minio 常用

# 限制用户只能读写cad桶
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "s3:PutObject",
        "s3:GetObject",
        "s3:DeleteObject",
        "s3:ListBucket"
      ],
      "Resource": [
        "arn:aws:s3:::cad",
        "arn:aws:s3:::cad/*"
      ]
    }
  ]
}

对多个buckets

{
 "Version": "2012-10-17",
 "Statement": [
  {
   "Effect": "Allow",
   "Action": [
    "s3:DeleteObject",
    "s3:GetObject",
    "s3:ListBucket",
    "s3:PutObject"
   ],
   "Resource": [
    "arn:aws:s3:::cd-sit",
    "arn:aws:s3:::cd-sit/*"
   ]
  },
  {
   "Effect": "Allow",
   "Action": [
    "s3:DeleteObject",
    "s3:GetObject",
    "s3:ListBucket",
    "s3:PutObject"
   ],
   "Resource": [
    "arn:aws:s3:::sh-ci",
    "arn:aws:s3:::sh-ci/*"
   ]
  }
 ]
}

 

 验证

mc config host add minio http://192.28.10.10:9000/  <ak> <sk>

# 配置文件在当前用户/.mc/config,json

mc ls minio 

配置在identity/users对登录用户生效