Add image tag to kustomize

Author: pschoen-itsc

manifests/kustomize/third-party/seaweedfs/base/seaweedfs/kustomization.yaml

@@ -3,10 +3,6 @@ kind: Kustomization
 namespace: kubeflow
 
 resources:
-- seaweedfs-deployment.yaml
-- seaweedfs-pvc.yaml
-- seaweedfs-networkpolicy.yaml
-- seaweedfs-service.yaml
 - seaweedfs-service-account.yaml
 - minio-service.yaml
 - mlpipeline-minio-artifact-secret.yaml

manifests/kustomize/third-party/seaweedfs/ha/base/filer-statefulset.yaml

@@ -33,10 +33,23 @@ spec:
       serviceAccountName: seaweedfs
       terminationGracePeriodSeconds: 60
       securityContext:
-        fsGroup: 1001
+        seccompProfile:
+          type: RuntimeDefault
+        fsGroup: 1000
       containers:
       - name: seaweedfs-filer
-        image: 'chrislusf/seaweedfs:3.92'
+        env:
+        - name: AWS_ACCESS_KEY_ID
+          valueFrom:
+            secretKeyRef:
+              name: mlpipeline-minio-artifact
+              key: accesskey
+        - name: AWS_SECRET_ACCESS_KEY
+          valueFrom:
+            secretKeyRef:
+              name: mlpipeline-minio-artifact
+              key: secretkey
+        image: 'chrislusf/seaweedfs'
         args:
         - 'filer'
         - '-port=8888'
@@ -75,8 +88,8 @@ spec:
           privileged: false
           runAsNonRoot: true
           # image defaults to root user
-          runAsUser: 1001
-          runAsGroup: 1001
+          runAsUser: 1000
+          runAsGroup: 1000
           capabilities:
             drop:
             - ALL
@@ -88,4 +101,4 @@ spec:
         - ReadWriteOnce
         resources:
           requests:
-            storage: 25Gi
+            storage: 20Gi

manifests/kustomize/third-party/seaweedfs/ha/base/kustomization.yaml

@@ -32,3 +32,7 @@ patches:
     - op: add
       path: /spec/selector/component
       value: s3
+
+images:
+- name: chrislusf/seaweedfs
+  newTag: '4.00'

manifests/kustomize/third-party/seaweedfs/ha/base/master-statefulset.yaml

@@ -33,14 +33,16 @@ spec:
       serviceAccountName: seaweedfs
       terminationGracePeriodSeconds: 60
       securityContext:
-        fsGroup: 1001
+        seccompProfile:
+          type: RuntimeDefault
+        fsGroup: 1000
       containers:
       - name: seaweedfs-master
-        image: 'chrislusf/seaweedfs:3.92'
+        image: 'chrislusf/seaweedfs'
         args:
         - 'master'
         - '-mdir=/data'
-        - '-defaultReplication=001'
+        - '-defaultReplication=001'  # replicate data to at least another volume (same "rack" and "datacenter")
         - '-volumePreallocate=false'
         - '-ip=$(POD_NAME).seaweedfs-master.$(NAMESPACE)'
         - '-ip.bind=0.0.0.0'
@@ -84,8 +86,8 @@ spec:
           privileged: false
           runAsNonRoot: true
           # image defaults to root user
-          runAsUser: 1001
-          runAsGroup: 1001
+          runAsUser: 1000
+          runAsGroup: 1000
           capabilities:
             drop:
             - ALL

manifests/kustomize/third-party/seaweedfs/ha/base/s3-gateway-deployment.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: seaweedfs-s3
-  namespace: kubeflow
   labels:
     app: seaweedfs
     component: s3
@@ -18,11 +17,22 @@ spec:
         app: seaweedfs
         component: s3
     spec:
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+          - labelSelector:
+              matchLabels:
+                app: seaweedfs
+                component: s3
+            topologyKey: kubernetes.io/hostname
       terminationGracePeriodSeconds: 10
       serviceAccountName: seaweedfs
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       containers:
       - name: seaweedfs
-        image: chrislusf/seaweedfs:3.92
+        image: chrislusf/seaweedfs
         env:
           - name: POD_IP
             valueFrom:
@@ -64,8 +74,8 @@ spec:
           privileged: false
           runAsNonRoot: true
           # image defaults to root user
-          runAsUser: 1001
-          runAsGroup: 1001
+          runAsUser: 1000
+          runAsGroup: 1000
           capabilities:
             drop:
             - ALL

manifests/kustomize/third-party/seaweedfs/ha/base/volume-statefulset.yaml

@@ -33,20 +33,22 @@ spec:
       serviceAccountName: seaweedfs
       terminationGracePeriodSeconds: 150
       securityContext:
-        fsGroup: 1001
+        seccompProfile:
+          type: RuntimeDefault
+        fsGroup: 1000
       containers:
       - name: seaweedfs
-        image: chrislusf/seaweedfs:3.92
+        image: chrislusf/seaweedfs
         args:
         - volume                                                                                                                                                                                                                                                                                                                                                                                                                                                                             
         - -port=8080                                                                                                                                                                                                                                                                                                                                                                                                                                                                      
-        - -dir /data1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
+        - -dir /data
         - -ip.bind=0.0.0.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
         - -ip=$(POD_NAME).seaweedfs-volume.$(NAMESPACE)
         - -mserver=seaweedfs-master-0.seaweedfs-master.$(NAMESPACE):9333,seaweedfs-master-1.seaweedfs-master.$(NAMESPACE):9333,seaweedfs-master-2.seaweedfs-master.$(NAMESPACE):9333
         volumeMounts:
-        - mountPath: /data1/
-          name: swfs-vol1
+        - mountPath: /data/
+          name: swfs-vol
         ports:
         - containerPort: 8080
           name: swfs-vol
@@ -90,16 +92,16 @@ spec:
           privileged: false
           runAsNonRoot: true
           # image defaults to root user
-          runAsUser: 1001
-          runAsGroup: 1001
+          runAsUser: 1000
+          runAsGroup: 1000
           capabilities:
             drop:
             - ALL
   volumeClaimTemplates:
   - apiVersion: v1
     kind: PersistentVolumeClaim
     metadata:
-      name: swfs-vol1
+      name: swfs-vol
     spec:
       accessModes:
       - ReadWriteOnce