minio操作指南

连接存储服务器

1
2
## mc alias set <别名> <访问地址> <appKey> <secretKey>
mc alias set minio http://192.168.1.1:9000 minio minio123

创建bucket

1
2
## mc mb <别名>/<桶名> --region <区域>
mc mb minio/bucket1

设置桶访问策略
创建策略文件

  1. 匿名访问时只有查询权限（your_pcy.json ）
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Effect": "Allow",
          "Principal": {
            "AWS": [
              "*"
            ]
          },
          "Action": [
            "s3:GetBucketLocation"
          ],
          "Resource": [
            "arn:aws:s3:::yourbucket"
          ]
        },
        {
          "Effect": "Allow",
          "Principal": {
            "AWS": [
              "*"
            ]
          },
          "Action": [
            "s3:GetObject"
          ],
          "Resource": [
            "arn:aws:s3:::yourbucket/*"
          ]
        }
      ]
    }
  2. private权限
    1
    2
    3
    4
    {
     "Statement": [],
     "Version": "2012-10-17"
    }
  3. public权限
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    {
      "Statement": [
        {
          "Action": [
            "s3:GetBucketLocation",
            "s3:ListBucket",
            "s3:ListBucketMultipartUploads"
          ],
          "Effect": "Allow",
          "Principal": {
            "AWS": [
              "*"
            ]
          },
          "Resource": [
            "arn:aws:s3:::yourbucket"
          ]
        },
        {
          "Action": [
            "s3:AbortMultipartUpload",
            "s3:DeleteObject",
            "s3:GetObject",
            "s3:ListMultipartUploadParts",
            "s3:PutObject"
          ],
          "Effect": "Allow",
          "Principal": {
            "AWS": [
              "*"
            ]
          },
          "Resource": [
            "arn:aws:s3:::yourbucket/*"
          ]
        }
      ],
      "Version": "2012-10-17"
    }
  4. download权限
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    {
     "Statement": [
      {
       "Action": [
        "s3:ListBucket",
        "s3:GetBucketLocation"
       ],
       "Effect": "Allow",
       "Principal": {
        "AWS": [
         "*"
        ]
       },
       "Resource": [
        "arn:aws:s3:::yourbucket"
       ]
      },
      {
       "Action": [
        "s3:GetObject"
       ],
       "Effect": "Allow",
       "Principal": {
        "AWS": [
         "*"
        ]
       },
       "Resource": [
        "arn:aws:s3:::yourbucket/*"
       ]
      }
     ],
     "Version": "2012-10-17"
    }
  5. upload权限
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    {
     "Statement": [
      {
       "Action": [
        "s3:GetBucketLocation",
        "s3:ListBucketMultipartUploads"
       ],
       "Effect": "Allow",
       "Principal": {
        "AWS": [
         "*"
        ]
       },
       "Resource": [
        "arn:aws:s3:::yourbucket"
       ]
      },
      {
       "Action": [
        "s3:ListMultipartUploadParts",
        "s3:PutObject",
        "s3:AbortMultipartUpload",
        "s3:DeleteObject"
       ],
       "Effect": "Allow",
       "Principal": {
        "AWS": [
         "*"
        ]
       },
       "Resource": [
        "arn:aws:s3:::yourbucket/*"
       ]
      }
     ],
     "Version": "2012-10-17"
    }
    设置访问策略
    1
    2
    ## mc anonymous set-json <策略文件> <别名>/<桶名>
    mc anonymous set-json /your_pcy.json yourminio/yourbucket
对象存储
#minio #mc
minio操作指南
https://www.goozoe.com/posts/16345.html
作者
一起吃西瓜
发布于
2024年11月1日
许可协议