🥇Kumisikidza Minio kuti mushandisi angoshanda nebucket rake

Minio iri nyore, inokurumidza, AWS S3 inoenderana zvinhu chitoro. Minio yakagadzirirwa kubata isina kurongeka data senge mafoto, mavhidhiyo, faira regi, mabhapu. minio inotsigirawo kugoverwa mode, iyo inopa kukwanisa kubatanidza akawanda disks kune chimwe chinhu chekuchengetedza server, kusanganisira iyo iri pamashini akasiyana.

Chinangwa chechinyorwa ichi ndechekugadzirisa minio kuitira kuti mushandisi wega wega ashande nebhaketi rake.

Kazhinji, Minio inokodzera zvinotevera kesi:

kusiri-kudzokorora kuchengetedza pamusoro peyakavimbika faira system ine mukana kuburikidza neS3 (diki uye yepakati chengetedzo inogarwa paNAS neSAN);
isina-inodzokororwa kuchengetedza pamusoro peiyo isingavimbike faira system ine S3 yekuwana (yekuvandudza uye yekuyedza);
kuchengetedza nekudzokorora pane boka diki remaseva mune imwe rack ine mukana kuburikidza neS3 protocol (failover kuchengetedza ine yekutadza domain yakaenzana neraki).

PaRedHat masisitimu tinobatanidza iyo unofficial Minio repository.

yum -y install yum-plugin-copr
yum copr enable -y lkiesow/minio
yum install -y minio minio-mc

Gadzira uye wedzera kuMINIO_ACCESS_KEY uye MINIO_SECRET_KEY mukati /etc/minio/minio.conf.

# Custom username or access key of minimum 3 characters in length.
MINIO_ACCESS_KEY=

# Custom password or secret key of minimum 8 characters in length.
MINIO_SECRET_KEY=

Kana iwe usingazoshandisa nginx pamberi peMinio, saka unofanirwa kuchinja.

--address 127.0.0.1:9000

pamusoro

--address 0.0.0.0:9000

Ngatitangei Minio.

systemctl start minio

Isu tinogadzira chinongedzo kuMinio inonzi myminio.

minio-mc config host add myminio http://localhost:9000 MINIO_ACCESS_KEY 
MINIO_SECRET_KEY

Gadzira bhaketi mushandisi1bucket.

minio-mc mb myminio/user1bucket

Gadzira bhaketi mushandisi2bucket.

minio-mc mb myminio/user2bucket

Gadzira faira remutemo user1-policy.json.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:PutBucketPolicy",
        "s3:GetBucketPolicy",
        "s3:DeleteBucketPolicy",
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user1bucket"
      ],
      "Sid": ""
    },
    {
      "Action": [
        "s3:AbortMultipartUpload",
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:ListMultipartUploadParts",
        "s3:PutObject"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user1bucket/*"
      ],
      "Sid": ""
    }
  ]
}

Gadzira faira remutemo user2-policy.json.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Action": [
        "s3:PutBucketPolicy",
        "s3:GetBucketPolicy",
        "s3:DeleteBucketPolicy",
        "s3:ListAllMyBuckets",
        "s3:ListBucket"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user2bucket"
      ],
      "Sid": ""
    },
    {
      "Action": [
        "s3:AbortMultipartUpload",
        "s3:DeleteObject",
        "s3:GetObject",
        "s3:ListMultipartUploadParts",
        "s3:PutObject"
      ],
      "Effect": "Allow",
      "Resource": [
        "arn:aws:s3:::user2bucket/*"
      ],
      "Sid": ""
    }
  ]
}

Gadzira mushandisi mushandisi1 nepassword test12345.

minio-mc admin user add myminio user1 test12345

Gadzira mushandisi mushandisi2 nepassword test54321.

minio-mc admin user add myminio user2 test54321

Isu tinogadzira mutemo muMinio unonzi user1-policy kubva pafaira user1-policy.json.

minio-mc admin policy add myminio user1-policy user1-policy.json

Isu tinogadzira mutemo muMinio unonzi user2-policy kubva pafaira user2-policy.json.

minio-mc admin policy add myminio user2-policy user2-policy.json

Shandisa iyo user1-policy policy kumushandisi1.

minio-mc admin policy set myminio user1-policy user=user1

Shandisa iyo user2-policy policy kumushandisi2.

minio-mc admin policy set myminio user2-policy user=user2

Kuongorora kubatana kwezvirongwa kune vashandisi

minio-mc admin user list myminio

Kutarisa kubatana kwemitemo kune vashandisi kuchaita seizvi

enabled    user1                 user1-policy
enabled    user2                 user2-policy

Kuti ujekeswe, enda kuburikidza nebrowser kuenda kukero http://ip-сервера-где-запущен-minio:9000/minio/

Isu tinoona kuti takabatana neMinio pasi peMINIO_ACCESS_KEY=user1. Iyo user1bucket bucket inowanikwa kwatiri.

Izvo hazvizogoneke kugadzira bhaketi, sezvo pasina inowirirana Chiito mumutemo.

Ngatigadzire faira mubhaketi mushandisi1bucket.

Ngatibatanei neMinio pasi peMINIO_ACCESS_KEY=user2. Iyo user2bucket bucket inowanikwa kwatiri.

Uye isu hatione chero mushandisi1bucket kana mafaera kubva mushandisi1bucket.

Yakagadzira hurukuro yeTeregiramu uchishandisa Minio https://t.me/minio_s3_ru

Source: www.habr.com

Kumisikidza Minio kuitira kuti mushandisi agone kushanda chete nebhaketi rake