Add IAM gRPC proto messages

weed/pb/filer_pb/filer.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: filer.proto
 
 package filer_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (

weed/pb/filer_pb/filer_grpc.pb.go

@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: filer.proto
 
 package filer_pb
 
 import (
 	context "context"
-
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"

weed/pb/iam.proto

@@ -9,7 +9,10 @@ option java_outer_classname = "IamProto";
 //////////////////////////////////////////////////
 
 service SeaweedIdentityAccessManagement {
-
+    rpc GetS3ApiConfiguration (GetS3ApiConfigurationRequest) returns (GetS3ApiConfigurationResponse) {
+    }
+    rpc PutS3ApiConfiguration (PutS3ApiConfigurationRequest) returns (PutS3ApiConfigurationResponse) {
+    }
 }
 
 //////////////////////////////////////////////////
@@ -20,6 +23,20 @@ message S3ApiConfiguration {
     repeated ServiceAccount service_accounts = 3;
 }
 
+message GetS3ApiConfigurationRequest {
+}
+
+message GetS3ApiConfigurationResponse {
+    S3ApiConfiguration config = 1;
+}
+
+message PutS3ApiConfigurationRequest {
+    S3ApiConfiguration config = 1;
+}
+
+message PutS3ApiConfigurationResponse {
+}
+
 message Identity {
     string name = 1;
     repeated Credential credentials = 2;

weed/pb/iam_pb/iam.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: iam.proto
 
 package iam_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (
@@ -82,6 +81,166 @@ func (x *S3ApiConfiguration) GetServiceAccounts() []*ServiceAccount {
 	return nil
 }
 
+type GetS3ApiConfigurationRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetS3ApiConfigurationRequest) Reset() {
+	*x = GetS3ApiConfigurationRequest{}
+	mi := &file_iam_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetS3ApiConfigurationRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetS3ApiConfigurationRequest) ProtoMessage() {}
+
+func (x *GetS3ApiConfigurationRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_iam_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetS3ApiConfigurationRequest.ProtoReflect.Descriptor instead.
+func (*GetS3ApiConfigurationRequest) Descriptor() ([]byte, []int) {
+	return file_iam_proto_rawDescGZIP(), []int{1}
+}
+
+type GetS3ApiConfigurationResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Config        *S3ApiConfiguration    `protobuf:"bytes,1,opt,name=config,proto3" json:"config,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *GetS3ApiConfigurationResponse) Reset() {
+	*x = GetS3ApiConfigurationResponse{}
+	mi := &file_iam_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetS3ApiConfigurationResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetS3ApiConfigurationResponse) ProtoMessage() {}
+
+func (x *GetS3ApiConfigurationResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_iam_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetS3ApiConfigurationResponse.ProtoReflect.Descriptor instead.
+func (*GetS3ApiConfigurationResponse) Descriptor() ([]byte, []int) {
+	return file_iam_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *GetS3ApiConfigurationResponse) GetConfig() *S3ApiConfiguration {
+	if x != nil {
+		return x.Config
+	}
+	return nil
+}
+
+type PutS3ApiConfigurationRequest struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Config        *S3ApiConfiguration    `protobuf:"bytes,1,opt,name=config,proto3" json:"config,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *PutS3ApiConfigurationRequest) Reset() {
+	*x = PutS3ApiConfigurationRequest{}
+	mi := &file_iam_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *PutS3ApiConfigurationRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PutS3ApiConfigurationRequest) ProtoMessage() {}
+
+func (x *PutS3ApiConfigurationRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_iam_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PutS3ApiConfigurationRequest.ProtoReflect.Descriptor instead.
+func (*PutS3ApiConfigurationRequest) Descriptor() ([]byte, []int) {
+	return file_iam_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *PutS3ApiConfigurationRequest) GetConfig() *S3ApiConfiguration {
+	if x != nil {
+		return x.Config
+	}
+	return nil
+}
+
+type PutS3ApiConfigurationResponse struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *PutS3ApiConfigurationResponse) Reset() {
+	*x = PutS3ApiConfigurationResponse{}
+	mi := &file_iam_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *PutS3ApiConfigurationResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*PutS3ApiConfigurationResponse) ProtoMessage() {}
+
+func (x *PutS3ApiConfigurationResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_iam_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use PutS3ApiConfigurationResponse.ProtoReflect.Descriptor instead.
+func (*PutS3ApiConfigurationResponse) Descriptor() ([]byte, []int) {
+	return file_iam_proto_rawDescGZIP(), []int{4}
+}
+
 type Identity struct {
 	state             protoimpl.MessageState `protogen:"open.v1"`
 	Name              string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
@@ -97,7 +256,7 @@ type Identity struct {
 
