homeserver/roles/mgrote_minio_configure/tasks/policy.yml
2024-11-09 19:21:36 +01:00

28 lines
923 B
YAML

---
# https://galaxy.ansible.com/ui/repo/published/dubzland/minio/content/module/minio_policy/ ?
- name: create needed dirs
ansible.builtin.file:
path: "{{ minio_config_dir }}"
state: directory
owner: root
group: root
mode: '0644'
- name: create policy files
ansible.builtin.blockinfile:
path: "{{ minio_config_dir }}/{{ item.name }}"
block: "{{ item.policy }}"
state: present
create: true
loop: "{{ minio_policies }}"
- name: setup minio policies
ansible.builtin.command: "{{ minio_client_bin }} --dp admin policy create {{ item.name }} {{ minio_config_dir }}/{{ item.name }}"
loop: "{{ minio_policies }}"
- name: Assign MinIO policies to users
ansible.builtin.command: "{{ minio_client_bin }} --dp admin policy attach {{ item.1 }} --user {{ item.0.name }}"
loop: "{{ minio_users | subelements('policies') }}"
# ensure absent files are removed
# deletata to localhost