[stacks-blockchain-api] update permissions on archive

Author: CharlieC3

hirosystems/stacks-blockchain-api/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: stacks-blockchain
   repository: https://charts.hiro.so/hirosystems
-  version: 1.1.2
+  version: 1.1.3
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
   version: 11.9.2
 - name: common
   repository: https://charts.bitnami.com/bitnami
   version: 1.17.1
-digest: sha256:a077314d0eecd44e0520accff01323bbe8c2df249b490697ce948cc07ab3ef28
-generated: "2022-09-28T14:03:25.537763-04:00"
+digest: sha256:8c828a2da30f9e792b7f1e8a4df8ed40326b0e2e934220e89ea0eed363046ff6
+generated: "2022-09-28T14:27:21.702363-04:00"

hirosystems/stacks-blockchain-api/Chart.yaml

@@ -41,4 +41,4 @@ sources:
   - https://github.com/hirosystems/stacks-blockchain-api
   - https://docs.hiro.so/api
   - https://docs.hiro.so/get-started/stacks-blockchain-api
-version: 1.1.2
+version: 1.1.3

hirosystems/stacks-blockchain-api/templates/api-writer/statefulset.yaml

@@ -162,6 +162,9 @@ spec:
                 wget ${ARCHIVE_URL} -O ${DATA_DIR}/archive.tar.gz
                 tar zxvf ${DATA_DIR}/archive.tar.gz -C ${DATA_DIR}
                 rm -f ${DATA_DIR}/archive.tar.gz
+                echo "Setting permissions"
+                chown -R {{ .Values.apiWriter.containerSecurityContext.runAsUser }}:{{ .Values.apiWriter.containerSecurityContext.fsGroup }} ${DATA_DIR}
+                chown -R {{ .Values.apiWriter.containerSecurityContext.runAsUser }}:{{ .Values.apiWriter.containerSecurityContext.fsGroup }} {{ .Values.apiWriter.persistence.bns.mountPath }}
               else
                 echo "Previous data found. Exiting."
               fi
@@ -177,6 +180,8 @@ spec:
               {{- if .Values.apiWriter.persistence.data.subPath }}
               subPath: {{ .Values.apiWriter.persistence.data.subPath }}
               {{- end }}
+            - name: bns-data
+              mountPath: {{ .Values.apiWriter.persistence.bns.mountPath }}
         {{- end }}
         {{- if .Values.apiWriter.volumePermissions.enabled }}
         - name: volume-permissions
@@ -200,6 +205,8 @@ spec:
               {{- if .Values.apiWriter.persistence.data.subPath }}
               subPath: {{ .Values.apiWriter.persistence.data.subPath }}
               {{- end }}
+            - name: bns-data
+              mountPath: {{ .Values.apiWriter.persistence.bns.mountPath }}
         {{- end }}
         {{- if .Values.apiWriter.config.replayEvents }}
         - name: replay-events
@@ -225,6 +232,18 @@ spec:
                 secretKeyRef:
                   key: {{ include "postgresql.adminPasswordKey" .Subcharts.postgresql | quote }}
                   name: {{ include "postgresql.secretName" .Subcharts.postgresql | quote }}
+            - name: PG_IDENT_INDEX_TYPE
+              value: hash
+            - name: NODE_ENV
+              value: production
+            - name: BNS_IMPORT_DIR
+              value: {{ .Values.apiWriter.persistence.bns.mountPath }}
+            - name: STACKS_API_EVENT_REPLAY_LOG_LEVEL
+              value: debug
+            - name: STACKS_API_ENABLE_FT_METADATA
+              value: {{ ternary "1" "0" .Values.apiWriter.config.enableFtMetadata | quote }}
+            - name: STACKS_API_ENABLE_NFT_METADATA
+              value: {{ ternary "1" "0" .Values.apiWriter.config.enableNftMetadata | quote }}
           command:
             - sh
             - -c
@@ -242,6 +261,8 @@ spec:
               {{- if .Values.apiWriter.persistence.data.subPath }}
               subPath: {{ .Values.apiWriter.persistence.data.subPath }}
               {{- end }}
+            - name: bns-data
+              mountPath: {{ .Values.apiWriter.persistence.bns.mountPath }}
         {{- end }}
         {{- if .Values.apiWriter.initContainers }}
         {{- include "common.tplvalues.render" (dict "value" .Values.apiWriter.initContainers "context" $) | nindent 8 }}
@@ -310,6 +331,8 @@ spec:
             - name: PG_CONNECTION_POOL_MAX
               value: {{ default "50" .Values.apiWriter.config.pgConnectionPoolMax | quote }}
             {{- if .Values.cdn.enabled }}
+            - name: PG_IDENT_INDEX_TYPE
+              value: hash
             - name: IMGIX_TOKEN
               valueFrom:
                 secretKeyRef: