studio/sbbb
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(storage): migrate SeaweedFS S3 credentials to VSO; mount s3.json from Secret

Browse Source 
Previously s3.json was embedded in the seaweedfs-filer-config ConfigMap
with hardcoded minioadmin credentials, and the config volume was mounted
at /etc/seaweedfs/ (overwriting filer.toml with its own directory mount).

- Remove s3.json from ConfigMap; fix the config volume to mount only
  filer.toml via subPath so both files coexist under /etc/seaweedfs/.
- Add vault-secrets.yaml with VaultStaticSecrets that VSO syncs from
  OpenBao secret/seaweedfs: seaweedfs-s3-credentials (S3_ACCESS_KEY /
  S3_SECRET_KEY) and seaweedfs-s3-json (s3.json as a JSON template).
- Mount seaweedfs-s3-json Secret at /etc/seaweedfs/s3.json via subPath.
This commit is contained in:
Sienna Meridian Satterwhite
2026-03-02 18:32:16 +00:00
parent 361661e965
commit 580eb3983e
4 changed files with 66 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
base/storage/kustomization.yaml
View File

@@ -9,3 +9,4 @@ resources:
- seaweedfs-master.yaml
- seaweedfs-volume.yaml
- seaweedfs-filer.yaml
- vault-secrets.yaml