Files
k3s/config/minio/minio-policies-configmap.yaml
titver968 d6fa969a7f debug
2025-12-09 08:17:03 +01:00

62 lines
1.4 KiB
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: minio-policies
namespace: minio
data:
# Policy: Vollzugriff auf tatort
policy-tatort.json: |
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetBucketLocation",
"s3:ListBucket",
"s3:ListBucketMultipartUploads"
],
"Resource": ["arn:aws:s3:::tatort"]
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject",
"s3:ListMultipartUploadParts",
"s3:AbortMultipartUpload"
],
"Resource": ["arn:aws:s3:::tatort/*"]
}
]
}
# Policy: Vollzugriff auf tatort-dev
policy-tatort-dev.json: |
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:GetBucketLocation",
"s3:ListBucket",
"s3:ListBucketMultipartUploads"
],
"Resource": ["arn:aws:s3:::tatort-dev"]
},
{
"Effect": "Allow",
"Action": [
"s3:GetObject",
"s3:PutObject",
"s3:DeleteObject",
"s3:ListMultipartUploadParts",
"s3:AbortMultipartUpload"
],
"Resource": ["arn:aws:s3:::tatort-dev/*"]
}
]
}