golang.org/x/tools v0.1.12 // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/genproto v0.0.0-20220302033224-9aa15565e42a // indirect
 	google.golang.org/grpc v1.44.0 // indirect
-	google.golang.org/protobuf v1.27.1 // indirect
+	google.golang.org/protobuf v1.28.0 // indirect
 	gopkg.in/h2non/filetype.v1 v1.0.5 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/ini.v1 v1.66.6 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 	k8s.io/apiextensions-apiserver v0.24.3 // indirect
-	k8s.io/klog/v2 v2.60.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20220627174259-011e075b9cb8 // indirect
+	k8s.io/klog/v2 v2.80.1 // indirect
+	k8s.io/kube-openapi v0.0.0-20220803162953-67bda5d908f1 // indirect
 	sigs.k8s.io/controller-runtime v0.11.1 // indirect
-	sigs.k8s.io/json v0.0.0-20211208200746-9f7c6b3444d2 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.2.1 // indirect
+	sigs.k8s.io/json v0.0.0-20220713155537-f223a00ba0e2 // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
 	sigs.k8s.io/yaml v1.3.0 // indirect
 )

k8s/operator-console/base/console-deployment.yaml

@@ -15,7 +15,7 @@ spec:
       serviceAccountName: console-sa
       containers:
         - name: console
-          image: 'minio/console:v0.20.0'
+          image: 'minio/console:v0.21.0'
           imagePullPolicy: "IfNotPresent"
           env:
             - name: CONSOLE_OPERATOR_MODE

k8s/operator-console/standalone/console-deployment.yaml

@@ -32,7 +32,7 @@ spec:
     spec:
       containers:
         - name: console
-          image: 'minio/console:v0.20.0'
+          image: 'minio/console:v0.21.0'
           imagePullPolicy: "IfNotPresent"
           env:
             - name: CONSOLE_MINIO_SERVER

models/admin_info_response.go

@@ -24,11 +24,13 @@ package models
 
 import (
 	"context"
+	"encoding/json"
 	"strconv"
 
 	"github.com/go-openapi/errors"
 	"github.com/go-openapi/strfmt"
 	"github.com/go-openapi/swag"
+	"github.com/go-openapi/validate"
 )
 
 // AdminInfoResponse admin info response
@@ -36,15 +38,16 @@ import (
 // swagger:model adminInfoResponse
 type AdminInfoResponse struct {
 
+	// advanced metrics status
+	// Enum: [not configured available unavailable]
+	AdvancedMetricsStatus string `json:"advancedMetricsStatus,omitempty"`
+
 	// buckets
 	Buckets int64 `json:"buckets,omitempty"`
 
 	// objects
 	Objects int64 `json:"objects,omitempty"`
 
-	// prometheus not ready
-	PrometheusNotReady bool `json:"prometheusNotReady,omitempty"`
-
 	// servers
 	Servers []*ServerProperties `json:"servers"`
 
@@ -59,6 +62,10 @@ type AdminInfoResponse struct {
 func (m *AdminInfoResponse) Validate(formats strfmt.Registry) error {
 	var res []error
 
+	if err := m.validateAdvancedMetricsStatus(formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.validateServers(formats); err != nil {
 		res = append(res, err)
 	}
@@ -73,6 +80,51 @@ func (m *AdminInfoResponse) Validate(formats strfmt.Registry) error {
 	return nil
 }
 
+var adminInfoResponseTypeAdvancedMetricsStatusPropEnum []interface{}
+
+func init() {
+	var res []string
+	if err := json.Unmarshal([]byte(`["not configured","available","unavailable"]`), &res); err != nil {
+		panic(err)
+	}
+	for _, v := range res {
+		adminInfoResponseTypeAdvancedMetricsStatusPropEnum = append(adminInfoResponseTypeAdvancedMetricsStatusPropEnum, v)
+	}
+}
+
+const (
+
+	// AdminInfoResponseAdvancedMetricsStatusNotConfigured captures enum value "not configured"
+	AdminInfoResponseAdvancedMetricsStatusNotConfigured string = "not configured"
+
+	// AdminInfoResponseAdvancedMetricsStatusAvailable captures enum value "available"
+	AdminInfoResponseAdvancedMetricsStatusAvailable string = "available"
+
+	// AdminInfoResponseAdvancedMetricsStatusUnavailable captures enum value "unavailable"
+	AdminInfoResponseAdvancedMetricsStatusUnavailable string = "unavailable"
+)
+
+// prop value enum
+func (m *AdminInfoResponse) validateAdvancedMetricsStatusEnum(path, location string, value string) error {
+	if err := validate.EnumCase(path, location, value, adminInfoResponseTypeAdvancedMetricsStatusPropEnum, true); err != nil {
+		return err
+	}
+	return nil
+}
+
+func (m *AdminInfoResponse) validateAdvancedMetricsStatus(formats strfmt.Registry) error {
+	if swag.IsZero(m.AdvancedMetricsStatus) { // not required
+		return nil
+	}
+
+	// value enum
+	if err := m.validateAdvancedMetricsStatusEnum("advancedMetricsStatus", "body", m.AdvancedMetricsStatus); err != nil {
+		return err
+	}
+
+	return nil
+}
+
 func (m *AdminInfoResponse) validateServers(formats strfmt.Registry) error {
 	if swag.IsZero(m.Servers) { // not required
 		return nil

models/create_tenant_request.go

@@ -58,6 +58,9 @@ type CreateTenantRequest struct {
 	// encryption
 	Encryption *EncryptionConfiguration `json:"encryption,omitempty"`
 
+	// environment variables
+	EnvironmentVariables []*EnvironmentVariable `json:"environmentVariables"`
+
 	// erasure coding parity
 	ErasureCodingParity int64 `json:"erasureCodingParity,omitempty"`
 
@@ -85,8 +88,8 @@ type CreateTenantRequest struct {
 	// log search configuration
 	LogSearchConfiguration *LogSearchConfiguration `json:"logSearchConfiguration,omitempty"`
 
-	// mounth path
-	MounthPath string `json:"mounth_path,omitempty"`
+	// mount path
+	MountPath string `json:"mount_path,omitempty"`
 
 	// name
 	// Required: true
@@ -123,6 +126,10 @@ func (m *CreateTenantRequest) Validate(formats strfmt.Registry) error {
 		res = append(res, err)
 	}
 
+	if err := m.validateEnvironmentVariables(formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.validateIdp(formats); err != nil {
 		res = append(res, err)
 	}
@@ -199,6 +206,32 @@ func (m *CreateTenantRequest) validateEncryption(formats strfmt.Registry) error
 	return nil
 }
 
+func (m *CreateTenantRequest) validateEnvironmentVariables(formats strfmt.Registry) error {
+	if swag.IsZero(m.EnvironmentVariables) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.EnvironmentVariables); i++ {
+		if swag.IsZero(m.EnvironmentVariables[i]) { // not required
+			continue
+		}
+
+		if m.EnvironmentVariables[i] != nil {
+			if err := m.EnvironmentVariables[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
 func (m *CreateTenantRequest) validateIdp(formats strfmt.Registry) error {
 	if swag.IsZero(m.Idp) { // not required
 		return nil
@@ -355,6 +388,10 @@ func (m *CreateTenantRequest) ContextValidate(ctx context.Context, formats strfm
 		res = append(res, err)
 	}
 
+	if err := m.contextValidateEnvironmentVariables(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.contextValidateIdp(ctx, formats); err != nil {
 		res = append(res, err)
 	}
@@ -417,6 +454,26 @@ func (m *CreateTenantRequest) contextValidateEncryption(ctx context.Context, for
 	return nil
 }
 
+func (m *CreateTenantRequest) contextValidateEnvironmentVariables(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.EnvironmentVariables); i++ {
+
+		if m.EnvironmentVariables[i] != nil {
+			if err := m.EnvironmentVariables[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
 func (m *CreateTenantRequest) contextValidateIdp(ctx context.Context, formats strfmt.Registry) error {
 
 	if m.Idp != nil {

models/encryption_configuration.go

@@ -54,6 +54,9 @@ type EncryptionConfiguration struct {
 	// image
 	Image string `json:"image,omitempty"`
 
+	// raw
+	Raw string `json:"raw,omitempty"`
+
 	// replicas
 	Replicas string `json:"replicas,omitempty"`
 
@@ -93,6 +96,8 @@ func (m *EncryptionConfiguration) UnmarshalJSON(raw []byte) error {
 
 		Image string `json:"image,omitempty"`
 
+		Raw string `json:"raw,omitempty"`
+
 		Replicas string `json:"replicas,omitempty"`
 
 		SecretsToBeDeleted []string `json:"secretsToBeDeleted"`
@@ -119,6 +124,8 @@ func (m *EncryptionConfiguration) UnmarshalJSON(raw []byte) error {
 
 	m.Image = dataAO1.Image
 
+	m.Raw = dataAO1.Raw
+
 	m.Replicas = dataAO1.Replicas
 
 	m.SecretsToBeDeleted = dataAO1.SecretsToBeDeleted
@@ -154,6 +161,8 @@ func (m EncryptionConfiguration) MarshalJSON() ([]byte, error) {
 
 		Image string `json:"image,omitempty"`
 
+		Raw string `json:"raw,omitempty"`
+
 		Replicas string `json:"replicas,omitempty"`
 
 		SecretsToBeDeleted []string `json:"secretsToBeDeleted"`
@@ -177,6 +186,8 @@ func (m EncryptionConfiguration) MarshalJSON() ([]byte, error) {
 
 	dataAO1.Image = m.Image
 
+	dataAO1.Raw = m.Raw
+
 	dataAO1.Replicas = m.Replicas
 
 	dataAO1.SecretsToBeDeleted = m.SecretsToBeDeleted

models/encryption_configuration_response.go

@@ -54,6 +54,9 @@ type EncryptionConfigurationResponse struct {
 	// mtls client
 	MtlsClient *CertificateInfo `json:"mtls_client,omitempty"`
 
+	// raw
+	Raw string `json:"raw,omitempty"`
+
 	// replicas
 	Replicas string `json:"replicas,omitempty"`
 
@@ -90,6 +93,8 @@ func (m *EncryptionConfigurationResponse) UnmarshalJSON(raw []byte) error {
 
 		MtlsClient *CertificateInfo `json:"mtls_client,omitempty"`
 
+		Raw string `json:"raw,omitempty"`
+
 		Replicas string `json:"replicas,omitempty"`
 
 		SecurityContext *SecurityContext `json:"securityContext,omitempty"`
@@ -114,6 +119,8 @@ func (m *EncryptionConfigurationResponse) UnmarshalJSON(raw []byte) error {
 
 	m.MtlsClient = dataAO1.MtlsClient
 
+	m.Raw = dataAO1.Raw
+
 	m.Replicas = dataAO1.Replicas
 
 	m.SecurityContext = dataAO1.SecurityContext
@@ -147,6 +154,8 @@ func (m EncryptionConfigurationResponse) MarshalJSON() ([]byte, error) {
 
 		MtlsClient *CertificateInfo `json:"mtls_client,omitempty"`
 
+		Raw string `json:"raw,omitempty"`
+
 		Replicas string `json:"replicas,omitempty"`
 
 		SecurityContext *SecurityContext `json:"securityContext,omitempty"`
@@ -168,6 +177,8 @@ func (m EncryptionConfigurationResponse) MarshalJSON() ([]byte, error) {
 
 	dataAO1.MtlsClient = m.MtlsClient
 
+	dataAO1.Raw = m.Raw
+
 	dataAO1.Replicas = m.Replicas
 
 	dataAO1.SecurityContext = m.SecurityContext

models/environment_constants.go

@@ -0,0 +1,70 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// EnvironmentConstants environment constants
+//
+// swagger:model environmentConstants
+type EnvironmentConstants struct {
+
+	// max concurrent downloads
+	MaxConcurrentDownloads int64 `json:"maxConcurrentDownloads,omitempty"`
+
+	// max concurrent uploads
+	MaxConcurrentUploads int64 `json:"maxConcurrentUploads,omitempty"`
+}
+
+// Validate validates this environment constants
+func (m *EnvironmentConstants) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this environment constants based on context it is used
+func (m *EnvironmentConstants) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *EnvironmentConstants) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *EnvironmentConstants) UnmarshalBinary(b []byte) error {
+	var res EnvironmentConstants
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/km_delete_key_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmDeleteKeyRequest km delete key request
+//
+// swagger:model kmDeleteKeyRequest
+type KmDeleteKeyRequest interface{}

models/km_list_keys_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmListKeysRequest km list keys request
+//
+// swagger:model kmListKeysRequest
+type KmListKeysRequest interface{}

models/kms_a_p_is_response.go

@@ -31,20 +31,20 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// GetDirectCSIDriveListResponse get direct c s i drive list response
+// KmsAPIsResponse kms a p is response
 //
-// swagger:model getDirectCSIDriveListResponse
-type GetDirectCSIDriveListResponse struct {
+// swagger:model kmsAPIsResponse
+type KmsAPIsResponse struct {
 
-	// drives
-	Drives []*DirectCSIDriveInfo `json:"drives"`
+	// results
+	Results []*KmsAPI `json:"results"`
 }
 
-// Validate validates this get direct c s i drive list response
-func (m *GetDirectCSIDriveListResponse) Validate(formats strfmt.Registry) error {
+// Validate validates this kms a p is response
+func (m *KmsAPIsResponse) Validate(formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.validateDrives(formats); err != nil {
+	if err := m.validateResults(formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -54,22 +54,22 @@ func (m *GetDirectCSIDriveListResponse) Validate(formats strfmt.Registry) error
 	return nil
 }
 
-func (m *GetDirectCSIDriveListResponse) validateDrives(formats strfmt.Registry) error {
-	if swag.IsZero(m.Drives) { // not required
+func (m *KmsAPIsResponse) validateResults(formats strfmt.Registry) error {
+	if swag.IsZero(m.Results) { // not required
 		return nil
 	}
 
-	for i := 0; i < len(m.Drives); i++ {
-		if swag.IsZero(m.Drives[i]) { // not required
+	for i := 0; i < len(m.Results); i++ {
+		if swag.IsZero(m.Results[i]) { // not required
 			continue
 		}
 
-		if m.Drives[i] != nil {
-			if err := m.Drives[i].Validate(formats); err != nil {
+		if m.Results[i] != nil {
+			if err := m.Results[i].Validate(formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("drives" + "." + strconv.Itoa(i))
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("drives" + "." + strconv.Itoa(i))
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -80,11 +80,11 @@ func (m *GetDirectCSIDriveListResponse) validateDrives(formats strfmt.Registry)
 	return nil
 }
 
-// ContextValidate validate this get direct c s i drive list response based on the context it is used
-func (m *GetDirectCSIDriveListResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validate this kms a p is response based on the context it is used
+func (m *KmsAPIsResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.contextValidateDrives(ctx, formats); err != nil {
+	if err := m.contextValidateResults(ctx, formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -94,16 +94,16 @@ func (m *GetDirectCSIDriveListResponse) ContextValidate(ctx context.Context, for
 	return nil
 }
 
