base/storage/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: storage

resources:
  - namespace.yaml
  - seaweedfs-config.yaml
  - seaweedfs-master.yaml
  - seaweedfs-volume.yaml
  - seaweedfs-filer.yaml
  - seaweedfs-filer-pvc.yaml
  - vault-secrets.yaml
chore: initial infrastructure scaffold Kustomize base + overlays for the full Sunbeam k3s stack: - base/mesh — Linkerd edge (crds + control-plane + viz) - base/ingress — custom Pingora edge proxy - base/ory — Kratos 0.60.1 + Hydra 0.60.1 + login-ui - base/data — CloudNativePG 0.27.1, Valkey 8, OpenSearch 2 - base/storage — SeaweedFS master + volume + filer (S3 on :8333) - base/lasuite — Hive sync daemon + La Suite app placeholders - base/media — LiveKit livekit-server 1.9.0 - base/devtools — Gitea 12.5.0 (external PG + Valkey) overlays/local — sslip.io domain, mkcert TLS, Lima hostPort overlays/production — stub (TODOs for sunbeam.pt values) scripts/ — local-up/down/certs/urls helpers justfile — up / down / certs / urls targets 2026-02-28 13:42:27 +00:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`

			`namespace: storage`

			`resources:`
			`- namespace.yaml`
			`- seaweedfs-config.yaml`
			`- seaweedfs-master.yaml`
			`- seaweedfs-volume.yaml`
			`- seaweedfs-filer.yaml`
feat(infra): data, storage, devtools, and ory layer updates - data: CNPG cluster tuning, OpenBao values, OpenSearch deployment fixes, OpenSearch PVC, barman vault secret for S3 backup credentials - storage: SeaweedFS filer updates (s3.json via secret subPath), PVC for filer persistent storage - devtools: Gitea values (SSH service, custom theme), gitea-theme-cm ConfigMap - ory: add kratos-selfservice-urls.yaml for self-service flow URLs - media: LiveKit values updated (TURN config, STUN, resource limits) - vso: kustomization cleanup 2026-03-06 12:07:28 +00:00			`- seaweedfs-filer-pvc.yaml`
feat(storage): migrate SeaweedFS S3 credentials to VSO; mount s3.json from Secret Previously s3.json was embedded in the seaweedfs-filer-config ConfigMap with hardcoded minioadmin credentials, and the config volume was mounted at /etc/seaweedfs/ (overwriting filer.toml with its own directory mount). - Remove s3.json from ConfigMap; fix the config volume to mount only filer.toml via subPath so both files coexist under /etc/seaweedfs/. - Add vault-secrets.yaml with VaultStaticSecrets that VSO syncs from OpenBao secret/seaweedfs: seaweedfs-s3-credentials (S3_ACCESS_KEY / S3_SECRET_KEY) and seaweedfs-s3-json (s3.json as a JSON template). - Mount seaweedfs-s3-json Secret at /etc/seaweedfs/s3.json via subPath. 2026-03-02 18:32:16 +00:00			`- vault-secrets.yaml`