Access Management Plugin Settings

This page documents settings for enabling external authorization management using the AIStor Access Management Plugin. See AIStor External Access Management Plugin for a tutorial on using these settings.

You can establish or modify settings by defining:

• an environment variable on the host system prior to starting or restarting the AIStor Server. Refer to your operating system’s documentation for how to define an environment variable.
• a configuration setting using mc admin config set.

If you define both an environment variable and the similar configuration setting, AIStor uses the environment variable value.

Some settings have only an environment variable or a configuration setting, but not both.

When setting up the AIStor Access Management plugin, you must define at minimum all required settings. The examples here represent the minimum required setting.

MINIO_POLICY_PLUGIN_URL="https://authzservice.example.net:8080/authz"

mc admin config set policy_plugin                     \
   url="https://authzservice.example.net:8080/authz"  \
   [ARGUMENT=VALUE] ...

Required

The webhook endpoint for the external access management service (https://authzservice.example.net:8080/authz).

Optional

An authentication token to present to the configured webhook endpoint.

Specify a supported HTTP Authentication scheme as a string value, such as "Bearer TOKEN". AIStor sends the token using the HTTP Authorization header.

Optional

Enable experimental HTTP2 support for connecting to the configure webhook service.

Defaults to off

Optional

Specify a comment to associate to the external access management configuration.