-func (m *GetDirectCSIDriveListResponse) contextValidateDrives(ctx context.Context, formats strfmt.Registry) error {
+func (m *KmsAPIsResponse) contextValidateResults(ctx context.Context, formats strfmt.Registry) error {
 
-	for i := 0; i < len(m.Drives); i++ {
+	for i := 0; i < len(m.Results); i++ {
 
-		if m.Drives[i] != nil {
-			if err := m.Drives[i].ContextValidate(ctx, formats); err != nil {
+		if m.Results[i] != nil {
+			if err := m.Results[i].ContextValidate(ctx, formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("drives" + "." + strconv.Itoa(i))
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("drives" + "." + strconv.Itoa(i))
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -115,7 +115,7 @@ func (m *GetDirectCSIDriveListResponse) contextValidateDrives(ctx context.Contex
 }
 
 // MarshalBinary interface implementation
-func (m *GetDirectCSIDriveListResponse) MarshalBinary() ([]byte, error) {
+func (m *KmsAPIsResponse) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -123,8 +123,8 @@ func (m *GetDirectCSIDriveListResponse) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *GetDirectCSIDriveListResponse) UnmarshalBinary(b []byte) error {
-	var res GetDirectCSIDriveListResponse
+func (m *KmsAPIsResponse) UnmarshalBinary(b []byte) error {
+	var res KmsAPIsResponse
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_api.go

@@ -0,0 +1,76 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsAPI kms API
+//
+// swagger:model kmsAPI
+type KmsAPI struct {
+
+	// max body
+	MaxBody int64 `json:"maxBody,omitempty"`
+
+	// method
+	Method string `json:"method,omitempty"`
+
+	// path
+	Path string `json:"path,omitempty"`
+
+	// timeout
+	Timeout int64 `json:"timeout,omitempty"`
+}
+
+// Validate validates this kms API
+func (m *KmsAPI) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms API based on context it is used
+func (m *KmsAPI) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsAPI) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsAPI) UnmarshalBinary(b []byte) error {
+	var res KmsAPI
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_assign_policy_request.go

@@ -29,33 +29,27 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// CsiFormatErrorResponse csi format error response
+// KmsAssignPolicyRequest kms assign policy request
 //
-// swagger:model csiFormatErrorResponse
-type CsiFormatErrorResponse struct {
+// swagger:model kmsAssignPolicyRequest
+type KmsAssignPolicyRequest struct {
 
-	// drive
-	Drive string `json:"drive,omitempty"`
-
-	// error
-	Error string `json:"error,omitempty"`
-
-	// node
-	Node string `json:"node,omitempty"`
+	// identity
+	Identity string `json:"identity,omitempty"`
 }
 
-// Validate validates this csi format error response
-func (m *CsiFormatErrorResponse) Validate(formats strfmt.Registry) error {
+// Validate validates this kms assign policy request
+func (m *KmsAssignPolicyRequest) Validate(formats strfmt.Registry) error {
 	return nil
 }
 
-// ContextValidate validates this csi format error response based on context it is used
-func (m *CsiFormatErrorResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validates this kms assign policy request based on context it is used
+func (m *KmsAssignPolicyRequest) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	return nil
 }
 
 // MarshalBinary interface implementation
-func (m *CsiFormatErrorResponse) MarshalBinary() ([]byte, error) {
+func (m *KmsAssignPolicyRequest) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -63,8 +57,8 @@ func (m *CsiFormatErrorResponse) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *CsiFormatErrorResponse) UnmarshalBinary(b []byte) error {
-	var res CsiFormatErrorResponse
+func (m *KmsAssignPolicyRequest) UnmarshalBinary(b []byte) error {
+	var res KmsAssignPolicyRequest
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_create_key_request.go

@@ -0,0 +1,88 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+	"github.com/go-openapi/validate"
+)
+
+// KmsCreateKeyRequest kms create key request
+//
+// swagger:model kmsCreateKeyRequest
+type KmsCreateKeyRequest struct {
+
+	// key
+	// Required: true
+	Key *string `json:"key"`
+}
+
+// Validate validates this kms create key request
+func (m *KmsCreateKeyRequest) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateKey(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsCreateKeyRequest) validateKey(formats strfmt.Registry) error {
+
+	if err := validate.Required("key", "body", m.Key); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// ContextValidate validates this kms create key request based on context it is used
+func (m *KmsCreateKeyRequest) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsCreateKeyRequest) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsCreateKeyRequest) UnmarshalBinary(b []byte) error {
+	var res KmsCreateKeyRequest
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_describe_identity_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsDescribeIdentityRequest kms describe identity request
+//
+// swagger:model kmsDescribeIdentityRequest
+type KmsDescribeIdentityRequest interface{}

models/kms_describe_identity_response.go

@@ -0,0 +1,79 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsDescribeIdentityResponse kms describe identity response
+//
+// swagger:model kmsDescribeIdentityResponse
+type KmsDescribeIdentityResponse struct {
+
+	// admin
+	Admin bool `json:"admin,omitempty"`
+
+	// created at
+	CreatedAt string `json:"createdAt,omitempty"`
+
+	// created by
+	CreatedBy string `json:"createdBy,omitempty"`
+
+	// identity
+	Identity string `json:"identity,omitempty"`
+
+	// policy
+	Policy string `json:"policy,omitempty"`
+}
+
+// Validate validates this kms describe identity response
+func (m *KmsDescribeIdentityResponse) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms describe identity response based on context it is used
+func (m *KmsDescribeIdentityResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsDescribeIdentityResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsDescribeIdentityResponse) UnmarshalBinary(b []byte) error {
+	var res KmsDescribeIdentityResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_describe_policy_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsDescribePolicyRequest kms describe policy request
+//
+// swagger:model kmsDescribePolicyRequest
+type KmsDescribePolicyRequest interface{}

models/kms_describe_policy_response.go

@@ -0,0 +1,73 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsDescribePolicyResponse kms describe policy response
+//
+// swagger:model kmsDescribePolicyResponse
+type KmsDescribePolicyResponse struct {
+
+	// created at
+	CreatedAt string `json:"createdAt,omitempty"`
+
+	// created by
+	CreatedBy string `json:"createdBy,omitempty"`
+
+	// name
+	Name string `json:"name,omitempty"`
+}
+
+// Validate validates this kms describe policy response
+func (m *KmsDescribePolicyResponse) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms describe policy response based on context it is used
+func (m *KmsDescribePolicyResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsDescribePolicyResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsDescribePolicyResponse) UnmarshalBinary(b []byte) error {
+	var res KmsDescribePolicyResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_describe_self_identity_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsDescribeSelfIdentityRequest kms describe self identity request
+//
+// swagger:model kmsDescribeSelfIdentityRequest
+type KmsDescribeSelfIdentityRequest interface{}

models/kms_describe_self_identity_response.go

@@ -0,0 +1,136 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsDescribeSelfIdentityResponse kms describe self identity response
+//
+// swagger:model kmsDescribeSelfIdentityResponse
+type KmsDescribeSelfIdentityResponse struct {
+
+	// admin
+	Admin bool `json:"admin,omitempty"`
+
+	// created at
+	CreatedAt string `json:"createdAt,omitempty"`
+
+	// created by
+	CreatedBy string `json:"createdBy,omitempty"`
+
+	// identity
+	Identity string `json:"identity,omitempty"`
+
+	// policy
+	Policy *KmsGetPolicyResponse `json:"policy,omitempty"`
+
+	// policy name
+	PolicyName string `json:"policyName,omitempty"`
+}
+
+// Validate validates this kms describe self identity response
+func (m *KmsDescribeSelfIdentityResponse) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validatePolicy(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsDescribeSelfIdentityResponse) validatePolicy(formats strfmt.Registry) error {
+	if swag.IsZero(m.Policy) { // not required
+		return nil
+	}
+
+	if m.Policy != nil {
+		if err := m.Policy.Validate(formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("policy")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("policy")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
+// ContextValidate validate this kms describe self identity response based on the context it is used
+func (m *KmsDescribeSelfIdentityResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.contextValidatePolicy(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsDescribeSelfIdentityResponse) contextValidatePolicy(ctx context.Context, formats strfmt.Registry) error {
+
+	if m.Policy != nil {
+		if err := m.Policy.ContextValidate(ctx, formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("policy")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("policy")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsDescribeSelfIdentityResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsDescribeSelfIdentityResponse) UnmarshalBinary(b []byte) error {
+	var res KmsDescribeSelfIdentityResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_endpoint.go

@@ -29,45 +29,30 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// DirectCSIDriveInfo direct c s i drive info
+// KmsEndpoint kms endpoint
 //
-// swagger:model directCSIDriveInfo
-type DirectCSIDriveInfo struct {
-
-	// allocated
-	Allocated int64 `json:"allocated,omitempty"`
-
-	// capacity
-	Capacity int64 `json:"capacity,omitempty"`
-
-	// drive
-	Drive string `json:"drive,omitempty"`
-
-	// message
-	Message string `json:"message,omitempty"`
-
-	// node
-	Node string `json:"node,omitempty"`
+// swagger:model kmsEndpoint
+type KmsEndpoint struct {
 
 	// status
 	Status string `json:"status,omitempty"`
 
-	// volumes
-	Volumes int64 `json:"volumes,omitempty"`
+	// url
+	URL string `json:"url,omitempty"`
 }
 
-// Validate validates this direct c s i drive info
-func (m *DirectCSIDriveInfo) Validate(formats strfmt.Registry) error {
+// Validate validates this kms endpoint
+func (m *KmsEndpoint) Validate(formats strfmt.Registry) error {
 	return nil
 }
 
-// ContextValidate validates this direct c s i drive info based on context it is used
-func (m *DirectCSIDriveInfo) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validates this kms endpoint based on context it is used
+func (m *KmsEndpoint) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	return nil
 }
 
 // MarshalBinary interface implementation
-func (m *DirectCSIDriveInfo) MarshalBinary() ([]byte, error) {
+func (m *KmsEndpoint) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -75,8 +60,8 @@ func (m *DirectCSIDriveInfo) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *DirectCSIDriveInfo) UnmarshalBinary(b []byte) error {
-	var res DirectCSIDriveInfo
+func (m *KmsEndpoint) UnmarshalBinary(b []byte) error {
+	var res KmsEndpoint
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_get_policy_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsGetPolicyRequest kms get policy request
+//
+// swagger:model kmsGetPolicyRequest
+type KmsGetPolicyRequest interface{}

models/kms_get_policy_response.go

@@ -29,27 +29,30 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// OperatorSubnetRegisterAPIKey operator subnet register API key
+// KmsGetPolicyResponse kms get policy response
 //
-// swagger:model operatorSubnetRegisterAPIKey
-type OperatorSubnetRegisterAPIKey struct {
+// swagger:model kmsGetPolicyResponse
+type KmsGetPolicyResponse struct {
 
-	// registered
-	Registered bool `json:"registered,omitempty"`
+	// allow
+	Allow []string `json:"allow"`
+
+	// deny
+	Deny []string `json:"deny"`
 }
 
-// Validate validates this operator subnet register API key
-func (m *OperatorSubnetRegisterAPIKey) Validate(formats strfmt.Registry) error {
+// Validate validates this kms get policy response
+func (m *KmsGetPolicyResponse) Validate(formats strfmt.Registry) error {
 	return nil
 }
 
-// ContextValidate validates this operator subnet register API key based on context it is used
-func (m *OperatorSubnetRegisterAPIKey) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validates this kms get policy response based on context it is used
+func (m *KmsGetPolicyResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	return nil
 }
 
 // MarshalBinary interface implementation
-func (m *OperatorSubnetRegisterAPIKey) MarshalBinary() ([]byte, error) {
+func (m *KmsGetPolicyResponse) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -57,8 +60,8 @@ func (m *OperatorSubnetRegisterAPIKey) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *OperatorSubnetRegisterAPIKey) UnmarshalBinary(b []byte) error {
-	var res OperatorSubnetRegisterAPIKey
+func (m *KmsGetPolicyResponse) UnmarshalBinary(b []byte) error {
+	var res KmsGetPolicyResponse
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_identity_info.go

@@ -0,0 +1,79 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsIdentityInfo kms identity info
+//
+// swagger:model kmsIdentityInfo
+type KmsIdentityInfo struct {
+
+	// created at
+	CreatedAt string `json:"createdAt,omitempty"`
+
+	// created by
+	CreatedBy string `json:"createdBy,omitempty"`
+
+	// error
+	Error string `json:"error,omitempty"`
+
+	// identity
+	Identity string `json:"identity,omitempty"`
+
+	// policy
+	Policy string `json:"policy,omitempty"`
+}
+
+// Validate validates this kms identity info
+func (m *KmsIdentityInfo) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms identity info based on context it is used
+func (m *KmsIdentityInfo) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsIdentityInfo) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsIdentityInfo) UnmarshalBinary(b []byte) error {
+	var res KmsIdentityInfo
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_import_key_request.go

@@ -0,0 +1,88 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+	"github.com/go-openapi/validate"
+)
+
+// KmsImportKeyRequest kms import key request
+//
+// swagger:model kmsImportKeyRequest
+type KmsImportKeyRequest struct {
+
+	// bytes
+	// Required: true
+	Bytes *string `json:"bytes"`
+}
+
+// Validate validates this kms import key request
+func (m *KmsImportKeyRequest) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateBytes(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsImportKeyRequest) validateBytes(formats strfmt.Registry) error {
+
+	if err := validate.Required("bytes", "body", m.Bytes); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// ContextValidate validates this kms import key request based on context it is used
+func (m *KmsImportKeyRequest) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsImportKeyRequest) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsImportKeyRequest) UnmarshalBinary(b []byte) error {
+	var res KmsImportKeyRequest
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_key_info.go

@@ -0,0 +1,73 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsKeyInfo kms key info
+//
+// swagger:model kmsKeyInfo
+type KmsKeyInfo struct {
+
+	// created at
+	CreatedAt string `json:"createdAt,omitempty"`
+
+	// created by
+	CreatedBy string `json:"createdBy,omitempty"`
+
+	// name
+	Name string `json:"name,omitempty"`
+}
+
+// Validate validates this kms key info
+func (m *KmsKeyInfo) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms key info based on context it is used
+func (m *KmsKeyInfo) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsKeyInfo) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsKeyInfo) UnmarshalBinary(b []byte) error {
+	var res KmsKeyInfo
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_key_status_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsKeyStatusRequest kms key status request
+//
+// swagger:model kmsKeyStatusRequest
+type KmsKeyStatusRequest interface{}

models/kms_key_status_response.go

@@ -0,0 +1,73 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsKeyStatusResponse kms key status response
+//
+// swagger:model kmsKeyStatusResponse
+type KmsKeyStatusResponse struct {
+
+	// decryption err
+	DecryptionErr string `json:"decryptionErr,omitempty"`
+
+	// encryption err
+	EncryptionErr string `json:"encryptionErr,omitempty"`
+
+	// key ID
+	KeyID string `json:"keyID,omitempty"`
+}
+
+// Validate validates this kms key status response
+func (m *KmsKeyStatusResponse) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms key status response based on context it is used
+func (m *KmsKeyStatusResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsKeyStatusResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsKeyStatusResponse) UnmarshalBinary(b []byte) error {
+	var res KmsKeyStatusResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_latency_histogram.go

