use Helm to init rustfs in sandbox based on main branch

charts/flyte-devbox/Chart.lock

@@ -8,5 +8,8 @@ dependencies:
 - name: knative-serving
   repository: https://deeploy-knative-serving-charts.storage.googleapis.com/
   version: 1.18.3
-digest: sha256:6efe6bec03f8b60469f0a4d8c3a985d0c61a9a7ccdbf6a4c6608bd41b17ced8b
-generated: "2026-04-23T12:14:59.242727-07:00"
+- name: rustfs
+  repository: https://rustfs.github.io/helm
+  version: 0.0.94
+digest: sha256:7352f39ebf63c47326f8499ac0fa002e874094bccb74155b6d7adb460851936a
+generated: "2026-04-28T23:16:06.37398-05:00"

charts/flyte-devbox/Chart.yaml

@@ -36,3 +36,6 @@ dependencies:
     version: 1.18.3
     repository: https://deeploy-knative-serving-charts.storage.googleapis.com/
     condition: knative-serving.enabled
+  - name: rustfs
+    version: 0.0.94
+    repository: https://rustfs.github.io/helm

charts/flyte-devbox/templates/storage/rustfs/pv.yaml

@@ -1,4 +1,4 @@
-{{- if .Values.rustfs.enabled }}
+{{- if .Values.rustfs }}
 apiVersion: v1
 kind: PersistentVolume
 metadata:

charts/flyte-devbox/templates/storage/rustfs/pvc.yaml

@@ -1,4 +1,4 @@
-{{- if .Values.rustfs.enabled }}
+{{- if .Values.rustfs }}
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:

charts/flyte-devbox/values.yaml

@@ -33,7 +33,7 @@ flyte-binary:
         s3:
           disableSSL: true
           v2Signing: true
-          endpoint: http://rustfs.{{ .Release.Namespace }}:9000
+          endpoint: http://rustfs-svc.{{ .Release.Namespace }}:9000
           authType: accesskey
           accessKey: rustfs
           secretKey: rustfsstorage
@@ -58,7 +58,7 @@ flyte-binary:
       plugins:
         k8s:
           default-env-vars:
-            - FLYTE_AWS_ENDPOINT: http://rustfs.{{ .Release.Namespace }}:9000
+            - FLYTE_AWS_ENDPOINT: http://rustfs-svc.{{ .Release.Namespace }}:9000
             - FLYTE_AWS_ACCESS_KEY_ID: rustfs
             - FLYTE_AWS_SECRET_ACCESS_KEY: rustfsstorage
             - _U_EP_OVERRIDE: 'flyte-binary-http.{{ .Release.Namespace }}:8090'
@@ -133,10 +133,30 @@ flyte-binary:
         - '*'
         verbs:
         - '*'
+# RustFS chart configuration.
 rustfs:
-  enabled: true
-  accessKey: rustfs
-  secretKey: rustfsstorage
+  fullnameOverride: rustfs
+  mode:
+    standalone:
+      enabled: true
+      existingClaim:
+        dataClaim: flyte-devbox-rustfs-storage
+    distributed:
+      enabled: false
+  ingress:
+    enabled: false
+  image:
+    repository: rustfs/rustfs
+    tag: sandbox
+  service:
+    type: NodePort
+    endpoint:
+      nodePort: 30002
+  secret:
+    rustfs:
+      access_key: rustfs
+      secret_key: rustfsstorage
+
 postgresql:
   fullnameOverride: postgresql
   enabled: true

docker/devbox-bundled/Makefile

@@ -85,6 +85,7 @@ helm-repos:
 	helm repo add docker-registry https://twuni.github.io/docker-registry.helm
 	helm repo add bitnami https://charts.bitnami.com/bitnami
 	helm repo add knative-serving https://deeploy-knative-serving-charts.storage.googleapis.com/
+	helm repo add rustfs https://rustfs.github.io/helm
 	helm repo update
 
 .PHONY: dep_build

docker/devbox-bundled/kustomize/complete/kustomization.yaml

@@ -83,4 +83,49 @@ patches:
       name: net-istio-controller
       namespace: knative-serving
     $patch: delete
-
+- target:
+    kind: Pod
+    name: rustfs-test-connection
+  patch: |
+    $patch: delete
+    apiVersion: v1
+    kind: Pod
+    metadata:
+      name: rustfs-test-connection
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: rustfs
+      namespace: flyte
+    spec:
+      template:
+        spec:
+          initContainers:
+          - name: create-default-buckets
+            image: busybox:stable
+            imagePullPolicy: IfNotPresent
+            command:
+            - sh
+            - -c
+            - |
+              chown -R 10001:10001 /data
+              mkdir -p /data/flyte-data
+              chown 10001:10001 /data/flyte-data
+            securityContext:
+              runAsUser: 0
+              runAsNonRoot: false
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+            volumeMounts:
+            - mountPath: /data
+              name: data
+- target:
+    kind: Ingress
+    name: rustfs
+  patch: |
+    $patch: delete
+    apiVersion: networking.k8s.io/v1
+    kind: Ingress
+    metadata:
+      name: rustfs

docker/devbox-bundled/kustomize/dev/kustomization.yaml

@@ -73,4 +73,49 @@ patches:
       name: net-istio-controller
       namespace: knative-serving
     $patch: delete
-
+- target:
+    kind: Pod
+    name: rustfs-test-connection
+  patch: |
+    $patch: delete
+    apiVersion: v1
+    kind: Pod
+    metadata:
+      name: rustfs-test-connection
+- patch: |-
+    apiVersion: apps/v1
+    kind: Deployment
+    metadata:
+      name: rustfs
+      namespace: flyte
+    spec:
+      template:
+        spec:
+          initContainers:
+          - name: create-default-buckets
+            image: busybox:stable
+            imagePullPolicy: IfNotPresent
+            command:
+            - sh
+            - -c
+            - |
+              chown -R 10001:10001 /data
+              mkdir -p /data/flyte-data
+              chown 10001:10001 /data/flyte-data
+            securityContext:
+              runAsUser: 0
+              runAsNonRoot: false
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+            volumeMounts:
+            - mountPath: /data
+              name: data
+- target:
+    kind: Ingress
+    name: rustfs
+  patch: |
+    $patch: delete
+    apiVersion: networking.k8s.io/v1
+    kind: Ingress
+    metadata:
+      name: rustfs