Minio oidc:

expiry:
client_secret:
/etc/headscale/config.yaml

Minio

# minio-oidc.yaml

oidc:
  enabled: true
  # 1. The discovery endpoint of your identity provider
  configUrl: "https://<YOUR_IDP_DOMAIN>/auth/realms/<REALM>/.well-known/openid-configuration"
  
  # 2. Client credentials created in your OIDC provider
  clientId: "minio-client"
  clientSecret: "your-super-secret-client-secret"
  
  # 3. The exact callback URL for your local MinIO console layout
  redirectUri: "http://localhost:9001/oauth_callback"
  
  # 4. Optional: Scopes to ask from the IDP
  scopes: "openid,profile,email"
  
  # 5. Which JWT claim contains the MinIO policy string (defaults to "policy")
  claimName: "policy"

Full example

oidc:
 claimName: policy
 claimPrefix: ""
 clientId: 01234567890
 clientSecret: XXXXXXXXX
 comment: ""
 configUrl: https://yourdomain.com/.well-known/openid-configuration
 displayName: ""
 enabled: true
 existingClientIdKey: ""
 existingClientSecretKey: ""
 existingClientSecretName: ""
 redirectUri: http://localhost:9001/oauth_callback
 scopes: openid,profile,email

See also

• MinIO OpenID, Minio RELEASE.2025-05-24T17-08-30Z, oidc:, MINIO_IDENTITY_OPENID env vars, /certs/CAs/, mc admin config set identity openid
• helm install minio, 9000, 9001, consoleIngress, minio-post-job, /certs/CAs/, /etc/minio/certs/, MinIO Kubernetes Operator, Minio OIDC
• Minio changelog