seaweedfs.yaml

---
# S3 credentials — referenced by both the S3 gateway pod and CloudNativePG.
# The s3.json key is mounted into the S3 gateway to configure identity/auth.
apiVersion: v1
kind: Secret
metadata:
  name: seaweedfs-s3-credentials
  namespace: data
stringData:
  ACCESS_KEY_ID: "backup-access-key"
  ACCESS_SECRET_KEY: "backup-secret-key"
  s3.json: |
    {
      "identities": [
        {
          "name": "cnpg-backup",
          "credentials": [
            {
              "accessKey": "backup-access-key",
              "secretKey": "backup-secret-key"
            }
          ],
          "actions": ["Admin", "Read", "Write"]
        }
      ]
    }

---
# =============================================================================
# MASTER
# Manages cluster topology and assigns volumes to volume servers.
# Single replica for local dev — use 3 with -peers for production HA.
# =============================================================================
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: seaweedfs-master
  namespace: data
spec:
  serviceName: seaweedfs-master
  replicas: 1
  selector:
    matchLabels:
      app: seaweedfs
      component: master
  template:
    metadata:
      labels:
        app: seaweedfs
        component: master
    spec:
      containers:
        - name: master
          image: chrislusf/seaweedfs:4.15
          command:
            - weed
            - master
            - -port=9333
            - -mdir=/data
            - -defaultReplication=000
          ports:
            - name: http
              containerPort: 9333
            - name: grpc
              containerPort: 19333
          volumeMounts:
            - name: data
              mountPath: /data
          readinessProbe:
            httpGet:
              path: /cluster/status
              port: 9333
            initialDelaySeconds: 10
            periodSeconds: 5
          livenessProbe:
            httpGet:
              path: /cluster/status
              port: 9333
            initialDelaySeconds: 30
            periodSeconds: 15
            failureThreshold: 3
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: ["ReadWriteOnce"]
        storageClassName: standard
        resources:
          requests:
            storage: 1Gi

---
# Headless service required by the master StatefulSet
apiVersion: v1
kind: Service
metadata:
  name: seaweedfs-master
  namespace: data
spec:
  clusterIP: None
  selector:
    app: seaweedfs
    component: master
  ports:
    - name: http
      port: 9333
    - name: grpc
      port: 19333

---
# Stable ClusterIP for volume, filer, and S3 to connect to master
apiVersion: v1
kind: Service
metadata:
  name: seaweedfs-master-svc
  namespace: data
spec:
  selector:
    app: seaweedfs
    component: master
  ports:
    - name: http
      port: 9333
    - name: grpc
      port: 19333

---
# =============================================================================
# VOLUME SERVER
# Stores the actual data. Add more replicas for extra capacity.
# Each pod gets its own PVC via volumeClaimTemplates.
# =============================================================================
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: seaweedfs-volume
  namespace: data
spec:
  serviceName: seaweedfs-volume
  replicas: 1
  selector:
    matchLabels:
      app: seaweedfs
      component: volume
  template:
    metadata:
      labels:
        app: seaweedfs
        component: volume
    spec:
      initContainers:
        - name: wait-for-master
          image: curlimages/curl:8.18.0
          command:
            - sh
            - -c
            - |
              until curl -sf http://seaweedfs-master-svc:9333/cluster/status; do
                echo "Waiting for SeaweedFS master..."
                sleep 3
              done
      containers:
        - name: volume
          image: chrislusf/seaweedfs:4.15
          command:
            - weed
            - volume
            - -mserver=seaweedfs-master-svc:9333
            - -port=8080
            - -dir=/data
          ports:
            - name: http
              containerPort: 8080
            - name: grpc
              containerPort: 18080
          volumeMounts:
            - name: data
              mountPath: /data
          readinessProbe:
            httpGet:
              path: /status
              port: 8080
            initialDelaySeconds: 10
            periodSeconds: 5
          livenessProbe:
            httpGet:
              path: /status
              port: 8080
            initialDelaySeconds: 30
            periodSeconds: 15
            failureThreshold: 3
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: ["ReadWriteOnce"]
        storageClassName: standard
        resources:
          requests:
            storage: 5Gi

---
# Headless service required by the volume StatefulSet
apiVersion: v1
kind: Service
metadata:
  name: seaweedfs-volume
  namespace: data
spec:
  clusterIP: None
  selector:
    app: seaweedfs
    component: volume
  ports:
    - name: http
      port: 8080
    - name: grpc
      port: 18080

