From 83bfd4e046257e9a2c821f67b240ff35166319f2 Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 28 Oct 2026 13:32:41 +0500 Subject: [PATCH 1/7] ++ --- apps/control-interface/uralkal/psql-tools-debug.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/control-interface/uralkal/psql-tools-debug.yaml b/apps/control-interface/uralkal/psql-tools-debug.yaml index 6455c63..64ef7f2 100644 --- a/apps/control-interface/uralkal/psql-tools-debug.yaml +++ b/apps/control-interface/uralkal/psql-tools-debug.yaml @@ -18,7 +18,7 @@ spec: spec: containers: - name: debug - image: cr.yandex/crp3ccidau046kdj8g9q/mc-files:dev9 + image: cr.yandex/crp3ccidau046kdj8g9q/mc-files:dev5 imagePullPolicy: IfNotPresent command: ["/bin/sh", "-c", "while true; do sleep 3600; done"] imagePullSecrets: From 7cf8b13f918b54e6257873059246fd413b5309ac Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 28 Oct 2026 14:00:45 +0500 Subject: [PATCH 2/7] ++ --- apps/documentations/base/api.yaml | 3 +++ apps/documentations/base/filestream.yaml | 3 +++ apps/documentations/wb/api.yaml | 4 ++++ apps/documentations/wb/filestream.yaml | 4 ++++ 4 files changed, 14 insertions(+) diff --git a/apps/documentations/base/api.yaml b/apps/documentations/base/api.yaml index adb6161..efc3684 100644 --- a/apps/documentations/base/api.yaml +++ b/apps/documentations/base/api.yaml @@ -89,6 +89,9 @@ spec: - name: POSTGRES_POOL_SIZE value: _default: "20" + - name: CDE_API_ENABLED + value: + _default: "false" - name: USE_LEGACY_BIM_FLOW value: _default: "true" diff --git a/apps/documentations/base/filestream.yaml b/apps/documentations/base/filestream.yaml index f776838..4ccb394 100644 --- a/apps/documentations/base/filestream.yaml +++ b/apps/documentations/base/filestream.yaml @@ -97,6 +97,9 @@ spec: - name: PUBLIC_LINK_FOLDER_CONNECTOR_ENABLED value: _default: "true" + - name: CDE_API_ENABLED + value: + _default: "false" - name: USE_ZITADEL value: _default: "1" diff --git a/apps/documentations/wb/api.yaml b/apps/documentations/wb/api.yaml index 04bc97a..86a742e 100644 --- a/apps/documentations/wb/api.yaml +++ b/apps/documentations/wb/api.yaml @@ -134,6 +134,10 @@ spec: - name: POSTGRES_POOL_SIZE value: _default: "20" + + - name: CDE_API_ENABLED + value: + _default: "false" - name: ZITADEL_ACCOUNT value: diff --git a/apps/documentations/wb/filestream.yaml b/apps/documentations/wb/filestream.yaml index 2f5bd85..8e98dd8 100644 --- a/apps/documentations/wb/filestream.yaml +++ b/apps/documentations/wb/filestream.yaml @@ -137,6 +137,10 @@ spec: - name: API_ADDRESS value: _default: "0.0.0.0:8080" + + - name: CDE_API_ENABLED + value: + _default: "false" - name: API_ADDRESS_FILE value: From aa3365cb0de3600eb100a3fd16738a78b84153fa Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 28 Oct 2026 14:27:20 +0500 Subject: [PATCH 3/7] ++ --- apps/processing/base/engine-low.yaml | 4 ++++ apps/processing/uralkal/engine-low.yaml | 3 +++ 2 files changed, 7 insertions(+) diff --git a/apps/processing/base/engine-low.yaml b/apps/processing/base/engine-low.yaml index 3632082..70c52e1 100644 --- a/apps/processing/base/engine-low.yaml +++ b/apps/processing/base/engine-low.yaml @@ -142,6 +142,10 @@ spec: value: _default: "0" + - name: IGNORE_RESOURCES + value: + _default: "True" + - name: DJANGO_HOST value: _default: "http://backend.django.svc.cluster.local:8000" diff --git a/apps/processing/uralkal/engine-low.yaml b/apps/processing/uralkal/engine-low.yaml index