@@ -29,36 +29,27 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// DirectCSIVolumeInfo direct c s i volume info
+// KmsLatencyHistogram kms latency histogram
 //
-// swagger:model directCSIVolumeInfo
-type DirectCSIVolumeInfo struct {
+// swagger:model kmsLatencyHistogram
+type KmsLatencyHistogram struct {
 
-	// capacity
-	Capacity int64 `json:"capacity,omitempty"`
-
-	// drive
-	Drive string `json:"drive,omitempty"`
-
-	// node
-	Node string `json:"node,omitempty"`
-
-	// volume
-	Volume string `json:"volume,omitempty"`
+	// duration
+	Duration int64 `json:"duration,omitempty"`
 }
 
-// Validate validates this direct c s i volume info
-func (m *DirectCSIVolumeInfo) Validate(formats strfmt.Registry) error {
+// Validate validates this kms latency histogram
+func (m *KmsLatencyHistogram) Validate(formats strfmt.Registry) error {
 	return nil
 }
 
-// ContextValidate validates this direct c s i volume info based on context it is used
-func (m *DirectCSIVolumeInfo) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validates this kms latency histogram based on context it is used
+func (m *KmsLatencyHistogram) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	return nil
 }
 
 // MarshalBinary interface implementation
-func (m *DirectCSIVolumeInfo) MarshalBinary() ([]byte, error) {
+func (m *KmsLatencyHistogram) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -66,8 +57,8 @@ func (m *DirectCSIVolumeInfo) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *DirectCSIVolumeInfo) UnmarshalBinary(b []byte) error {
-	var res DirectCSIVolumeInfo
+func (m *KmsLatencyHistogram) UnmarshalBinary(b []byte) error {
+	var res KmsLatencyHistogram
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_list_identities_response.go

@@ -31,20 +31,20 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// FormatDirectCSIDrivesResponse format direct c s i drives response
+// KmsListIdentitiesResponse kms list identities response
 //
-// swagger:model formatDirectCSIDrivesResponse
-type FormatDirectCSIDrivesResponse struct {
+// swagger:model kmsListIdentitiesResponse
+type KmsListIdentitiesResponse struct {
 
-	// format issues list
-	FormatIssuesList []*CsiFormatErrorResponse `json:"formatIssuesList"`
+	// results
+	Results []*KmsIdentityInfo `json:"results"`
 }
 
-// Validate validates this format direct c s i drives response
-func (m *FormatDirectCSIDrivesResponse) Validate(formats strfmt.Registry) error {
+// Validate validates this kms list identities response
+func (m *KmsListIdentitiesResponse) Validate(formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.validateFormatIssuesList(formats); err != nil {
+	if err := m.validateResults(formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -54,22 +54,22 @@ func (m *FormatDirectCSIDrivesResponse) Validate(formats strfmt.Registry) error
 	return nil
 }
 
-func (m *FormatDirectCSIDrivesResponse) validateFormatIssuesList(formats strfmt.Registry) error {
-	if swag.IsZero(m.FormatIssuesList) { // not required
+func (m *KmsListIdentitiesResponse) validateResults(formats strfmt.Registry) error {
+	if swag.IsZero(m.Results) { // not required
 		return nil
 	}
 
-	for i := 0; i < len(m.FormatIssuesList); i++ {
-		if swag.IsZero(m.FormatIssuesList[i]) { // not required
+	for i := 0; i < len(m.Results); i++ {
+		if swag.IsZero(m.Results[i]) { // not required
 			continue
 		}
 
-		if m.FormatIssuesList[i] != nil {
-			if err := m.FormatIssuesList[i].Validate(formats); err != nil {
+		if m.Results[i] != nil {
+			if err := m.Results[i].Validate(formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("formatIssuesList" + "." + strconv.Itoa(i))
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("formatIssuesList" + "." + strconv.Itoa(i))
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -80,11 +80,11 @@ func (m *FormatDirectCSIDrivesResponse) validateFormatIssuesList(formats strfmt.
 	return nil
 }
 
-// ContextValidate validate this format direct c s i drives response based on the context it is used
-func (m *FormatDirectCSIDrivesResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validate this kms list identities response based on the context it is used
+func (m *KmsListIdentitiesResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.contextValidateFormatIssuesList(ctx, formats); err != nil {
+	if err := m.contextValidateResults(ctx, formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -94,16 +94,16 @@ func (m *FormatDirectCSIDrivesResponse) ContextValidate(ctx context.Context, for
 	return nil
 }
 
-func (m *FormatDirectCSIDrivesResponse) contextValidateFormatIssuesList(ctx context.Context, formats strfmt.Registry) error {
+func (m *KmsListIdentitiesResponse) contextValidateResults(ctx context.Context, formats strfmt.Registry) error {
 
-	for i := 0; i < len(m.FormatIssuesList); i++ {
+	for i := 0; i < len(m.Results); i++ {
 
-		if m.FormatIssuesList[i] != nil {
-			if err := m.FormatIssuesList[i].ContextValidate(ctx, formats); err != nil {
+		if m.Results[i] != nil {
+			if err := m.Results[i].ContextValidate(ctx, formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("formatIssuesList" + "." + strconv.Itoa(i))
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("formatIssuesList" + "." + strconv.Itoa(i))
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -115,7 +115,7 @@ func (m *FormatDirectCSIDrivesResponse) contextValidateFormatIssuesList(ctx cont
 }
 
 // MarshalBinary interface implementation
-func (m *FormatDirectCSIDrivesResponse) MarshalBinary() ([]byte, error) {
+func (m *KmsListIdentitiesResponse) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -123,8 +123,8 @@ func (m *FormatDirectCSIDrivesResponse) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *FormatDirectCSIDrivesResponse) UnmarshalBinary(b []byte) error {
-	var res FormatDirectCSIDrivesResponse
+func (m *KmsListIdentitiesResponse) UnmarshalBinary(b []byte) error {
+	var res KmsListIdentitiesResponse
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_list_keys_response.go

@@ -0,0 +1,133 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+	"strconv"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsListKeysResponse kms list keys response
+//
+// swagger:model kmsListKeysResponse
+type KmsListKeysResponse struct {
+
+	// results
+	Results []*KmsKeyInfo `json:"results"`
+}
+
+// Validate validates this kms list keys response
+func (m *KmsListKeysResponse) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateResults(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsListKeysResponse) validateResults(formats strfmt.Registry) error {
+	if swag.IsZero(m.Results) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.Results); i++ {
+		if swag.IsZero(m.Results[i]) { // not required
+			continue
+		}
+
+		if m.Results[i] != nil {
+			if err := m.Results[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// ContextValidate validate this kms list keys response based on the context it is used
+func (m *KmsListKeysResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.contextValidateResults(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsListKeysResponse) contextValidateResults(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.Results); i++ {
+
+		if m.Results[i] != nil {
+			if err := m.Results[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsListKeysResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsListKeysResponse) UnmarshalBinary(b []byte) error {
+	var res KmsListKeysResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_list_policies_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsListPoliciesRequest kms list policies request
+//
+// swagger:model kmsListPoliciesRequest
+type KmsListPoliciesRequest interface{}

models/kms_list_policies_response.go

@@ -31,20 +31,20 @@ import (
 	"github.com/go-openapi/swag"
 )
 
-// GetDirectCSIVolumeListResponse get direct c s i volume list response
+// KmsListPoliciesResponse kms list policies response
 //
-// swagger:model getDirectCSIVolumeListResponse
-type GetDirectCSIVolumeListResponse struct {
+// swagger:model kmsListPoliciesResponse
+type KmsListPoliciesResponse struct {
 
-	// volumes
-	Volumes []*DirectCSIVolumeInfo `json:"volumes"`
+	// results
+	Results []*KmsPolicyInfo `json:"results"`
 }
 
-// Validate validates this get direct c s i volume list response
-func (m *GetDirectCSIVolumeListResponse) Validate(formats strfmt.Registry) error {
+// Validate validates this kms list policies response
+func (m *KmsListPoliciesResponse) Validate(formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.validateVolumes(formats); err != nil {
+	if err := m.validateResults(formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -54,22 +54,22 @@ func (m *GetDirectCSIVolumeListResponse) Validate(formats strfmt.Registry) error
 	return nil
 }
 
-func (m *GetDirectCSIVolumeListResponse) validateVolumes(formats strfmt.Registry) error {
-	if swag.IsZero(m.Volumes) { // not required
+func (m *KmsListPoliciesResponse) validateResults(formats strfmt.Registry) error {
+	if swag.IsZero(m.Results) { // not required
 		return nil
 	}
 
-	for i := 0; i < len(m.Volumes); i++ {
-		if swag.IsZero(m.Volumes[i]) { // not required
+	for i := 0; i < len(m.Results); i++ {
+		if swag.IsZero(m.Results[i]) { // not required
 			continue
 		}
 
-		if m.Volumes[i] != nil {
-			if err := m.Volumes[i].Validate(formats); err != nil {
+		if m.Results[i] != nil {
+			if err := m.Results[i].Validate(formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("volumes" + "." + strconv.Itoa(i))
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("volumes" + "." + strconv.Itoa(i))
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -80,11 +80,11 @@ func (m *GetDirectCSIVolumeListResponse) validateVolumes(formats strfmt.Registry
 	return nil
 }
 
-// ContextValidate validate this get direct c s i volume list response based on the context it is used
-func (m *GetDirectCSIVolumeListResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+// ContextValidate validate this kms list policies response based on the context it is used
+func (m *KmsListPoliciesResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.contextValidateVolumes(ctx, formats); err != nil {
+	if err := m.contextValidateResults(ctx, formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -94,16 +94,16 @@ func (m *GetDirectCSIVolumeListResponse) ContextValidate(ctx context.Context, fo
 	return nil
 }
 
-func (m *GetDirectCSIVolumeListResponse) contextValidateVolumes(ctx context.Context, formats strfmt.Registry) error {
+func (m *KmsListPoliciesResponse) contextValidateResults(ctx context.Context, formats strfmt.Registry) error {
 
-	for i := 0; i < len(m.Volumes); i++ {
+	for i := 0; i < len(m.Results); i++ {
 
-		if m.Volumes[i] != nil {
-			if err := m.Volumes[i].ContextValidate(ctx, formats); err != nil {
+		if m.Results[i] != nil {
+			if err := m.Results[i].ContextValidate(ctx, formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("volumes" + "." + strconv.Itoa(i))
+					return ve.ValidateName("results" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("volumes" + "." + strconv.Itoa(i))
+					return ce.ValidateName("results" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -115,7 +115,7 @@ func (m *GetDirectCSIVolumeListResponse) contextValidateVolumes(ctx context.Cont
 }
 
 // MarshalBinary interface implementation
-func (m *GetDirectCSIVolumeListResponse) MarshalBinary() ([]byte, error) {
+func (m *KmsListPoliciesResponse) MarshalBinary() ([]byte, error) {
 	if m == nil {
 		return nil, nil
 	}
@@ -123,8 +123,8 @@ func (m *GetDirectCSIVolumeListResponse) MarshalBinary() ([]byte, error) {
 }
 
 // UnmarshalBinary interface implementation
-func (m *GetDirectCSIVolumeListResponse) UnmarshalBinary(b []byte) error {
-	var res GetDirectCSIVolumeListResponse
+func (m *KmsListPoliciesResponse) UnmarshalBinary(b []byte) error {
+	var res KmsListPoliciesResponse
 	if err := swag.ReadJSON(b, &res); err != nil {
 		return err
 	}

models/kms_metrics_response.go

@@ -0,0 +1,331 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+	"github.com/go-openapi/validate"
+)
+
+// KmsMetricsResponse kms metrics response
+//
+// swagger:model kmsMetricsResponse
+type KmsMetricsResponse struct {
+
+	// audit events
+	// Required: true
+	AuditEvents *int64 `json:"auditEvents"`
+
+	// cpus
+	// Required: true
+	Cpus *int64 `json:"cpus"`
+
+	// error events
+	// Required: true
+	ErrorEvents *int64 `json:"errorEvents"`
+
+	// heap alloc
+	// Required: true
+	HeapAlloc *int64 `json:"heapAlloc"`
+
+	// heap objects
+	HeapObjects int64 `json:"heapObjects,omitempty"`
+
+	// latency histogram
+	// Required: true
+	LatencyHistogram *KmsLatencyHistogram `json:"latencyHistogram"`
+
+	// request active
+	// Required: true
+	RequestActive *int64 `json:"requestActive"`
+
+	// request err
+	// Required: true
+	RequestErr *int64 `json:"requestErr"`
+
+	// request fail
+	// Required: true
+	RequestFail *int64 `json:"requestFail"`
+
+	// request o k
+	// Required: true
+	RequestOK *int64 `json:"requestOK"`
+
+	// stack alloc
+	// Required: true
+	StackAlloc *int64 `json:"stackAlloc"`
+
+	// threads
+	// Required: true
+	Threads *int64 `json:"threads"`
+
+	// uptime
+	// Required: true
+	Uptime *int64 `json:"uptime"`
+
+	// usable c p us
+	// Required: true
+	UsableCPUs *int64 `json:"usableCPUs"`
+}
+
+// Validate validates this kms metrics response
+func (m *KmsMetricsResponse) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateAuditEvents(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateCpus(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateErrorEvents(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateHeapAlloc(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateLatencyHistogram(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateRequestActive(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateRequestErr(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateRequestFail(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateRequestOK(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateStackAlloc(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateThreads(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateUptime(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateUsableCPUs(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateAuditEvents(formats strfmt.Registry) error {
+
+	if err := validate.Required("auditEvents", "body", m.AuditEvents); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateCpus(formats strfmt.Registry) error {
+
+	if err := validate.Required("cpus", "body", m.Cpus); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateErrorEvents(formats strfmt.Registry) error {
+
+	if err := validate.Required("errorEvents", "body", m.ErrorEvents); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateHeapAlloc(formats strfmt.Registry) error {
+
+	if err := validate.Required("heapAlloc", "body", m.HeapAlloc); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateLatencyHistogram(formats strfmt.Registry) error {
+
+	if err := validate.Required("latencyHistogram", "body", m.LatencyHistogram); err != nil {
+		return err
+	}
+
+	if m.LatencyHistogram != nil {
+		if err := m.LatencyHistogram.Validate(formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("latencyHistogram")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("latencyHistogram")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateRequestActive(formats strfmt.Registry) error {
+
+	if err := validate.Required("requestActive", "body", m.RequestActive); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateRequestErr(formats strfmt.Registry) error {
+
+	if err := validate.Required("requestErr", "body", m.RequestErr); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateRequestFail(formats strfmt.Registry) error {
+
+	if err := validate.Required("requestFail", "body", m.RequestFail); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateRequestOK(formats strfmt.Registry) error {
+
+	if err := validate.Required("requestOK", "body", m.RequestOK); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateStackAlloc(formats strfmt.Registry) error {
+
+	if err := validate.Required("stackAlloc", "body", m.StackAlloc); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateThreads(formats strfmt.Registry) error {
+
+	if err := validate.Required("threads", "body", m.Threads); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateUptime(formats strfmt.Registry) error {
+
+	if err := validate.Required("uptime", "body", m.Uptime); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (m *KmsMetricsResponse) validateUsableCPUs(formats strfmt.Registry) error {
+
+	if err := validate.Required("usableCPUs", "body", m.UsableCPUs); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// ContextValidate validate this kms metrics response based on the context it is used
+func (m *KmsMetricsResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.contextValidateLatencyHistogram(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsMetricsResponse) contextValidateLatencyHistogram(ctx context.Context, formats strfmt.Registry) error {
+
+	if m.LatencyHistogram != nil {
+		if err := m.LatencyHistogram.ContextValidate(ctx, formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("latencyHistogram")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("latencyHistogram")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsMetricsResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsMetricsResponse) UnmarshalBinary(b []byte) error {
+	var res KmsMetricsResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_policy_info.go

