add standalone mode support (#881)

* add standalone mode support * update readme file * change non-root from 1000 to 10001 * delete self sign crt content * modify security content * fix synatx error for readme file. Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * update image repository and tag info. Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix helm chart syntax issue. Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix helm chart syntax issue. Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: houseme <housemecn@gmail.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: loverustfs <hello@rustfs.com>
2026-08-13 00:26:53 +00:00 · 2025-11-19 13:56:21 +08:00
parent a13ce08590
commit 44f3f3d070
10 changed files with 183 additions and 31 deletions
@@ -8,9 +8,13 @@ data:
  RUSTFS_OBS_LOG_DIRECTORY: {{ .Values.config.rustfs.obs_log_directory | quote }}
  RUSTFS_CONSOLE_ENABLE: {{ .Values.config.rustfs.console_enable | quote }}
  RUSTFS_LOG_LEVEL: {{ .Values.config.rustfs.log_level | quote }}
+  {{- if .Values.mode.distributed.enabled }}
  {{- if eq (int .Values.replicaCount) 4 }}
  RUSTFS_VOLUMES: "http://rustfs-{0...3}.rustfs-headless.rustfs.svc.cluster.local:9000/data/rustfs{0...3}"
  {{- else if eq (int .Values.replicaCount) 16 }}
  RUSTFS_VOLUMES: "http://rustfs-{0...15}.rustfs-headless.rustfs.svc.cluster.local:9000/data"
  {{- end }}
+  {{- else }}
+  RUSTFS_VOLUMES: "/data"
+  {{- end }}
  RUSTFS_OBS_ENVIRONMENT: "develop"
@@ -0,0 +1,96 @@
+{{- if .Values.mode.standalone.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ include "rustfs.fullname" . }}
+  labels:
+    app: {{ include "rustfs.name" . }}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: {{ include "rustfs.name" . }}
+  template:
+    metadata:
+      labels:
+        app: {{ include "rustfs.name" . }}
+    spec:
+      {{- if .Values.podSecurityContext }}
+      securityContext:
+      {{- toYaml .Values.podSecurityContext | nindent 12 }}
+      {{- end }}
+      initContainers:
+        - name: init-step
+          image: busybox
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
+          command:
+            - sh
+            - -c
+            - |
+              mkdir -p /data /logs
+              chown -R 10001:10001 /data /logs
+          volumeMounts:
+            - name: data
+              mountPath: /data
+            - name: logs
+              mountPath: /logs
+      containers:
+        - name: {{ .Chart.Name }}
+          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          command: ["/usr/bin/rustfs"]
+          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          {{- if .Values.containerSecurityContext }}
+          securityContext:
+          {{- toYaml .Values.containerSecurityContext | nindent 12 }}
+          {{- end }}
+          ports:
+            - containerPort: {{ .Values.service.ep_port }}
+              name: endpoint
+            - containerPort: {{ .Values.service.console_port }}
+              name: console
+          envFrom:
+            - configMapRef:
+                name: {{ include "rustfs.fullname" . }}-config
+            - secretRef:
+                name: {{ include "rustfs.fullname" . }}-secret
+          resources:
+            requests:
+              memory: {{ .Values.resources.requests.memory }}
+              cpu: {{ .Values.resources.requests.cpu }}
+            limits:
+              memory: {{ .Values.resources.limits.memory }}
+              cpu: {{ .Values.resources.limits.cpu }}
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 9000
+            initialDelaySeconds: 10
+            periodSeconds: 5
+            timeoutSeconds: 3
+            successThreshold: 1
+            failureThreshold: 3
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 9000
+            initialDelaySeconds: 30
+            periodSeconds: 5
+            timeoutSeconds: 3
+            successThreshold: 1
+            failureThreshold: 3
+          volumeMounts:
+            - name: logs
+              mountPath: /logs
+            - name: data
+              mountPath: /data
+      volumes:
+        - name: logs
+          persistentVolumeClaim:
+            claimName: {{ include "rustfs.fullname" . }}-logs
+        - name: data
+          persistentVolumeClaim:
+            claimName: {{ include "rustfs.fullname" . }}-data
+{{- end }}
@@ -0,0 +1,24 @@
+{{- if .Values.mode.standalone.enabled }}
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ include "rustfs.fullname" . }}-data
+spec:
+  accessModes: ["ReadWriteOnce"]
+  storageClassName: {{ .Values.storageclass.name }}
+  resources:
+    requests:
+      storage: {{ .Values.storageclass.size }}
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ include "rustfs.fullname" . }}-logs
+spec:
+  accessModes: ["ReadWriteOnce"]
+  storageClassName: {{ .Values.storageclass.name }}
+  resources:
+    requests:
+      storage: {{ .Values.storageclass.size }}
+{{- end }}
@@ -1,3 +1,4 @@
+{{- if .Values.mode.distributed.enabled }}
 apiVersion: v1
 kind: Service
 metadata:
@@ -22,18 +23,21 @@ spec:
      name: console
  selector:
    app: {{ include "rustfs.name" . }}
+{{- end }}

