Migrating FreeIPA from CentOS 7 LXC container to Rocky Linux and new COSI driver for SeaweedFS
Hi there! We are glad to share our last updates.
First, we published new article about updating an outdated FreeIPA in a large enterprise. This FreeIPA instance was installed in an LXC container on CentOS 7 and had been non-functional for several months. Our founder, Andrei Kvapil solved this problem like a ninja.
Second, we are pleased to introduce the new COSI driver for SeaweedFS. COSI is a unified Container Object Storage Interface for Kubernetes. It introduces new resources such as BucketClaim, Bucket, and BucketAccess for the declarative provisioning of S3 buckets and access management based on the PVC principle.
We are working on adding support for S3 buckets in Cozystack, and this driver will allow you to automatically order buckets directly from Kubernetes.
This is another project that we have developed in open source and are now gifting to the SeaweedFS community. The project has already been moved under the umbrella of the organization, and the official SeaweedFS chart has been expanded to include COSI support.
Why: COSI = Container Object Storage Interface for Kubernetes. It introduces BucketClaim, Bucket, and BucketAccess resources for declarative S3 bucket provisioning and access management — based on the PVC pattern.
Question 2 / 5
Which three CRDs does COSI introduce?
Why: BucketClaim (request), Bucket (provisioned bucket), BucketAccess (access binding). The pattern is analogous to PersistentVolumeClaim/PersistentVolume/Secret for storage.
Question 3 / 5
What did Aenix do with the SeaweedFS COSI driver they developed?
Why: Aenix developed the COSI driver in open source and gifted it to the SeaweedFS community. The project moved under the SeaweedFS organisation; the official SeaweedFS chart was expanded to include COSI support.
Question 4 / 5
Why was Cozystack adding S3 bucket support relevant to this driver?
Why: Aenix was working on S3 bucket support in Cozystack (PR #131). The COSI driver allows Cozystack tenants to automatically order buckets directly from Kubernetes, instead of provisioning out-of-band.
Question 5 / 5
What was the related article in the same announcement about?
Why: The first part of the post points readers to a long-form FreeIPA migration article by Andrei Kvapil — covering an LXC container on CentOS 7 that had been non-functional for several months, debugging certificates, and migration to Rocky Linux.