@@ -0,0 +1,73 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsPolicyInfo kms policy info
+//
+// swagger:model kmsPolicyInfo
+type KmsPolicyInfo struct {
+
+	// created at
+	CreatedAt string `json:"createdAt,omitempty"`
+
+	// created by
+	CreatedBy string `json:"createdBy,omitempty"`
+
+	// name
+	Name string `json:"name,omitempty"`
+}
+
+// Validate validates this kms policy info
+func (m *KmsPolicyInfo) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms policy info based on context it is used
+func (m *KmsPolicyInfo) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsPolicyInfo) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsPolicyInfo) UnmarshalBinary(b []byte) error {
+	var res KmsPolicyInfo
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_set_policy_request.go

@@ -0,0 +1,94 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+	"github.com/go-openapi/validate"
+)
+
+// KmsSetPolicyRequest kms set policy request
+//
+// swagger:model kmsSetPolicyRequest
+type KmsSetPolicyRequest struct {
+
+	// allow
+	Allow []string `json:"allow"`
+
+	// deny
+	Deny []string `json:"deny"`
+
+	// policy
+	// Required: true
+	Policy *string `json:"policy"`
+}
+
+// Validate validates this kms set policy request
+func (m *KmsSetPolicyRequest) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validatePolicy(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsSetPolicyRequest) validatePolicy(formats strfmt.Registry) error {
+
+	if err := validate.Required("policy", "body", m.Policy); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// ContextValidate validates this kms set policy request based on context it is used
+func (m *KmsSetPolicyRequest) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsSetPolicyRequest) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsSetPolicyRequest) UnmarshalBinary(b []byte) error {
+	var res KmsSetPolicyRequest
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_status_request.go

@@ -0,0 +1,28 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+// KmsStatusRequest kms status request
+//
+// swagger:model kmsStatusRequest
+type KmsStatusRequest interface{}

models/kms_status_response.go

@@ -0,0 +1,139 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+	"strconv"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsStatusResponse kms status response
+//
+// swagger:model kmsStatusResponse
+type KmsStatusResponse struct {
+
+	// default key ID
+	DefaultKeyID string `json:"defaultKeyID,omitempty"`
+
+	// endpoints
+	Endpoints []*KmsEndpoint `json:"endpoints"`
+
+	// name
+	Name string `json:"name,omitempty"`
+}
+
+// Validate validates this kms status response
+func (m *KmsStatusResponse) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateEndpoints(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsStatusResponse) validateEndpoints(formats strfmt.Registry) error {
+	if swag.IsZero(m.Endpoints) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.Endpoints); i++ {
+		if swag.IsZero(m.Endpoints[i]) { // not required
+			continue
+		}
+
+		if m.Endpoints[i] != nil {
+			if err := m.Endpoints[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("endpoints" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("endpoints" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// ContextValidate validate this kms status response based on the context it is used
+func (m *KmsStatusResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.contextValidateEndpoints(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *KmsStatusResponse) contextValidateEndpoints(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.Endpoints); i++ {
+
+		if m.Endpoints[i] != nil {
+			if err := m.Endpoints[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("endpoints" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("endpoints" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsStatusResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsStatusResponse) UnmarshalBinary(b []byte) error {
+	var res KmsStatusResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/kms_version_response.go

@@ -0,0 +1,67 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// KmsVersionResponse kms version response
+//
+// swagger:model kmsVersionResponse
+type KmsVersionResponse struct {
+
+	// version
+	Version string `json:"version,omitempty"`
+}
+
+// Validate validates this kms version response
+func (m *KmsVersionResponse) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this kms version response based on context it is used
+func (m *KmsVersionResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *KmsVersionResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *KmsVersionResponse) UnmarshalBinary(b []byte) error {
+	var res KmsVersionResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/login_details.go

@@ -37,6 +37,9 @@ import (
 // swagger:model loginDetails
 type LoginDetails struct {
 
+	// display names
+	DisplayNames []string `json:"displayNames"`
+
 	// is direct p v
 	IsDirectPV bool `json:"isDirectPV,omitempty"`
 
@@ -45,7 +48,7 @@ type LoginDetails struct {
 	LoginStrategy string `json:"loginStrategy,omitempty"`
 
 	// redirect
-	Redirect string `json:"redirect,omitempty"`
+	Redirect []string `json:"redirect"`
 }
 
 // Validate validates this login details

models/session_response.go

@@ -47,6 +47,9 @@ type SessionResponse struct {
 	// distributed mode
 	DistributedMode bool `json:"distributedMode,omitempty"`
 
+	// env constants
+	EnvConstants *EnvironmentConstants `json:"envConstants,omitempty"`
+
 	// features
 	Features []string `json:"features"`
 
@@ -56,6 +59,9 @@ type SessionResponse struct {
 	// permissions
 	Permissions map[string][]string `json:"permissions,omitempty"`
 
+	// server end point
+	ServerEndPoint string `json:"serverEndPoint,omitempty"`
+
 	// status
 	// Enum: [ok]
 	Status string `json:"status,omitempty"`
@@ -69,6 +75,10 @@ func (m *SessionResponse) Validate(formats strfmt.Registry) error {
 		res = append(res, err)
 	}
 
+	if err := m.validateEnvConstants(formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.validateStatus(formats); err != nil {
 		res = append(res, err)
 	}
@@ -105,6 +115,25 @@ func (m *SessionResponse) validateAllowResources(formats strfmt.Registry) error
 	return nil
 }
 
+func (m *SessionResponse) validateEnvConstants(formats strfmt.Registry) error {
+	if swag.IsZero(m.EnvConstants) { // not required
+		return nil
+	}
+
+	if m.EnvConstants != nil {
+		if err := m.EnvConstants.Validate(formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("envConstants")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("envConstants")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
 var sessionResponseTypeStatusPropEnum []interface{}
 
 func init() {
@@ -152,6 +181,10 @@ func (m *SessionResponse) ContextValidate(ctx context.Context, formats strfmt.Re
 		res = append(res, err)
 	}
 
+	if err := m.contextValidateEnvConstants(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
 	if len(res) > 0 {
 		return errors.CompositeValidationError(res...)
 	}
@@ -178,6 +211,22 @@ func (m *SessionResponse) contextValidateAllowResources(ctx context.Context, for
 	return nil
 }
 
+func (m *SessionResponse) contextValidateEnvConstants(ctx context.Context, formats strfmt.Registry) error {
+
+	if m.EnvConstants != nil {
+		if err := m.EnvConstants.ContextValidate(ctx, formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("envConstants")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("envConstants")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
 // MarshalBinary interface implementation
 func (m *SessionResponse) MarshalBinary() ([]byte, error) {
 	if m == nil {

models/tenant_configuration_response.go

@@ -0,0 +1,133 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+	"strconv"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// TenantConfigurationResponse tenant configuration response
+//
+// swagger:model tenantConfigurationResponse
+type TenantConfigurationResponse struct {
+
+	// environment variables
+	EnvironmentVariables []*EnvironmentVariable `json:"environmentVariables"`
+}
+
+// Validate validates this tenant configuration response
+func (m *TenantConfigurationResponse) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateEnvironmentVariables(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *TenantConfigurationResponse) validateEnvironmentVariables(formats strfmt.Registry) error {
+	if swag.IsZero(m.EnvironmentVariables) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.EnvironmentVariables); i++ {
+		if swag.IsZero(m.EnvironmentVariables[i]) { // not required
+			continue
+		}
+
+		if m.EnvironmentVariables[i] != nil {
+			if err := m.EnvironmentVariables[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// ContextValidate validate this tenant configuration response based on the context it is used
+func (m *TenantConfigurationResponse) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.contextValidateEnvironmentVariables(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *TenantConfigurationResponse) contextValidateEnvironmentVariables(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.EnvironmentVariables); i++ {
+
+		if m.EnvironmentVariables[i] != nil {
+			if err := m.EnvironmentVariables[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *TenantConfigurationResponse) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *TenantConfigurationResponse) UnmarshalBinary(b []byte) error {
+	var res TenantConfigurationResponse
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/tenant_security_response.go

@@ -175,6 +175,9 @@ func (m *TenantSecurityResponse) UnmarshalBinary(b []byte) error {
 // swagger:model TenantSecurityResponseCustomCertificates
 type TenantSecurityResponseCustomCertificates struct {
 
+	// client
+	Client []*CertificateInfo `json:"client"`
+
 	// minio
 	Minio []*CertificateInfo `json:"minio"`
 
@@ -186,6 +189,10 @@ type TenantSecurityResponseCustomCertificates struct {
 func (m *TenantSecurityResponseCustomCertificates) Validate(formats strfmt.Registry) error {
 	var res []error
 
+	if err := m.validateClient(formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.validateMinio(formats); err != nil {
 		res = append(res, err)
 	}
@@ -200,6 +207,32 @@ func (m *TenantSecurityResponseCustomCertificates) Validate(formats strfmt.Regis
 	return nil
 }
 
+func (m *TenantSecurityResponseCustomCertificates) validateClient(formats strfmt.Registry) error {
+	if swag.IsZero(m.Client) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.Client); i++ {
+		if swag.IsZero(m.Client[i]) { // not required
+			continue
+		}
+
+		if m.Client[i] != nil {
+			if err := m.Client[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("customCertificates" + "." + "client" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("customCertificates" + "." + "client" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
 func (m *TenantSecurityResponseCustomCertificates) validateMinio(formats strfmt.Registry) error {
 	if swag.IsZero(m.Minio) { // not required
 		return nil
@@ -256,6 +289,10 @@ func (m *TenantSecurityResponseCustomCertificates) validateMinioCAs(formats strf
 func (m *TenantSecurityResponseCustomCertificates) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	var res []error
 
+	if err := m.contextValidateClient(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.contextValidateMinio(ctx, formats); err != nil {
 		res = append(res, err)
 	}
@@ -270,6 +307,26 @@ func (m *TenantSecurityResponseCustomCertificates) ContextValidate(ctx context.C
 	return nil
 }
 
+func (m *TenantSecurityResponseCustomCertificates) contextValidateClient(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.Client); i++ {
+
+		if m.Client[i] != nil {
+			if err := m.Client[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("customCertificates" + "." + "client" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("customCertificates" + "." + "client" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
 func (m *TenantSecurityResponseCustomCertificates) contextValidateMinio(ctx context.Context, formats strfmt.Registry) error {
 
 	for i := 0; i < len(m.Minio); i++ {

models/tier.go

@@ -43,11 +43,14 @@ type Tier struct {
 	// gcs
 	Gcs *TierGcs `json:"gcs,omitempty"`
 
+	// minio
+	Minio *TierMinio `json:"minio,omitempty"`
+
 	// s3
 	S3 *TierS3 `json:"s3,omitempty"`
 
 	// type
-	// Enum: [s3 gcs azure unsupported]
+	// Enum: [s3 gcs azure minio unsupported]
 	Type string `json:"type,omitempty"`
 }
 
@@ -63,6 +66,10 @@ func (m *Tier) Validate(formats strfmt.Registry) error {
 		res = append(res, err)
 	}
 
+	if err := m.validateMinio(formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.validateS3(formats); err != nil {
 		res = append(res, err)
 	}
@@ -115,6 +122,25 @@ func (m *Tier) validateGcs(formats strfmt.Registry) error {
 	return nil
 }
 
+func (m *Tier) validateMinio(formats strfmt.Registry) error {
+	if swag.IsZero(m.Minio) { // not required
+		return nil
+	}
+
+	if m.Minio != nil {
+		if err := m.Minio.Validate(formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("minio")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("minio")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
 func (m *Tier) validateS3(formats strfmt.Registry) error {
 	if swag.IsZero(m.S3) { // not required
 		return nil
@@ -138,7 +164,7 @@ var tierTypeTypePropEnum []interface{}
 
 func init() {
 	var res []string
-	if err := json.Unmarshal([]byte(`["s3","gcs","azure","unsupported"]`), &res); err != nil {
+	if err := json.Unmarshal([]byte(`["s3","gcs","azure","minio","unsupported"]`), &res); err != nil {
 		panic(err)
 	}
 	for _, v := range res {
@@ -157,6 +183,9 @@ const (
 	// TierTypeAzure captures enum value "azure"
 	TierTypeAzure string = "azure"
 
+	// TierTypeMinio captures enum value "minio"
+	TierTypeMinio string = "minio"
+
 	// TierTypeUnsupported captures enum value "unsupported"
 	TierTypeUnsupported string = "unsupported"
 )
@@ -194,6 +223,10 @@ func (m *Tier) ContextValidate(ctx context.Context, formats strfmt.Registry) err
 		res = append(res, err)
 	}
 
+	if err := m.contextValidateMinio(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
 	if err := m.contextValidateS3(ctx, formats); err != nil {
 		res = append(res, err)
 	}
@@ -236,6 +269,22 @@ func (m *Tier) contextValidateGcs(ctx context.Context, formats strfmt.Registry)
 	return nil
 }
 
+func (m *Tier) contextValidateMinio(ctx context.Context, formats strfmt.Registry) error {
+
+	if m.Minio != nil {
+		if err := m.Minio.ContextValidate(ctx, formats); err != nil {
+			if ve, ok := err.(*errors.Validation); ok {
+				return ve.ValidateName("minio")
+			} else if ce, ok := err.(*errors.CompositeError); ok {
+				return ce.ValidateName("minio")
+			}
+			return err
+		}
+	}
+
+	return nil
+}
+
 func (m *Tier) contextValidateS3(ctx context.Context, formats strfmt.Registry) error {
 
 	if m.S3 != nil {

models/tier_minio.go

@@ -0,0 +1,97 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// TierMinio tier minio
+//
+// swagger:model tier_minio
+type TierMinio struct {
+
+	// accesskey
+	Accesskey string `json:"accesskey,omitempty"`
+
+	// bucket
+	Bucket string `json:"bucket,omitempty"`
+
+	// endpoint
+	Endpoint string `json:"endpoint,omitempty"`
+
+	// name
+	Name string `json:"name,omitempty"`
+
+	// objects
+	Objects string `json:"objects,omitempty"`
+
+	// prefix
+	Prefix string `json:"prefix,omitempty"`
+
+	// region
+	Region string `json:"region,omitempty"`
+
+	// secretkey
+	Secretkey string `json:"secretkey,omitempty"`
+
+	// storageclass
+	Storageclass string `json:"storageclass,omitempty"`
+
+	// usage
+	Usage string `json:"usage,omitempty"`
+
+	// versions
+	Versions string `json:"versions,omitempty"`
+}
+
+// Validate validates this tier minio
+func (m *TierMinio) Validate(formats strfmt.Registry) error {
+	return nil
+}
+
+// ContextValidate validates this tier minio based on context it is used
+func (m *TierMinio) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *TierMinio) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *TierMinio) UnmarshalBinary(b []byte) error {
+	var res TierMinio
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/tls_configuration.go

@@ -36,18 +36,25 @@ import (
 // swagger:model tlsConfiguration
 type TLSConfiguration struct {
 
-	// ca certificates
-	CaCertificates []string `json:"ca_certificates"`
+	// minio c as certificates
+	MinioCAsCertificates []string `json:"minioCAsCertificates"`
 
-	// minio
-	Minio []*KeyPairConfiguration `json:"minio"`
+	// minio client certificates
+	MinioClientCertificates []*KeyPairConfiguration `json:"minioClientCertificates"`
+
+	// minio server certificates
+	MinioServerCertificates []*KeyPairConfiguration `json:"minioServerCertificates"`
 }
 
 // Validate validates this tls configuration
 func (m *TLSConfiguration) Validate(formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.validateMinio(formats); err != nil {
+	if err := m.validateMinioClientCertificates(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateMinioServerCertificates(formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -57,22 +64,48 @@ func (m *TLSConfiguration) Validate(formats strfmt.Registry) error {
 	return nil
 }
 
-func (m *TLSConfiguration) validateMinio(formats strfmt.Registry) error {
-	if swag.IsZero(m.Minio) { // not required
+func (m *TLSConfiguration) validateMinioClientCertificates(formats strfmt.Registry) error {
+	if swag.IsZero(m.MinioClientCertificates) { // not required
 		return nil
 	}
 
-	for i := 0; i < len(m.Minio); i++ {
-		if swag.IsZero(m.Minio[i]) { // not required
+	for i := 0; i < len(m.MinioClientCertificates); i++ {
+		if swag.IsZero(m.MinioClientCertificates[i]) { // not required
 			continue
 		}
 
-		if m.Minio[i] != nil {
-			if err := m.Minio[i].Validate(formats); err != nil {
+		if m.MinioClientCertificates[i] != nil {
+			if err := m.MinioClientCertificates[i].Validate(formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("minio" + "." + strconv.Itoa(i))
+					return ve.ValidateName("minioClientCertificates" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("minio" + "." + strconv.Itoa(i))
+					return ce.ValidateName("minioClientCertificates" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+func (m *TLSConfiguration) validateMinioServerCertificates(formats strfmt.Registry) error {
+	if swag.IsZero(m.MinioServerCertificates) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.MinioServerCertificates); i++ {
+		if swag.IsZero(m.MinioServerCertificates[i]) { // not required
+			continue
+		}
+
+		if m.MinioServerCertificates[i] != nil {
+			if err := m.MinioServerCertificates[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("minioServerCertificates" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("minioServerCertificates" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -87,7 +120,11 @@ func (m *TLSConfiguration) validateMinio(formats strfmt.Registry) error {
 func (m *TLSConfiguration) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.contextValidateMinio(ctx, formats); err != nil {
+	if err := m.contextValidateMinioClientCertificates(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.contextValidateMinioServerCertificates(ctx, formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -97,16 +134,36 @@ func (m *TLSConfiguration) ContextValidate(ctx context.Context, formats strfmt.R
 	return nil
 }
 
-func (m *TLSConfiguration) contextValidateMinio(ctx context.Context, formats strfmt.Registry) error {
+func (m *TLSConfiguration) contextValidateMinioClientCertificates(ctx context.Context, formats strfmt.Registry) error {
 
-	for i := 0; i < len(m.Minio); i++ {
+	for i := 0; i < len(m.MinioClientCertificates); i++ {
 
-		if m.Minio[i] != nil {
-			if err := m.Minio[i].ContextValidate(ctx, formats); err != nil {
+		if m.MinioClientCertificates[i] != nil {
+			if err := m.MinioClientCertificates[i].ContextValidate(ctx, formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("minio" + "." + strconv.Itoa(i))
+					return ve.ValidateName("minioClientCertificates" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("minio" + "." + strconv.Itoa(i))
+					return ce.ValidateName("minioClientCertificates" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+func (m *TLSConfiguration) contextValidateMinioServerCertificates(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.MinioServerCertificates); i++ {
+
+		if m.MinioServerCertificates[i] != nil {
+			if err := m.MinioServerCertificates[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("minioServerCertificates" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("minioServerCertificates" + "." + strconv.Itoa(i))
 				}
 				return err
 			}

models/update_tenant_configuration_request.go

@@ -0,0 +1,136 @@
+// Code generated by go-swagger; DO NOT EDIT.
+
+// This file is part of MinIO Console Server
+// Copyright (c) 2022 MinIO, Inc.
+//
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License as published by
+// the Free Software Foundation, either version 3 of the License, or
+// (at your option) any later version.
+//
+// This program is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+// GNU Affero General Public License for more details.
+//
+// You should have received a copy of the GNU Affero General Public License
+// along with this program.  If not, see <http://www.gnu.org/licenses/>.
+//
+
+package models
+
+// This file was generated by the swagger tool.
+// Editing this file might prove futile when you re-run the swagger generate command
+
+import (
+	"context"
+	"strconv"
+
+	"github.com/go-openapi/errors"
+	"github.com/go-openapi/strfmt"
+	"github.com/go-openapi/swag"
+)
+
+// UpdateTenantConfigurationRequest update tenant configuration request
+//
+// swagger:model updateTenantConfigurationRequest
+type UpdateTenantConfigurationRequest struct {
+
+	// environment variables
+	EnvironmentVariables []*EnvironmentVariable `json:"environmentVariables"`
+
+	// keys to be deleted
+	KeysToBeDeleted []string `json:"keysToBeDeleted"`
+}
+
+// Validate validates this update tenant configuration request
+func (m *UpdateTenantConfigurationRequest) Validate(formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.validateEnvironmentVariables(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *UpdateTenantConfigurationRequest) validateEnvironmentVariables(formats strfmt.Registry) error {
+	if swag.IsZero(m.EnvironmentVariables) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.EnvironmentVariables); i++ {
+		if swag.IsZero(m.EnvironmentVariables[i]) { // not required
+			continue
+		}
+
+		if m.EnvironmentVariables[i] != nil {
+			if err := m.EnvironmentVariables[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// ContextValidate validate this update tenant configuration request based on the context it is used
+func (m *UpdateTenantConfigurationRequest) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
+	var res []error
+
+	if err := m.contextValidateEnvironmentVariables(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if len(res) > 0 {
+		return errors.CompositeValidationError(res...)
+	}
+	return nil
+}
+
+func (m *UpdateTenantConfigurationRequest) contextValidateEnvironmentVariables(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.EnvironmentVariables); i++ {
+
+		if m.EnvironmentVariables[i] != nil {
+			if err := m.EnvironmentVariables[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("environmentVariables" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+// MarshalBinary interface implementation
+func (m *UpdateTenantConfigurationRequest) MarshalBinary() ([]byte, error) {
+	if m == nil {
+		return nil, nil
+	}
+	return swag.WriteJSON(m)
+}
+
+// UnmarshalBinary interface implementation
+func (m *UpdateTenantConfigurationRequest) UnmarshalBinary(b []byte) error {
+	var res UpdateTenantConfigurationRequest
+	if err := swag.ReadJSON(b, &res); err != nil {
+		return err
+	}
+	*m = res
+	return nil
+}

models/update_tenant_security_request.go

@@ -175,11 +175,14 @@ func (m *UpdateTenantSecurityRequest) UnmarshalBinary(b []byte) error {
 // swagger:model UpdateTenantSecurityRequestCustomCertificates
 type UpdateTenantSecurityRequestCustomCertificates struct {
 
-	// minio
-	Minio []*KeyPairConfiguration `json:"minio"`
+	// minio c as certificates
+	MinioCAsCertificates []string `json:"minioCAsCertificates"`
 
-	// minio c as
-	MinioCAs []string `json:"minioCAs"`
+	// minio client certificates
+	MinioClientCertificates []*KeyPairConfiguration `json:"minioClientCertificates"`
+
+	// minio server certificates
+	MinioServerCertificates []*KeyPairConfiguration `json:"minioServerCertificates"`
 
 	// secrets to be deleted
 	SecretsToBeDeleted []string `json:"secretsToBeDeleted"`
@@ -189,7 +192,11 @@ type UpdateTenantSecurityRequestCustomCertificates struct {
 func (m *UpdateTenantSecurityRequestCustomCertificates) Validate(formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.validateMinio(formats); err != nil {
+	if err := m.validateMinioClientCertificates(formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.validateMinioServerCertificates(formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -199,22 +206,48 @@ func (m *UpdateTenantSecurityRequestCustomCertificates) Validate(formats strfmt.
 	return nil
 }
 
-func (m *UpdateTenantSecurityRequestCustomCertificates) validateMinio(formats strfmt.Registry) error {
-	if swag.IsZero(m.Minio) { // not required
+func (m *UpdateTenantSecurityRequestCustomCertificates) validateMinioClientCertificates(formats strfmt.Registry) error {
+	if swag.IsZero(m.MinioClientCertificates) { // not required
 		return nil
 	}
 
-	for i := 0; i < len(m.Minio); i++ {
-		if swag.IsZero(m.Minio[i]) { // not required
+	for i := 0; i < len(m.MinioClientCertificates); i++ {
+		if swag.IsZero(m.MinioClientCertificates[i]) { // not required
 			continue
 		}
 
-		if m.Minio[i] != nil {
-			if err := m.Minio[i].Validate(formats); err != nil {
+		if m.MinioClientCertificates[i] != nil {
+			if err := m.MinioClientCertificates[i].Validate(formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("customCertificates" + "." + "minio" + "." + strconv.Itoa(i))
+					return ve.ValidateName("customCertificates" + "." + "minioClientCertificates" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("customCertificates" + "." + "minio" + "." + strconv.Itoa(i))
+					return ce.ValidateName("customCertificates" + "." + "minioClientCertificates" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+func (m *UpdateTenantSecurityRequestCustomCertificates) validateMinioServerCertificates(formats strfmt.Registry) error {
+	if swag.IsZero(m.MinioServerCertificates) { // not required
+		return nil
+	}
+
+	for i := 0; i < len(m.MinioServerCertificates); i++ {
+		if swag.IsZero(m.MinioServerCertificates[i]) { // not required
+			continue
+		}
+
+		if m.MinioServerCertificates[i] != nil {
+			if err := m.MinioServerCertificates[i].Validate(formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("customCertificates" + "." + "minioServerCertificates" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("customCertificates" + "." + "minioServerCertificates" + "." + strconv.Itoa(i))
 				}
 				return err
 			}
@@ -229,7 +262,11 @@ func (m *UpdateTenantSecurityRequestCustomCertificates) validateMinio(formats st
 func (m *UpdateTenantSecurityRequestCustomCertificates) ContextValidate(ctx context.Context, formats strfmt.Registry) error {
 	var res []error
 
-	if err := m.contextValidateMinio(ctx, formats); err != nil {
+	if err := m.contextValidateMinioClientCertificates(ctx, formats); err != nil {
+		res = append(res, err)
+	}
+
+	if err := m.contextValidateMinioServerCertificates(ctx, formats); err != nil {
 		res = append(res, err)
 	}
 
@@ -239,16 +276,36 @@ func (m *UpdateTenantSecurityRequestCustomCertificates) ContextValidate(ctx cont
 	return nil
 }
 
-func (m *UpdateTenantSecurityRequestCustomCertificates) contextValidateMinio(ctx context.Context, formats strfmt.Registry) error {
+func (m *UpdateTenantSecurityRequestCustomCertificates) contextValidateMinioClientCertificates(ctx context.Context, formats strfmt.Registry) error {
 
-	for i := 0; i < len(m.Minio); i++ {
+	for i := 0; i < len(m.MinioClientCertificates); i++ {
 
-		if m.Minio[i] != nil {
-			if err := m.Minio[i].ContextValidate(ctx, formats); err != nil {
+		if m.MinioClientCertificates[i] != nil {
+			if err := m.MinioClientCertificates[i].ContextValidate(ctx, formats); err != nil {
 				if ve, ok := err.(*errors.Validation); ok {
-					return ve.ValidateName("customCertificates" + "." + "minio" + "." + strconv.Itoa(i))
+					return ve.ValidateName("customCertificates" + "." + "minioClientCertificates" + "." + strconv.Itoa(i))
 				} else if ce, ok := err.(*errors.CompositeError); ok {
-					return ce.ValidateName("customCertificates" + "." + "minio" + "." + strconv.Itoa(i))
+					return ce.ValidateName("customCertificates" + "." + "minioClientCertificates" + "." + strconv.Itoa(i))
+				}
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}
+
+func (m *UpdateTenantSecurityRequestCustomCertificates) contextValidateMinioServerCertificates(ctx context.Context, formats strfmt.Registry) error {
+
+	for i := 0; i < len(m.MinioServerCertificates); i++ {
+
+		if m.MinioServerCertificates[i] != nil {
+			if err := m.MinioServerCertificates[i].ContextValidate(ctx, formats); err != nil {
+				if ve, ok := err.(*errors.Validation); ok {
+					return ve.ValidateName("customCertificates" + "." + "minioServerCertificates" + "." + strconv.Itoa(i))
+				} else if ce, ok := err.(*errors.CompositeError); ok {
+					return ce.ValidateName("customCertificates" + "." + "minioServerCertificates" + "." + strconv.Itoa(i))
 				}
 				return err
 			}

operatorapi/doc.go

@@ -18,18 +18,18 @@
 
 // Package operatorapi MinIO Console Server
 //
-//  Schemes:
-//    http
-//    ws
-//  Host: localhost
-//  BasePath: /api/v1
-//  Version: 0.1.0
+//	Schemes:
+//	  http
+//	  ws
+//	Host: localhost
+//	BasePath: /api/v1
+//	Version: 0.1.0
 //
-//  Consumes:
-//    - application/json
+//	Consumes:
+//	  - application/json
 //
-//  Produces:
-//    - application/json
+//	Produces:
+//	  - application/json
 //
 // swagger:meta
 package operatorapi

