11# Example values for s3proxy Helm chart
22# This demonstrates a typical configuration using filesystem backend with authentication
33
4+ # Custom image configuration (optional)
5+ # image:
6+ # repository: andrewgaul/s3proxy
7+ # tag: "latest"
8+ # pullPolicy: Always
9+
10+ # Custom config merge container image configuration (optional)
11+ # configMergeImage:
12+ # repository: busybox
13+ # tag: "1.36"
14+ # pullPolicy: IfNotPresent
15+
416# S3Proxy configuration
517config :
6- # Authentication type for clients connecting to S3Proxy
7- # Options: none, aws-v2, aws-v4, aws-v2-or-v4
8- authorization : " aws-v4"
9-
10- # Credentials for clients to authenticate to S3Proxy
11- # These should be changed to secure values
12- identity : " admin"
13- credential : " changeme123"
18+ # Log level for S3Proxy (DEBUG, INFO, WARN, ERROR)
19+ logLevel : " INFO"
20+
21+ auth :
22+ # Authentication type for clients connecting to S3Proxy
23+ # Options: none, aws-v2, aws-v4, aws-v2-or-v4
24+ type : " aws-v4"
25+ # Credentials for clients to authenticate to S3Proxy
26+ # These should be changed to secure values
27+ identity : " admin"
28+ secret : " changeme123"
1429
1530 # Enable CORS for web applications
1631 cors :
@@ -30,24 +45,95 @@ config:
3045 allowCredential : true
3146
3247 # Storage backend configuration
33- backend :
34- # Use filesystem backend for local storage
35- provider : " filesystem-nio2"
48+ # Multiple backends can be enabled simultaneously
49+ # Properties files will be loaded in order: main properties first, then each backend's properties
50+ # Later properties can override earlier ones if there are conflicts
51+ backends :
52+ # Filesystem backend for local storage
3653 filesystem :
54+ enabled : true # Set to true to use filesystem backend
55+ nio2 : true # Set to true for NIO2 implementation (filesystem-nio2), false for standard (filesystem)
3756 basedir : " /data/s3proxy"
3857
39- # Example: AWS S3 backend (uncomment to use)
40- # provider: "aws-s3"
41- # awsS3:
42- # region: "us-west-2"
43- # accessKeyId: "AKIAIOSFODNN7EXAMPLE"
44- # secretAccessKey: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
45-
46- # Example: Azure Blob backend (uncomment to use)
47- # provider: "azureblob"
48- # azureblob:
49- # account: "mystorageaccount"
50- # key: "base64encodedkey=="
58+ # Transient (in-memory) backend - useful for testing
59+ transient :
60+ enabled : false # Set to true to use transient backend
61+ nio2 : true # Set to true for NIO2 implementation (transient-nio2), false for standard (transient)
62+
63+ # S3 backend (AWS S3 or S3-compatible storage)
64+ s3 :
65+ enabled : false # Set to true to use S3 backend
66+ aws : true # Set to true for AWS S3 (aws-s3 provider), false for generic S3
67+ region : " us-west-2"
68+ # endpoint: "https://s3.amazonaws.com" # Optional custom endpoint (e.g., MinIO, Ceph)
69+ accessKeyId : " AKIAIOSFODNN7EXAMPLE"
70+ secretAccessKey : " wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
71+
72+ # Azure Blob Storage backend
73+ azureblob :
74+ enabled : false # Set to true to use Azure Blob backend
75+ provider : " azureblob" # Can be "azureblob" or "azureblob-sdk"
76+ account : " mystorageaccount"
77+ key : " base64encodedkey=="
78+ # endpoint: "https://mystorageaccount.blob.core.windows.net" # Optional
79+ # sasToken: "" # Optional SAS token
80+
81+ # Google Cloud Storage backend
82+ googleCloudStorage :
83+ enabled : false # Set to true to use GCS backend
84+ projectId : " my-project"
85+
86+ # Service account email or user email (required for both authentication methods)
87+ 88+
89+ # Option 1: Using privateKey directly
90+ privateKey : " -----BEGIN RSA PRIVATE KEY-----\n ..."
91+
92+ # Option 2: Using JSON credentials file (preferred for GCP)
93+ # This provides the credential (privateKey) via a mounted file
94+ jsonCredentials :
95+ enabled : false # Set to true to use JSON credentials
96+
97+ # Either provide the JSON content directly:
98+ # jsonContent: |
99+ # {
100+ # "type": "service_account",
101+ # "project_id": "my-project",
102+ # "private_key_id": "key-id",
103+ # "private_key": "-----BEGIN RSA PRIVATE KEY-----\n...",
104+ # "client_email": "[email protected] ", 105+ # "client_id": "...",
106+ # "auth_uri": "https://accounts.google.com/o/oauth2/auth",
107+ # "token_uri": "https://oauth2.googleapis.com/token",
108+ # "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
109+ # "client_x509_cert_url": "..."
110+ # }
111+
112+ # Or reference an existing secret containing the JSON:
113+ # existingSecret: "my-gcp-credentials-secret"
114+ # secretKey: "credentials.json" # Key in the secret containing the JSON (default: credentials.json)
115+
116+ # Backblaze B2 backend
117+ b2 :
118+ enabled : false # Set to true to use B2 backend
119+ account : " account-id"
120+ applicationKey : " application-key"
121+
122+ # OpenStack Swift backend
123+ openstackSwift :
124+ enabled : false # Set to true to use Swift backend
125+ authUrl : " https://auth.cloud.com/v2.0"
126+ tenantName : " my-tenant"
127+ userName : " my-user"
128+ password : " my-password"
129+ region : " RegionOne"
130+
131+ # Rackspace Cloud Files backend
132+ rackspaceCloudfiles :
133+ enabled : false # Set to true to use Rackspace Cloud Files backend
134+ region : " us" # Region: "us" or "uk"
135+ userName : " my-user"
136+ apiKey : " my-api-key"
51137
52138# Persistence settings for filesystem backend
53139persistence :
0 commit comments