Add policies for users

[jessebot]

Piggybacking off of the work presented in #1359 (thank you, @drivebyer). Fixes #629

Not sure of the preferred testing method, but this should allow you to decoratively create users with specific policies, or no policy at all. We'd still need a separate PR for allowing declaration of policies as well, and if we do, then those policies must be created before we create users.

Happy to workshop this to be better if you have any suggestions! :)

[jessebot]

If there are any other docs you need me to update, I'm happy to do so, btw 🙏 New to this codebase though, so did what I could.

[dvaldivia]

Since at bootstraping time there's only a few policies (consoleAdmin, diagnostics, readonly, readwrite and writeonly) I'm not sure this is the right solution to address the problem of provisioning users with limited capabilities, this section was only intended to provision administrators so people didn't rely on the root credentials to access their Tenant.

We are working on a more complete solution, a new CRD for configuring things in a more declarative way, I'd recommend you wait for that, should be in in the following week for review

[jessebot]

Thanks for your response! Wouldn't it make more sense to have CRDs per minio resource, such as Policies, Buckets, and Users? That way, you could declare each resource in it's own manifest?

[pjuarezd]

Thanks for your response! Wouldn't it make more sense to have CRDs per minio resource, such as Policies, Buckets, and Users? That way, you could declare each resource in it's own manifest?

We have discussed it internally and decided to go other route with the solution to this problem, MinIO Jobs is in the works, closing this.