e65cddb..f2e503d 100644 --- a/apps/processing/uralkal/engine-low.yaml +++ b/apps/processing/uralkal/engine-low.yaml @@ -8,6 +8,9 @@ spec: values: services: backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:contour_7d2cd329 deployment: resources: requests: From 3b53a99371f0397c246a50ce62a65b3d4a3c087e Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 28 Oct 2026 14:30:36 +0500 Subject: [PATCH 4/7] ++ --- apps/control-interface/uralkal/ams-sync.yaml | 183 ++++++++++++++++++ .../uralkal/kustomization.yaml | 1 + 2 files changed, 184 insertions(+) create mode 100644 apps/control-interface/uralkal/ams-sync.yaml diff --git a/apps/control-interface/uralkal/ams-sync.yaml b/apps/control-interface/uralkal/ams-sync.yaml new file mode 100644 index 0000000..4595bf4 --- /dev/null +++ b/apps/control-interface/uralkal/ams-sync.yaml @@ -0,0 +1,183 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: ams-sync + namespace: control-interface + labels: + app: ams-sync + service: backend +spec: + replicas: 1 + selector: + matchLabels: + app: ams-sync + template: + metadata: + labels: + app: ams-sync + service: backend + spec: + containers: + - name: backend + image: cr.yandex/crp3ccidau046kdj8g9q/ams-sync:ugok + command: ["sleep", "999999999999"] + imagePullPolicy: IfNotPresent + ports: + - name: http + containerPort: 8000 + protocol: TCP + env: + - name: AMS_SYNC_TOPIC + value: ams-sync + - name: ENVIRONMENT + value: PRODUCTION + - name: HOST_ORGANIZATION_ID + value: '392748423989716183' + - name: ALERT_ENABLED + value: 'False' + - name: USER_SERVER_HOST + value: https://sarex.local.uralkali.com + - name: AUTH_HOST + value: https://sarex.local.uralkali.com + - name: VERIFY_USERS + value: 'True' + - name: KAFKA_SECURITY_PROTOCOL + value: SSL + - name: KAFKA_SASL_MECHANISM + value: SCRAM-SHA-512 + - name: RESOURCES_INTERNAL_HOST + value: http://iams.iam.svc.cluster.local:8080 + - name: TELEGRAM_TOKEN + valueFrom: + secretKeyRef: + name: telegram-secret + key: telegram-token + - name: TELEGRAM_GROUP_ID + valueFrom: + secretKeyRef: + name: telegram-secret + key: telegram-group-id + - name: ZITADEL_HOST + valueFrom: + secretKeyRef: + name: zitadel-token-secret + key: zitadel-host + - name: ZITADEL_SERVICE_ACCESS_TOKEN + valueFrom: + secretKeyRef: + name: zitadel-token-secret + key: zitadel-access-token + - name: KAFKA_BOOTSTRAP_SERVERS + valueFrom: + secretKeyRef: + name: ams-kafka-secret + key: kafka-bootstrap-servers + - name: KAFKA_SASL_PLAIN_USERNAME + valueFrom: + secretKeyRef: + name: ams-kafka-secret + key: kafka-username + - name: KAFKA_SASL_PLAIN_PASSWORD + valueFrom: + secretKeyRef: + name: ams-kafka-secret + key: kafka-password + - name: KAFKA_SSL_CAFILE + valueFrom: + secretKeyRef: + name: ams-kafka-secret + key: kafka-ca-file + - name: AUTH_ADMIN_USERNAME + valueFrom: + secretKeyRef: + name: auth-secret + key: admin-username + - name: AUTH_ADMIN_PASSWORD + valueFrom: + secretKeyRef: + name: auth-secret + key: admin-password + - name: USER_DB_NAME + valueFrom: + secretKeyRef: + name: user-db-secret + key: user-db-name + - name: USER_DB_USER + valueFrom: + secretKeyRef: + name: user-db-secret + key: user-db-user + - name: USER_DB_PASSWORD + valueFrom: + secretKeyRef: + name: user-db-secret + key: user-db-password + - name: USER_DB_HOST + valueFrom: + secretKeyRef: + name: user-db-secret + key: user-db-host + - name: USER_DB_PORT + valueFrom: + secretKeyRef: + name: user-db-secret + key: