admin.md

rc admin

Purpose

The rc admin operation manages RustFS or MinIO-compatible administrative APIs, including cluster information, healing, pools, expansion, decommissioning, rebalance workflows, IAM users, policies, groups, and service accounts.

Syntax

rc [GLOBAL OPTIONS] admin <COMMAND>
rc admin info <cluster|server|disk> <ALIAS> [OPTIONS]
rc admin heal <status|start|stop> <ALIAS> [OPTIONS]
rc admin pool <list|status> <ALIAS> [POOL] [OPTIONS]
rc admin expand <start|status|stop> <ALIAS>
rc admin decommission <start|cancel|clear> <ALIAS> <POOL> [OPTIONS]
rc admin decommission status <ALIAS> [POOL] [OPTIONS]
rc admin rebalance <start|status|stop> <ALIAS>
rc admin user <ls|add|info|rm|enable|disable> ...
rc admin policy <ls|create|info|rm|attach> ...
rc admin group <ls|add|info|rm|enable|disable|add-members|rm-members> ...
rc admin service-account <ls|create|info|rm> ...

Commands

Command	Description
info	Display cluster, server, or disk information.
heal	Start, stop, or inspect healing operations.
pool	List pools and inspect pool status.
expand	Manage post-expansion data rebalancing. Alias: scale.
decommission	Manage server pool decommissioning. Alias: decom.
rebalance	Manage post-expansion rebalancing.
user	Manage IAM users.
policy	Manage IAM policies and attachments.
group	Manage IAM groups and group membership.
service-account	Manage service accounts.

Examples

Show cluster information:

rc admin info cluster local

Start a deep heal for a prefix:

rc admin heal start local --bucket logs --prefix 2026/ --scan-mode deep

Check global background heal status:

rc admin heal status local

Check a manual bucket heal task using the client token returned by start:

rc admin heal status local --bucket logs --prefix 2026/ --client-token <TOKEN_FROM_START>

Stop a manual bucket heal task:

rc admin heal stop local --bucket logs --client-token <TOKEN_FROM_START>

Start decommissioning a pool:

rc admin decommission start local '/data/pool1/disk{1...4}'

Check decommissioning status for all pools:

rc admin decommission status local

Check, cancel, or clear decommissioning by pool ID:

rc admin decommission status local 1 --by-id
rc admin decommission cancel local 1 --by-id
rc admin decommission clear local 1 --by-id

Start and inspect post-expansion rebalancing:

rc admin rebalance start local
rc admin rebalance status local
rc admin rebalance stop local

Create a user and attach a policy:

rc admin user add local analyst STRONG_PASSWORD
rc admin policy attach local readonly --user analyst

Create a service account with a policy file:

rc admin service-account create local SA_ACCESS_KEY SA_SECRET_KEY --policy ./policy.json

Behavior

Admin operations use the configured alias to create an admin client. The credentials behind the alias must have permissions for the requested administrative API. The command accepts aliases with or without a trailing slash.

rc admin heal status <ALIAS> reports aggregate background heal status. Manual bucket or prefix heals started with rc admin heal start are token-scoped tasks; the start output includes a client token, and subsequent task status or stop requests must pass that token with --bucket, optional --prefix, and --client-token.

Heal Workflow

rc admin heal manages cluster healing operations.

Command	Description
rc admin heal status <ALIAS>	Show aggregate background heal status.
rc admin heal status <ALIAS> --bucket <BUCKET> [--prefix <PREFIX>] --client-token <TOKEN>	Show a token-scoped manual heal task.
rc admin heal start <ALIAS> [OPTIONS]	Start a manual heal operation.
rc admin heal stop <ALIAS>	Stop the global background heal operation.
rc admin heal stop <ALIAS> --bucket <BUCKET> [--prefix <PREFIX>] --client-token <TOKEN>	Stop a token-scoped manual heal task.

heal start accepts these operation options:

Option	Description
-b, --bucket <BUCKET>	Heal a single bucket. Omit this option to recursively heal all buckets.
-p, --prefix <PREFIX>	Limit a bucket heal to an object prefix.
--scan-mode normal|deep	Select the scan mode. Defaults to normal.
--remove	Remove dangling objects or parts found by the heal scan.
--recreate	Recreate missing data.
--dry-run	Report what would be healed without applying changes.

Manual bucket and prefix heals are token-scoped. Save the clientToken returned by heal start; the token is required to inspect or stop that manual task.

Decommission Workflow

rc admin decommission retires server pools from a cluster. The POOL argument can be a pool command line, comma-separated pool command lines, or a zero-based pool ID when --by-id is set.

Command	Description
rc admin decommission start <ALIAS> <POOL> [--by-id]	Start decommissioning one or more pools.
rc admin decommission status <ALIAS> [POOL] [--by-id]	Show decommissioning status for all pools or one pool.
rc admin decommission cancel <ALIAS> <POOL> [--by-id]	Cancel decommissioning for a pool.
rc admin decommission clear <ALIAS> <POOL> [--by-id]	Clear failed or canceled decommissioning metadata for a pool.

Use rc admin pool list <ALIAS> or rc admin pool status <ALIAS> to find pool IDs and pool command lines before starting a decommission.

Rebalance Workflow

rc admin rebalance manages post-expansion data movement after server pools are added to a deployment.

Command	Description
rc admin rebalance start <ALIAS>	Start a cluster rebalance operation.
rc admin rebalance status <ALIAS>	Show cluster-wide and per-pool rebalance status.
rc admin rebalance stop <ALIAS>	Stop a running rebalance operation.

rc admin expand is an alias-oriented workflow for the same post-expansion rebalance step. The expand command is also available as scale.

Global options shown in command syntax use the same meaning everywhere:

Option	Description
--format auto|human|json	Select automatic, human-readable, or JSON output.
--json	Emit JSON output where the command supports structured output.
--no-color	Disable terminal colors.
--no-progress	Disable progress bars.
-q, --quiet	Suppress non-error output.
--debug	Enable debug logging.