You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
$ mc admin policy add myminio consoleAdmin consoleAdmin.json
49
48
```
50
49
51
-
3. Set the policy for the new `console` user
52
-
50
+
```sh
51
+
mc admin policy add myminio/ consoleAdmin admin.json
53
52
```
54
-
$ mc admin policy set myminio consoleAdmin user=console
53
+
54
+
#### 3. Set the policy for the new `console` user
55
+
56
+
```sh
57
+
mc admin policy set myminio consoleAdmin user=console
55
58
```
56
59
60
+
> NOTE: Additionally, you can create policies to limit the privileges for other `console` users, for example, if you want the user to only have access to dashboard, buckets, notifications and watch page, the policy should look like this:
57
61
58
-
### Note
59
-
Additionally, you can create policies to limit the privileges for `console` users, for example, if you want the user to only have access to dashboard, buckets, notifications and watch page, the policy should look like this:
60
62
```json
61
63
{
62
64
"Version": "2012-10-17",
@@ -97,32 +99,41 @@ Additionally, you can create policies to limit the privileges for `console` user
97
99
}
98
100
```
99
101
100
-
## Run Console server
101
-
To run the server:
102
+
## Start Console service:
102
103
103
-
```bash
104
+
Before running console service, following environment settings must be supplied
105
+
```sh
104
106
# Salt to encrypt JWT payload
105
107
export CONSOLE_PBKDF_PASSPHRASE=SECRET
106
108
107
-
#required to encrypt jwet payload
109
+
# Required to encrypt JWT payload
108
110
export CONSOLE_PBKDF_SALT=SECRET
109
111
110
-
# MinIO endpoint
112
+
# MinIO Endpoint
111
113
export CONSOLE_MINIO_SERVER=http://localhost:9000
114
+
```
115
+
116
+
Now start the console service.
117
+
```
112
118
./console server
119
+
2021-01-19 02:36:08.893735 I | 2021/01/19 02:36:08 server.go:129: Serving console at http://localhost:9090
113
120
```
114
121
115
-
## Run Console with TLS enable
122
+
By default `console` runs on port `9090` this can be changed with `--port` of your choice.
123
+
124
+
## Start Console service with TLS:
116
125
117
126
Copy your `public.crt` and `private.key` to `~/.console/certs`, then:
118
127
119
-
```bash
128
+
```sh
120
129
./console server
130
+
2021-01-19 02:36:08.893735 I | 2021/01/19 02:36:08 server.go:129: Serving console at https://localhost:9090
121
131
```
122
132
123
-
Additionally, `Console` has support for multiple certificates, clients can request them using `SNI`. It expects the following structure:
133
+
For advanced users, `console` has support for multiple certificates to service clients through multiple domains.
124
134
125
-
```bash
135
+
Following tree structure is expected for supporting multiple domains:
136
+
```sh
126
137
certs/
127
138
│
128
139
├─ public.crt
@@ -140,9 +151,6 @@ Additionally, `Console` has support for multiple certificates, clients can reque
140
151
141
152
```
142
153
143
-
Therefore, we read all filenames in the cert directory and check
144
-
for each directory whether it contains a public.crt and private.key.
145
-
146
154
## Connect Console to a Minio using TLS and a self-signed certificate
147
155
148
156
Copy the MinIO `ca.crt` under `~/.console/certs/CAs`, then:
0 commit comments