mirror of
https://github.com/seaweedfs/seaweedfs.git
synced 2024-12-24 17:47:57 +08:00
21 lines
1012 B
YAML
21 lines
1012 B
YAML
|
{{- if not (or .Values.filer.s3.skipAuthSecretCreation .Values.s3.skipAuthSecretCreation) }}
|
||
|
|
{{- $access_key_admin := randAlphaNum 16 -}}
|
||
|
|
{{- $secret_key_admin := randAlphaNum 32 -}}
|
||
|
|
{{- $access_key_read := randAlphaNum 16 -}}
|
||
|
|
{{- $secret_key_read := randAlphaNum 32 -}}
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Secret
|
||
|
|
type: Opaque
|
||
|
|
metadata:
|
||
|
|
name: seaweedfs-s3-secret
|
||
|
|
namespace: {{ .Release.Namespace }}
|
||
|
|
annotations:
|
||
|
|
"helm.sh/resource-policy": keep
|
||
|
|
"helm.sh/hook": "pre-install"
|
||
|
|
stringData:
|
||
|
|
admin_access_key_id: {{ $access_key_admin }}
|
||
|
|
admin_secret_access_key: {{ $secret_key_admin }}
|
||
|
|
read_access_key_id: {{ $access_key_read }}
|
||
|
|
read_secret_access_key: {{ $secret_key_read }}
|
||
|
|
seaweedfs_s3_config: '{"identities":[{"name":"anvAdmin","credentials":[{"accessKey":"{{ $access_key_admin }}","secretKey":"{{ $secret_key_admin }}"}],"actions":["Admin","Read","Write"]},{"name":"anvReadOnly","credentials":[{"accessKey":"{{ $access_key_read }}","secretKey":"{{ $secret_key_read }}"}],"actions":["Read"]}]}'
|
||
|
|
{{- end }}
|