Overview

Add support for creating buckets with Object Lock (WORM) and granting read-only access through COSI driver.

Use cases

1. Object Lock (WORM) — automatically create buckets with immutable storage protection via BucketClass parameters
2. Read-only access — grant read-only credentials to buckets via BucketAccessClass parameters

Desired behavior

apiVersion: objectstorage.k8s.io/v1alpha1
kind: BucketClass
metadata:
  name: immutable-storage
driverName: seaweedfs.objectstorage.k8s.io
parameters:
  objectLockEnabled: "true"
---
apiVersion: objectstorage.k8s.io/v1alpha1
kind: BucketAccessClass
metadata:
  name: readonly
driverName: seaweedfs.objectstorage.k8s.io
authenticationType: Key
parameters:
  accessPolicy: "readonly"

Blocked by

• Question: Standard parameters for BucketClass and BucketAccessClass kubernetes-sigs/container-object-storage-interface#244 — clarifying parameters usage in BucketClass/BucketAccessClass

Related

• feat(shell): add Object Lock management commands seaweedfs/seaweedfs#8141 — s3.bucket.lock command for enabling Object Lock on existing buckets