mirror of
https://github.com/minio/docs.git
synced 2025-07-28 19:42:10 +03:00
eb94513104
- Creates a slew of folders and pages nested under the mc-server page to store settings. - Breaks up all of the environment variable options formerly in the mc-server page into these separate pages. - Moves the config settings formerly in the mc admin config page to the appropriate new settings pages. - Adds a MiniO Client settings page and document `mc-host-<alias>` Closes #1017
98 lines
3.1 KiB
ReStructuredText
98 lines
3.1 KiB
ReStructuredText
.. _minio-server-envvar-root:
|
|
|
|
====================
|
|
Root Access Settings
|
|
====================
|
|
|
|
.. default-domain:: minio
|
|
|
|
.. contents:: Table of Contents
|
|
:local:
|
|
:depth: 2
|
|
|
|
This page covers settings that control root (superuser) access for the MinIO process.
|
|
The root user has complete access and permissions to perform operations on the MinIO deployment.
|
|
|
|
.. include:: /includes/common-mc-admin-config.rst
|
|
:start-after: start-minio-settings-defined
|
|
:end-before: end-minio-settings-defined
|
|
|
|
Root User
|
|
---------
|
|
|
|
.. tab-set::
|
|
|
|
.. tab-item:: Environment Variable
|
|
:sync: envvar
|
|
|
|
.. envvar:: MINIO_ROOT_USER
|
|
|
|
The access key for the :ref:`root <minio-users-root>` user.
|
|
|
|
.. warning::
|
|
|
|
If :envvar:`MINIO_ROOT_USER` is unset, :mc:`minio` defaults to ``minioadmin``.
|
|
|
|
**NEVER** use the default credentials in production environments.
|
|
MinIO strongly recommends specifying a unique, long, and random :envvar:`MINIO_ROOT_USER` value for all environments.
|
|
|
|
.. tab-item:: Configuration Setting
|
|
:sync: config
|
|
|
|
This setting does not have a configuration variable setting.
|
|
Use the Environment Variable instead.
|
|
|
|
Root Password
|
|
-------------
|
|
|
|
.. tab-set::
|
|
|
|
.. tab-item:: Environment Variable
|
|
:selected:
|
|
|
|
.. envvar:: MINIO_ROOT_PASSWORD
|
|
|
|
The secret key for the :ref:`root <minio-users-root>` user.
|
|
|
|
.. warning::
|
|
|
|
If :envvar:`MINIO_ROOT_PASSWORD` is unset, :mc:`minio` defaults to ``minioadmin``.
|
|
|
|
**NEVER** use the default credentials in production environments.
|
|
MinIO strongly recommends specifying a unique, long, and random :envvar:`MINIO_ROOT_PASSWORD` value for all environments.
|
|
|
|
.. tab-item:: Configuration Setting
|
|
|
|
This setting does not have a configuration variable setting.
|
|
Use the Environment Variable instead.
|
|
|
|
Root Access
|
|
-----------
|
|
|
|
.. tab-set::
|
|
|
|
.. tab-item:: Environment Variable
|
|
:sync: envvar
|
|
|
|
.. envvar:: MINIO_API_ROOT_ACCESS
|
|
|
|
.. tab-item:: Configuration Setting
|
|
:sync: config
|
|
|
|
.. mc-conf:: api root-access
|
|
:delimiter: " "
|
|
|
|
.. versionadded:: MinIO Server RELEASE.2023-05-04T21-44-30Z
|
|
|
|
Specify ``on`` to enable and ``off`` to disable the :ref:`root <minio-users-root>` user account.
|
|
Disabling the root service account also disables all service accounts associated with root, excluding those used by site replication.
|
|
Defaults to ``on``.
|
|
|
|
Ensure you have at least one other admin user, such as one with the :userpolicy:`consoleAdmin` policy, before disabling the root account.
|
|
If you do not have another admin user, disabling the root account locks administrative access to the deployment.
|
|
|
|
You can use this variable to temporarily override the configuration setting and re-enable root access to the deployment.
|
|
|
|
To reset after an unintentional lock, set :envvar:`MINIO_API_ROOT_ACCESS` ``on`` to override this setting and temporarily re-enable the root account.
|
|
You can then change this setting to ``on`` *or* make the necessary user/policy changes to ensure normal administrative access through other non-root accounts.
|