Update Spanner schema as part of K8s deployments.

[SanjayVas]

This also updates dev Duchy on GKE to use Workload Identity to match Kingdom.

This change is 

https://rally1.rallydev.com/#/?detail=/task/636975105303&fdp=true

[SanjayVas]

Intended to be merged into main after base PR #546. Depends on world-federation-of-advertisers/common-jvm#109

[yunyeng]

Should we redeploy halo kingdom with these changes?

Reviewed 35 of 35 files at r1, all commit messages.
Reviewable status: complete! all files reviewed, all discussions resolved (waiting on @stevenwarejones)

[SanjayVas]

Deploying this version requires a DB wipe, but after that there shouldn't be any DB wipes required.

Reviewable status: complete! all files reviewed, all discussions resolved (waiting on @stevenwarejones)

[stevenwarejones]

Reviewed 35 of 35 files at r1, all commit messages.
Reviewable status: all files reviewed, 2 unresolved discussions (waiting on @SanjayVas)

---

WORKSPACE line 33 at r1 (raw file):

ADDITIONAL_MAVEN_ARTIFACTS = artifacts.dict_to_list({
    "com.google.crypto.tink:tink": "1.6.0",

why is this being removed?

---

src/main/k8s/local/README.md line 131 at r1 (raw file):

## Re-deploy Kingdom

Technically after the above step, you should have a fully-deployed Kingdom. If

nit: Awkward language. I would just delete the first sentence.

[SanjayVas]

Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @stevenwarejones)

---

WORKSPACE line 33 at r1 (raw file):

Previously, stevenwarejones (Steven Ware Jones) wrote…

why is this being removed?

It's unused. Tink is pulled in from source.

---

src/main/k8s/local/README.md line 131 at r1 (raw file):

Previously, stevenwarejones (Steven Ware Jones) wrote…

nit: Awkward language. I would just delete the first sentence.

The intent is to make it clear that this is just telling you how to do something, but that it's not part of the steps. How would you recommend to get that across?

[stevenwarejones]

Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @SanjayVas)

---

WORKSPACE line 33 at r1 (raw file):

Previously, SanjayVas (Sanjay Vasandani) wrote…

It's unused. Tink is pulled in from source.

can you add a TODO to pull it from maven?

---

src/main/k8s/local/README.md line 131 at r1 (raw file):

Previously, SanjayVas (Sanjay Vasandani) wrote…

The intent is to make it clear that this is just telling you how to do something, but that it's not part of the steps. How would you recommend to get that across?

Congrats. You should now have a fully-deployed Kingdom. If you wish....
or
Now that you have a fully deployed kingdom, if you wish...

[SanjayVas]

Reviewable status: all files reviewed, 1 unresolved discussion (waiting on @stevenwarejones)

---

WORKSPACE line 33 at r1 (raw file):

Previously, stevenwarejones (Steven Ware Jones) wrote…

can you add a TODO to pull it from maven?

I'll add a TODO in world-federation-of-advertisers/common-jvm#114, as that's dealing with common Maven deps.

I believe we're still using some things from Tink that haven't made it into an official release.

---

src/main/k8s/local/README.md line 131 at r1 (raw file):

Previously, stevenwarejones (Steven Ware Jones) wrote…

Congrats. You should now have a fully-deployed Kingdom. If you wish....
or
Now that you have a fully deployed kingdom, if you wish...

Done.

[stevenwarejones]

Reviewed 1 of 1 files at r2, all commit messages.
Reviewable status: complete! all files reviewed, all discussions resolved (waiting on @SanjayVas)