operatorapi/embedded_spec.go

@@ -742,6 +742,83 @@ func init() {
         }
       }
     },
+    "/namespaces/{namespace}/tenants/{tenant}/configuration": {
+      "get": {
+        "tags": [
+          "OperatorAPI"
+        ],
+        "summary": "Tenant Configuration",
+        "operationId": "TenantConfiguration",
+        "parameters": [
+          {
+            "type": "string",
+            "name": "namespace",
+            "in": "path",
+            "required": true
+          },
+          {
+            "type": "string",
+            "name": "tenant",
+            "in": "path",
+            "required": true
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/tenantConfigurationResponse"
+            }
+          },
+          "default": {
+            "description": "Generic error response.",
+            "schema": {
+              "$ref": "#/definitions/error"
+            }
+          }
+        }
+      },
+      "patch": {
+        "tags": [
+          "OperatorAPI"
+        ],
+        "summary": "Update Tenant Configuration",
+        "operationId": "UpdateTenantConfiguration",
+        "parameters": [
+          {
+            "type": "string",
+            "name": "namespace",
+            "in": "path",
+            "required": true
+          },
+          {
+            "type": "string",
+            "name": "tenant",
+            "in": "path",
+            "required": true
+          },
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/updateTenantConfigurationRequest"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "A successful response."
+          },
+          "default": {
+            "description": "Generic error response.",
+            "schema": {
+              "$ref": "#/definitions/error"
+            }
+          }
+        }
+      }
+    },
     "/namespaces/{namespace}/tenants/{tenant}/csr": {
       "get": {
         "tags": [
@@ -2620,6 +2697,12 @@ func init() {
           "type": "object",
           "$ref": "#/definitions/encryptionConfiguration"
         },
+        "environmentVariables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/environmentVariable"
+          }
+        },
         "erasureCodingParity": {
           "type": "integer"
         },
@@ -2651,7 +2734,7 @@ func init() {
         "logSearchConfiguration": {
           "$ref": "#/definitions/logSearchConfiguration"
         },
-        "mounth_path": {
+        "mount_path": {
           "type": "string"
         },
         "name": {
@@ -2977,6 +3060,9 @@ func init() {
             "image": {
               "type": "string"
             },
+            "raw": {
+              "type": "string"
+            },
             "replicas": {
               "type": "string"
             },
@@ -3033,6 +3119,9 @@ func init() {
               "type": "object",
               "$ref": "#/definitions/certificateInfo"
             },
+            "raw": {
+              "type": "string"
+            },
             "replicas": {
               "type": "string"
             },
@@ -3530,6 +3619,12 @@ func init() {
     "loginDetails": {
       "type": "object",
       "properties": {
+        "displayNames": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "isDirectPV": {
           "type": "boolean"
         },
@@ -3543,7 +3638,10 @@ func init() {
           ]
         },
         "redirect": {
-          "type": "string"
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
         }
       }
     },
@@ -4499,6 +4597,17 @@ func init() {
         }
       }
     },
+    "tenantConfigurationResponse": {
+      "type": "object",
+      "properties": {
+        "environmentVariables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/environmentVariable"
+          }
+        }
+      }
+    },
     "tenantList": {
       "type": "object",
       "properties": {
@@ -4748,6 +4857,12 @@ func init() {
         "customCertificates": {
           "type": "object",
           "properties": {
+            "client": {
+              "type": "array",
+              "items": {
+                "$ref": "#/definitions/certificateInfo"
+              }
+            },
             "minio": {
               "type": "array",
               "items": {
@@ -4852,13 +4967,19 @@ func init() {
     "tlsConfiguration": {
       "type": "object",
       "properties": {
-        "ca_certificates": {
+        "minioCAsCertificates": {
           "type": "array",
           "items": {
             "type": "string"
           }
         },
-        "minio": {
+        "minioClientCertificates": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/keyPairConfiguration"
+          }
+        },
+        "minioServerCertificates": {
           "type": "array",
           "items": {
             "$ref": "#/definitions/keyPairConfiguration"
@@ -4894,6 +5015,23 @@ func init() {
         }
       }
     },
+    "updateTenantConfigurationRequest": {
+      "type": "object",
+      "properties": {
+        "environmentVariables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/environmentVariable"
+          }
+        },
+        "keysToBeDeleted": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
     "updateTenantRequest": {
       "type": "object",
       "properties": {
@@ -4921,16 +5059,22 @@ func init() {
         "customCertificates": {
           "type": "object",
           "properties": {
-            "minio": {
+            "minioCAsCertificates": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "minioClientCertificates": {
               "type": "array",
               "items": {
                 "$ref": "#/definitions/keyPairConfiguration"
               }
             },
-            "minioCAs": {
+            "minioServerCertificates": {
               "type": "array",
               "items": {
-                "type": "string"
+                "$ref": "#/definitions/keyPairConfiguration"
               }
             },
             "secretsToBeDeleted": {
@@ -5815,6 +5959,83 @@ func init() {
         }
       }
     },
+    "/namespaces/{namespace}/tenants/{tenant}/configuration": {
+      "get": {
+        "tags": [
+          "OperatorAPI"
+        ],
+        "summary": "Tenant Configuration",
+        "operationId": "TenantConfiguration",
+        "parameters": [
+          {
+            "type": "string",
+            "name": "namespace",
+            "in": "path",
+            "required": true
+          },
+          {
+            "type": "string",
+            "name": "tenant",
+            "in": "path",
+            "required": true
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "A successful response.",
+            "schema": {
+              "$ref": "#/definitions/tenantConfigurationResponse"
+            }
+          },
+          "default": {
+            "description": "Generic error response.",
+            "schema": {
+              "$ref": "#/definitions/error"
+            }
+          }
+        }
+      },
+      "patch": {
+        "tags": [
+          "OperatorAPI"
+        ],
+        "summary": "Update Tenant Configuration",
+        "operationId": "UpdateTenantConfiguration",
+        "parameters": [
+          {
+            "type": "string",
+            "name": "namespace",
+            "in": "path",
+            "required": true
+          },
+          {
+            "type": "string",
+            "name": "tenant",
+            "in": "path",
+            "required": true
+          },
+          {
+            "name": "body",
+            "in": "body",
+            "required": true,
+            "schema": {
+              "$ref": "#/definitions/updateTenantConfigurationRequest"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "A successful response."
+          },
+          "default": {
+            "description": "Generic error response.",
+            "schema": {
+              "$ref": "#/definitions/error"
+            }
+          }
+        }
+      }
+    },
     "/namespaces/{namespace}/tenants/{tenant}/csr": {
       "get": {
         "tags": [
@@ -8119,6 +8340,12 @@ func init() {
     "TenantSecurityResponseCustomCertificates": {
       "type": "object",
       "properties": {
+        "client": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/certificateInfo"
+          }
+        },
         "minio": {
           "type": "array",
           "items": {
@@ -8157,16 +8384,22 @@ func init() {
     "UpdateTenantSecurityRequestCustomCertificates": {
       "type": "object",
       "properties": {
-        "minio": {
+        "minioCAsCertificates": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "minioClientCertificates": {
           "type": "array",
           "items": {
             "$ref": "#/definitions/keyPairConfiguration"
           }
         },
-        "minioCAs": {
+        "minioServerCertificates": {
           "type": "array",
           "items": {
-            "type": "string"
+            "$ref": "#/definitions/keyPairConfiguration"
           }
         },
         "secretsToBeDeleted": {
@@ -8536,6 +8769,12 @@ func init() {
           "type": "object",
           "$ref": "#/definitions/encryptionConfiguration"
         },
+        "environmentVariables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/environmentVariable"
+          }
+        },
         "erasureCodingParity": {
           "type": "integer"
         },
@@ -8567,7 +8806,7 @@ func init() {
         "logSearchConfiguration": {
           "$ref": "#/definitions/logSearchConfiguration"
         },
-        "mounth_path": {
+        "mount_path": {
           "type": "string"
         },
         "name": {
@@ -8893,6 +9132,9 @@ func init() {
             "image": {
               "type": "string"
             },
+            "raw": {
+              "type": "string"
+            },
             "replicas": {
               "type": "string"
             },
@@ -8949,6 +9191,9 @@ func init() {
               "type": "object",
               "$ref": "#/definitions/certificateInfo"
             },
+            "raw": {
+              "type": "string"
+            },
             "replicas": {
               "type": "string"
             },
@@ -9434,6 +9679,12 @@ func init() {
     "loginDetails": {
       "type": "object",
       "properties": {
+        "displayNames": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
         "isDirectPV": {
           "type": "boolean"
         },
@@ -9447,7 +9698,10 @@ func init() {
           ]
         },
         "redirect": {
-          "type": "string"
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
         }
       }
     },
@@ -10268,6 +10522,17 @@ func init() {
         }
       }
     },
+    "tenantConfigurationResponse": {
+      "type": "object",
+      "properties": {
+        "environmentVariables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/environmentVariable"
+          }
+        }
+      }
+    },
     "tenantList": {
       "type": "object",
       "properties": {
@@ -10517,6 +10782,12 @@ func init() {
         "customCertificates": {
           "type": "object",
           "properties": {
+            "client": {
+              "type": "array",
+              "items": {
+                "$ref": "#/definitions/certificateInfo"
+              }
+            },
             "minio": {
               "type": "array",
               "items": {
@@ -10621,13 +10892,19 @@ func init() {
     "tlsConfiguration": {
       "type": "object",
       "properties": {
-        "ca_certificates": {
+        "minioCAsCertificates": {
           "type": "array",
           "items": {
             "type": "string"
           }
         },
-        "minio": {
+        "minioClientCertificates": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/keyPairConfiguration"
+          }
+        },
+        "minioServerCertificates": {
           "type": "array",
           "items": {
             "$ref": "#/definitions/keyPairConfiguration"
@@ -10663,6 +10940,23 @@ func init() {
         }
       }
     },
+    "updateTenantConfigurationRequest": {
+      "type": "object",
+      "properties": {
+        "environmentVariables": {
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/environmentVariable"
+          }
+        },
+        "keysToBeDeleted": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
     "updateTenantRequest": {
       "type": "object",
       "properties": {
@@ -10690,16 +10984,22 @@ func init() {
         "customCertificates": {
           "type": "object",
           "properties": {
-            "minio": {
+            "minioCAsCertificates": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "minioClientCertificates": {
               "type": "array",
               "items": {
                 "$ref": "#/definitions/keyPairConfiguration"
               }
             },
-            "minioCAs": {
+            "minioServerCertificates": {
               "type": "array",
               "items": {
-                "type": "string"
+                "$ref": "#/definitions/keyPairConfiguration"
               }
             },
             "secretsToBeDeleted": {

operatorapi/login.go

@@ -101,7 +101,7 @@ func getLoginDetailsResponse(params authApi.LoginDetailParams) (*models.LoginDet
 	r := params.HTTPRequest
 
 	loginStrategy := models.LoginDetailsLoginStrategyServiceDashAccount
-	redirectURL := ""
+	redirectURL := []string{}
 
 	if oauth2.IsIDPEnabled() {
 		loginStrategy = models.LoginDetailsLoginStrategyRedirectDashServiceDashAccount
@@ -111,8 +111,11 @@ func getLoginDetailsResponse(params authApi.LoginDetailParams) (*models.LoginDet
 			return nil, restapi.ErrorWithContext(ctx, err)
 		}
 		// Validate user against IDP
-		identityProvider := &auth.IdentityProvider{Client: oauth2Client}
-		redirectURL = identityProvider.GenerateLoginURL()
+		identityProvider := &auth.IdentityProvider{
+			KeyFunc: oauth2.DefaultDerivedKey,
+			Client:  oauth2Client,
+		}
+		redirectURL = append(redirectURL, identityProvider.GenerateLoginURL())
 	}
 
 	loginDetails := &models.LoginDetails{
@@ -146,7 +149,10 @@ func getLoginOauth2AuthResponse(params authApi.LoginOauth2AuthParams) (*models.L
 			return nil, restapi.ErrorWithContext(ctx, err)
 		}
 		// initialize new identity provider
-		identityProvider := auth.IdentityProvider{Client: oauth2Client}
+		identityProvider := auth.IdentityProvider{
+			KeyFunc: oauth2.DefaultDerivedKey,
+			Client:  oauth2Client,
+		}
 		// Validate user against IDP
 		_, err = verifyUserAgainstIDP(ctx, identityProvider, *lr.Code, *lr.State)
 		if err != nil {

operatorapi/operations/auth/login_detail.go

@@ -46,10 +46,10 @@ func NewLoginDetail(ctx *middleware.Context, handler LoginDetailHandler) *LoginD
 	return &LoginDetail{Context: ctx, Handler: handler}
 }
 
-/* LoginDetail swagger:route GET /login Auth loginDetail
+/*
+	LoginDetail swagger:route GET /login Auth loginDetail
 
 Returns login strategy, form or sso.
-
 */
 type LoginDetail struct {
 	Context *middleware.Context

operatorapi/operations/auth/login_detail_responses.go

@@ -33,7 +33,8 @@ import (
 // LoginDetailOKCode is the HTTP code returned for type LoginDetailOK
 const LoginDetailOKCode int = 200
 
-/*LoginDetailOK A successful response.
+/*
+LoginDetailOK A successful response.
 
 swagger:response loginDetailOK
 */
@@ -74,7 +75,8 @@ func (o *LoginDetailOK) WriteResponse(rw http.ResponseWriter, producer runtime.P
 	}
 }
 
-/*LoginDetailDefault Generic error response.
+/*
+LoginDetailDefault Generic error response.
 
 swagger:response loginDetailDefault
 */

operatorapi/operations/auth/login_oauth2_auth.go

@@ -46,10 +46,10 @@ func NewLoginOauth2Auth(ctx *middleware.Context, handler LoginOauth2AuthHandler)
 	return &LoginOauth2Auth{Context: ctx, Handler: handler}
 }
 
-/* LoginOauth2Auth swagger:route POST /login/oauth2/auth Auth loginOauth2Auth
+/*
+	LoginOauth2Auth swagger:route POST /login/oauth2/auth Auth loginOauth2Auth
 
 Identity Provider oauth2 callback endpoint.
-
 */
 type LoginOauth2Auth struct {
 	Context *middleware.Context

operatorapi/operations/auth/login_oauth2_auth_parameters.go

@@ -23,7 +23,6 @@ package auth
 // Editing this file might prove futile when you re-run the swagger generate command
 
 import (
-	"context"
 	"io"
 	"net/http"
 
@@ -83,7 +82,7 @@ func (o *LoginOauth2AuthParams) BindRequest(r *http.Request, route *middleware.M
 				res = append(res, err)
 			}
 
-			ctx := validate.WithOperationRequest(context.Background())
+			ctx := validate.WithOperationRequest(r.Context())
 			if err := body.ContextValidate(ctx, route.Formats); err != nil {
 				res = append(res, err)
 			}

operatorapi/operations/auth/login_oauth2_auth_responses.go

@@ -33,7 +33,8 @@ import (
 // LoginOauth2AuthNoContentCode is the HTTP code returned for type LoginOauth2AuthNoContent
 const LoginOauth2AuthNoContentCode int = 204
 
-/*LoginOauth2AuthNoContent A successful login.
+/*
+LoginOauth2AuthNoContent A successful login.
 
 swagger:response loginOauth2AuthNoContent
 */
@@ -54,7 +55,8 @@ func (o *LoginOauth2AuthNoContent) WriteResponse(rw http.ResponseWriter, produce
 	rw.WriteHeader(204)
 }
 
-/*LoginOauth2AuthDefault Generic error response.
+/*
+LoginOauth2AuthDefault Generic error response.
 
