Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

'Create User' and 'Create Service Account' options missing from tenant helm chart #1870

Closed
cloudymax opened this issue Nov 17, 2023 · 9 comments
Assignees
Labels
community enhancement New feature or request

Comments

@cloudymax
Copy link

cloudymax commented Nov 17, 2023

Currently, each tenant receives an admin user by default, but lacks any way to create additional users and service-accounts within some of the tenant.

This was possible in the vanilla chart by is missing from the tenant/operator charts:

https://github.com/minio/minio/blob/4598827dcb8d516d0e2d82a64b9550252c891cb5/helm/minio/values.yaml#L334C1-L390C1

## List of users to be created after minio install
##
users:
  ## Username, password and policy to be assigned to the user
  ## Default policies are [readonly|readwrite|writeonly|consoleAdmin|diagnostics]
  ## Add new policies as explained here https://min.io/docs/minio/kubernetes/upstream/administration/identity-access-management.html#access-management
  ## NOTE: this will fail if LDAP is enabled in your MinIO deployment
  ## make sure to disable this if you are using LDAP.
  - accessKey: console
    secretKey: console123
    policy: consoleAdmin
  # Or you can refer to specific secret
  #- accessKey: externalSecret
  #  existingSecret: my-secret
  #  existingSecretKey: password
  #  policy: readonly

## List of service accounts to be created after minio install
##
svcaccts: []
  ## accessKey, secretKey and parent user to be assigned to the service accounts
  ## Add new service accounts as explained here https://min.io/docs/minio/kubernetes/upstream/administration/identity-access-management/minio-user-management.html#service-accounts
  # - accessKey: console-svcacct
  #   secretKey: console123
  #   user: console
  ## Or you can refer to specific secret
  # - accessKey: externalSecret
  #   existingSecret: my-secret
  #   existingSecretKey: password
  #   user: console
  ## You also can pass custom policy
  # - accessKey: console-svcacct
  #   secretKey: console123
  #   user: console
  #   policy:
  #     statements:
  #       - resources:
  #           - 'arn:aws:s3:::example*/*'
  #         actions:
  #           - "s3:AbortMultipartUpload"
  #           - "s3:GetObject"
  #           - "s3:DeleteObject"
  #           - "s3:PutObject"
  #           - "s3:ListMultipartUploadParts"
@jessebot
Copy link

jessebot commented Nov 17, 2023

For the creation of users, we have this open: #629

The last attempt was ironically by drivebyer here: #1359

I gave it a shot here: #1872

@cloudymax
Copy link
Author

There's also #1358 from 2022

@jiuker jiuker self-assigned this Dec 11, 2023
@jiuker jiuker added enhancement New feature or request and removed triage labels Dec 11, 2023
@R-Studio
Copy link

Any news on this?

@jiuker
Copy link
Contributor

jiuker commented Jan 29, 2024

JOB crd will do that.

@R-Studio
Copy link

JOB crd will do that.

What you mean with JOB? I thought the MinIO operators comes only with one CRD tenants

@jiuker
Copy link
Contributor

jiuker commented Jan 29, 2024

JOB crd will do that.

What you mean with JOB? I thought the MinIO operators comes only with one CRD tenants

Yeah. You can see the master branch.

@R-Studio
Copy link

JOB crd will do that.

What you mean with JOB? I thought the MinIO operators comes only with one CRD tenants

Yeah. You can see the master branch.

Nice thanks. Do you know when this approx. will be released?

@cniackz
Copy link
Contributor

cniackz commented Apr 8, 2024

It is already there, merged. Please give it a try to what is already implemented and let us know how it goes. We are still missing official docs for this feature, example of new coming PR is:

#2063

@jiuker
Copy link
Contributor

jiuker commented Apr 9, 2024

see #2031 (comment)

@jiuker jiuker closed this as completed Apr 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
community enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

6 participants