feat: properly apply minio public-read policy

This commit is contained in:
amhsirak
2024-11-04 22:10:39 +05:30
parent 0a72039681
commit 6a187872c4

View File

@@ -21,21 +21,24 @@ minioClient.bucketExists('maxun-test')
console.error('Error connecting to MinIO:', err); console.error('Error connecting to MinIO:', err);
}) })
async function createBucketWithPolicy(bucketName: string, policy?: 'public-read' | 'private') { async function createBucketWithPolicy(bucketName: string, policy = 'public-read') {
try { try {
const bucketExists = await minioClient.bucketExists(bucketName); const bucketExists = await minioClient.bucketExists(bucketName);
if (!bucketExists) { if (!bucketExists) {
await minioClient.makeBucket(bucketName); await minioClient.makeBucket(bucketName);
console.log(`Bucket ${bucketName} created successfully.`); console.log(`Bucket ${bucketName} created successfully.`);
} else {
console.log(`Bucket ${bucketName} already exists.`);
}
if (policy === 'public-read') { if (policy === 'public-read') {
// Define a public-read policy // Apply public-read policy after confirming the bucket exists
const policyJSON = { const policyJSON = {
Version: "2012-10-17", Version: "2012-10-17",
Statement: [ Statement: [
{ {
Effect: "Allow", Effect: "Allow",
Principal: "", Principal: "*",
Action: ["s3:GetObject"], Action: ["s3:GetObject"],
Resource: [`arn:aws:s3:::${bucketName}/*`] Resource: [`arn:aws:s3:::${bucketName}/*`]
} }
@@ -44,15 +47,13 @@ async function createBucketWithPolicy(bucketName: string, policy?: 'public-read'
await minioClient.setBucketPolicy(bucketName, JSON.stringify(policyJSON)); await minioClient.setBucketPolicy(bucketName, JSON.stringify(policyJSON));
console.log(`Public-read policy applied to bucket ${bucketName}.`); console.log(`Public-read policy applied to bucket ${bucketName}.`);
} }
} else {
console.log(`Bucket ${bucketName} already exists.`);
}
} catch (error) { } catch (error) {
console.error('Error in bucket creation or policy application:', error); console.error('Error in bucket creation or policy application:', error);
} }
} }
class BinaryOutputService { class BinaryOutputService {
private bucketName: string; private bucketName: string;