Skip to content

[seaweedfs] S3 ingress hardcoded to tenant-root instead of using tenant's ingress #2399

Open

Description

@myasnikovdaniil

What this issue is about

The SeaweedFS filer external ingress in packages/extra/seaweedfs/templates/ingress.yaml has ingressClassName hardcoded to tenant-root instead of dynamically using the tenant's own ingress controller value.

Problem

In packages/extra/seaweedfs/templates/ingress.yaml, the ingressClassName is hardcoded:

```yaml
spec:
ingressClassName: tenant-root
```

The file already reads the correct ingress class from the namespace values at the top:

```yaml
{{- $ingress := .Values._namespace.ingress }}
```

But this $ingress variable is never used in the spec.

Expected behavior

The ingressClassName should use the tenant's ingress controller, just like other apps (e.g., Harbor) do:

```yaml
spec:
ingressClassName: {{ $ingress }}
```

This matches the pattern used across packages/apps/ (e.g., packages/apps/harbor/templates/ingress.yaml).

Impact

Tenants that have ingress: true (i.e., they have their own dedicated ingress controller) cannot route SeaweedFS filer/S3 traffic through their own ingress controller — traffic is always routed through the root tenant's ingress instead. This breaks ingress isolation for multi-tenant deployments.

Activity

  1. added
    area/extraIssues or PRs related to tenant-specific modules (packages/extra/)
    priority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next release
    triage/acceptedIndicates an issue is ready to be actively worked on
    on Apr 27, 2026
  2. dosubot commented on Jul 27, 2026

    @dosubot

    Hi, myasnikovdaniil. I'm Dosu, and I'm helping the cozystack team manage their backlog and am marking this issue as stale.

    Issue Summary

    • The SeaweedFS S3/filer ingress template currently hardcodes ingressClassName: tenant-root.
    • The template already reads the tenant namespace ingress setting, so this hardcoded value breaks ingress isolation for tenants using their own ingress controller.
    • The requested fix is to use {{ $ingress }} instead, matching the behavior used by other app templates.
    • There have been no comments or follow-up updates since the issue was opened.

    Next Steps

    • Please confirm whether this is still relevant on the latest version of the cozystack repository.
    • If it is still relevant, you can keep the discussion open by commenting on the issue; otherwise, it will be automatically closed in 7 days.

    Thanks for your understanding and contribution.

  3. added
    lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale
    and removed on Aug 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

area/extraIssues or PRs related to tenant-specific modules (packages/extra/)kind/bugCategorizes issue or PR as related to a buglifecycle/staleDenotes an issue or PR has remained open with no activity and has become stalepriority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next releasetriage/acceptedIndicates an issue is ready to be actively worked on

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions