mc idp openid accesskey edit

mc idp openid accesskey edit modifies the specified access key on the specified MinIO AIStor deployment.

Example and syntax

mc idp openid accesskey edit myaistor mykey --secret-key 'xxxxxxx'

mc [GLOBALFLAGS] idp openid accesskey edit                      \
                                 ALIAS                        \
                                 KEY                          \
                                 [--secret-key <string>]      \
                                 [--policy <string>]          \
                                 [--name <string>]            \
                                 [--description <string>]     \
                                 [--expiry-duration <string>] \
                                 [--expiry <string>]

Copy the example to a text editor and modify as needed before running the command in the terminal/shell.

Parameters

ALIAS

Required

The alias of the MinIO AIStor deployment configured for OIDC.

For example:

mc idp openid accesskey ls myaistor

KEY

Required

The configured access key to edit.

--description

Optional

Add a description for the service account. For example, you might specify the reason the access key exists.

--expiry

Optional

The future date and time when the access key expires. The access key becomes invalid at the start of the specified date and time (midnight if no time is specified).

Supported formats:

Dates without a timezone use the local timezone of the machine running the command. Use RFC3339 format with Z suffix or timezone offset for explicit UTC times.

Mutually exclusive with --expiry-duration.

--expiry-duration

Optional

Length of time the access key pair remains valid for use.

Specify the length as one or more number-unit pairs, such as 24h, 2w, or 5d12h30s. Valid units are ns (nanoseconds), us or µs (microseconds), ms (milliseconds), s (seconds), m (minutes), h (hours), d (days), w (weeks), and y (years).

mc counts one day as 24 hours, one week as 7 days, and one year as 365 days.

Mutually exclusive with --expiry.

--name

Optional

A human-readable name to use for the account.

--policy

Optional

File path to the JSON-formatted policy to use for the account.

If not specified, the account uses the same policy as the authenticated user.

--secret-key

Optional

A secret to use for the account.

Example

Modify a secret for an access key

Modify the secret for the access key mykey on the myaistor deployment.

mc idp openid accesskey edit myaistor/ mykey --secret-key 'xxxxxxx'

Modify the expiration duration for an accesskey

Modify the expiration duration for the access key mykey on the myaistor deployment.

mc idp openid accesskey edit myaistor/ mykey --expiry-duration 24h

Global flags

This command supports any of the global flags.

Behavior

S3 compatibility

This command uses a MinIO AIStor administrative API and does not work against other S3-compatible services.