SeaweedFS¶

apiVersion: seaweed.seaweedfs.com/v1
kind: Bucket
metadata:
  name: <NAME>
  namespace: <NAMESPACE>
spec:
  clusterRef:
    name: seaweed-production
    namespace: seaweedfs
  versioning: "Off"
  quota:
    size: "10Gi"
    enforce: false
  reclaimPolicy: Retain

apiVersion: seaweed.seaweedfs.com/v1
kind: Bucket
metadata:
  name: starships
  namespace: starfleet
spec:
  clusterRef:
    name: seaweed-production
    namespace: seaweedfs
  versioning: "Off"
  quota:
    size: "10Gi"
    enforce: false
  reclaimPolicy: Retain

apiVersion: seaweed.seaweedfs.com/v1
kind: S3Credentials
metadata:
  name: <NAME>-credentials
  namespace: <NAMESPACE>
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  identityRef:
    name: <NAME>-user
  secretRef:
    name: <NAME>-s3-secret
  reclaimPolicy: Retain

apiVersion: seaweed.seaweedfs.com/v1
kind: S3Credentials
metadata:
  name: starships-credentials
  namespace: starfleet
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  identityRef:
    name: starships-user
  secretRef:
    name: starships-s3-secret
  reclaimPolicy: Retain

apiVersion: seaweed.seaweedfs.com/v1
kind: S3Identity
metadata:
  name: <NAME>-user
  namespace: <NAMESPACE>
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  account:
    displayName: <DISPLAY-NAME>
    email: <EMAIL>
  reclaimPolicy: Retain
  disabled: false

apiVersion: seaweed.seaweedfs.com/v1
kind: S3Identity
metadata:
  name: starships-user
  namespace: starfleet
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  account:
    displayName: Starships
    email: starships@starfleet.example
  reclaimPolicy: Retain
  disabled: false

apiVersion: seaweed.seaweedfs.com/v1
kind: S3PolicyBinding
metadata:
  name: <NAME>-policy-binding
  namespace: <NAMESPACE>
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  policyRef:
    name: <NAME>-policy
  subjects:
    - kind: S3Identity
      name: <NAME>-user
  reclaimPolicy: Retain

apiVersion: seaweed.seaweedfs.com/v1
kind: S3PolicyBinding
metadata:
  name: starships-policy-binding
  namespace: starfleet
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  policyRef:
    name: starships-policy
  subjects:
    - kind: S3Identity
      name: starships-user
  reclaimPolicy: Retain

apiVersion: seaweed.seaweedfs.com/v1
kind: S3Policy
metadata:
  name: <NAME>-policy
  namespace: <NAMESPACE>
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  reclaimPolicy: Retain
  statements:
    - effect: Allow
      actions:
        - s3:ListBucket
      resources:
        - <NAME>-media
    - effect: Allow
      actions:
        - s3:GetObject
        - s3:PutObject
        - s3:DeleteObject
      resources:
        - <NAME>-media/*

apiVersion: seaweed.seaweedfs.com/v1
kind: S3Policy
metadata:
  name: starships-policy
  namespace: starfleet
spec:
  seaweedRef:
    name: seaweed-production
    namespace: seaweedfs
  reclaimPolicy: Retain
  statements:
    - effect: Allow
      actions:
        - s3:ListBucket
      resources:
        - starships-media
    - effect: Allow
      actions:
        - s3:GetObject
        - s3:PutObject
        - s3:DeleteObject
      resources:
        - starships-media/*