 func (x *Identity) Reset() {
 	*x = Identity{}
-	mi := &file_iam_proto_msgTypes[1]
+	mi := &file_iam_proto_msgTypes[5]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -109,7 +268,7 @@ func (x *Identity) String() string {
 func (*Identity) ProtoMessage() {}
 
 func (x *Identity) ProtoReflect() protoreflect.Message {
-	mi := &file_iam_proto_msgTypes[1]
+	mi := &file_iam_proto_msgTypes[5]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -122,7 +281,7 @@ func (x *Identity) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Identity.ProtoReflect.Descriptor instead.
 func (*Identity) Descriptor() ([]byte, []int) {
-	return file_iam_proto_rawDescGZIP(), []int{1}
+	return file_iam_proto_rawDescGZIP(), []int{5}
 }
 
 func (x *Identity) GetName() string {
@@ -185,7 +344,7 @@ type Credential struct {
 
 func (x *Credential) Reset() {
 	*x = Credential{}
-	mi := &file_iam_proto_msgTypes[2]
+	mi := &file_iam_proto_msgTypes[6]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -197,7 +356,7 @@ func (x *Credential) String() string {
 func (*Credential) ProtoMessage() {}
 
 func (x *Credential) ProtoReflect() protoreflect.Message {
-	mi := &file_iam_proto_msgTypes[2]
+	mi := &file_iam_proto_msgTypes[6]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -210,7 +369,7 @@ func (x *Credential) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Credential.ProtoReflect.Descriptor instead.
 func (*Credential) Descriptor() ([]byte, []int) {
-	return file_iam_proto_rawDescGZIP(), []int{2}
+	return file_iam_proto_rawDescGZIP(), []int{6}
 }
 
 func (x *Credential) GetAccessKey() string {
@@ -245,7 +404,7 @@ type Account struct {
 
 func (x *Account) Reset() {
 	*x = Account{}
-	mi := &file_iam_proto_msgTypes[3]
+	mi := &file_iam_proto_msgTypes[7]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -257,7 +416,7 @@ func (x *Account) String() string {
 func (*Account) ProtoMessage() {}
 
 func (x *Account) ProtoReflect() protoreflect.Message {
-	mi := &file_iam_proto_msgTypes[3]
+	mi := &file_iam_proto_msgTypes[7]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -270,7 +429,7 @@ func (x *Account) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use Account.ProtoReflect.Descriptor instead.
 func (*Account) Descriptor() ([]byte, []int) {
-	return file_iam_proto_rawDescGZIP(), []int{3}
+	return file_iam_proto_rawDescGZIP(), []int{7}
 }
 
 func (x *Account) GetId() string {
@@ -313,7 +472,7 @@ type ServiceAccount struct {
 
 func (x *ServiceAccount) Reset() {
 	*x = ServiceAccount{}
-	mi := &file_iam_proto_msgTypes[4]
+	mi := &file_iam_proto_msgTypes[8]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -325,7 +484,7 @@ func (x *ServiceAccount) String() string {
 func (*ServiceAccount) ProtoMessage() {}
 
 func (x *ServiceAccount) ProtoReflect() protoreflect.Message {
-	mi := &file_iam_proto_msgTypes[4]
+	mi := &file_iam_proto_msgTypes[8]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -338,7 +497,7 @@ func (x *ServiceAccount) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ServiceAccount.ProtoReflect.Descriptor instead.
 func (*ServiceAccount) Descriptor() ([]byte, []int) {
-	return file_iam_proto_rawDescGZIP(), []int{4}
+	return file_iam_proto_rawDescGZIP(), []int{8}
 }
 
