2026-02-28 13:42:27 +00:00
|
|
|
apiVersion: batch/v1
|
|
|
|
|
kind: Job
|
|
|
|
|
metadata:
|
|
|
|
|
name: seaweedfs-bucket-init
|
|
|
|
|
namespace: lasuite
|
|
|
|
|
annotations:
|
|
|
|
|
# Run once on first deploy; manually delete to re-run if needed.
|
|
|
|
|
helm.sh/hook: post-install
|
|
|
|
|
spec:
|
|
|
|
|
template:
|
|
|
|
|
spec:
|
|
|
|
|
restartPolicy: OnFailure
|
|
|
|
|
containers:
|
|
|
|
|
- name: mc
|
|
|
|
|
image: minio/mc:latest
|
|
|
|
|
command:
|
|
|
|
|
- /bin/sh
|
|
|
|
|
- -c
|
|
|
|
|
- |
|
|
|
|
|
set -e
|
|
|
|
|
ENDPOINT=http://seaweedfs-filer.storage.svc.cluster.local:8333
|
|
|
|
|
mc alias set weed "$ENDPOINT" "$S3_ACCESS_KEY" "$S3_SECRET_KEY"
|
|
|
|
|
|
|
|
|
|
for bucket in \
|
|
|
|
|
sunbeam-docs \
|
|
|
|
|
sunbeam-meet \
|
|
|
|
|
sunbeam-drive \
|
|
|
|
|
sunbeam-messages \
|
lasuite: declarative pre-work for La Suite app deployments
- Add find user and find_db to postgres-cluster.yaml (11th database)
- Add sunbeam-messages-imports and sunbeam-people buckets to SeaweedFS
- Configure Hydra Maester with enabledNamespaces: [lasuite] so it can
create and update OAuth2Client secrets in the lasuite namespace
- Add find to Kratos allowed_return_urls
- Add shared ConfigMaps: lasuite-postgres, lasuite-valkey, lasuite-s3,
lasuite-oidc-provider — single source of truth for all app env vars
- Add HydraOAuth2Client CRDs for all nine La Suite apps (docs, drive,
meet, conversations, messages, people, find, gitea, hive); Maester
will create oidc-<app> secrets with CLIENT_ID and CLIENT_SECRET
2026-03-01 18:03:13 +00:00
|
|
|
sunbeam-messages-imports \
|
2026-02-28 13:42:27 +00:00
|
|
|
sunbeam-conversations \
|
lasuite: declarative pre-work for La Suite app deployments
- Add find user and find_db to postgres-cluster.yaml (11th database)
- Add sunbeam-messages-imports and sunbeam-people buckets to SeaweedFS
- Configure Hydra Maester with enabledNamespaces: [lasuite] so it can
create and update OAuth2Client secrets in the lasuite namespace
- Add find to Kratos allowed_return_urls
- Add shared ConfigMaps: lasuite-postgres, lasuite-valkey, lasuite-s3,
lasuite-oidc-provider — single source of truth for all app env vars
- Add HydraOAuth2Client CRDs for all nine La Suite apps (docs, drive,
meet, conversations, messages, people, find, gitea, hive); Maester
will create oidc-<app> secrets with CLIENT_ID and CLIENT_SECRET
2026-03-01 18:03:13 +00:00
|
|
|
sunbeam-people \
|
2026-02-28 13:42:27 +00:00
|
|
|
sunbeam-git-lfs \
|
feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates
- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay
2026-03-10 19:00:57 +00:00
|
|
|
sunbeam-game-assets \
|
|
|
|
|
sunbeam-ml-models; do
|
2026-02-28 13:42:27 +00:00
|
|
|
mc mb --ignore-existing "weed/$bucket"
|
|
|
|
|
echo "Ensured bucket: $bucket"
|
|
|
|
|
done
|
feat: La Suite email/messages, buildkitd, monitoring, vault and storage updates
- Add Messages (email) service: backend, frontend, MTA in/out, MPA, SOCKS
proxy, worker, DKIM config, and theme customization
- Add Collabora deployment for document collaboration
- Add Drive frontend nginx config and values
- Add buildkitd namespace for in-cluster container builds
- Add SeaweedFS remote sync and additional S3 buckets
- Update vault secrets across namespaces (devtools, lasuite, media,
monitoring, ory, storage) with expanded credential management
- Update monitoring: rename grafana→metrics OAuth2Client, add Prometheus
remote write and additional scrape configs
- Update local/production overlays with resource patches
- Remove stale login-ui resource patch from production overlay
2026-03-10 19:00:57 +00:00
|
|
|
|
|
|
|
|
# Enable object versioning on buckets that require it.
|
|
|
|
|
# Drive's WOPI GetFile response includes X-WOPI-ItemVersion from S3 VersionId.
|
|
|
|
|
mc versioning enable weed/sunbeam-drive
|
|
|
|
|
echo "Versioning enabled: sunbeam-drive"
|
2026-02-28 13:42:27 +00:00
|
|
|
envFrom:
|
|
|
|
|
- secretRef:
|
|
|
|
|
name: seaweedfs-s3-credentials
|