qruiq-cos-storage

Mount Tencent COS buckets as ReadWriteMany PVCs in Kubernetes clusters.

Updated Apr 4, 2026
One-click install
npx skills add https://github.com/qruiqai/qruiq-skills --skill qruiq-cos-storage
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: qruiq-cos-storage
Source: https://github.com/qruiqai/qruiq-skills/tree/main/skills/qruiq-cos-storage
Command: npx skills add https://github.com/qruiqai/qruiq-skills --skill qruiq-cos-storage

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Mount a Tencent COS bucket into a TKE pod as a ReadWriteMany PVC via the cosfs CSI driver. This enables apps to share user uploads and blobs through a regular filesystem path, while guiding on bucket naming, endpoints, and IAM scoping.

Core Features & Use Cases

  • Provides a scalable RWX storage layer by mounting COS as a PVC in Kubernetes, allowing multiple pods to read and write to the same bucket subpath.
  • Covers PV/PVC/Secret manifests, the <name>-<AppId> bucket naming rule, internal-vs-public endpoints, and cosfs caveats.
  • IAM: uses bucket-scoped CAM sub-user credentials, with per-namespace secrets and minimal privileges for uploads.

Quick Start

Configure cosfs in your cluster, create a COS bucket named your-bucket-name-AppId, set up a cos-secret in the workload namespace, and apply the PV, PVC, and deployment manifests.

Frequently Asked Questions about qruiq-cos-storage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I mount Tencent COS as a PVC in Kubernetes?

Mount Tencent COS as a PVC by applying the cosfs CSI driver with PV, PVC, and Secret manifests to provision a ReadWriteMany volume for shared pod storage.

Can multiple pods read and write to the same COS bucket simultaneously?

Yes, multiple pods can read and write to the same COS bucket simultaneously. Mounting COS as a ReadWriteMany PVC provides a scalable shared storage layer for application blobs and uploads.

Do I need a specific bucket naming convention for cosfs in TKE?

Yes, you need a specific bucket naming convention for cosfs in TKE. Your COS bucket must be named using the your-bucket-name-AppId format to successfully mount via the CSI driver.

What IAM credentials are required to mount COS storage in Kubernetes?

Mounting COS storage requires bucket-scoped CAM sub-user credentials stored as a per-namespace secret. This enforces minimal privileges for uploads and optimizes cluster security.

How do I choose between internal and public COS endpoints for my PVC?

Choosing between internal and public COS endpoints for your PVC depends on your network path. Region-aware endpoints optimize cost and security, using internal endpoints for TKE cluster traffic.