 func (x *ServiceAccount) GetId() string {
@@ -414,7 +573,13 @@ const file_iam_proto_rawDesc = "" +
 	"identities\x18\x01 \x03(\v2\x10.iam_pb.IdentityR\n" +
 	"identities\x12+\n" +
 	"\baccounts\x18\x02 \x03(\v2\x0f.iam_pb.AccountR\baccounts\x12A\n" +
-	"\x10service_accounts\x18\x03 \x03(\v2\x16.iam_pb.ServiceAccountR\x0fserviceAccounts\"\x88\x02\n" +
+	"\x10service_accounts\x18\x03 \x03(\v2\x16.iam_pb.ServiceAccountR\x0fserviceAccounts\"\x1e\n" +
+	"\x1cGetS3ApiConfigurationRequest\"S\n" +
+	"\x1dGetS3ApiConfigurationResponse\x122\n" +
+	"\x06config\x18\x01 \x01(\v2\x1a.iam_pb.S3ApiConfigurationR\x06config\"R\n" +
+	"\x1cPutS3ApiConfigurationRequest\x122\n" +
+	"\x06config\x18\x01 \x01(\v2\x1a.iam_pb.S3ApiConfigurationR\x06config\"\x1f\n" +
+	"\x1dPutS3ApiConfigurationResponse\"\x88\x02\n" +
 	"\bIdentity\x12\x12\n" +
 	"\x04name\x18\x01 \x01(\tR\x04name\x124\n" +
 	"\vcredentials\x18\x02 \x03(\v2\x12.iam_pb.CredentialR\vcredentials\x12\x18\n" +
@@ -450,8 +615,10 @@ const file_iam_proto_rawDesc = "" +
 	"\n" +
 	"created_at\x18\b \x01(\x03R\tcreatedAt\x12\x1d\n" +
 	"\n" +
-	"created_by\x18\t \x01(\tR\tcreatedBy2!\n" +
-	"\x1fSeaweedIdentityAccessManagementBK\n" +
+	"created_by\x18\t \x01(\tR\tcreatedBy2\xf1\x01\n" +
+	"\x1fSeaweedIdentityAccessManagement\x12f\n" +
+	"\x15GetS3ApiConfiguration\x12$.iam_pb.GetS3ApiConfigurationRequest\x1a%.iam_pb.GetS3ApiConfigurationResponse\"\x00\x12f\n" +
+	"\x15PutS3ApiConfiguration\x12$.iam_pb.PutS3ApiConfigurationRequest\x1a%.iam_pb.PutS3ApiConfigurationResponse\"\x00BK\n" +
 	"\x10seaweedfs.clientB\bIamProtoZ-github.com/seaweedfs/seaweedfs/weed/pb/iam_pbb\x06proto3"
 
 var (
@@ -466,26 +633,36 @@ func file_iam_proto_rawDescGZIP() []byte {
 	return file_iam_proto_rawDescData
 }
 