 ---
 apiVersion: v1
 kind: Service
 metadata:
  name: {{ include "rustfs.fullname" . }}-svc
+  {{- if .Values.mode.distributed.enabled }}
  {{- if eq .Values.ingress.className "traefik" }}
  {{- with .Values.ingress.traefikAnnotations }}
  annotations:
    {{- toYaml . | nindent 4 }}
  {{- end }}
  {{- end }}
+  {{- end }}
  labels:
    {{- include "rustfs.labels" . | nindent 4 }}
 spec:
@@ -1,3 +1,4 @@
+{{- if .Values.mode.distributed.enabled }}
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
@@ -14,10 +15,17 @@ spec:
      labels:
        app: {{ include "rustfs.name" . }}
    spec:
+      {{- if .Values.podSecurityContext }}
+      securityContext:
+      {{- toYaml .Values.podSecurityContext | nindent 12 }}
+      {{- end }}
      initContainers:
        - name: init-step
          image: busybox
          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          securityContext:
+            runAsUser: 0
+            runAsGroup: 0
          env:
            - name: REPLICA_COUNT
              value: "{{ .Values.replicaCount }}"
@@ -33,8 +41,8 @@ spec:
                mkdir -p /data
              fi

-              chown -R 1000:1000 /data
-              chown -R 1000:1000 /logs
+              chown -R 10001:10001 /data
+              chown -R 10001:10001 /logs
          volumeMounts:
            {{- if eq (int .Values.replicaCount) 4 }}
            {{- range $i := until (int .Values.replicaCount) }}
@@ -52,9 +60,9 @@ spec:
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          command: ["/usr/bin/rustfs"]
          imagePullPolicy: {{ .Values.image.pullPolicy }}
-          {{- if .Values.securityContext }}
+          {{- if .Values.containerSecurityContext }}
          securityContext:
-          {{- toYaml .Values.securityContext | nindent 12 }}
+          {{- toYaml .Values.containerSecurityContext | nindent 12 }}
          {{- end }}
          ports:
            - containerPort: {{ .Values.service.ep_port }}
@@ -89,7 +97,6 @@ spec:
            httpGet:
              path: /health
              port: 9000
-            exec:
            initialDelaySeconds: 30
            periodSeconds: 5
            timeoutSeconds: 3
@@ -107,12 +114,17 @@ spec:
            - name: data
              mountPath: /data
            {{- end }}
-      volumes:
-        - name: logs
-          emptyDir: {}
  volumeClaimTemplates:
-  {{- if eq (int .Values.replicaCount) 4 }}
-  {{- range $i := until (int .Values.replicaCount) }}
+    - metadata:
+        name: logs
+      spec:
+        accessModes: ["ReadWriteOnce"]
+        storageClassName: {{ $.Values.storageclass.name }}
+        resources:
+          requests:
+            storage: {{ $.Values.storageclass.size}}
+    {{- if eq (int .Values.replicaCount) 4 }}
+    {{- range $i := until (int .Values.replicaCount) }}
    - metadata:
        name: data-rustfs-{{ $i }}
      spec:
@@ -121,8 +133,8 @@ spec:
        resources:
          requests:
            storage: {{ $.Values.storageclass.size}}
-  {{- end }}
-  {{- else if eq (int .Values.replicaCount) 16 }}
+    {{- end }}
+    {{- else if eq (int .Values.replicaCount) 16 }}
    - metadata:
        name: data
      spec:
@@ -131,4 +143,5 @@ spec:
        resources:
          requests:
            storage: {{ $.Values.storageclass.size}}
-  {{- end }}
+    {{- end }}
+{{- end }}
@@ -1,3 +1,3 @@
 -----BEGIN CERTIFICATE-----
-Please input your cert file content.
+Input your crt content.
 -----END CERTIFICATE-----
@@ -1,3 +1,3 @@
 -----BEGIN PRIVATE KEY-----
-Please input your key file content
+Input your private key.
 -----END PRIVATE KEY-----
@@ -9,9 +9,9 @@ replicaCount: 4
 image:
  repository: rustfs/rustfs
  # This sets the pull policy for images.
-  pullPolicy: Always
+  pullPolicy: IfNotPresent
  # Overrides the image tag whose default is the chart appVersion.
-  tag: "1.0.0-alpha.66"
+  tag: "latest"

 # This is for the secrets for pulling an image from a private repository more information can be found here: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
 imagePullSecrets: []
@@ -19,6 +19,13 @@ imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""

+
+mode:
+  standalone:
+    enabled: false
+  distributed:
+    enabled: true
+
 secret:
  rustfs:
    access_key: rustfsadmin
@@ -54,16 +61,16 @@ podAnnotations: {}
 podLabels: {}

 podSecurityContext:
-  {}
-  # fsGroup: 2000
+  fsGroup: 10001
+  runAsUser: 10001 
+  runAsGroup: 10001

-securityContext:
+containerSecurityContext:
  capabilities:
    drop:
-    - ALL
+      - ALL
  readOnlyRootFilesystem: true
  runAsNonRoot: true
-  runAsUser: 1000

 service:
  type: NodePort
@@ -87,7 +94,7 @@ ingress:
    nginx.ingress.kubernetes.io/session-cookie-max-age: "3600"
    nginx.ingress.kubernetes.io/session-cookie-name: rustfs
  hosts:
-    - host: xmg.rustfs.com
+    - host: your.rustfs.com
      paths:
        - path: /
          pathType: ImplementationSpecific