sbbb/base/storage/kustomization.yaml at 7ff35d3e0cc2f644b674daa55d29584cdc4641f7 - sbbb - Gitea: Git with a cup of tea

studio/sbbb

Files

Sienna Meridian Satterwhite 580eb3983e

feat(storage): migrate SeaweedFS S3 credentials to VSO; mount s3.json from Secret

Previously s3.json was embedded in the seaweedfs-filer-config ConfigMap
with hardcoded minioadmin credentials, and the config volume was mounted
at /etc/seaweedfs/ (overwriting filer.toml with its own directory mount).

- Remove s3.json from ConfigMap; fix the config volume to mount only
  filer.toml via subPath so both files coexist under /etc/seaweedfs/.
- Add vault-secrets.yaml with VaultStaticSecrets that VSO syncs from
  OpenBao secret/seaweedfs: seaweedfs-s3-credentials (S3_ACCESS_KEY /
  S3_SECRET_KEY) and seaweedfs-s3-json (s3.json as a JSON template).
- Mount seaweedfs-s3-json Secret at /etc/seaweedfs/s3.json via subPath.

2026-03-02 18:32:16 +00:00

13 lines

241 B

YAML

Raw Blame History

 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: storage
 resources:
   - namespace.yaml
   - seaweedfs-config.yaml
   - seaweedfs-master.yaml
   - seaweedfs-volume.yaml
   - seaweedfs-filer.yaml
   - vault-secrets.yaml