mc权限管理

设置alias

# mc连接设置
mc alias set localminio http://127.0.0.1:9000 admin k3h36X8Y4jS4%AkJun4PzA

创建用户

# 创建用户testpp,secert_key:Jd1yqyCwVhLXt1IPP9jp
# localminio: minio的alias
mc admin user add localminio testpp Jd1yqyCwVhLXt1IPP9jp

# 查看用户
mc admin user ls localminio

创建policy

# 创建名为hike_read_write的策略,该策略只允许操作hike该bucket
mc admin policy create localminio hike_read_write hike.json

cat >> hike.json <EOF
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::hike"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:*"
            ],
            "Resource": [
                "arn:aws:s3:::hike/**"
            ]
        }
    ]
}
EOF

# 查看策略
mc admin policy ls localminio
# 用户关联策略：testpp关联hike_read_write策略
mc admin policy attach localminio hike_read_write --user testpp