minio/docs
1
0
Fork 0
mirror of https://github.com/minio/docs.git synced 2025-07-31 18:04:52 +03:00
Code Activity

Adds changes for minio release from Feb 27 2023 (#774)

Browse Source 
- updates list of metrics to add new IDP plugin metrics
- Adds info about expiring sts tokens

Depends on two topics added in PR #735  for internal links.

Closes #746
This commit is contained in:
Daryl White
2023-03-24 12:10:33 -05:00
committed by GitHub
parent 6018c5f55f
commit ca60d1f3c1
2 changed files with 35 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
source/administration/identity-access-management/minio-user-management.rst
View File

@ -57,6 +57,10 @@ This allows application owners to generate arbitrary access keys for their appli
Since the generated access keys have the same or fewer permissions as the parents, administrators can focus on managing the top-level parent users without micro-managing generated access keys. Since the generated access keys have the same or fewer permissions as the parents, administrators can focus on managing the top-level parent users without micro-managing generated access keys.
You can create access keys using either the :ref:`MinIO Console <minio-console-user-access-keys>` *or* by using the :mc-cmd:`mc admin user svcacct add` command. You can create access keys using either the :ref:`MinIO Console <minio-console-user-access-keys>` *or* by using the :mc-cmd:`mc admin user svcacct add` command.
Identities created by these methods do not expire until you remove the access key or the parent account.
You can also create :ref:`security token service <minio-sts-assumerolewithcustomtoken>` accounts :ref:`programmatically <minio-sts-assumerolewithcustomtoken>`.
STS tokens default to expire in 1 hour, but you set expiration for up to 7 days from creation.
.. admonition:: Access Keys are for Programmatic Access .. admonition:: Access Keys are for Programmatic Access
:class: dropdown, note :class: dropdown, note

31
source/operations/monitoring/metrics-and-alerts.rst
View File

@ -430,6 +430,37 @@ IAM Metrics
Number of successful IAM data syncs since server start. Number of successful IAM data syncs since server start.
IAM Plugin Metrics
~~~~~~~~~~~~~~~~~~
.. note::
The metrics in this section require that you have configured the :ref:`MinIO External Identity Management Plugin <minio-external-identity-management-plugin>`.
.. metric:: minio_node_iam_plugin_authn_service_last_succ_seconds
Time (in seconds) since last successful request to the external IDP service.
.. metric:: minio_node_iam_plugin_authn_service_last_fail_seconds
Time (in seconds) since last failed request to the external IDP service.
.. metric:: minio_node_iam_plugin_authn_service_total_requests_minute
Total requests count to the external IDP service in the last full minute.
.. metric:: minio_node_iam_plugin_authn_service_failed_requests_minute
Count of the failed requests to the external IDP service in the last full minute.
.. metric:: minio_node_iam_plugin_authn_service_succ_avg_rtt_ms_minute
Average round trip time (RTT) of successful requests to the IDP service in the last full minute.
.. metric:: minio_node_iam_plugin_authn_service_succ_max_rtt_ms_minute
Maximum round trip time (RTT) of successful requests to the IDP service in the last full minute.
Internal Metrics Internal Metrics
~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~