minio icon indicating copy to clipboard operation
minio copied to clipboard

Access Key creation for OIDC no longer possible

Open gabm opened this issue 6 months ago • 5 comments

After removal of most of the Console UI, access keys for OIDC users can no longer be created.

Expected Behavior

Preferably, we would get the old UI back - but the decision has been made to remove that. It was claimed that the mc admin tool can cover the use cases of the missing UI, but this is not the case.

Image

Current Behavior

Option for creation of access keys for OIDC users is gone now - no alternative available.

Possible Solution

a) reintroduce old UI or b) add an mc admin command, similar do LDAP

Context

Access keys are needed for programmatical access, especially of programs and automated services. I cannot enroll new services anymore.

Regression

This is a regression since https://github.com/minio/minio/pull/21278. Pls fix.

Your Environment

  • Version used (minio --version): RELEASE.2025-05-24T17-08-30Z
  • Server setup and configuration: running in docker
  • Operating System and version (uname -a): Linux ai-test 6.8.0-60-generic #63-Ubuntu SMP PREEMPT_DYNAMIC Tue Apr 15 19:04:15 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

gabm avatar May 30 '25 09:05 gabm

This issue has been automatically marked as stale because it has not had recent activity. It will be closed after 15 days if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Jul 19 '25 07:07 stale[bot]

well... :(

wollomatic avatar Jul 21 '25 09:07 wollomatic

This might be a solution. https://github.com/OpenMaxIO/openmaxio-object-browser

vxtls avatar Aug 28 '25 22:08 vxtls

The third party forks (OpenMaxIO or georgmangold) are essentially the pre-May-2025 UI sitting on top of the latest back end, so this is certainly a stopgap and proves that the back end API endpoints for creating OIDC access keys still exist and work as before. This issue is asking for Minio to reinstate some kind of UI in the new object browser that allows OIDC signin and calls the same access key management endpoints, but in a way that’s not so tied in to the admin UI that they’re not willing to maintain.

ianroberts avatar Aug 29 '25 08:08 ianroberts

I would say my trust in MinIO is gone

wollomatic avatar Aug 29 '25 12:08 wollomatic