policybinding_crd.adoc

API Reference

sts.min.io/v1beta1

Package v1beta1 - The following parameters are specific to the sts.min.io/v1beta1 MinIO Policy Binding CRD API PolicyBinding is an Authorization mechanism managed by the Minio Operator. Using Kubernetes ServiceAccount JSON Web Tokens the binding allow a ServiceAccount to assume temporary IAM credentials. For more complete documentation on this object, see the MinIO Kubernetes Documentation. PolicyBinding is added as part of the MinIO Operator v5.0.0.

Resource Types

• PolicyBinding

• PolicyBindingList

Application

Application defines the Namespace and ServiceAccount to authorize the usage of the policies listed

Appears In:

• PolicyBindingSpec

Field	Description
namespace string	Required
serviceaccount string	Required

PolicyBinding

PolicyBinding is a Kubernetes object describing a MinIO PolicyBinding.

Appears In:

• PolicyBindingList

Field	Description
apiVersion string	sts.min.io/v1beta1
kind string	PolicyBinding
metadata ObjectMeta	Refer to Kubernetes API documentation for fields of metadata.
spec PolicyBindingSpec	Required The root field for the MinIO PolicyBinding object.

PolicyBindingList

PolicyBindingList is a list of PolicyBinding resources

Field	Description
apiVersion string	sts.min.io/v1beta1
kind string	PolicyBindingList
metadata ListMeta	Refer to Kubernetes API documentation for fields of metadata.
items PolicyBinding array

PolicyBindingSpec

PolicyBindingSpec (spec) defines the configuration of a MinIO PolicyBinding object.

Appears In:

• PolicyBinding

Field	Description
application Application	Required The Application Property identifies the namespace and service account that will be authorized
policies string array	Required

PolicyBindingUsage

PolicyBindingUsage are metrics regarding the usage of the policyBinding

Appears In:

• PolicyBindingStatus

Field	Description
authotizations integer