user-db-port + imagePullSecrets: + - name: regcred +--- +apiVersion: v1 +kind: Secret +metadata: + name: ams-kafka-secret + namespace: control-interface +type: Opaque +data: + kafka-bootstrap-servers: WyJicnVzbmlrYS1zdGFnZS1rYWZrYS1ib290c3RyYXAua2Fma2Euc3ZjLmNsdXN0ZXIubG9jYWw6OTA5MyJd + kafka-ca-file: L2V0Yy9jYS1jZXJ0aWZpY2F0ZXMvWWFuZGV4L1lhbmRleEludGVybmFsUm9vdENBLmNydA== + kafka-password: bkszNnNhc3ZTZm9JdEpuWFE0cXhhdjJPVVdJUFg1WkM= + kafka-username: c2FyZXg= +--- +apiVersion: v1 +kind: Secret +metadata: + name: auth-secret + namespace: control-interface +type: Opaque +data: + admin-password: emVhbG90MDk2 + admin-username: aGFnZW4wMTM= + host: aHR0cHM6Ly9zYXJleC5sb2NhbC51cmFsa2FsaS5jb20= +--- +apiVersion: v1 +kind: Secret +metadata: + name: telegram-secret + namespace: control-interface +type: Opaque +data: + telegram-group-id: LTEwMDIzNTAyNzE= + telegram-token: NzAyOTgxMDQ2ODpBQUZBUUI1X0Y5TV92R2RndGlXOVBDRzVTUndIcFg2SnNUZw== +--- +apiVersion: v1 +kind: Secret +metadata: + name: user-db-secret + namespace: control-interface +type: Opaque +data: + user-db-host: MTAuMTMzLjAuMjQ5 + user-db-name: c2FyZXhfZGI= + user-db-password: QXNOUkE3WUhoUVlIWnNCRXFRUVBxRUUwdEU0ZmtwTTU= + user-db-port: NTQzMg== + user-db-user: ZGphbmdv +--- +apiVersion: v1 +kind: Secret +metadata: + name: zitadel-token-secret + namespace: control-interface +type: Opaque +data: + zitadel-access-token: OXk5V0VZR05YYm11UXFxQlRjNDFNSTV1Yjc5R3R6VkR0dFZRM2ZiSE5PMnVpQU9YNTAwRzYyN3BDeUk5TEd2Y1Q0TFlHd2w= + zitadel-host: aHR0cHM6Ly9sb2dpbi5zYXJleC5sb2NhbC51cmFsa2FsaS5jb20= diff --git a/apps/control-interface/uralkal/kustomization.yaml b/apps/control-interface/uralkal/kustomization.yaml index 8dea209..30987e4 100644 --- a/apps/control-interface/uralkal/kustomization.yaml +++ b/apps/control-interface/uralkal/kustomization.yaml @@ -4,3 +4,4 @@ resources: - ../base - namespace.yaml - psql-tools-debug.yaml + - ams-sync.yaml From cdc2c34bcac7b327e7f61726dbf59a3e72c3acaf Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 28 Oct 2026 14:39:15 +0500 Subject: [PATCH 5/7] ++ --- apps/control-interface/uralkal/ams-sync.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/control-interface/uralkal/ams-sync.yaml b/apps/control-interface/uralkal/ams-sync.yaml index 4595bf4..12ef93b 100644 --- a/apps/control-interface/uralkal/ams-sync.yaml +++ b/apps/control-interface/uralkal/ams-sync.yaml @@ -179,5 +179,5 @@ metadata: namespace: control-interface type: Opaque data: - zitadel-access-token: OXk5V0VZR05YYm11UXFxQlRjNDFNSTV1Yjc5R3R6VkR0dFZRM2ZiSE5PMnVpQU9YNTAwRzYyN3BDeUk5TEd2Y1Q0TFlHd2w= + zitadel-access-token: SHBKVjljeUxNM3ZJWXJOVklUbVdNMDE4QnJUV3kzVmVyM3JLc0EwSlFzZFJOT01oUnpzbVdxTk1MeF9kUDlkZ0ZVUnoxZm8= zitadel-host: aHR0cHM6Ly9sb2dpbi5zYXJleC5sb2NhbC51cmFsa2FsaS5jb20= From 25b3536124e10dfd6397ee700926b70d51ccacce Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 28 Oct 2026 14:51:22 +0500 Subject: [PATCH 6/7] ++ --- apps/control-interface/uralkal/ams-sync.yaml | 183 ------------------ .../uralkal/kustomization.yaml | 1 - 2 files changed, 184 deletions(-) delete mode 100644 apps/control-interface/uralkal/ams-sync.yaml diff --git a/apps/control-interface/uralkal/ams-sync.yaml b/apps/control-interface/uralkal/ams-sync.yaml deleted file mode 100644 index 12ef93b..0000000 --- a/apps/control-interface/uralkal/ams-sync.yaml +++ /dev/null @@ -1,183 +0,0 @@ ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: ams-sync - namespace: