minio-policy

#set up mc
docker run -it --entrypoint=/bin/sh minio/mc

#alias
mc config host add minio http://192.168.0.177:9009  user password --api s3v4

#self define policy
cat > ghhy.json <<-EOF
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
                "s3:ListAllMyBuckets",
                "s3:ListBucket",
                "s3:GetBucketLocation",
                "s3:GetObject",
				"s3:PutObject",
                "s3:DeleteObject"
      ],
      "Resource": [
        "arn:aws:s3:::ghhy-bucket/*",
		"arn:aws:s3:::ghhy-bucket-bk/*"
      ]
    }
  ]
}
EOF

#add policy
mc admin policy add minio ghhy_policy ghhy.json

#add user
mc admin user add minio ftp 18password 

# bind policy with user
mc admin policy set minio  ghhy_policy user=ftp

# bind policy with anonymous 
mc admin policy add minio public-anon public-anon.json
mc admin policy list minio
or
mc policy set-json public-anon.json minio/public
mc policy list

mc mb minio/ghhy-bucket
mc mb minio/ghhy-bucket-bk

#cp local to bucket 
mc cp ghhy ftp/ghhy-bucket / --recursive

#backup
mc cp --recursive ftp/ghhy-bucket/ghhy ftp/ghhy-bucket-bk/ghhy_v1

#clean old version
mc rm  --recursive ftp/ghhy-bucket /ghhy