production: Deploy indexer-storage-rpc read-only

This also allows to not have any journal writer configuration (since we can use the
indexer storage as a read-only instance only).

Refs. swh/infra/sysadm-environment#5183

swh/templates/indexer-storage/_helper_configmap.yaml

@@ -14,7 +14,9 @@ data:
                                        "configurationRef" .configuration.indexerStorageConfigurationRef
                                        "Values" .Values) | nindent 4 -}}
 
+    {{- if .configuration.journalWriterConfigurationRef }}
     {{- include "swh.journal.configuration" (dict "serviceType" "journal_writer"
                                                   "configurationRef" .configuration.journalWriterConfigurationRef
                                                   "Values" .Values) | nindent 4 -}}
+    {{ end }}
 {{- end -}}

swh/values/minikube.yaml

@@ -753,12 +753,31 @@ indexerStorage:
       indexerStorageConfigurationRef: fakePostgresqlIndexerStorageConfiguration
       journalWriterConfigurationRef: indexerJournalWriterConfiguration
       hosts:
-        - indexer-storage.i.s.s.n
+        - indexer-storage-read-write.i.s.s.n
       ingress:
         enabled: true
+        endpoints:
+          default:
+            paths:
+              - path: /
+      gunicorn:
+        threads: 1
+        workers: 2
+    read-only:
+      checkDbVersion: false
+      replicas: 1
+      indexerStorageConfigurationRef: fakePostgresqlIndexerStorageConfiguration
+      hosts:
+        - indexer-storage-read-only.i.s.s.n
+      ingress:
+        enabled: true
+        endpoints:
+          default:
+            paths:
+              - path: /
       gunicorn:
-        threads: 2
-        workers: 4
+        threads: 1
+        workers: 2
 
 defaultElasticsearchHosts:
   - host: search-esnode0.i.s.s.n

swh/values/production/default.yaml

@@ -384,3 +384,6 @@ externalServices:
     search:
       internalName: search-rpc-ingress
       target: archive-production-rke2-ingress-nginx-controller.ingress-nginx.svc.cluster.local
+    indexer-storage-read-only:
+      internalName: indexer-storage-read-only
+      target: archive-production-rke2-ingress-nginx-controller.ingress-nginx.svc.cluster.local

swh/values/production/swh.yaml

@@ -30,6 +30,18 @@ postgresqlROStorageConfiguration:
       secretKeyRef: swh-storage-postgresql-common-secret
       secretKeyName: postgres-guest-password
 
+postgresqlReadOnlyIndexerStorageConfiguration:
+  cls: postgresql
+  host: db.internal.softwareheritage.org
+  db: softwareheritage-indexer
+  port: 5432
+  user: guest
+  pass: ${POSTGRESQL_PASSWORD}
+  secrets:
+    POSTGRESQL_PASSWORD:
+      secretKeyRef: swh-indexer-storage-postgresql-secret
+      secretKeyName: postgres-guest-password
+
 readOnlyStorageConfiguration:
   pipelineStepsRef: readOnlyStoragePipelineSteps
   storageConfigurationRef: postgresqlROStorageConfiguration
@@ -687,9 +699,10 @@ toolbox:
       indexerDbConfigurationRef: postgresqlIndexerStorageConfiguration
 
 indexerStorage:
-  enabled: false
+  enabled: true
+  logLevel: INFO
   deployments:
-    read-write:
+    read-only:
       checkDbVersion: true
       autoScaling:
         minReplicaCount: 2
@@ -697,10 +710,9 @@ indexerStorage:
         cpuPercentageUsage: 90
       requestedCpu: 500m
       requestedMemory: 512Mi
-      indexerStorageConfigurationRef: postgresqlIndexerStorageConfiguration
-      journalWriterConfigurationRef: journalWriterConfiguration
+      indexerStorageConfigurationRef: postgresqlReadOnlyIndexerStorageConfiguration
       hosts:
-        - saam.internal.softwareheritage.org
+        - indexer-storage-read-only
       ingress:
         enabled: true
       gunicorn: