Configure MinIO

Perform the following steps to configure MinIO:

Tip

Only the ACCESS_KEY authentication method is supported when connecting to MinIO, on every deployment type.

Note

Make sure to update the placeholders such as <AWS_ACCESS_KEY>, <AWS_SECRET_KEY>, <PROFILE_NAME>, <MINIO_HOST>, and <MINIO_PORT> with your actual configuration details.

  1. SSH to the instance where Privacera Manager is installed.
  2. Run the following command to open the .yml file to be edited.
    Bash
    1
    vi ~/privacera/privacera-manager/config/custom-vars/vars.dataserver.aws.yml
  3. Add the following properties to configure MinIO:
    YAML
     1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
    DATASERVER_AWS_PROFILE_PROPERTIES:
- PROFILE_NAME: "<PROFILE_NAME>"
  PROFILE_PROPERTIES:
    - AUTHN_METHOD: "ACCESS_KEY"
    - ACCESS_KEY: "<AWS_ACCESS_KEY>"
    - SECRET_KEY: "<AWS_SECRET_KEY>"
    - # enable to connect to a custom S3 endpoint such as MinIO
    - CUSTOM_S3_ENDPOINT_ENABLE: "true"
    - # specify the custom S3 endpoint host, e.g., `minio.example.com`
    - CUSTOM_S3_ENDPOINT_HOST: "<MINIO_HOST>"
    - # specify the custom S3 endpoint port, e.g., `443`
    - CUSTOM_S3_ENDPOINT_PORT: "<MINIO_PORT>"
    - # enable SSL for the custom S3 endpoint
    - CUSTOM_S3_ENDPOINT_SSL: "<true or false>"
  4. Once the properties are configured, refer to the Privacera Manager Quickstart.
  1. In PrivaceraCloud, navigate to Settings → Applications.
  2. On the Connected Applications screen, select S3.
  3. Click the edit icon, then click Access Management.

  4. Under the BASIC tab:

    • Disable Use IAM Role.
    • Provide values for the following fields:
      • AWS Access Key: <AWS_ACCESS_KEY>
      • AWS Secret Key: <AWS_SECRET_KEY>

  5. Under the ADVANCED tab, add the following custom properties with the appropriate value for <PROFILE_NAME>, <MINIO_HOST>, and <MINIO_PORT>:

    Properties
    1
2
3
4
    dataserver.aws.<PROFILE_NAME>.custom.s3.endpoint.enable=true
dataserver.aws.<PROFILE_NAME>.custom.s3.endpoint.host=<MINIO_HOST>
dataserver.aws.<PROFILE_NAME>.custom.s3.endpoint.port=<MINIO_PORT>
dataserver.aws.<PROFILE_NAME>.custom.s3.endpoint.ssl=<true or false>

  6. Click Test Connection to verify the connection.
  7. Once the connection is successful, click Save.
  1. Open the DataServer connector and go to Access Control Configs → Connector Configs.
  2. Choose the profile to use for MinIO:
    • In the left panel, select a profile under Common Properties, or select Add Profile to create one.
    • Set its Auth Method to Access Key.
    • Enter the Access Key ID and the Secret Access Key.
  3. Expand the profile's S3-Compatible Endpoint (MinIO) section:
    • Enable Custom S3 Endpoint.
    • Set Custom S3 Endpoint Host (for example, minio.example.com).
    • Set Custom S3 Endpoint Port (for example, 443).
    • Turn Custom S3 Endpoint SSL on to use TLS (default) or off for plain HTTP.
  4. Select Save. The Runtime Manager redeploys the connector.