-var file_iam_proto_msgTypes = make([]protoimpl.MessageInfo, 5)
+var file_iam_proto_msgTypes = make([]protoimpl.MessageInfo, 9)
 var file_iam_proto_goTypes = []any{
-	(*S3ApiConfiguration)(nil), // 0: iam_pb.S3ApiConfiguration
-	(*Identity)(nil),           // 1: iam_pb.Identity
-	(*Credential)(nil),         // 2: iam_pb.Credential
-	(*Account)(nil),            // 3: iam_pb.Account
-	(*ServiceAccount)(nil),     // 4: iam_pb.ServiceAccount
+	(*S3ApiConfiguration)(nil),            // 0: iam_pb.S3ApiConfiguration
+	(*GetS3ApiConfigurationRequest)(nil),  // 1: iam_pb.GetS3ApiConfigurationRequest
+	(*GetS3ApiConfigurationResponse)(nil), // 2: iam_pb.GetS3ApiConfigurationResponse
+	(*PutS3ApiConfigurationRequest)(nil),  // 3: iam_pb.PutS3ApiConfigurationRequest
+	(*PutS3ApiConfigurationResponse)(nil), // 4: iam_pb.PutS3ApiConfigurationResponse
+	(*Identity)(nil),                      // 5: iam_pb.Identity
+	(*Credential)(nil),                    // 6: iam_pb.Credential
+	(*Account)(nil),                       // 7: iam_pb.Account
+	(*ServiceAccount)(nil),                // 8: iam_pb.ServiceAccount
 }
 var file_iam_proto_depIdxs = []int32{
-	1, // 0: iam_pb.S3ApiConfiguration.identities:type_name -> iam_pb.Identity
-	3, // 1: iam_pb.S3ApiConfiguration.accounts:type_name -> iam_pb.Account
-	4, // 2: iam_pb.S3ApiConfiguration.service_accounts:type_name -> iam_pb.ServiceAccount
-	2, // 3: iam_pb.Identity.credentials:type_name -> iam_pb.Credential
-	3, // 4: iam_pb.Identity.account:type_name -> iam_pb.Account
-	2, // 5: iam_pb.ServiceAccount.credential:type_name -> iam_pb.Credential
-	6, // [6:6] is the sub-list for method output_type
-	6, // [6:6] is the sub-list for method input_type
-	6, // [6:6] is the sub-list for extension type_name
-	6, // [6:6] is the sub-list for extension extendee
-	0, // [0:6] is the sub-list for field type_name
+	5,  // 0: iam_pb.S3ApiConfiguration.identities:type_name -> iam_pb.Identity
+	7,  // 1: iam_pb.S3ApiConfiguration.accounts:type_name -> iam_pb.Account
+	8,  // 2: iam_pb.S3ApiConfiguration.service_accounts:type_name -> iam_pb.ServiceAccount
+	0,  // 3: iam_pb.GetS3ApiConfigurationResponse.config:type_name -> iam_pb.S3ApiConfiguration
+	0,  // 4: iam_pb.PutS3ApiConfigurationRequest.config:type_name -> iam_pb.S3ApiConfiguration
+	6,  // 5: iam_pb.Identity.credentials:type_name -> iam_pb.Credential
+	7,  // 6: iam_pb.Identity.account:type_name -> iam_pb.Account
+	6,  // 7: iam_pb.ServiceAccount.credential:type_name -> iam_pb.Credential
+	1,  // 8: iam_pb.SeaweedIdentityAccessManagement.GetS3ApiConfiguration:input_type -> iam_pb.GetS3ApiConfigurationRequest
+	3,  // 9: iam_pb.SeaweedIdentityAccessManagement.PutS3ApiConfiguration:input_type -> iam_pb.PutS3ApiConfigurationRequest
+	2,  // 10: iam_pb.SeaweedIdentityAccessManagement.GetS3ApiConfiguration:output_type -> iam_pb.GetS3ApiConfigurationResponse
+	4,  // 11: iam_pb.SeaweedIdentityAccessManagement.PutS3ApiConfiguration:output_type -> iam_pb.PutS3ApiConfigurationResponse
+	10, // [10:12] is the sub-list for method output_type
+	8,  // [8:10] is the sub-list for method input_type
+	8,  // [8:8] is the sub-list for extension type_name
+	8,  // [8:8] is the sub-list for extension extendee
+	0,  // [0:8] is the sub-list for field type_name
 }
 
 func init() { file_iam_proto_init() }
@@ -499,7 +676,7 @@ func file_iam_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_iam_proto_rawDesc), len(file_iam_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   5,
+			NumMessages:   9,
 			NumExtensions: 0,
 			NumServices:   1,
 		},

weed/pb/iam_pb/iam_grpc.pb.go

@@ -1,13 +1,16 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: iam.proto
 
 package iam_pb
 
 import (
+	context "context"
 	grpc "google.golang.org/grpc"
+	codes "google.golang.org/grpc/codes"
+	status "google.golang.org/grpc/status"
 )
 
 // This is a compile-time assertion to ensure that this generated file
@@ -15,10 +18,17 @@ import (
 // Requires gRPC-Go v1.64.0 or later.
 const _ = grpc.SupportPackageIsVersion9
 