 swagger:response loginOauth2AuthDefault
 */

operatorapi/operations/auth/login_operator.go

@@ -46,10 +46,10 @@ func NewLoginOperator(ctx *middleware.Context, handler LoginOperatorHandler) *Lo
 	return &LoginOperator{Context: ctx, Handler: handler}
 }
 
-/* LoginOperator swagger:route POST /login/operator Auth loginOperator
+/*
+	LoginOperator swagger:route POST /login/operator Auth loginOperator
 
 Login to Operator Console.
-
 */
 type LoginOperator struct {
 	Context *middleware.Context

operatorapi/operations/auth/login_operator_parameters.go

@@ -23,7 +23,6 @@ package auth
 // Editing this file might prove futile when you re-run the swagger generate command
 
 import (
-	"context"
 	"io"
 	"net/http"
 
@@ -83,7 +82,7 @@ func (o *LoginOperatorParams) BindRequest(r *http.Request, route *middleware.Mat
 				res = append(res, err)
 			}
 
-			ctx := validate.WithOperationRequest(context.Background())
+			ctx := validate.WithOperationRequest(r.Context())
 			if err := body.ContextValidate(ctx, route.Formats); err != nil {
 				res = append(res, err)
 			}

operatorapi/operations/auth/login_operator_responses.go

@@ -33,7 +33,8 @@ import (
 // LoginOperatorNoContentCode is the HTTP code returned for type LoginOperatorNoContent
 const LoginOperatorNoContentCode int = 204
 
-/*LoginOperatorNoContent A successful login.
+/*
+LoginOperatorNoContent A successful login.
 
 swagger:response loginOperatorNoContent
 */
@@ -54,7 +55,8 @@ func (o *LoginOperatorNoContent) WriteResponse(rw http.ResponseWriter, producer
 	rw.WriteHeader(204)
 }
 
-/*LoginOperatorDefault Generic error response.
+/*
+LoginOperatorDefault Generic error response.
 
 swagger:response loginOperatorDefault
 */

operatorapi/operations/auth/logout.go

@@ -48,10 +48,10 @@ func NewLogout(ctx *middleware.Context, handler LogoutHandler) *Logout {
 	return &Logout{Context: ctx, Handler: handler}
 }
 
-/* Logout swagger:route POST /logout Auth logout
+/*
+	Logout swagger:route POST /logout Auth logout
 
 Logout from Operator.
-
 */
 type Logout struct {
 	Context *middleware.Context

operatorapi/operations/auth/logout_responses.go

@@ -33,7 +33,8 @@ import (
 // LogoutOKCode is the HTTP code returned for type LogoutOK
 const LogoutOKCode int = 200
 
-/*LogoutOK A successful response.
+/*
+LogoutOK A successful response.
 
 swagger:response logoutOK
 */
@@ -54,7 +55,8 @@ func (o *LogoutOK) WriteResponse(rw http.ResponseWriter, producer runtime.Produc
 	rw.WriteHeader(200)
 }
 
-/*LogoutDefault Generic error response.
+/*
+LogoutDefault Generic error response.
 
 swagger:response logoutDefault
 */

operatorapi/operations/auth/session_check.go

@@ -48,10 +48,10 @@ func NewSessionCheck(ctx *middleware.Context, handler SessionCheckHandler) *Sess
 	return &SessionCheck{Context: ctx, Handler: handler}
 }
 
-/* SessionCheck swagger:route GET /session Auth sessionCheck
+/*
+	SessionCheck swagger:route GET /session Auth sessionCheck
 
 Endpoint to check if your session is still valid
-
 */
 type SessionCheck struct {
 	Context *middleware.Context

operatorapi/operations/auth/session_check_responses.go

@@ -33,7 +33,8 @@ import (
 // SessionCheckOKCode is the HTTP code returned for type SessionCheckOK
 const SessionCheckOKCode int = 200
 
-/*SessionCheckOK A successful response.
+/*
+SessionCheckOK A successful response.
 
 swagger:response sessionCheckOK
 */
@@ -74,7 +75,8 @@ func (o *SessionCheckOK) WriteResponse(rw http.ResponseWriter, producer runtime.
 	}
 }
 
-/*SessionCheckDefault Generic error response.
+/*
+SessionCheckDefault Generic error response.
 
 swagger:response sessionCheckDefault
 */

operatorapi/operations/operator_api.go

@@ -223,6 +223,9 @@ func NewOperatorAPI(spec *loads.Document) *OperatorAPI {
 		OperatorAPITenantAddPoolHandler: operator_api.TenantAddPoolHandlerFunc(func(params operator_api.TenantAddPoolParams, principal *models.Principal) middleware.Responder {
 			return middleware.NotImplemented("operation operator_api.TenantAddPool has not yet been implemented")
 		}),
+		OperatorAPITenantConfigurationHandler: operator_api.TenantConfigurationHandlerFunc(func(params operator_api.TenantConfigurationParams, principal *models.Principal) middleware.Responder {
+			return middleware.NotImplemented("operation operator_api.TenantConfiguration has not yet been implemented")
+		}),
 		OperatorAPITenantDeleteEncryptionHandler: operator_api.TenantDeleteEncryptionHandlerFunc(func(params operator_api.TenantDeleteEncryptionParams, principal *models.Principal) middleware.Responder {
 			return middleware.NotImplemented("operation operator_api.TenantDeleteEncryption has not yet been implemented")
 		}),
@@ -250,6 +253,9 @@ func NewOperatorAPI(spec *loads.Document) *OperatorAPI {
 		OperatorAPIUpdateTenantHandler: operator_api.UpdateTenantHandlerFunc(func(params operator_api.UpdateTenantParams, principal *models.Principal) middleware.Responder {
 			return middleware.NotImplemented("operation operator_api.UpdateTenant has not yet been implemented")
 		}),
+		OperatorAPIUpdateTenantConfigurationHandler: operator_api.UpdateTenantConfigurationHandlerFunc(func(params operator_api.UpdateTenantConfigurationParams, principal *models.Principal) middleware.Responder {
+			return middleware.NotImplemented("operation operator_api.UpdateTenantConfiguration has not yet been implemented")
+		}),
 		OperatorAPIUpdateTenantDomainsHandler: operator_api.UpdateTenantDomainsHandlerFunc(func(params operator_api.UpdateTenantDomainsParams, principal *models.Principal) middleware.Responder {
 			return middleware.NotImplemented("operation operator_api.UpdateTenantDomains has not yet been implemented")
 		}),
@@ -414,6 +420,8 @@ type OperatorAPI struct {
 	OperatorAPISubscriptionValidateHandler operator_api.SubscriptionValidateHandler
 	// OperatorAPITenantAddPoolHandler sets the operation handler for the tenant add pool operation
 	OperatorAPITenantAddPoolHandler operator_api.TenantAddPoolHandler
+	// OperatorAPITenantConfigurationHandler sets the operation handler for the tenant configuration operation
+	OperatorAPITenantConfigurationHandler operator_api.TenantConfigurationHandler
 	// OperatorAPITenantDeleteEncryptionHandler sets the operation handler for the tenant delete encryption operation
 	OperatorAPITenantDeleteEncryptionHandler operator_api.TenantDeleteEncryptionHandler
 	// OperatorAPITenantDetailsHandler sets the operation handler for the tenant details operation
@@ -432,6 +440,8 @@ type OperatorAPI struct {
 	OperatorAPITenantUpdatePoolsHandler operator_api.TenantUpdatePoolsHandler
 	// OperatorAPIUpdateTenantHandler sets the operation handler for the update tenant operation
 	OperatorAPIUpdateTenantHandler operator_api.UpdateTenantHandler
+	// OperatorAPIUpdateTenantConfigurationHandler sets the operation handler for the update tenant configuration operation
+	OperatorAPIUpdateTenantConfigurationHandler operator_api.UpdateTenantConfigurationHandler
 	// OperatorAPIUpdateTenantDomainsHandler sets the operation handler for the update tenant domains operation
 	OperatorAPIUpdateTenantDomainsHandler operator_api.UpdateTenantDomainsHandler
 	// OperatorAPIUpdateTenantIdentityProviderHandler sets the operation handler for the update tenant identity provider operation
@@ -678,6 +688,9 @@ func (o *OperatorAPI) Validate() error {
 	if o.OperatorAPITenantAddPoolHandler == nil {
 		unregistered = append(unregistered, "operator_api.TenantAddPoolHandler")
 	}
+	if o.OperatorAPITenantConfigurationHandler == nil {
+		unregistered = append(unregistered, "operator_api.TenantConfigurationHandler")
+	}
 	if o.OperatorAPITenantDeleteEncryptionHandler == nil {
 		unregistered = append(unregistered, "operator_api.TenantDeleteEncryptionHandler")
 	}
@@ -705,6 +718,9 @@ func (o *OperatorAPI) Validate() error {
 	if o.OperatorAPIUpdateTenantHandler == nil {
 		unregistered = append(unregistered, "operator_api.UpdateTenantHandler")
 	}
+	if o.OperatorAPIUpdateTenantConfigurationHandler == nil {
+		unregistered = append(unregistered, "operator_api.UpdateTenantConfigurationHandler")
+	}
 	if o.OperatorAPIUpdateTenantDomainsHandler == nil {
 		unregistered = append(unregistered, "operator_api.UpdateTenantDomainsHandler")
 	}
@@ -1024,6 +1040,10 @@ func (o *OperatorAPI) initHandlerCache() {
 		o.handlers["POST"] = make(map[string]http.Handler)
 	}
 	o.handlers["POST"]["/namespaces/{namespace}/tenants/{tenant}/pools"] = operator_api.NewTenantAddPool(o.context, o.OperatorAPITenantAddPoolHandler)
+	if o.handlers["GET"] == nil {
+		o.handlers["GET"] = make(map[string]http.Handler)
+	}
+	o.handlers["GET"]["/namespaces/{namespace}/tenants/{tenant}/configuration"] = operator_api.NewTenantConfiguration(o.context, o.OperatorAPITenantConfigurationHandler)
 	if o.handlers["DELETE"] == nil {
 		o.handlers["DELETE"] = make(map[string]http.Handler)
 	}
@@ -1060,6 +1080,10 @@ func (o *OperatorAPI) initHandlerCache() {
 		o.handlers["PUT"] = make(map[string]http.Handler)
 	}
 	o.handlers["PUT"]["/namespaces/{namespace}/tenants/{tenant}"] = operator_api.NewUpdateTenant(o.context, o.OperatorAPIUpdateTenantHandler)
+	if o.handlers["PATCH"] == nil {
+		o.handlers["PATCH"] = make(map[string]http.Handler)
+	}
+	o.handlers["PATCH"]["/namespaces/{namespace}/tenants/{tenant}/configuration"] = operator_api.NewUpdateTenantConfiguration(o.context, o.OperatorAPIUpdateTenantConfigurationHandler)
 	if o.handlers["PUT"] == nil {
 		o.handlers["PUT"] = make(map[string]http.Handler)
 	}

operatorapi/operations/operator_api/create_namespace.go

@@ -48,10 +48,10 @@ func NewCreateNamespace(ctx *middleware.Context, handler CreateNamespaceHandler)
 	return &CreateNamespace{Context: ctx, Handler: handler}
 }
 
-/* CreateNamespace swagger:route POST /namespace OperatorAPI createNamespace
+/*
+	CreateNamespace swagger:route POST /namespace OperatorAPI createNamespace
 
 Creates a new Namespace with given information
-
 */
 type CreateNamespace struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/create_namespace_parameters.go

@@ -23,7 +23,6 @@ package operator_api
 // Editing this file might prove futile when you re-run the swagger generate command
 
 import (
-	"context"
 	"io"
 	"net/http"
 
@@ -83,7 +82,7 @@ func (o *CreateNamespaceParams) BindRequest(r *http.Request, route *middleware.M
 				res = append(res, err)
 			}
 
-			ctx := validate.WithOperationRequest(context.Background())
+			ctx := validate.WithOperationRequest(r.Context())
 			if err := body.ContextValidate(ctx, route.Formats); err != nil {
 				res = append(res, err)
 			}

operatorapi/operations/operator_api/create_namespace_responses.go

@@ -33,7 +33,8 @@ import (
 // CreateNamespaceCreatedCode is the HTTP code returned for type CreateNamespaceCreated
 const CreateNamespaceCreatedCode int = 201
 
-/*CreateNamespaceCreated A successful response.
+/*
+CreateNamespaceCreated A successful response.
 
 swagger:response createNamespaceCreated
 */
@@ -54,7 +55,8 @@ func (o *CreateNamespaceCreated) WriteResponse(rw http.ResponseWriter, producer
 	rw.WriteHeader(201)
 }
 
-/*CreateNamespaceDefault Generic error response.
+/*
+CreateNamespaceDefault Generic error response.
 
 swagger:response createNamespaceDefault
 */

operatorapi/operations/operator_api/create_tenant.go

@@ -48,10 +48,10 @@ func NewCreateTenant(ctx *middleware.Context, handler CreateTenantHandler) *Crea
 	return &CreateTenant{Context: ctx, Handler: handler}
 }
 
-/* CreateTenant swagger:route POST /tenants OperatorAPI createTenant
+/*
+	CreateTenant swagger:route POST /tenants OperatorAPI createTenant
 
 Create Tenant
-
 */
 type CreateTenant struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/create_tenant_parameters.go

@@ -23,7 +23,6 @@ package operator_api
 // Editing this file might prove futile when you re-run the swagger generate command
 
 import (
-	"context"
 	"io"
 	"net/http"
 
@@ -83,7 +82,7 @@ func (o *CreateTenantParams) BindRequest(r *http.Request, route *middleware.Matc
 				res = append(res, err)
 			}
 
-			ctx := validate.WithOperationRequest(context.Background())
+			ctx := validate.WithOperationRequest(r.Context())
 			if err := body.ContextValidate(ctx, route.Formats); err != nil {
 				res = append(res, err)
 			}

operatorapi/operations/operator_api/create_tenant_responses.go

@@ -33,7 +33,8 @@ import (
 // CreateTenantOKCode is the HTTP code returned for type CreateTenantOK
 const CreateTenantOKCode int = 200
 
-/*CreateTenantOK A successful response.
+/*
+CreateTenantOK A successful response.
 
 swagger:response createTenantOK
 */
@@ -74,7 +75,8 @@ func (o *CreateTenantOK) WriteResponse(rw http.ResponseWriter, producer runtime.
 	}
 }
 
-/*CreateTenantDefault Generic error response.
+/*
+CreateTenantDefault Generic error response.
 
 swagger:response createTenantDefault
 */

operatorapi/operations/operator_api/delete_p_v_c.go

@@ -48,10 +48,10 @@ func NewDeletePVC(ctx *middleware.Context, handler DeletePVCHandler) *DeletePVC
 	return &DeletePVC{Context: ctx, Handler: handler}
 }
 
-/* DeletePVC swagger:route DELETE /namespaces/{namespace}/tenants/{tenant}/pvc/{PVCName} OperatorAPI deletePVC
+/*
+	DeletePVC swagger:route DELETE /namespaces/{namespace}/tenants/{tenant}/pvc/{PVCName} OperatorAPI deletePVC
 
