trustchain-oc1-orchestral
/
authentik
Archived
10
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
authentik/website/integrations/services/minio/index.md

1.4 KiB
Raw Blame History

title
MinIO

What is MinIO

From https://en.wikipedia.org/wiki/MinIO

:::note MinIO is an Amazon S3 compatible object storage suite capable of handling structured and unstructured data including log files, artifacts, backups, container images, photos and videos. The current maximum supported object size is 5TB. :::

Preparation

The following placeholders will be used:

  • minio.company is the FQDN of the MinIO install.
  • authentik.company is the FQDN of the authentik install.

Under Property Mappings, create a Scope Mapping. Give it a name like "OIDC-Scope-minio". Set the scope name to minio and the expression to the following

return {
    "policy": "readwrite",
}

Create an application in authentik. Create an OAuth2/OpenID Provider with the following parameters:

  • Client Type: Public
  • JWT Algorithm: RS256
  • Scopes: OpenID, Email, Profile and the scope you created above
  • RSA Key: Select any available key
  • Redirect URIs: https://minio.company/minio/login/openid

Note the Client ID and Client Secret values. Create an application, using the provider you've created above. Note the slug of the application you've created.

MinIO

~ mc admin config set myminio identity_openid \
  config_url="https://authentik.company/application/o/<applicaiton-slug>/.well-known/openid-configuration" \
  client_id="<client id from above>" \
  scopes="openid,profile,email,minio"