Skip to content

feat(seaweedfs-cosi-driver): support Object Lock and read-only bucket access #1921

Closed
#3136
Closed
feat(seaweedfs-cosi-driver): support Object Lock and read-only bucket access#1921
#3136
Assignees
kvaps
Labels
kind/featureCategorizes issue or PR as related to a new featurelifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale

Description

@kvaps
Andrei Kvapil (kvaps)
opened on Jan 27, 2026

Overview

Add support for creating buckets with Object Lock (WORM) and granting read-only access through COSI driver.

Use cases

  1. Object Lock (WORM) — automatically create buckets with immutable storage protection via BucketClass parameters
  2. Read-only access — grant read-only credentials to buckets via BucketAccessClass parameters

Desired behavior

apiVersion: objectstorage.k8s.io/v1alpha1
kind: BucketClass
metadata:
  name: immutable-storage
driverName: seaweedfs.objectstorage.k8s.io
parameters:
  objectLockEnabled: "true"
---
apiVersion: objectstorage.k8s.io/v1alpha1
kind: BucketAccessClass
metadata:
  name: readonly
driverName: seaweedfs.objectstorage.k8s.io
authenticationType: Key
parameters:
  accessPolicy: "readonly"

Blocked by

Related

Activity

  1. Andrei Kvapil (kvaps)
    self-assigned this
    on Jan 27, 2026
  2. dosubot
    added
    kind/featureCategorizes issue or PR as related to a new feature
    on Jan 27, 2026

  3. dosubot commented on Apr 28, 2026

    @dosubot
    dosubotbot
    on Apr 28, 2026 – with DosuBot

    Hi, Andrei Kvapil (@kvaps). I'm Dosu, and I'm helping the cozystack team manage their backlog and am marking this issue as stale.

    Issue Summary:

    • You proposed enhancing the seaweedfs COSI driver to support bucket creation with Object Lock (WORM) and enable read-only access via BucketClass and BucketAccessClass parameters.
    • This enhancement aims to provide automatic immutable storage protection and manage read-only credentials.
    • The implementation is currently on hold pending clarification on parameter usage in the upstream COSI specification.
    • There has been no further activity or comments on this issue since the initial proposal.

    Next Steps:

    • Please let us know if this issue is still relevant to the latest version of the cozystack repository by commenting here.
    • If we do not hear back within 7 days, this issue will be automatically closed.

    Thank you for your understanding and contribution!

  4. dosubot
    added
    stale
    on Apr 28, 2026
  5. github-actions
    added
    lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale
    and removed
    stale
    on May 1, 2026
  6. myasnikovdaniil
    added a commit that references this issue on Jun 25, 2026

    test(e2e): xfail bucket readonly-denial until driver enforces it

    8116b6e
  7. Aleksei Sviridkin (lexfrei)
    closed this as completedin #3136on Jun 30, 2026
  8. pull
    added a commit that references this issue on Jun 30, 2026

    fix(seaweedfs): enforce read-only bucket access by bumping cosi-drive…

    eab9b03
  9. myasnikovdaniil
    added 2 commits that reference this issue on Jul 8, 2026

    test(e2e): xfail bucket readonly-denial until driver enforces it

    9e2347e

    test(bucket,harbor): fail fast on frozen BucketClaims; enforce readon…

    d6ac62a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

kind/featureCategorizes issue or PR as related to a new featurelifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions