Adding RBAС for GC implementation, changing the deployment type of Ignite

devops/gc/deploy/templates/ignite-pv.yaml

----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ignite-storage-pvc
-  namespace: {{ .Release.Namespace }}
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 10Gi
-  storageClassName: "standard"
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ignite-work-pvc
-  namespace: {{ .Release.Namespace }}
-spec:
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 5Gi
-  storageClassName: "standard"

devops/gc/deploy/templates/ignite-service.yaml

@@ -6,9 +6,10 @@ metadata:
   labels:
     app: {{ .Values.ignite.container.name }}
 spec:
+  clusterIP: None
   ports:
     - name: http
-      port: 80
+      port: 10800
       targetPort: 10800
       protocol: TCP
   selector:

devops/gc/deploy/templates/ignite-deployment.yaml → devops/gc/deploy/templates/ignite-statefulset.yaml

 apiVersion: apps/v1
-kind: Deployment
+kind: StatefulSet
 metadata:
-  name: {{ .Values.ignite.container.name }}-deployment
+  name: {{ .Values.ignite.container.name }}-statefulset
   namespace: {{ .Release.Namespace }}
   labels:
     app: {{ .Values.ignite.container.name | quote }}
     type: Consumption_Zones
     source: java
 spec:
+  serviceName: "{{ .Values.ignite.container.name }}"
   replicas: {{ .Values.conf.replicas }}
   selector:
     matchLabels:
@@ -63,14 +64,22 @@ spec:
             items:
               - key: nodeConfiguration.xml
                 path: nodeConfiguration.xml
-        - name: ignite-storage
-          persistentVolumeClaim:
-            claimName: ignite-storage-pvc
-        - name: ignite-work
-          persistentVolumeClaim:
-            claimName: ignite-work-pvc
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxUnavailable: 1
-      maxSurge: 0
+  volumeClaimTemplates:
+    - metadata:
+        name: ignite-storage
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        resources:
+          requests:
+            storage: {{ .Values.ignite.storage.igniteStorageSize | quote }}
+        storageClassName: {{ .Values.ignite.storageClass | quote }}
+    - metadata:
+        name: ignite-work
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        resources:
+          requests:
+            storage: {{ .Values.ignite.storage.igniteWorkSize | quote }}
+        storageClassName: {{ .Values.ignite.storageClass | quote }}

devops/gc/deploy/templates/rbac.yaml

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  namespace: {{ .Release.Namespace }}
+  name: gcz
+rules:
+- apiGroups: [""]
+  resources: ["endpoints"]
+  verbs: ["get", "list", "watch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: gcz
+  namespace: {{ .Release.Namespace }}
+subjects:
+- kind: ServiceAccount
+  name: {{ .Values.ignite.serviceAccountName }}
+  namespace: {{ .Release.Namespace }}
+- kind: ServiceAccount
+  name: {{ .Values.transformer.serviceAccountName }}
+  namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: gcz
+  apiGroup: rbac.authorization.k8s.io

devops/gc/deploy/values.yaml

@@ -27,7 +27,7 @@ provider:
         protocol: TCP
   config: 
     GczIgniteHost: "gcz-ignite-service"
-    GczIgnitePort: "80"
+    GczIgnitePort: "10800"
 
 # gcz-transformer Deployment
 transformer:
@@ -88,6 +88,9 @@ ignite:
       name: gcz-ignite-configmap
       path: /ignite/config/node-configuration.xml
       subPath: node-configuration.xml
+  storage:
+    igniteStorageSize: "30Gi"
+    igniteWorkSize: "10Gi"
   config:       #check <property name="namespace" value="default"/> if installation in another namespace
     nodeConfigurationXml: |
       <?xml version="1.0" encoding="UTF-8"?>