mirror of
https://github.com/minio/minio.git
synced 2024-12-26 15:15:55 -05:00
106 lines
2.9 KiB
Bash
Executable File
106 lines
2.9 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
# Create buckets with versioning and object locking enabled.
|
|
mc mb -l source/bucket
|
|
mc mb -l dest/bucket
|
|
|
|
#### Create a replication admin on source alias
|
|
# create a replication admin user : repladmin
|
|
mc admin user add source repladmin repladmin123
|
|
|
|
# create a replication policy for repladmin
|
|
cat > repladmin-policy-source.json <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Action": [
|
|
"admin:SetBucketTarget",
|
|
"admin:GetBucketTarget"
|
|
],
|
|
"Effect": "Allow",
|
|
"Sid": ""
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"s3:GetReplicationConfiguration",
|
|
"s3:PutReplicationConfiguration",
|
|
"s3:ListBucket",
|
|
"s3:ListBucketMultipartUploads",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketVersioning"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:s3:::bucket"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
mc admin policy add source repladmin-policy ./repladmin-policy-source.json
|
|
cat ./repladmin-policy-source.json
|
|
|
|
#assign this replication policy to repladmin
|
|
mc admin policy set source repladmin-policy user=repladmin
|
|
|
|
### on dest alias
|
|
# Create a replication user : repluser on dest alias
|
|
mc admin user add dest repluser repluser123
|
|
|
|
# create a replication policy for repluser
|
|
# Remove "s3:GetBucketObjectLockConfiguration" if object locking is not enabled, i.e. bucket was not created with `mc mb --with-lock` option
|
|
# Remove "s3:ReplicateDelete" if delete marker replication is not required
|
|
cat > replpolicy.json <<EOF
|
|
{
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"s3:GetReplicationConfiguration",
|
|
"s3:ListBucket",
|
|
"s3:ListBucketMultipartUploads",
|
|
"s3:GetBucketLocation",
|
|
"s3:GetBucketVersioning",
|
|
"s3:GetBucketObjectLockConfiguration"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:s3:::bucket"
|
|
]
|
|
},
|
|
{
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"s3:GetReplicationConfiguration",
|
|
"s3:ReplicateTags",
|
|
"s3:AbortMultipartUpload",
|
|
"s3:GetObject",
|
|
"s3:GetObjectVersion",
|
|
"s3:GetObjectVersionTagging",
|
|
"s3:PutObject",
|
|
"s3:DeleteObject",
|
|
"s3:ReplicateObject",
|
|
"s3:ReplicateDelete"
|
|
],
|
|
"Resource": [
|
|
"arn:aws:s3:::bucket/*"
|
|
]
|
|
}
|
|
]
|
|
}
|
|
EOF
|
|
mc admin policy add dest replpolicy ./replpolicy.json
|
|
cat ./replpolicy.json
|
|
|
|
# assign this replication policy to repluser
|
|
mc admin policy set dest replpolicy user=repluser
|
|
|
|
# define remote target for replication from source/bucket -> dest/bucket
|
|
remote_arn=$(mc admin bucket remote add repladminAlias/bucket http://repluser:repluser123@localhost:9000/bucket --service replication --json | jq -r ".RemoteARN")
|
|
|
|
echo "Now, use this ARN to add replication rules using 'mc replicate add' command"
|
|
# use arn returned by above command to create a replication policy on the source/bucket with `mc replicate add`
|
|
mc replicate add source/bucket --priority 1 --remote-bucket "${remote_arn}" \
|
|
--replicate existing-objects,delete,delete-marker,replica-metadata-sync
|