fix: harden SeaweedFS storage and fix Drive presigned uploads
- SeaweedFS filer: Recreate strategy (prevents LevelDB lock contention), 60s termination grace period, memory 256Mi→2Gi limit - SeaweedFS volume: 60s termination grace period, memory 256Mi→1Gi limit - Drive: add AWS_S3_DOMAIN_REPLACE so presigned upload URLs use s3.sunbeam.pt instead of internal cluster DNS - Drive: relax liveness/readiness probes (failureThreshold 1→3, period 1s→10s, timeout 1s→5s) to prevent crash loops under load
This commit is contained in:
@@ -13,6 +13,16 @@
|
||||
fullnameOverride: drive
|
||||
|
||||
backend:
|
||||
livenessProbe:
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
readinessProbe:
|
||||
initialDelaySeconds: 15
|
||||
periodSeconds: 10
|
||||
timeoutSeconds: 5
|
||||
failureThreshold: 3
|
||||
createsuperuser:
|
||||
# No superuser — users authenticate via OIDC.
|
||||
# The chart always renders this Job; override command so it exits 0.
|
||||
@@ -71,6 +81,8 @@ backend:
|
||||
secretKeyRef:
|
||||
name: seaweedfs-s3-credentials
|
||||
key: S3_SECRET_KEY
|
||||
# Public S3 endpoint for browser-side presigned upload URLs.
|
||||
AWS_S3_DOMAIN_REPLACE: https://s3.DOMAIN_SUFFIX
|
||||
# Base URL for media file references so nginx auth proxy receives full paths.
|
||||
MEDIA_BASE_URL: https://drive.DOMAIN_SUFFIX
|
||||
|
||||
|
||||
Reference in New Issue
Block a user