Description The mc admin policy commands manage policies for use with MinIO Policy-Based Access Control (PBAC). MinIO PBAC uses IAM-compatible policy JSON documents to define rules for accessing resources on an AIStor server. For complete documentation on MinIO PBAC, including policy document JSON structure and syntax, see Access Management. To manage policies for deployments that use LDAP authentication, see mc idp ldap policy.

This page documents upgrade procedures for AIStor Server deployments on Baremetal Linux infrastructure. All AIStor software supports non-disruptive upgrades with zero downtime. In optimal environments, cluster-wide upgrades typically complete in under 500 milliseconds with large clusters (1000+ nodes) completing in less than 5 seconds. Upgrade AIStor using DEB or RPM Use these steps to upgrade an AIStor deployment where the server process is managed by systemctl, such as those created using the AIStor DEB/RPM packages.

The mc admin cluster bucket import command imports bucket metadata as created by the mc admin cluster bucket export command. You can use this command to manually restore the metadata to the specified bucket on an AIStor deployment. If you specify only the deployment as the target, this command applies the metadata objects to all matching buckets on the target. Syntax Example The following command imports bucket metadata for the myminio deployment from a file:

Required release version This command is available in AIStor Client RELEASE.2025-03-31T22-38-30Z or later. The functionality requires AIStor RELEASE.2025-03-27T23-09-45Z or later. The mc admin accesskey sts-revoke command removes security token service (sts) credentials associated with an account. Revoke all STS tokens for an account, or specify the type(s) of STS tokens to revoke for an account.

Attaches one or more IAM policies to either an AIStor-managed user or a group. Exactly one --user or one --group is required. This command is intended for managing policy associations for MinIO-managed users only. For attaching policies to OpenID-managed users, see OpenID Connect Access Management.

Description The mc admin config command manages configuration settings for the AIStor Server. Examples Syntax mc admin config set Sets a configuration key on the AIStor deployment. Configurations defined by environment variables override configurations defined by this command.

The mc idp openid info command outputs the configuration for a specified OIDC provider on a specified AIStor deployment. Optionally validates the configuration with the --check flag. Example and Syntax Example The following example outputs the configuration settings defined for the test_config set of OIDC settings on the myminio deployment and adds the optional --check flag to report whether the configuration is valid.

The mc idp openid ls command lists all OIDC configurations for your AIStor deployment. Example and Syntax Example The following example outputs a list of all OIDC configuration sets defined for the myminio deployment.

The mc idp openid add command creates an OIDC IDP server configuration. You can run the command multiple times to set up multiple OpenID providers. When adding multiple OpenID providers, only one can be a JWT claim-based provider. All others must be role-based providers. Example and Syntax Example The following example creates the configuration settings for the myminio deployment as defined in a new test-config setup for Dex integration.

The mc idp openid disable command stops your AIStor deployment from using an existing OIDC configuration. Example and Syntax Example The following example disables the server configurations defined as test_config on the myminio deployment.