feat: archive build/deploy logs to MinIO for post-eviction retrieval

Tiltfile

@@ -104,6 +104,37 @@ k8s_resource(
     labels=["infra"]
 )
 
+##################################
+# MinIO (Helm)
+##################################
+helm_resource(
+    name='minio',
+    chart='bitnami/minio',
+    namespace=app_namespace,
+    resource_deps=['bitnami'],
+    flags=[
+        '--version', '17.0.21',
+        '--set', 'auth.rootUser=minioadmin',
+        '--set', 'auth.rootPassword=minioadmin',
+        '--set', 'defaultBuckets=lifecycle-logs',
+        '--set', 'persistence.enabled=false',
+        '--set', 'image.repository=bitnamilegacy/minio',
+        '--set', 'image.tag=2025.7.23',
+        '--set', 'clientImage.repository=bitnamilegacy/minio-client',
+        '--set', 'clientImage.tag=2025.7.23',
+        '--set', 'console.image.repository=bitnamilegacy/minio-object-browser',
+        '--set', 'console.image.tag=2.0.2-debian-12-r3',
+        '--set', 'volumePermissions.image.repository=bitnamilegacy/os-shell',
+        '--set', 'volumePermissions.image.tag=2025.7.23',
+    ],
+    labels=["infra"]
+)
+k8s_resource(
+    "minio",
+    port_forwards=["9000:9000", "9001:9001"],
+    labels=["infra"]
+)
+
 ##################################
 # Worker & Web (Helm, Single Deploy)
 ##################################

helm/environments/local/lifecycle.yaml

@@ -30,6 +30,22 @@ global:
     # Add any global env vars here if needed
     - name: PORT
       value: '80'
+    - name: OBJECT_STORE_TYPE
+      value: 'minio'
+    - name: OBJECT_STORE_ENDPOINT
+      value: 'minio.lifecycle-app.svc.cluster.local'
+    - name: OBJECT_STORE_PORT
+      value: '9000'
+    - name: OBJECT_STORE_ACCESS_KEY
+      value: 'minioadmin'
+    - name: OBJECT_STORE_SECRET_KEY
+      value: 'minioadmin'
+    - name: OBJECT_STORE_BUCKET
+      value: 'lifecycle-logs'
+    - name: OBJECT_STORE_USE_SSL
+      value: 'false'
+    - name: ALLOWED_ORIGINS
+      value: 'http://localhost:3000'
   envFrom:
     - secretRef:
         name: app-secrets
@@ -154,6 +170,20 @@ postgresql:
 redis:
   enabled: false
 
+minio:
+  enabled: false
+  defaultBuckets: 'lifecycle-logs'
+  auth:
+    rootUser: minioadmin
+    rootPassword: minioadmin
+  persistence:
+    enabled: true
+    size: 20Gi
+  resources:
+    requests:
+      cpu: 100m
+      memory: 256Mi
+
 rbac:
   create: true
 

next.config.js

@@ -27,6 +27,7 @@ module.exports = {
       '@google/genai',
       'google-auth-library',
       'gaxios',
+      '@aws-sdk/client-s3',
     ],
   },
   env: {
@@ -71,6 +72,14 @@ module.exports = {
     KEYCLOAK_CLIENT_ID: process.env.KEYCLOAK_CLIENT_ID,
     KEYCLOAK_JWKS_URL: process.env.KEYCLOAK_JWKS_URL,
     ALLOWED_ORIGINS: process.env.ALLOWED_ORIGINS,
+    OBJECT_STORE_TYPE: process.env.OBJECT_STORE_TYPE,
+    OBJECT_STORE_ENDPOINT: process.env.OBJECT_STORE_ENDPOINT,
+    OBJECT_STORE_PORT: process.env.OBJECT_STORE_PORT,
+    OBJECT_STORE_ACCESS_KEY: process.env.OBJECT_STORE_ACCESS_KEY,
+    OBJECT_STORE_SECRET_KEY: process.env.OBJECT_STORE_SECRET_KEY,
+    OBJECT_STORE_BUCKET: process.env.OBJECT_STORE_BUCKET,
+    OBJECT_STORE_USE_SSL: process.env.OBJECT_STORE_USE_SSL,
+    OBJECT_STORE_REGION: process.env.OBJECT_STORE_REGION,
   },
   typescript: {
     ignoreBuildErrors: true,

package.json

@@ -28,6 +28,7 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.65.0",
+    "@aws-sdk/client-s3": "^3.1000.0",
     "@google/genai": "^1.38.0",
     "@heroui/react": "^2.8.5",
     "@kubernetes/client-node": "^0.22.3",