Set wasabi to point to s3proxy

This commit is contained in:
2025-10-12 12:50:58 -05:00
parent bdfd498b8f
commit e07599ca8e

View File

@@ -1,31 +1,26 @@
(ns k8s.add-ons.csi-driver.wasabi (ns k8s.add-ons.csi-driver.wasabi
(:require [configs :refer [cfg]])) (:require [configs :refer [cfg]]))
(defn wasabi-config []
(pulumi/Config. "wasabi"))
(def config (def config
(let [wasabi-id (-> cfg :wasabiId) {:stack [:secret :chart]
wasabi-key (-> cfg :wasabiKey) :app-namespace "kube-system"
wasabi-secret-name "wasabi-csi-secrets" :no-namespace true
wasabi-secret-namespace "kube-system"] :app-name "wasabi-csi"
{:stack [:secret :storage-class :chart] :chart-opts {:chart "csi-s3"
:app-namespace "kube-system" :fetchOpts {:repo "https://yandex-cloud.github.io/k8s-csi-s3/charts"}
:app-name "wasabi-csi" :helm-values-fn #(clj->js {:controller {:enabled false
:chart-opts {:chart "csi-s3" :existingSecret {:name "wasabi-csi-secrets"}
:fetchOpts {:repo "https://yandex-cloud.github.io/k8s-csi-s3/charts"} :node {:existingSecret {:name "wasabi-csi-secrets"}}}}
:helm-values-fn #(clj->js {:controller {:enabled false
:existingSecret {:name wasabi-secret-name } #_:storageClass #_{:create true
:node {:existingSecret {:name wasabi-secret-name }}}})} :name "csi-s3-sc"
:storage-class-opts {:provisioner "ru.yandex.s3.csi" :singleBucket "pulumi-harbor"
:parameters {"endpoint" "https://s3.us-east-1.wasabisys.com" :region "us-east-1"
"region" "us-east-1" :accessKeyID "something"
"bucket" "pulumi-csi-s3" :secretAccessKey "something"
"mounter" "geesefs" ;;:bucket "pulumi-harbor"
"csi.storage.k8s.io/provisioner-secret-name" wasabi-secret-name })}
"csi.storage.k8s.io/provisioner-secret-namespace" wasabi-secret-namespace :secret-opts {:stringData {:accessKeyID (-> cfg :wasabiId)
"csi.storage.k8s.io/node-publish-secret-name" wasabi-secret-name :secretAccessKey (-> cfg :wasabiKey)
"csi.storage.k8s.io/node-publish-secret-namespace" wasabi-secret-namespace}} :endpoint "http://s3proxy.s3proxy.svc.cluster.local"}}
:secret-opts {:stringData {:accessKeyID wasabi-id :vault-load-yaml false})
:secretAccessKey wasabi-key}}
:vault-load-yaml false}))