flyteorg · popojk · Mar 31, 2026 · Mar 31, 2026 · Apr 9, 2026 · Apr 9, 2026
diff --git a/charts/flyte-demo/Chart.lock b/charts/flyte-demo/Chart.lock
@@ -5,11 +5,5 @@ dependencies:
 - name: flyte-binary
   repository: file://../flyte-binary
   version: v0.2.0
-- name: minio
-  repository: https://charts.bitnami.com/bitnami
-  version: 12.6.7
-- name: postgresql
-  repository: https://charts.bitnami.com/bitnami
-  version: 12.8.1
-digest: sha256:0e1b539359cb8edbc8be650462d31a896712183935781cc46be3b5a3596f2fae
-generated: "2026-04-01T15:01:31.417773-07:00"
+digest: sha256:bc1e2e37ac2f11f9bf547262643c9076d6c86af661b6ffdee77cc6756d687d6e
+generated: "2026-04-10T11:04:12.371383+08:00"
diff --git a/charts/flyte-demo/Chart.yaml b/charts/flyte-demo/Chart.yaml
@@ -32,7 +32,3 @@ dependencies:
     version: v0.2.0
     repository: file://../flyte-binary
     condition: flyte-binary.enabled
-  - name: minio
-    version: 12.6.7
-    repository: https://charts.bitnami.com/bitnami
-    condition: minio.enabled
diff --git a/charts/flyte-demo/templates/_helpers.tpl b/charts/flyte-demo/templates/_helpers.tpl
@@ -83,10 +83,10 @@ Name of PersistentVolume and PersistentVolumeClaim for PostgreSQL database
 {{- end }}
 
 {{/*
-Name of PersistentVolume and PersistentVolumeClaim for Minio
+Name of PersistentVolume and PersistentVolumeClaim for RustFS
 */}}
-{{- define "flyte-demo.persistence.minioVolumeName" -}}
-{{- printf "%s-minio-storage" .Release.Name -}}
+{{- define "flyte-sandbox.persistence.rustfsVolumeName" -}}
+{{- printf "%s-rustfs-storage" .Release.Name -}}
 {{- end }}
 
 