 Delete PVC
-
 */
 type DeletePVC struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/delete_p_v_c_responses.go

@@ -33,7 +33,8 @@ import (
 // DeletePVCNoContentCode is the HTTP code returned for type DeletePVCNoContent
 const DeletePVCNoContentCode int = 204
 
-/*DeletePVCNoContent A successful response.
+/*
+DeletePVCNoContent A successful response.
 
 swagger:response deletePVCNoContent
 */
@@ -54,7 +55,8 @@ func (o *DeletePVCNoContent) WriteResponse(rw http.ResponseWriter, producer runt
 	rw.WriteHeader(204)
 }
 
-/*DeletePVCDefault Generic error response.
+/*
+DeletePVCDefault Generic error response.
 
 swagger:response deletePVCDefault
 */

operatorapi/operations/operator_api/delete_pod.go

@@ -48,10 +48,10 @@ func NewDeletePod(ctx *middleware.Context, handler DeletePodHandler) *DeletePod
 	return &DeletePod{Context: ctx, Handler: handler}
 }
 
-/* DeletePod swagger:route DELETE /namespaces/{namespace}/tenants/{tenant}/pods/{podName} OperatorAPI deletePod
+/*
+	DeletePod swagger:route DELETE /namespaces/{namespace}/tenants/{tenant}/pods/{podName} OperatorAPI deletePod
 
 Delete pod
-
 */
 type DeletePod struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/delete_pod_responses.go

@@ -33,7 +33,8 @@ import (
 // DeletePodNoContentCode is the HTTP code returned for type DeletePodNoContent
 const DeletePodNoContentCode int = 204
 
-/*DeletePodNoContent A successful response.
+/*
+DeletePodNoContent A successful response.
 
 swagger:response deletePodNoContent
 */
@@ -54,7 +55,8 @@ func (o *DeletePodNoContent) WriteResponse(rw http.ResponseWriter, producer runt
 	rw.WriteHeader(204)
 }
 
-/*DeletePodDefault Generic error response.
+/*
+DeletePodDefault Generic error response.
 
 swagger:response deletePodDefault
 */

operatorapi/operations/operator_api/delete_tenant.go

@@ -48,10 +48,10 @@ func NewDeleteTenant(ctx *middleware.Context, handler DeleteTenantHandler) *Dele
 	return &DeleteTenant{Context: ctx, Handler: handler}
 }
 
-/* DeleteTenant swagger:route DELETE /namespaces/{namespace}/tenants/{tenant} OperatorAPI deleteTenant
+/*
+	DeleteTenant swagger:route DELETE /namespaces/{namespace}/tenants/{tenant} OperatorAPI deleteTenant
 
 Delete tenant and underlying pvcs
-
 */
 type DeleteTenant struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/delete_tenant_parameters.go

@@ -23,7 +23,6 @@ package operator_api
 // Editing this file might prove futile when you re-run the swagger generate command
 
 import (
-	"context"
 	"net/http"
 
 	"github.com/go-openapi/errors"
@@ -88,7 +87,7 @@ func (o *DeleteTenantParams) BindRequest(r *http.Request, route *middleware.Matc
 				res = append(res, err)
 			}
 
-			ctx := validate.WithOperationRequest(context.Background())
+			ctx := validate.WithOperationRequest(r.Context())
 			if err := body.ContextValidate(ctx, route.Formats); err != nil {
 				res = append(res, err)
 			}

operatorapi/operations/operator_api/delete_tenant_responses.go

@@ -33,7 +33,8 @@ import (
 // DeleteTenantNoContentCode is the HTTP code returned for type DeleteTenantNoContent
 const DeleteTenantNoContentCode int = 204
 
-/*DeleteTenantNoContent A successful response.
+/*
+DeleteTenantNoContent A successful response.
 
 swagger:response deleteTenantNoContent
 */
@@ -54,7 +55,8 @@ func (o *DeleteTenantNoContent) WriteResponse(rw http.ResponseWriter, producer r
 	rw.WriteHeader(204)
 }
 
-/*DeleteTenantDefault Generic error response.
+/*
+DeleteTenantDefault Generic error response.
 
 swagger:response deleteTenantDefault
 */

operatorapi/operations/operator_api/describe_pod.go

@@ -48,10 +48,10 @@ func NewDescribePod(ctx *middleware.Context, handler DescribePodHandler) *Descri
 	return &DescribePod{Context: ctx, Handler: handler}
 }
 
-/* DescribePod swagger:route GET /namespaces/{namespace}/tenants/{tenant}/pods/{podName}/describe OperatorAPI describePod
+/*
+	DescribePod swagger:route GET /namespaces/{namespace}/tenants/{tenant}/pods/{podName}/describe OperatorAPI describePod
 
 Describe Pod
-
 */
 type DescribePod struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/describe_pod_responses.go

@@ -33,7 +33,8 @@ import (
 // DescribePodOKCode is the HTTP code returned for type DescribePodOK
 const DescribePodOKCode int = 200
 
-/*DescribePodOK A successful response.
+/*
+DescribePodOK A successful response.
 
 swagger:response describePodOK
 */
@@ -74,7 +75,8 @@ func (o *DescribePodOK) WriteResponse(rw http.ResponseWriter, producer runtime.P
 	}
 }
 
-/*DescribePodDefault Generic error response.
+/*
+DescribePodDefault Generic error response.
 
 swagger:response describePodDefault
 */

operatorapi/operations/operator_api/direct_p_v_format_drive.go

@@ -48,10 +48,10 @@ func NewDirectPVFormatDrive(ctx *middleware.Context, handler DirectPVFormatDrive
 	return &DirectPVFormatDrive{Context: ctx, Handler: handler}
 }
 
-/* DirectPVFormatDrive swagger:route POST /directpv/drives/format OperatorAPI directPVFormatDrive
+/*
+	DirectPVFormatDrive swagger:route POST /directpv/drives/format OperatorAPI directPVFormatDrive
 
 Format directpv drives from a list
-
 */
 type DirectPVFormatDrive struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/direct_p_v_format_drive_parameters.go

@@ -23,7 +23,6 @@ package operator_api
 // Editing this file might prove futile when you re-run the swagger generate command
 
 import (
-	"context"
 	"io"
 	"net/http"
 
@@ -83,7 +82,7 @@ func (o *DirectPVFormatDriveParams) BindRequest(r *http.Request, route *middlewa
 				res = append(res, err)
 			}
 
-			ctx := validate.WithOperationRequest(context.Background())
+			ctx := validate.WithOperationRequest(r.Context())
 			if err := body.ContextValidate(ctx, route.Formats); err != nil {
 				res = append(res, err)
 			}

operatorapi/operations/operator_api/direct_p_v_format_drive_responses.go

@@ -33,7 +33,8 @@ import (
 // DirectPVFormatDriveOKCode is the HTTP code returned for type DirectPVFormatDriveOK
 const DirectPVFormatDriveOKCode int = 200
 
-/*DirectPVFormatDriveOK A successful response.
+/*
+DirectPVFormatDriveOK A successful response.
 
 swagger:response directPVFormatDriveOK
 */
@@ -74,7 +75,8 @@ func (o *DirectPVFormatDriveOK) WriteResponse(rw http.ResponseWriter, producer r
 	}
 }
 
-/*DirectPVFormatDriveDefault Generic error response.
+/*
+DirectPVFormatDriveDefault Generic error response.
 
 swagger:response directPVFormatDriveDefault
 */

operatorapi/operations/operator_api/disable_tenant_logging.go

@@ -48,10 +48,10 @@ func NewDisableTenantLogging(ctx *middleware.Context, handler DisableTenantLoggi
 	return &DisableTenantLogging{Context: ctx, Handler: handler}
 }
 
-/* DisableTenantLogging swagger:route POST /namespaces/{namespace}/tenants/{tenant}/disable-logging OperatorAPI disableTenantLogging
+/*
+	DisableTenantLogging swagger:route POST /namespaces/{namespace}/tenants/{tenant}/disable-logging OperatorAPI disableTenantLogging
 
 Disable Tenant Logging
-
 */
 type DisableTenantLogging struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/disable_tenant_logging_responses.go

@@ -33,7 +33,8 @@ import (
 // DisableTenantLoggingOKCode is the HTTP code returned for type DisableTenantLoggingOK
 const DisableTenantLoggingOKCode int = 200
 
-/*DisableTenantLoggingOK A successful response.
+/*
+DisableTenantLoggingOK A successful response.
 
 swagger:response disableTenantLoggingOK
 */
@@ -72,7 +73,8 @@ func (o *DisableTenantLoggingOK) WriteResponse(rw http.ResponseWriter, producer
 	}
 }
 
-/*DisableTenantLoggingDefault Generic error response.
+/*
+DisableTenantLoggingDefault Generic error response.
 
 swagger:response disableTenantLoggingDefault
 */

operatorapi/operations/operator_api/enable_tenant_logging.go

@@ -48,10 +48,10 @@ func NewEnableTenantLogging(ctx *middleware.Context, handler EnableTenantLogging
 	return &EnableTenantLogging{Context: ctx, Handler: handler}
 }
 
-/* EnableTenantLogging swagger:route POST /namespaces/{namespace}/tenants/{tenant}/enable-logging OperatorAPI enableTenantLogging
+/*
+	EnableTenantLogging swagger:route POST /namespaces/{namespace}/tenants/{tenant}/enable-logging OperatorAPI enableTenantLogging
 
 Enable Tenant Logging
-
 */
 type EnableTenantLogging struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/enable_tenant_logging_responses.go

@@ -33,7 +33,8 @@ import (
 // EnableTenantLoggingOKCode is the HTTP code returned for type EnableTenantLoggingOK
 const EnableTenantLoggingOKCode int = 200
 
-/*EnableTenantLoggingOK A successful response.
+/*
+EnableTenantLoggingOK A successful response.
 
 swagger:response enableTenantLoggingOK
 */
@@ -72,7 +73,8 @@ func (o *EnableTenantLoggingOK) WriteResponse(rw http.ResponseWriter, producer r
 	}
 }
 
-/*EnableTenantLoggingDefault Generic error response.
+/*
+EnableTenantLoggingDefault Generic error response.
 
 swagger:response enableTenantLoggingDefault
 */

operatorapi/operations/operator_api/get_allocatable_resources.go

@@ -48,10 +48,10 @@ func NewGetAllocatableResources(ctx *middleware.Context, handler GetAllocatableR
 	return &GetAllocatableResources{Context: ctx, Handler: handler}
 }
 
-/* GetAllocatableResources swagger:route GET /cluster/allocatable-resources OperatorAPI getAllocatableResources
+/*
+	GetAllocatableResources swagger:route GET /cluster/allocatable-resources OperatorAPI getAllocatableResources
 
 Get allocatable cpu and memory for given number of nodes
-
 */
 type GetAllocatableResources struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/get_allocatable_resources_responses.go

@@ -33,7 +33,8 @@ import (
 // GetAllocatableResourcesOKCode is the HTTP code returned for type GetAllocatableResourcesOK
 const GetAllocatableResourcesOKCode int = 200
 
-/*GetAllocatableResourcesOK A successful response.
+/*
+GetAllocatableResourcesOK A successful response.
 
 swagger:response getAllocatableResourcesOK
 */
@@ -74,7 +75,8 @@ func (o *GetAllocatableResourcesOK) WriteResponse(rw http.ResponseWriter, produc
 	}
 }
 
-/*GetAllocatableResourcesDefault Generic error response.
+/*
+GetAllocatableResourcesDefault Generic error response.
 
 swagger:response getAllocatableResourcesDefault
 */

operatorapi/operations/operator_api/get_direct_p_v_drive_list.go

@@ -48,10 +48,10 @@ func NewGetDirectPVDriveList(ctx *middleware.Context, handler GetDirectPVDriveLi
 	return &GetDirectPVDriveList{Context: ctx, Handler: handler}
 }
 
-/* GetDirectPVDriveList swagger:route GET /directpv/drives OperatorAPI getDirectPVDriveList
+/*
+	GetDirectPVDriveList swagger:route GET /directpv/drives OperatorAPI getDirectPVDriveList
 
 Get directpv drives list
-
 */
 type GetDirectPVDriveList struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/get_direct_p_v_drive_list_responses.go

@@ -33,7 +33,8 @@ import (
 // GetDirectPVDriveListOKCode is the HTTP code returned for type GetDirectPVDriveListOK
 const GetDirectPVDriveListOKCode int = 200
 
-/*GetDirectPVDriveListOK A successful response.
+/*
+GetDirectPVDriveListOK A successful response.
 
 swagger:response getDirectPVDriveListOK
 */
@@ -74,7 +75,8 @@ func (o *GetDirectPVDriveListOK) WriteResponse(rw http.ResponseWriter, producer
 	}
 }
 
-/*GetDirectPVDriveListDefault Generic error response.
+/*
+GetDirectPVDriveListDefault Generic error response.
 
 swagger:response getDirectPVDriveListDefault
 */

operatorapi/operations/operator_api/get_direct_p_v_volume_list.go

@@ -48,10 +48,10 @@ func NewGetDirectPVVolumeList(ctx *middleware.Context, handler GetDirectPVVolume
 	return &GetDirectPVVolumeList{Context: ctx, Handler: handler}
 }
 
-/* GetDirectPVVolumeList swagger:route GET /directpv/volumes OperatorAPI getDirectPVVolumeList
+/*
+	GetDirectPVVolumeList swagger:route GET /directpv/volumes OperatorAPI getDirectPVVolumeList
 
 Get directpv volumes list
-
 */
 type GetDirectPVVolumeList struct {
 	Context *middleware.Context

operatorapi/operations/operator_api/get_direct_p_v_volume_list_responses.go

@@ -33,7 +33,8 @@ import (
 // GetDirectPVVolumeListOKCode is the HTTP code returned for type GetDirectPVVolumeListOK
 const GetDirectPVVolumeListOKCode int = 200
 
-/*GetDirectPVVolumeListOK A successful response.
+/*
+GetDirectPVVolumeListOK A successful response.
 
 swagger:response getDirectPVVolumeListOK
 */
@@ -74,7 +75,8 @@ func (o *GetDirectPVVolumeListOK) WriteResponse(rw http.ResponseWriter, producer
 	}
 }
 
-/*GetDirectPVVolumeListDefault Generic error response.
+/*
+GetDirectPVVolumeListDefault Generic error response.
 
 swagger:response getDirectPVVolumeListDefault
 */

operatorapi/operations/operator_api/get_m_p_integration.go

@@ -51,10 +51,10 @@ func NewGetMPIntegration(ctx *middleware.Context, handler GetMPIntegrationHandle
 	return &GetMPIntegration{Context: ctx, Handler: handler}
 }
 
-/* GetMPIntegration swagger:route GET /mp-integration OperatorAPI getMPIntegration
+/*
+	GetMPIntegration swagger:route GET /mp-integration OperatorAPI getMPIntegration
 
 Returns email registered for marketplace integration
-
 */
 type GetMPIntegration struct {
 	Context *middleware.Context