0f52136fd2
This commit changes the authentication mechanism between mcs and minio to an sts
(security token service) schema using the user provided credentials, previously
mcs was using master credentials. With that said in order for you to
login to MCS as an admin your user must exists first on minio and have enough
privileges to do administrative operations.
```
./mc admin user add myminio alevsk alevsk12345
```
```
cat admin.json
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"admin:*",
"s3:*"
],
"Resource": [
"arn:aws:s3:::*"
]
}
]
}
./mc admin policy add myminio admin admin.json
```
```
./mc admin policy set myminio admin user=alevsk
```
75 lines
1.4 KiB
Markdown
75 lines
1.4 KiB
Markdown
# Minio Console Server
|
|
|
|
A graphical user interface for [MinIO](https://github.com/minio/minio)
|
|
|
|
## Setup
|
|
|
|
All `mcs` needs is a MinIO user with admin privileges and URL pointing to your MinIO deployment.
|
|
> Note: We don't recommend using MinIO's Operator Credentials
|
|
|
|
1. Create a user for `mcs` using `mc`.
|
|
```
|
|
$ set +o history
|
|
$ mc admin user add myminio mcs YOURMCSSECRET
|
|
$ set -o history
|
|
```
|
|
|
|
2. Create a policy for `mcs`
|
|
|
|
```
|
|
$ cat > mcsAdmin.json << EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"admin:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
},
|
|
{
|
|
"Action": [
|
|
"s3:*"
|
|
],
|
|
"Effect": "Allow",
|
|
"Resource": [
|
|
"arn:aws:s3:::*"
|
|
],
|
|
"Sid": ""
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
$ mc admin policy add myminio mcsAdmin mcsAdmin.json
|
|
```
|
|
|
|
3. Set the policy for the new `mcs` user
|
|
|
|
```
|
|
$ mc admin policy set myminio mcsAdmin user=mcs
|
|
```
|
|
|
|
## Run MCS server
|
|
To run the server:
|
|
|
|
```
|
|
export MCS_HMAC_JWT_SECRET=YOURJWTSIGNINGSECRET
|
|
|
|
#required to encrypt jwet payload
|
|
export MCS_PBKDF_PASSPHRASE=SECRET
|
|
|
|
#required to encrypt jwet payload
|
|
export MCS_PBKDF_SALT=SECRET
|
|
|
|
export MCS_ACCESS_KEY=mcs
|
|
export MCS_SECRET_KEY=YOURMCSSECRET
|
|
export MCS_MINIO_SERVER=http://localhost:9000
|
|
./mcs server
|
|
```
|
|
|
|
You can verify that the apis work by doing the request on `localhost:9090/api/v1/...`
|
|
|
|
# Contribute to mcs Project
|
|
Please follow mcs [Contributor's Guide](https://github.com/minio/mcs/blob/master/CONTRIBUTING.md)
|