diff --git a/charts/flyte-demo/templates/proxy/configmap.yaml b/charts/flyte-demo/templates/proxy/configmap.yaml
diff --git a/charts/flyte-demo/templates/proxy/ingress.yaml b/charts/flyte-demo/templates/proxy/ingress.yaml
@@ -53,35 +53,3 @@ spec:
                   number: 80
 {{- end }}
 ---
-{{- if .Values.minio.enabled }}
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
-  name: {{ include "flyte-demo.fullname" . }}-minio
-  namespace: {{ .Release.Namespace | quote }}
-  labels: {{- include "flyte-demo.labels" . | nindent 4 }}
-  annotations:
-    traefik.ingress.kubernetes.io/router.middlewares: {{ .Release.Namespace }}-strip-minio@kubernetescrd
-spec:
-  rules:
-    - http:
-        paths:
-          - path: /minio
-            pathType: Prefix
-            backend:
-              service:
-                name: minio
-                port:
-                  number: 9001
----
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: strip-minio
-  namespace: {{ .Release.Namespace | quote }}
-  labels: {{- include "flyte-demo.labels" . | nindent 4 }}
-spec:
-  stripPrefix:
-    prefixes:
-      - /minio
-{{- end }}
diff --git a/charts/flyte-demo/templates/storage/rustfs/deployment.yaml b/charts/flyte-demo/templates/storage/rustfs/deployment.yaml
@@ -0,0 +1,85 @@
+{{- if .Values.rustfs.enabled }}
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: {{ .Release.Name }}-rustfs
+  namespace: {{ .Release.Namespace | quote }}
+  labels:
+    {{- include "flyte-demo.labels" . | nindent 4 }}
+spec:
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: rustfs
+      app.kubernetes.io/instance: {{ .Release.Name }}
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: rustfs
+        app.kubernetes.io/instance: {{ .Release.Name }}
+    spec:
+      initContainers:
+      - name: volume-permissions
+        image: busybox:latest
+        imagePullPolicy: IfNotPresent
+        command:
+        - /bin/sh
+        - -ec
+        - |
+          chown -R 10001:10001 /data
+          mkdir -p /data/flyte-data
+          chown 10001:10001 /data/flyte-data
+        securityContext:
+          runAsUser: 0
+        volumeMounts:
+        - mountPath: /data
+          name: data
+      containers:
+      - name: rustfs
+        image: rustfs/rustfs:latest
+        imagePullPolicy: IfNotPresent
+        env:
+        - name: RUSTFS_ADDRESS
+          value: "0.0.0.0:9000"
+        - name: RUSTFS_VOLUMES
+          value: "/data"
+        - name: RUSTFS_ACCESS_KEY
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Release.Name }}-rustfs
+              key: access-key
+        - name: RUSTFS_SECRET_KEY
+          valueFrom:
+            secretKeyRef:
+              name: {{ .Release.Name }}-rustfs
+              key: secret-key
+        ports:
+        - containerPort: 9000
+          name: rustfs-api
+          protocol: TCP
+        livenessProbe:
+          tcpSocket:
+            port: rustfs-api
+          initialDelaySeconds: 10
+          periodSeconds: 10
+          failureThreshold: 5
+        readinessProbe:
+          tcpSocket:
+            port: rustfs-api
+          initialDelaySeconds: 5
+          periodSeconds: 5
+          failureThreshold: 5
+        securityContext:
+          runAsUser: 10001
+          runAsNonRoot: true
+        volumeMounts:
+        - mountPath: /data
+          name: data
+      securityContext:
+        fsGroup: 10001
+      volumes:
+      - name: data
+        persistentVolumeClaim:
+          claimName: {{ include "flyte-sandbox.persistence.rustfsVolumeName" . }}
+{{- end }}
diff --git a/...lyte-demo/templates/storage/minio/pv.yaml → ...yte-demo/templates/storage/rustfs/pv.yaml b/...lyte-demo/templates/storage/minio/pv.yaml → ...yte-demo/templates/storage/rustfs/pv.yaml
@@ -1,7 +1,8 @@
+{{- if .Values.rustfs.enabled }}
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: {{ include "flyte-demo.persistence.minioVolumeName" . }}
+  name: {{ include "flyte-sandbox.persistence.rustfsVolumeName" . }}
   namespace: {{ .Release.Namespace | quote }}
   labels:
     {{- include "flyte-demo.labels" . | nindent 4 }}
@@ -12,4 +13,5 @@ spec:
   capacity:
     storage: 1Gi
   hostPath:
-    path: "/var/lib/flyte/storage/minio"
+    path: "/var/lib/flyte/storage/rustfs"
+{{- end }}
diff --git a/...yte-demo/templates/storage/minio/pvc.yaml → ...te-demo/templates/storage/rustfs/pvc.yaml b/...yte-demo/templates/storage/minio/pvc.yaml → ...te-demo/templates/storage/rustfs/pvc.yaml
@@ -1,7 +1,8 @@
+{{- if .Values.rustfs.enabled }}
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: {{ include "flyte-demo.persistence.minioVolumeName" . }}
+  name: {{ include "flyte-sandbox.persistence.rustfsVolumeName" . }}
   namespace: {{ .Release.Namespace | quote }}
   labels:
     {{- include "flyte-demo.labels" . | nindent 4 }}
@@ -12,4 +13,5 @@ spec:
   resources:
     requests:
       storage: 1Gi
-  volumeName: {{ include "flyte-demo.persistence.minioVolumeName" . }}
+  volumeName: {{ include "flyte-sandbox.persistence.rustfsVolumeName" . }}
+{{- end }}
diff --git a/charts/flyte-demo/templates/storage/rustfs/secret.yaml b/charts/flyte-demo/templates/storage/rustfs/secret.yaml
@@ -0,0 +1,13 @@
+{{- if .Values.rustfs.enabled }}
+apiVersion: v1
+kind: Secret
+metadata:
+  name: {{ .Release.Name }}-rustfs
+  namespace: {{ .Release.Namespace | quote }}
+  labels:
+    {{- include "flyte-demo.labels" . | nindent 4 }}
+type: Opaque
+data:
+  access-key: {{ .Values.rustfs.accessKey | b64enc | quote }}
+  secret-key: {{ .Values.rustfs.secretKey | b64enc | quote }}
+{{- end }}
diff --git a/charts/flyte-demo/templates/storage/rustfs/service.yaml b/charts/flyte-demo/templates/storage/rustfs/service.yaml
@@ -0,0 +1,19 @@
+{{- if .Values.rustfs.enabled }}
+apiVersion: v1
+kind: Service
+metadata:
+  name: {{ .Release.Name }}-rustfs
+  namespace: {{ .Release.Namespace | quote }}
+  labels:
+    {{- include "flyte-demo.labels" . | nindent 4 }}
+spec:
+  type: NodePort
+  ports:
+  - name: rustfs-api
+    nodePort: 30002
+    port: 9000
+    targetPort: rustfs-api
+  selector:
+    app.kubernetes.io/name: rustfs
+    app.kubernetes.io/instance: {{ .Release.Name }}
+{{- end }}
diff --git a/charts/flyte-demo/values.yaml b/charts/flyte-demo/values.yaml
@@ -27,10 +27,10 @@ flyte-binary:
         s3:
           disableSSL: true
           v2Signing: true
-          endpoint: http://minio.{{ .Release.Namespace }}:9000
+          endpoint: http://{{ printf "%s-rustfs" .Release.Name | trunc 63 | trimSuffix "-" }}.{{ .Release.Namespace }}:9000
           authType: accesskey
-          accessKey: minio
-          secretKey: miniostorage
+          accessKey: rustfs
+          secretKey: rustfsstorage
     logging:
       level: 5
     inline:
@@ -52,9 +52,9 @@ flyte-binary:
       plugins:
         k8s:
           default-env-vars:
-            - FLYTE_AWS_ENDPOINT: http://minio.{{ .Release.Namespace }}:9000
-            - FLYTE_AWS_ACCESS_KEY_ID: minio
-            - FLYTE_AWS_SECRET_ACCESS_KEY: miniostorage
+            - FLYTE_AWS_ENDPOINT: http://{{ printf "%s-rustfs" .Release.Name | trunc 63 | trimSuffix "-" }}.{{ .Release.Namespace }}:9000
+            - FLYTE_AWS_ACCESS_KEY_ID: rustfs
+            - FLYTE_AWS_SECRET_ACCESS_KEY: rustfsstorage
             - _U_EP_OVERRIDE: 'flyte-binary-http.{{ .Release.Namespace }}:8090'
             - _U_INSECURE: "true"
             - _U_USE_ACTIONS: "1"
@@ -109,31 +109,10 @@ flyte-binary:
         verbs:
         - '*'
 
