Private
Public Access
46 lines
1.3 KiB
Python
46 lines
1.3 KiB
Python
"""Create the application bucket and public object-read policy on RustFS."""
|
|
|
|
import json
|
|
import os
|
|
|
|
import boto3
|
|
from botocore.config import Config
|
|
from botocore.exceptions import ClientError
|
|
|
|
|
|
BUCKET = os.environ.get("STORAGE_BUCKET", "mineseeker")
|
|
s3 = boto3.client(
|
|
"s3",
|
|
endpoint_url=os.environ["TARGET_ENDPOINT"],
|
|
aws_access_key_id=os.environ["STORAGE_ACCESS_KEY"],
|
|
aws_secret_access_key=os.environ["STORAGE_SECRET_KEY"],
|
|
region_name="us-east-1",
|
|
config=Config(signature_version="s3v4", s3={"addressing_style": "path"}),
|
|
)
|
|
|
|
try:
|
|
s3.head_bucket(Bucket=BUCKET)
|
|
except ClientError as error:
|
|
status = error.response.get("ResponseMetadata", {}).get("HTTPStatusCode")
|
|
code = error.response.get("Error", {}).get("Code", "")
|
|
if status != 404 and code not in {"NoSuchBucket", "404", "NotFound"}:
|
|
raise
|
|
s3.create_bucket(Bucket=BUCKET)
|
|
|
|
policy = {
|
|
"Version": "2012-10-17",
|
|
"Statement": [
|
|
{
|
|
"Effect": "Allow",
|
|
"Principal": "*",
|
|
"Action": ["s3:GetObject"],
|
|
"Resource": [
|
|
f"arn:aws:s3:::{BUCKET}/media/*",
|
|
f"arn:aws:s3:::{BUCKET}/cache/*",
|
|
],
|
|
}
|
|
],
|
|
}
|
|
s3.put_bucket_policy(Bucket=BUCKET, Policy=json.dumps(policy))
|
|
print(f"RustFS bucket {BUCKET!r} is initialized", flush=True)
|