Setup Min.io and Open Policy Agent for a multi purpose scientific platform
summary
A Min.io object store integrates with Open Policy Agent to enforce fine‑grained access using the AWS STS assume-role-with-web-identity flow brokered by Indigo IAM, issuing temporary S3 creds for users. Policies live as OPA bundles in GitHub and are applied via Flux CD + OPA bundles on Kubernetes. Users mount buckets with rclone mount or stswire and OIDC‑agent; system runs in production, supports physics and pandemic research, and reports successful user adoption.
AI-written summary · about
chapters (9)
- 0:00Introduction and context
- 3:02Scientific platform requirements
- 6:14MinIO and OPA integration
- 10:10User access tools and demos
- 15:14Production deployment and workflow
- 16:21Live demo setup
- 23:02Live demo execution
- 25:10Pandemic research use case
- 26:36Summary and conclusion
