From f33f7c10f0781652d99b8b656d34e230f371e71c Mon Sep 17 00:00:00 2001
From: Max Roby <max@lil-mac.lan>
Date: Thu, 23 Nov 2023 13:23:51 +0100
Subject: [PATCH] trying to get anonymous access for buckets working

---
 .../seaweedfs/templates/post-install-bucket-hook.yaml | 11 +++++++++--
 k8s/charts/seaweedfs/values.yaml                      | 10 ++++++----
 2 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/k8s/charts/seaweedfs/templates/post-install-bucket-hook.yaml b/k8s/charts/seaweedfs/templates/post-install-bucket-hook.yaml
index 6b0ce5f80..e375ab678 100644
--- a/k8s/charts/seaweedfs/templates/post-install-bucket-hook.yaml
+++ b/k8s/charts/seaweedfs/templates/post-install-bucket-hook.yaml
@@ -50,11 +50,18 @@ spec:
           - "/bin/sh"
           - "-ec"
           - |
-          {{- range $.Values.filer.s3.createBuckets }}
+          {{- range $reg, $props := $.Values.filer.s3.createBuckets }}
             exec /bin/echo \
-            "s3.bucket.create --name {{ . }}" |\
+            "s3.bucket.create --name {{ $props.name }}" |\
             /usr/bin/weed shell
           {{- end }}
+          {{- range $reg, $props := $.Values.filer.s3.createBuckets }}
+          {{- if $props.anonymousRead }}
+            exec /bin/echo \
+            "s3.configure --user anonymous --buckets {{ $props.name }}" |\
+            /usr/bin/weed shell
+          {{- end }}  
+          {{- end }}
         ports:
           - containerPort: {{ .Values.master.port }}
             name: swfs-master
diff --git a/k8s/charts/seaweedfs/values.yaml b/k8s/charts/seaweedfs/values.yaml
index 5f2359250..0a76a4436 100644
--- a/k8s/charts/seaweedfs/values.yaml
+++ b/k8s/charts/seaweedfs/values.yaml
@@ -579,12 +579,14 @@ filer:
     # You may specify buckets and users to be created during the install process 
     # The user's credentials must be in an existing secret using the key names:
     #   'ACCESS_KEY_ID' and 'ACCESS_SECRET_KEY'
-    #createBuckets: 
-    #   - bucket-a
-    #   - bucket-b
+    # createBuckets: 
+    #   - name: bucket-a
+    #     anonymousRead: true
+    #   - name: bucket-b
+    #     anonymousRead: false
     # createUsers:
     #   - name: friend
-    #     actions: "read,write,list"
+    #     actions: "Read,Write,List"
     #     buckets: "bucket-b"
     #     secretName: friend_s3_creds