+const (
+	SeaweedIdentityAccessManagement_GetS3ApiConfiguration_FullMethodName = "/iam_pb.SeaweedIdentityAccessManagement/GetS3ApiConfiguration"
+	SeaweedIdentityAccessManagement_PutS3ApiConfiguration_FullMethodName = "/iam_pb.SeaweedIdentityAccessManagement/PutS3ApiConfiguration"
+)
+
 // SeaweedIdentityAccessManagementClient is the client API for SeaweedIdentityAccessManagement service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
 type SeaweedIdentityAccessManagementClient interface {
+	GetS3ApiConfiguration(ctx context.Context, in *GetS3ApiConfigurationRequest, opts ...grpc.CallOption) (*GetS3ApiConfigurationResponse, error)
+	PutS3ApiConfiguration(ctx context.Context, in *PutS3ApiConfigurationRequest, opts ...grpc.CallOption) (*PutS3ApiConfigurationResponse, error)
 }
 
 type seaweedIdentityAccessManagementClient struct {
@@ -29,10 +39,32 @@ func NewSeaweedIdentityAccessManagementClient(cc grpc.ClientConnInterface) Seawe
 	return &seaweedIdentityAccessManagementClient{cc}
 }
 
+func (c *seaweedIdentityAccessManagementClient) GetS3ApiConfiguration(ctx context.Context, in *GetS3ApiConfigurationRequest, opts ...grpc.CallOption) (*GetS3ApiConfigurationResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetS3ApiConfigurationResponse)
+	err := c.cc.Invoke(ctx, SeaweedIdentityAccessManagement_GetS3ApiConfiguration_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *seaweedIdentityAccessManagementClient) PutS3ApiConfiguration(ctx context.Context, in *PutS3ApiConfigurationRequest, opts ...grpc.CallOption) (*PutS3ApiConfigurationResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(PutS3ApiConfigurationResponse)
+	err := c.cc.Invoke(ctx, SeaweedIdentityAccessManagement_PutS3ApiConfiguration_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
 // SeaweedIdentityAccessManagementServer is the server API for SeaweedIdentityAccessManagement service.
 // All implementations must embed UnimplementedSeaweedIdentityAccessManagementServer
 // for forward compatibility.
 type SeaweedIdentityAccessManagementServer interface {
+	GetS3ApiConfiguration(context.Context, *GetS3ApiConfigurationRequest) (*GetS3ApiConfigurationResponse, error)
+	PutS3ApiConfiguration(context.Context, *PutS3ApiConfigurationRequest) (*PutS3ApiConfigurationResponse, error)
 	mustEmbedUnimplementedSeaweedIdentityAccessManagementServer()
 }
 
@@ -43,6 +75,12 @@ type SeaweedIdentityAccessManagementServer interface {
 // pointer dereference when methods are called.
 type UnimplementedSeaweedIdentityAccessManagementServer struct{}
 
+func (UnimplementedSeaweedIdentityAccessManagementServer) GetS3ApiConfiguration(context.Context, *GetS3ApiConfigurationRequest) (*GetS3ApiConfigurationResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method GetS3ApiConfiguration not implemented")
+}
+func (UnimplementedSeaweedIdentityAccessManagementServer) PutS3ApiConfiguration(context.Context, *PutS3ApiConfigurationRequest) (*PutS3ApiConfigurationResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method PutS3ApiConfiguration not implemented")
+}
 func (UnimplementedSeaweedIdentityAccessManagementServer) mustEmbedUnimplementedSeaweedIdentityAccessManagementServer() {
 }
 func (UnimplementedSeaweedIdentityAccessManagementServer) testEmbeddedByValue() {}
@@ -65,13 +103,58 @@ func RegisterSeaweedIdentityAccessManagementServer(s grpc.ServiceRegistrar, srv
 	s.RegisterService(&SeaweedIdentityAccessManagement_ServiceDesc, srv)
 }
 
