GONRG-6682: Update partition bootstrap

devops/gc/deploy/README.md

@@ -104,6 +104,7 @@ First you need to set variables in **values.yaml** file using any code editor. S
 **data.partitionNamespace** | datastore namespace where partition will store the data | string | partition | yes
 **data.dataPartitionId** | data partition id | string | - | yes
 **data.datafierSa** | datafier service account | string | datafier | yes
+**data.indexerSa** | indexer service account | string | workload-indexer-gcp | yes
 **data.bucketPrefix** | minio bucket name prefix | string | refi | only in case of Reference installation when _springProfilesActive_ is set to "_anthos_"
 **data.minioExternalEndpoint** | api url for external minio, if external minio is configured - this value will be set for MINIO_ENDPOINT and FILE_MINIO_ENDPOINT in bootstrap configmap | string | - | no
 

devops/gc/deploy/templates/configmap-bootstrap.yaml

@@ -11,6 +11,7 @@ data:
   ENVIRONMENT: "{{ .Values.data.springProfilesActive }}"
   {{- if .Values.conf.onPremEnabled }}
   SERVICE_ACCOUNT: {{ printf "%s@service.local" .Values.data.datafierSa | quote }}
+  INDEXER_SERVICE_ACCOUNT: {{ printf "%s@service.local" .Values.data.indexerSa | quote }}
   DOMAIN: "{{ .Values.conf.domain }}"
   BUCKET_PREFIX: {{ .Values.data.bucketPrefix | quote }}
   MINIO_ENDPOINT: {{ default "http://minio:9000" .Values.data.minioExternalEndpoint | quote }}
@@ -26,5 +27,6 @@ data:
   PROJECT_ID: "{{ .Values.data.projectId }}"
   {{- end }}
   SERVICE_ACCOUNT: {{ printf "%s@%s.iam.gserviceaccount.com" .Values.data.datafierSa .Values.data.projectId | quote }}
+  INDEXER_SERVICE_ACCOUNT: {{ printf "%s@%s.iam.gserviceaccount.com" .Values.data.indexerSa .Values.data.projectId | quote }}
   {{- end }}
   DATA_PARTITION_ID_LIST: {{ join "," .Values.data.dataPartitionIdList | quote }}

devops/gc/deploy/values.yaml

@@ -9,6 +9,7 @@ data:
   partitionName: "partition"
   partitionNamespace: "partition"
   datafierSa: "datafier"
+  indexerSa: "workload-indexer-gcp"
   bucketPrefix: "refi"
   minioExternalEndpoint: "" # use only if external minio is configured
   # deployments

devops/gc/pipeline/override-stages.yml

@@ -74,6 +74,7 @@ gc-anthos-deploy: # reuse common deploy job for test deployment
     GC_TENANT: test
     GC_HELM_SETS: >-
       --set istio.sidecarInject=false
+      --set data.indexerSa=indexer
 
 gc-anthos-test:
   variables:
@@ -131,6 +132,7 @@ gc-anthos-verified-deploy: # verified deploy after tests
       --set data.dataPartitionId=$GC_TENANT
       --set data.logLevel=INFO
       --set data.springProfilesActive=anthos
+      --set data.indexerSa=indexer
       --set conf.onPremEnabled=true
       --set conf.domain=$GC_DOMAIN
       $GC_HELM_TIMEOUT

provider/partition-gc/bootstrap/data_anthos.sh

@@ -135,6 +135,10 @@ generate_post_data_anthos() {
     "kubernetes-secret-name": {
       "sensitive": false,
       "value": "eds-${DATA_PARTITION_ID}"
+    },
+    "indexer.service.account": {
+      "sensitive": false,
+      "value": "${INDEXER_SERVICE_ACCOUNT}"
     }
   }
 }

provider/partition-gc/bootstrap/data_gc.sh

@@ -55,6 +55,10 @@ generate_post_data_gc() {
     "kubernetes-secret-name": {
       "sensitive": false,
       "value": "eds-${DATA_PARTITION_ID}"
+    },
+    "indexer.service.account": {
+      "sensitive": false,
+      "value": "${INDEXER_SERVICE_ACCOUNT}"
     }
   }
 }