Permission This command requires that the user performing it have the admin:Rebalance policy action for the deployment. Description The mc admin rebalance command allows starts, monitors, or stops a rebalancing operation on an AIStor deployment. Rebalancing redistributes objects across all pools in the deployment.

The output is similar to what is available via journalctl -uf minio for systemd-controlled deployments. Use the mc admin logs command to show AIStor Server logs. To enable or disable the sending of logs to SUBNET for support, use mc support callhome. The uploading feature remains disabled by default until explicitly enabled for a deployment on an opt-in only basis. Syntax Example The following command displays the most recent ten server logs of any type for the alias myaistor.

Creates a new policy on the target AIStor deployment. AIStor deployments include the following built-in policies by default: consoleAdmin readonly readwrite diagnostics writeonly Syntax Example Consider the following JSON policy document saved at a file called /tmp/listmybuckets.json:

Description The mc admin cluster iam command and its subcommands provide tools for manually importing and exporting AIStor identity and access management (IAM) metadata. For automatic synchronization of all IAM configurations in a deployment to a remote site, use site replication.

AIStor supports publishing audit logs to one or more configured remote webhook receivers. AIStor send an event for each API operation to the receiver for processing and storage. The receiver is responsible for correctly processing events, including returning 200OK or similar success messages upon receipt of the event. AIStor cannot recover events that were successfully sent but not correctly stored on the receiver. You can configure a new HTTP audit webhook endpoint using either environment variables or runtime configuration settings:

Overview Returns the identity of either an api key or a certificate. Syntax Return the identity from an api-key:

Overview Generate a new data encryption key (DEK) from a secret key on the KES server. The output of the command includes both a plaintext key and a ciphertext representation. The output resembles the following: plaintext: kk/+NxO1LHb9ilbai7B9qo60649zNPmSVuJ2akEJFQ4= ciphertext: lbFBRVMyNTYtR0NNX1NIQTI1NtkgMTRlYjE3YWVjMTBjZDMxYTZiYzAwNmJhODFkNjM1ODnEEKOclQFBMYNZ3dVJPCrldAHEDLkZD9YgLpFW77+8b8Qw7Tn/6tFhyYUoFzS4+jYv8ty/Y5bqKzU6lPUEq/O8xEnYs92wEyvdSfTpTDEH8a8Q To encrypt or decrypt the keys, use kes key encrypt or kes key decrypt.

Overview Assign a KES policy to identities. Syntax kes policy assign \ <policy> \ <identity> \ [--insecure, -k] Parameters policy The name of the policy to add to the identity.

Installation The KES server and CLI is available as a single binary, container image or can be build from source. Binary Downloads Binary Releases

Overview Displays information about an identity on the KES server. The output resembles the following: Identity 3ecfcdf38fcbe141ae26a1030f81e96b753365a46760ae6b578698a97c59fd22 Created At 2023-02-15 07:59:37 Role Admin Syntax kes identity info \ [--color <string>] \ [<identity>] \ [--insecure, -k] \ [--json] Parameters --color Optional