DND-1442: emit jclouds.identity/credential for filesystem & transient backends

S3Proxy requires jclouds.identity and jclouds.credential in every backend
properties file, even for local backends where the values are unused. The
chart emitted neither for filesystem/transient, so s3proxy crash-looped
("Properties file must contain: jclouds.identity and jclouds.credential")
and the chart was undeployable with its shipped default filesystem backend.

Emit both keys in configmap.yaml for filesystem and transient, defaulting to
a "local" placeholder via `| default "local"` (so an empty override can't
reintroduce the crash). For local backends the credential is a fixed dummy,
not a secret, so it lives in the ConfigMap rather than the Secret — this also
avoids entangling secret.yaml's if/else-if credential chain.

- configmap.yaml: jclouds.identity/credential for filesystem + transient
- values.yaml: new identity/credential keys (default "local") + helm-docs docs
- Chart.yaml: 0.0.8 -> 0.0.9 (verify-chart-version gate)
- functional-test.yaml: filesystem/transient legs soft_fail -> hard gate

Verified on kind: install --wait reaches Ready for filesystem, transient, and
the out-of-box default (all previously crash-looped); full S3 round-trip
passes against the filesystem backend.

Author: CRThaze

.github/workflows/functional-test.yaml

@@ -7,11 +7,10 @@ name: Functional Test (kind)
 #
 # Backend coverage:
 #   s3                      -> MinIO mock, HARD GATE (full S3 round-trip).
-#   filesystem / transient  -> NON-BLOCKING (soft_fail): the chart does not emit
-#                              jclouds.identity/jclouds.credential for local
-#                              backends, so s3proxy refuses to start
-#                              ("Properties file must contain: jclouds.identity
-#                              and jclouds.credential"). Tracked in DND-1442.
+#   filesystem / transient  -> HARD GATE (install + round-trip). The chart now
+#                              emits placeholder jclouds.identity/jclouds.credential
+#                              for local backends (DND-1442), so s3proxy starts and
+#                              serves. These legs guard that fix against regression.
 #   azureblob               -> Azurite mock, NON-BLOCKING (soft_fail) until DND-1416
 #                              fixes the endpoint property (jclouds.azureblob.endpoint
 #                              -> jclouds.endpoint); the failing round-trip is the
@@ -59,10 +58,8 @@ jobs:
             mock: ci/functional/mocks/minio.yaml
           - backend: filesystem
             values: ci/functional/values/filesystem.yaml
-            soft_fail: true
           - backend: transient
             values: ci/functional/values/transient.yaml
-            soft_fail: true
           - backend: azureblob
             values: ci/functional/values/azureblob.yaml
             mock: ci/functional/mocks/azurite.yaml

charts/s3proxy/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.0.8
+version: 0.0.9
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

charts/s3proxy/templates/configmap.yaml

@@ -79,6 +79,10 @@ data:
     jclouds.provider=filesystem
   {{- end }}
     jclouds.filesystem.basedir={{ .Values.config.backends.filesystem.basedir }}
+    # S3Proxy requires jclouds.identity and jclouds.credential in every backend
+    # properties file, even for local backends where the values are unused.
+    jclouds.identity={{ .Values.config.backends.filesystem.identity | default "local" }}
+    jclouds.credential={{ .Values.config.backends.filesystem.credential | default "local" }}
 {{- end }}
 
 {{- if .Values.config.backends.transient.enabled }}
@@ -91,6 +95,10 @@ data:
   {{- else }}
     jclouds.provider=transient
   {{- end }}
+    # S3Proxy requires jclouds.identity and jclouds.credential in every backend
+    # properties file, even for local backends where the values are unused.
+    jclouds.identity={{ .Values.config.backends.transient.identity | default "local" }}
+    jclouds.credential={{ .Values.config.backends.transient.credential | default "local" }}
 {{- end }}
 
 {{- if .Values.config.backends.s3.enabled }}

charts/s3proxy/values.yaml

@@ -168,12 +168,20 @@ config:
       nio2: true
       # -- Base directory for filesystem backend
       basedir: "/data/s3proxy"
+      # -- jclouds identity. S3Proxy requires jclouds.identity in every backend properties file; the filesystem backend ignores the value, so the "local" placeholder is fine. An empty value falls back to "local".
+      identity: "local"
+      # -- jclouds credential. S3Proxy requires jclouds.credential in every backend properties file; the filesystem backend ignores the value. An empty value falls back to "local".
+      credential: "local"
 
     transient:
       # -- Enable transient (in-memory) backend
       enabled: false
       # -- Use NIO2 implementation (transient-nio2) instead of standard transient
       nio2: true
+      # -- jclouds identity. S3Proxy requires jclouds.identity in every backend properties file; the transient backend ignores the value, so the "local" placeholder is fine. An empty value falls back to "local".
+      identity: "local"
+      # -- jclouds credential. S3Proxy requires jclouds.credential in every backend properties file; the transient backend ignores the value. An empty value falls back to "local".
+      credential: "local"
 
     s3:
       # -- Enable S3 backend