Lenin Alevski 3a96e6d7e7 Secure Middleware (#37)
adding secure middleware to enforce security headers, most
of the options can be configured via env variables

adding prefix for mcs env variables

adding http redirect to https, adding csp report only, etc

solving conflicts

passing tls port configured by cli to secure middleware

update go.sum

adding default port, tlsport, host and tlshostname

fix tlsport bug
2020-04-06 13:24:15 -07:00
2020-04-06 13:24:15 -07:00
2020-04-06 11:27:43 -07:00
2020-04-06 12:32:10 -05:00
2020-04-06 13:24:15 -07:00
2020-04-06 11:27:43 -07:00
2020-04-06 13:24:15 -07:00
2020-04-01 18:33:40 -07:00
2020-04-06 11:27:43 -07:00
2020-04-06 11:27:43 -07:00
2020-04-06 13:24:15 -07:00
2020-04-06 13:24:15 -07:00
2020-04-01 21:56:04 -07:00
2020-04-06 11:27:43 -07:00
2020-04-01 21:54:57 -07:00
2020-04-02 11:36:37 -07:00
2020-04-06 12:07:40 -07:00
2020-04-02 11:36:37 -07:00

MCS Minio Console Service

A graphical user interface for MinIO

Setup

All mcs needs is a MinIO user with admin privileges and URL pointing to your MinIO deployment.

Note: We don't recommend using MinIO's Operator Credentials

  1. Create a user for mcs using mc.
$ set +o history
$ mc admin user add myminio mcs YOURMCSSECRET
$ set -o history
  1. Create a policy for mcs
$ cat > mcsAdmin.json << EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "admin:*"
      ],
      "Effect": "Allow",
      "Sid": ""
    },
    {
      "Action": [
        "s3:*"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::*"
      ],
      "Sid": ""
    }
  ]
}
EOF
$ mc admin policy add myminio mcsAdmin mcsAdmin.json
  1. Set the policy for the new mcs user
$ mc admin policy set myminio mcsAdmin user=mcs

Run MCS server

To run the server:

export MCS_ACCESS_KEY=mcs
export MCS_SECRET_KEY=YOURMCSSECRET
export MCS_MINIO_SERVER=http://localhost:9000
./mcs server

You can verify that the apis work by doing the request on localhost:9090/api/v1/...

Development

This is a REST portal server created using go-swagger

The API handlers are created using a YAML definition located in swagger.YAML.

To add new api, the YAML file needs to be updated with all the desired apis using the Swagger Basic Structure, this includes paths, parameters, definitions, tags, etc.

Generate server from YAML

Once the YAML file is ready we can autogenerate the code needed for the new api by just running:

Validate it:

swagger validate ./swagger.yml

Update server code:

make swagger-gen

This will update all the necessary code.

./restapi/configure_mcs.go is a file that contains the handlers to be used by the application, here is the only place where we need to update our code to support the new apis. This file is not affected when running the swagger generator and it is safe to edit.

Unit Tests

./restapi/handlers_test.go needs to be updated with the proper tests for the new api.

To run tests:

go test ./restapi
Description
No description provided
Readme AGPL-3.0 790 MiB
Languages
JavaScript 84.7%
TypeScript 7.7%
Go 7.1%
Shell 0.3%
Makefile 0.1%