weed

etc/k8s/maple.seal.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: maple-s3
+  namespace: maple
+spec:
+  encryptedData:
+    AWS_ACCESS_KEY_ID: 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
+    AWS_SECRET_ACCESS_KEY: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: maple
+      name: maple-s3
+      namespace: maple
+    type: Opaque

etc/k8s/seaweed.yaml

@@ -0,0 +1,108 @@
+---
+
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: maple
+
+---
+
+kind: PersistentVolumeClaim
+apiVersion: v1
+metadata:
+  name: maple-data
+  namespace: maple
+spec:
+  storageClassName: zfs-fast
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 100Gi
+
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: seaweedfs
+  namespace: maple
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: seaweedfs
+  template:
+    metadata:
+      labels:
+        app: seaweedfs
+    spec:
+      containers:
+      - name: seaweedfs
+        image: chrislusf/seaweedfs:latest
+        args:
+          - "server"
+          - "-s3"
+          - "-dir=/data/maple"
+        env:
+          - name: AWS_ACCESS_KEY_ID
+            valueFrom:
+              secretKeyRef:
+                name: maple-s3
+                key: AWS_ACCESS_KEY_ID
+          - name: AWS_SECRET_ACCESS_KEY
+            valueFrom:
+              secretKeyRef:
+                name: maple-s3
+                key: AWS_SECRET_ACCESS_KEY
+        ports:
+        - containerPort: 8333
+        - containerPort: 9333
+        - containerPort: 8080
+        - containerPort: 8888
+        volumeMounts:
+        - name: maple-data
+          mountPath: /data/maple
+      volumes:
+      - name: maple-data
+        persistentVolumeClaim:
+          claimName: maple-data
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: seaweedfs
+  namespace: maple
+spec:
+  selector:
+    app: seaweedfs
+  ports:
+  - name: s3
+    port: 8333
+    targetPort: 8333
+
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: seaweedfs
+  namespace: maple
+  annotations:
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+spec:
+  ingressClassName: haproxy
+  tls:
+  - hosts:
+    - maple.ntwl.xyz
+    secretName: maple-seaweedfs-tls
+  rules:
+  - host: maple.ntwl.xyz
+    http:
+      paths:
+      - path: /
+        pathType: Prefix
+        backend:
+          service:
+            name: seaweedfs
+            port:
+              number: 8333