sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cde

Browse Source
This commit is contained in:
Kochetkov S 2026-04-24 17:00:21 +03:00
parent 48100152f4
commit 2611dd396f
8 changed files with 72 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
apps/cde/base/cde-flowscallback.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-flowscallback - name: cde-flowscallback
image: cr.yandex/crp3ccidau046kdj8g9q/flowscallback-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/flowscallback-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde-splitpdf.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-splitpdf - name: cde-splitpdf
image: cr.yandex/crp3ccidau046kdj8g9q/splitpdf-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/splitpdf-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde-worker-copy.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-worker-copy - name: cde-worker-copy
image: cr.yandex/crp3ccidau046kdj8g9q/copy-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/copy-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde-worker-create-versions.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-worker-create-versions - name: cde-worker-create-versions
image: cr.yandex/crp3ccidau046kdj8g9q/createversions-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/createversions-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde-worker-markings.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-worker-markings - name: cde-worker-markings
image: cr.yandex/crp3ccidau046kdj8g9q/markings-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/markings-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde-worker-sign.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-worker-sign - name: cde-worker-sign
image: cr.yandex/crp3ccidau046kdj8g9q/sign-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/sign-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde-worker-update-bundles.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: cde-worker-update-bundles - name: cde-worker-update-bundles
image: cr.yandex/crp3ccidau046kdj8g9q/updatebundles-worker:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/updatebundles-worker:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /worker
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"

13
apps/cde/base/cde.yaml
View File

@ -28,7 +28,7 @@ spec:
vault.hashicorp.com/agent-inject-template-cde-env: |- vault.hashicorp.com/agent-inject-template-cde-env: |-
{{- with secret "secrets/data/vault/apps/cde" -}} {{- with secret "secrets/data/vault/apps/cde" -}}
{{- range $k, $v := .Data.data }} {{- range $k, $v := .Data.data }}
{{ $k }}={{ printf "%q" (printf "%v" $v) }} export {{ $k }}=$(printf '%b' {{ printf "%q" (printf "%v" $v) }})
{{- end }} {{- end }}
{{- end -}} {{- end -}}
spec: spec:
@ -37,6 +37,14 @@ spec:
- name: api - name: api
image: cr.yandex/crp3ccidau046kdj8g9q/cde:prod_9f3c1d2a image: cr.yandex/crp3ccidau046kdj8g9q/cde:prod_9f3c1d2a
imagePullPolicy: IfNotPresent imagePullPolicy: IfNotPresent
command:
- /bin/bash
- -lc
args:
- |
set -e
source /vault/secrets/cde-env
exec /http
ports: ports:
- name: http - name: http
containerPort: 8000 containerPort: 8000
@ -44,9 +52,6 @@ spec:
env: env:
- name: S3_IS_CONTOUR - name: S3_IS_CONTOUR
value: "true" value: "true"
envFrom:
- secretRef:
name: cde-secret
resources: resources:
requests: requests:
cpu: "1" cpu: "1"