feat(local): install minio object storage via helm chart

[m90]

Ticket https://phabricator.wikimedia.org/T343112

This is prep work for moving backup transfer over to an S3 client. As of this PR, there are no consumers of the MinIO service.

How to test/use this locally

1. Apply the changes and wait for the minio service to become ready
2. Install the minio client
3. Open a tunnel for the service:

   kubectl port-forward svc/minio 9000:9000
   

4. Set an alias for your local cluster

   mc alias set minikube "http://localhost:9000/" minio $(k get secrets/minio-credentials -o json | jq -r .data.rootPassword | base64 -d)
   

5. Poke around, e.g. create a new bucket and upload a file

   mc mb test-bucket
   echo "oh wow" > foo.txt
   mc cp foo.txt minikube/test-bucket
   mc cat minikube/test-bucket/foo.txt
   

[m90]

Slightly twisted: this create a root user off the k8s secret of the given name.

[m90]

Same here: does this create problems for others?

[deer-wmde]

works well for me

[m90]

It would also be possible to create an ingress for the service which exposes an administration UI, but I'm not sure this is currently needed?

[m90]

This can be tested in conjunction with wmde/wbaas-backup#24 and wbstack/charts#125 using

diff --git a/k8s/helmfile/env/local/wbaas-backup.values.yaml.gotmpl b/k8s/helmfile/env/local/wbaas-backup.values.yaml.gotmpl
index 8d9459c..47cd659 100644
--- a/k8s/helmfile/env/local/wbaas-backup.values.yaml.gotmpl
+++ b/k8s/helmfile/env/local/wbaas-backup.values.yaml.gotmpl
@@ -6,8 +6,15 @@ job:
   successfulJobsHistoryLimit: 1
   cronSchedule: "* * 1 1 *"
 
+scratchDiskSpace: 4Gi
+
+restorePodRunning: false
+
 storage:
-  scratchDiskSpace: 4Gi
-  gcs:
-    bucketName: nacho-cheese
-    uploadToBucket: false
+  bucketName: backups
+  uploadToBucket: true
+  accessKeySecretName: minio-credentials
+  accessKeySecretKey: rootUser
+  secretKeySecretName: minio-credentials
+  secretKeySecretKey: rootPassword
+  endpoint: http://minio.default.svc.cluster.local:9000
diff --git a/k8s/helmfile/helmfile.yaml b/k8s/helmfile/helmfile.yaml
index ed21617..61eb86e 100644
--- a/k8s/helmfile/helmfile.yaml
+++ b/k8s/helmfile/helmfile.yaml
@@ -210,7 +210,7 @@ releases:
 
   - name: wbaas-backup
     namespace: default
-    chart: wbstack/wbaas-backup
+    chart: ./../../../charts/charts/wbaas-backup
     version: 0.0.6
     <<: *default_release

[deer-wmde]

worked beautifully locally