-minio:
-  fullnameOverride: minio
+rustfs:
   enabled: true
-  image:
-    tag: sandbox
-    pullPolicy: Never
-  auth:
-    rootUser: minio
-    rootPassword: miniostorage
-  defaultBuckets: flyte-data
-  extraEnvVars:
-    - name: MINIO_BROWSER_REDIRECT_URL
-      value: http://localhost:30080/minio
-  service:
-    type: NodePort
-    nodePorts:
-      api: 30002
-  persistence:
-    enabled: true
-    existingClaim: '{{ include "flyte-demo.persistence.minioVolumeName" . }}'
-  volumePermissions:
-    enabled: true
-    image:
-      tag: sandbox
-      pullPolicy: Never
+  accessKey: rustfs
+  secretKey: rustfsstorage
 
 postgresql:
   fullnameOverride: postgresql

diff --git a/docker/demo-bundled/Makefile b/docker/demo-bundled/Makefile
@@ -75,7 +75,7 @@ build: sync-crds flyte console dep_update manifests
 # 6443 - k8s API server
 # 30000 - Docker Registry
 # 30001 - DB
-# 30002 - Minio
+# 30002 - RustFS
 # 30080 - Flyte Proxy
 .PHONY: start
 start: FLYTE_DEMO_IMAGE := flyte-demo:latest

diff --git a/docker/demo-bundled/kustomize/complete/kustomization.yaml b/docker/demo-bundled/kustomize/complete/kustomization.yaml
@@ -29,4 +29,4 @@ resources:
 - ../namespace.yaml
 - ../embedded-postgres-service.yaml
 patches:
-- path: ../minio-patch.yaml
+- path: ../rustfs-patch.yaml
diff --git a/docker/demo-bundled/kustomize/dev/kustomization.yaml b/docker/demo-bundled/kustomize/dev/kustomization.yaml
@@ -19,4 +19,4 @@ resources:
 - ../../../../charts/flyte-binary/templates/crds/flyte.org_taskactions.yaml
 - ../embedded-postgres-service.yaml
 patches:
-- path: ../minio-patch.yaml
+- path: ../rustfs-patch.yaml
diff --git a/docker/demo-bundled/kustomize/rustfs-patch.yaml b/docker/demo-bundled/kustomize/rustfs-patch.yaml
@@ -0,0 +1,24 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: flyte-demo-rustfs
+  namespace: flyte
+spec:
+  template:
+    spec:
+      initContainers:
+      - name: volume-permissions
+        command:
+        - /bin/sh
+        - -ec
+        - |
+          chown -R 10001:10001 /data
+          mkdir -p /data/flyte-data
+          chown 10001:10001 /data/flyte-data
+      containers:
+      - name: rustfs
+        env:
+        - name: RUSTFS_ADDRESS
+          value: "0.0.0.0:9000"
+        - name: RUSTFS_VOLUMES
+          value: "/data"