+func _SeaweedIdentityAccessManagement_GetS3ApiConfiguration_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetS3ApiConfigurationRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(SeaweedIdentityAccessManagementServer).GetS3ApiConfiguration(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: SeaweedIdentityAccessManagement_GetS3ApiConfiguration_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(SeaweedIdentityAccessManagementServer).GetS3ApiConfiguration(ctx, req.(*GetS3ApiConfigurationRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _SeaweedIdentityAccessManagement_PutS3ApiConfiguration_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(PutS3ApiConfigurationRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(SeaweedIdentityAccessManagementServer).PutS3ApiConfiguration(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: SeaweedIdentityAccessManagement_PutS3ApiConfiguration_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(SeaweedIdentityAccessManagementServer).PutS3ApiConfiguration(ctx, req.(*PutS3ApiConfigurationRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
 // SeaweedIdentityAccessManagement_ServiceDesc is the grpc.ServiceDesc for SeaweedIdentityAccessManagement service.
 // It's only intended for direct use with grpc.RegisterService,
 // and not to be introspected or modified (even as a copy)
 var SeaweedIdentityAccessManagement_ServiceDesc = grpc.ServiceDesc{
 	ServiceName: "iam_pb.SeaweedIdentityAccessManagement",
 	HandlerType: (*SeaweedIdentityAccessManagementServer)(nil),
-	Methods:     []grpc.MethodDesc{},
-	Streams:     []grpc.StreamDesc{},
-	Metadata:    "iam.proto",
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "GetS3ApiConfiguration",
+			Handler:    _SeaweedIdentityAccessManagement_GetS3ApiConfiguration_Handler,
+		},
+		{
+			MethodName: "PutS3ApiConfiguration",
+			Handler:    _SeaweedIdentityAccessManagement_PutS3ApiConfiguration_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "iam.proto",
 }

weed/pb/master_pb/master.pb.go

@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: master.proto
 
 package master_pb

weed/pb/master_pb/master_grpc.pb.go

@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: master.proto
 
 package master_pb

weed/pb/mount_pb/mount.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: mount.proto
 
 package mount_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (

weed/pb/mount_pb/mount_grpc.pb.go

@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: mount.proto
 
 package mount_pb
 
 import (
 	context "context"
-
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"

weed/pb/mq_agent_pb/mq_agent.pb.go

@@ -1,19 +1,18 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: mq_agent.proto
 
 package mq_agent_pb
 
 import (
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-
 	schema_pb "github.com/seaweedfs/seaweedfs/weed/pb/schema_pb"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
 )
 
 const (

weed/pb/mq_agent_pb/mq_agent_grpc.pb.go

@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: mq_agent.proto
 
 package mq_agent_pb
 
 import (
 	context "context"
-
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"

weed/pb/mq_pb/mq_broker.pb.go

@@ -1,20 +1,19 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: mq_broker.proto
 
 package mq_pb
 
 import (
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-
 	filer_pb "github.com/seaweedfs/seaweedfs/weed/pb/filer_pb"
 	schema_pb "github.com/seaweedfs/seaweedfs/weed/pb/schema_pb"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
 )
 
 const (

weed/pb/mq_pb/mq_broker_grpc.pb.go

@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: mq_broker.proto
 
 package mq_pb
 
 import (
 	context "context"
-
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"

weed/pb/remote_pb/remote.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: remote.proto
 
 package remote_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (

weed/pb/s3_pb/s3.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: s3.proto
 
 package s3_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (

weed/pb/s3_pb/s3_grpc.pb.go

@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: s3.proto
 
 package s3_pb
 
 import (
 	context "context"
-
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"

weed/pb/schema_pb/mq_schema.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: mq_schema.proto
 
 package schema_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (

weed/pb/volume_server_pb/volume_server.pb.go

@@ -1,19 +1,18 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: volume_server.proto
 
 package volume_server_pb
 
 import (
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-
 	remote_pb "github.com/seaweedfs/seaweedfs/weed/pb/remote_pb"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	reflect "reflect"
+	sync "sync"
+	unsafe "unsafe"
 )
 
 const (

weed/pb/worker_pb/worker.pb.go

@@ -1,18 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.36.6
-// 	protoc        v6.33.1
+// 	protoc        v6.33.4
 // source: worker.proto
 
 package worker_pb
 
 import (
+	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
+	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 	reflect "reflect"
 	sync "sync"
 	unsafe "unsafe"
-
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
 )
 
 const (

weed/pb/worker_pb/worker_grpc.pb.go

@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go-grpc. DO NOT EDIT.
 // versions:
 // - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.1
+// - protoc             v6.33.4
 // source: worker.proto
 
 package worker_pb
 
 import (
 	context "context"
-
 	grpc "google.golang.org/grpc"
 	codes "google.golang.org/grpc/codes"
 	status "google.golang.org/grpc/status"