Security - MinIO Blog

Integrate MinIO with Keycloak OIDC

AJ AJ on Security 29 May 2024

In this blog post, we’ll show you how to set up MinIO to work with Keycloak. But broadly it should also give you an idea of how OIDC is configured with MinIO so you can use it with anything other than Keycloak, here we just use it as an example.

MinIO Audit Logs in ElasticSearch in Kubernetes

AJ AJ on AI/ML 22 May 2024

Whether you are on-prem or in the Cloud, you want to ensure in the cloud operating model processes are set up in a homogenous way. This tutorial will give you a full overview of how you can surface MinIO audit logs in ElasticSearch so they can be searchable.

A Closer Look: MinIO Firewall

AJ AJ on Security 15 May 2024

MinIO Firewall is an S3-aware data firewall for modern data protection, operating at the storage layer to safeguard your data comprehensively. Designed specifically to work with applications using MinIO object store and its API endpoints.

Stateful KES for AI/ML Workloads

AJ AJ on AI/ML 30 April 2024

Implementing KES within Kubernetes in a stateful configuration ensures the persistence of encryption keys through pod lifecycle events and restarts. This setup offers resilience especially in environments where relying on external KMS is not an option or preferred.

Solving Scale in Security: MinIO Key Management Server

Andreas Auernhammer Andreas Auernhammer @_aead_ on Security 12 March 2024

In the realm of robust and dependable storage solutions, MinIO stands out as a persistence layer, offering organizations secure, durable, and scalable storage options. Often entrusted with mission-critical data, MinIO plays a crucial role in ensuring high availability, sometimes on a global scale. The nature of the stored data, ranging from financial and healthcare records to intricate product details and

A Firewall Designed for Data: MinIO Firewall

AJ AJ on Security 12 March 2024

Learn about MinIO Firewall, a robust solution tailored to safeguard data within modern enterprises. Discover its lightweight yet powerful features, like bandwidth throttling, load balancing, and rule flexibility, all manageable through the intuitive MinIO Global Console.

MinIO Operator with KES backed by Vault

AJ AJ on Security 5 March 2024

In this post we’ll show you how to configure MinIO Operator with KES (Keys Encryption System) and Vault in a cloud native way in Kubernetes.

MinIO Operator certificate issued by Kubernetes CSR

AJ AJ on Kubernetes 27 February 2024

We will focus on utilizing the Kubernetes CSR resource specifically for creating a certificate that can be used by MinIO. You will have a clear understanding of how to generate a certificate using CSR, store it securely in a Kubernetes Secret.

Connect Dremio to MinIO with Self-Signed TLS

AJ AJ on Dremio 20 February 2024

In this tutorial, we’ll show you how to configure Dremio to connect to MinIO, which uses self-signed TLS certificates. This is one of the more common use cases, and we’ve had customers from SUBNET ask time and time again how they can configure something like this.

Locking down MinIO Operator Permissions

AJ AJ on Kubernetes 23 January 2024

In this post, we’ll show you how to configure the MinIO Operator with the most restrictive namespace permissions – all the while being able to fully utilize the power and flexibility of the MinIO Operator for day-to-day operations.

Renewing KES certificate

AJ AJ on Security 18 January 2024

In this post we'll show you some of the common errors you can run into when the certs in KES expire. We'll show you what errors you can expect and how to renew and update the certs in a quick fashion.

MinIO's OpenID Connect Integration Explained

Aditya Manthramurthy Aditya Manthramurthy on Operator's Guide 19 October 2023

MinIO provides a flexible Identity and Access Management system that can be integrated with popular external identity providers. MinIO IAM is built with AWS IAM compatibility at its core - access is controlled by policies mirroring AWS' IAM policies. While AWS supports myriad ways to control access, including ACLs, Bucket Policies, etc, in the interest of simplicity, MinIO'

MinIO Batch Keyrotate

AJ AJ on Security 6 June 2023

Encryption is an important part of the MinIO architecture. MinIO applies encryption to ensure objects are secure at rest and are compliant with regulations.

SUBNET Security Features and Services

Matt Sarrel Matt Sarrel @msarrel

on SUBNET 8 May 2023

MinIO licensees gain access to SUBNET security features like long term support and policy reviews.

Streamline Certificate Management with MinIO Operator

Matt Sarrel Matt Sarrel @msarrel

on Operator's Guide 3 April 2023

Streamline Certificate Management with MinIO Operator

Learn how MinIO simplifies and streamlines the generation and assignment of TLS certificates for services running on Kubernetes.

MinIO Best Practices - Security and Access Control

Andreas Auernhammer Andreas Auernhammer @_aead_ on Operator's Guide 16 December 2022

Versioning, S3 Object Locking, Encryption at Rest and in Transit, Identity Providers, Replication, CVE Monitoring for a secure cloud-native object storage foundation.