Minio禁止public桶列出全部文件

客户端版

修改匿名访问策略,需使用mc客户端,对minio进行修改

1.下载
wget https://dl.min.io/client/mc/release/linux-amd64/mc

2.给mc赋予权限
 chmod +x mc

 3.
 ./mc config host list：查看主机的mc配置。我们可以看到本地minio访问地址local：http://localhost:9000

4.连接minio
  ./mc alias set local http://{ip}:9000 {用户名} {密码}
  注:local是别名,随便起

5.查询当前所有连接信息
./mc alias list

6.修改匿名桶策略

{
 "Statement": [
  {
   "Action": [
    "s3:GetBucketLocation",
    "s3:ListBucketMultipartUploads"
   ],
   "Effect": "Allow",
   "Principal": {
    "AWS": [
     "*"
    ]
   },
   "Resource": [
    "arn:aws:s3:::*"
   ]
  },
  {
   "Action": [
    "s3:GetObject"
   ],
   "Effect": "Allow",
   "Principal": {
    "AWS": [
     "*"
    ]
   },
   "Resource": [
    "arn:aws:s3:::*"
   ]
  }
 ],
 "Version": "2012-10-17"
}

7.修改桶策略 ./mc anonymous set-json ./mypolicy.json local/{桶名} 注:这里不知道什么原因,json文件必须和mc文件在一个文件夹内

服务端版可以直接在页面修改