---
# =============================================================================
# FILER
# Filesystem abstraction on top of master + volume.
# Metadata stored locally in LevelDB (PVC-backed).
# =============================================================================
apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: seaweedfs-filer
  namespace: data
spec:
  serviceName: seaweedfs-filer
  replicas: 1
  selector:
    matchLabels:
      app: seaweedfs
      component: filer
  template:
    metadata:
      labels:
        app: seaweedfs
        component: filer
    spec:
      initContainers:
        - name: wait-for-master
          image: curlimages/curl:8.18.0
          command:
            - sh
            - -c
            - |
              until curl -sf http://seaweedfs-master-svc:9333/cluster/status; do
                echo "Waiting for SeaweedFS master..."
                sleep 3
              done
      containers:
        - name: filer
          image: chrislusf/seaweedfs:4.15
          command:
            - weed
            - filer
            - -master=seaweedfs-master-svc:9333
            - -port=8888
            - -dataCenter=kind
          ports:
            - name: http
              containerPort: 8888
            - name: grpc
              containerPort: 18888
          volumeMounts:
            - name: data
              mountPath: /data
          readinessProbe:
            httpGet:
              path: /
              port: 8888
            initialDelaySeconds: 15
            periodSeconds: 5
          livenessProbe:
            httpGet:
              path: /
              port: 8888
            initialDelaySeconds: 30
            periodSeconds: 15
            failureThreshold: 3
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: ["ReadWriteOnce"]
        storageClassName: standard
        resources:
          requests:
            storage: 1Gi

---
# Headless service required by the filer StatefulSet
apiVersion: v1
kind: Service
metadata:
  name: seaweedfs-filer
  namespace: data
spec:
  clusterIP: None
  selector:
    app: seaweedfs
    component: filer
  ports:
    - name: http
      port: 8888
    - name: grpc
      port: 18888

---
# Stable ClusterIP for the S3 gateway to connect to the filer
apiVersion: v1
kind: Service
metadata:
  name: seaweedfs-filer-svc
  namespace: data
spec:
  selector:
    app: seaweedfs
    component: filer
  ports:
    - name: http
      port: 8888
    - name: grpc
      port: 18888

---
# =============================================================================
# S3 GATEWAY
# S3-compatible API on top of the filer.
# This is what CloudNativePG and the bucket job connect to.
# =============================================================================
apiVersion: apps/v1
kind: Deployment
metadata:
  name: seaweedfs-s3
  namespace: data
spec:
  replicas: 1
  selector:
    matchLabels:
      app: seaweedfs
      component: s3
  template:
    metadata:
      labels:
        app: seaweedfs
        component: s3
    spec:
      initContainers:
        - name: wait-for-filer
          image: curlimages/curl:8.18.0
          command:
            - sh
            - -c
            - |
              until curl -sf http://seaweedfs-filer-svc:8888/; do
                echo "Waiting for SeaweedFS filer..."
                sleep 3
              done
      containers:
        - name: s3
          image: chrislusf/seaweedfs:4.15
          command:
            - weed
            - s3
            - -port=8333
            - -filer=seaweedfs-filer-svc:8888
            - -config=/etc/seaweedfs/s3.json
          ports:
            - name: s3
              containerPort: 8333
          volumeMounts:
            - name: s3-config
              mountPath: /etc/seaweedfs
              readOnly: true
          readinessProbe:
            tcpSocket:
              port: 8333
            initialDelaySeconds: 10
            periodSeconds: 5
          livenessProbe:
            tcpSocket:
              port: 8333
            initialDelaySeconds: 30
            periodSeconds: 15
            failureThreshold: 3
      volumes:
        - name: s3-config
          secret:
            secretName: seaweedfs-s3-credentials
            items:
              - key: s3.json
                path: s3.json

---
# ClusterIP for the S3 gateway — used by CloudNativePG and the bucket job
apiVersion: v1
kind: Service
metadata:
  name: seaweedfs-s3
  namespace: data
spec:
  selector:
    app: seaweedfs
    component: s3
  ports:
    - name: s3
      port: 8333
      targetPort: 8333

---
# Ingress for the SeaweedFS filer web UI — browse backups at http://seaweedfs.localhost:8080
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: seaweedfs-filer
  namespace: data
spec:
  ingressClassName: nginx
  rules:
    - host: seaweedfs.localhost
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: seaweedfs-filer-svc
                port:
                  number: 8888