control-interface - labels: - app: ams-sync - service: backend -spec: - replicas: 1 - selector: - matchLabels: - app: ams-sync - template: - metadata: - labels: - app: ams-sync - service: backend - spec: - containers: - - name: backend - image: cr.yandex/crp3ccidau046kdj8g9q/ams-sync:ugok - command: ["sleep", "999999999999"] - imagePullPolicy: IfNotPresent - ports: - - name: http - containerPort: 8000 - protocol: TCP - env: - - name: AMS_SYNC_TOPIC - value: ams-sync - - name: ENVIRONMENT - value: PRODUCTION - - name: HOST_ORGANIZATION_ID - value: '392748423989716183' - - name: ALERT_ENABLED - value: 'False' - - name: USER_SERVER_HOST - value: https://sarex.local.uralkali.com - - name: AUTH_HOST - value: https://sarex.local.uralkali.com - - name: VERIFY_USERS - value: 'True' - - name: KAFKA_SECURITY_PROTOCOL - value: SSL - - name: KAFKA_SASL_MECHANISM - value: SCRAM-SHA-512 - - name: RESOURCES_INTERNAL_HOST - value: http://iams.iam.svc.cluster.local:8080 - - name: TELEGRAM_TOKEN - valueFrom: - secretKeyRef: - name: telegram-secret - key: telegram-token - - name: TELEGRAM_GROUP_ID - valueFrom: - secretKeyRef: - name: telegram-secret - key: telegram-group-id - - name: ZITADEL_HOST - valueFrom: - secretKeyRef: - name: zitadel-token-secret - key: zitadel-host - - name: ZITADEL_SERVICE_ACCESS_TOKEN - valueFrom: - secretKeyRef: - name: zitadel-token-secret - key: zitadel-access-token - - name: KAFKA_BOOTSTRAP_SERVERS - valueFrom: - secretKeyRef: - name: ams-kafka-secret - key: kafka-bootstrap-servers - - name: KAFKA_SASL_PLAIN_USERNAME - valueFrom: - secretKeyRef: - name: ams-kafka-secret - key: kafka-username - - name: KAFKA_SASL_PLAIN_PASSWORD - valueFrom: - secretKeyRef: - name: ams-kafka-secret - key: kafka-password - - name: KAFKA_SSL_CAFILE - valueFrom: - secretKeyRef: - name: ams-kafka-secret - key: kafka-ca-file - - name: AUTH_ADMIN_USERNAME - valueFrom: - secretKeyRef: - name: auth-secret - key: admin-username - - name: AUTH_ADMIN_PASSWORD - valueFrom: - secretKeyRef: - name: auth-secret - key: admin-password - - name: USER_DB_NAME - valueFrom: - secretKeyRef: - name: user-db-secret - key: user-db-name - - name: USER_DB_USER - valueFrom: - secretKeyRef: - name: user-db-secret - key: user-db-user - - name: USER_DB_PASSWORD - valueFrom: - secretKeyRef: - name: user-db-secret - key: user-db-password - - name: USER_DB_HOST - valueFrom: - secretKeyRef: - name: user-db-secret - key: user-db-host - - name: USER_DB_PORT - valueFrom: - secretKeyRef: - name: user-db-secret - key: user-db-port - imagePullSecrets: - - name: regcred ---- -apiVersion: v1 -kind: Secret -metadata: - name: ams-kafka-secret - namespace: control-interface -type: Opaque -data: - kafka-bootstrap-servers: WyJicnVzbmlrYS1zdGFnZS1rYWZrYS1ib290c3RyYXAua2Fma2Euc3ZjLmNsdXN0ZXIubG9jYWw6OTA5MyJd - kafka-ca-file: L2V0Yy9jYS1jZXJ0aWZpY2F0ZXMvWWFuZGV4L1lhbmRleEludGVybmFsUm9vdENBLmNydA== - kafka-password: bkszNnNhc3ZTZm9JdEpuWFE0cXhhdjJPVVdJUFg1WkM= - kafka-username: c2FyZXg= ---- -apiVersion: v1 -kind: Secret -metadata: - name: auth-secret - namespace: control-interface -type: Opaque -data: - admin-password: emVhbG90MDk2 - admin-username: aGFnZW4wMTM= - host: aHR0cHM6Ly9zYXJleC5sb2NhbC51cmFsa2FsaS5jb20= ---- -apiVersion: v1 -kind: Secret -metadata: - name: telegram-secret - namespace: control-interface -type: Opaque -data: - telegram-group-id: LTEwMDIzNTAyNzE= - telegram-token: NzAyOTgxMDQ2ODpBQUZBUUI1X0Y5TV92R2RndGlXOVBDRzVTUndIcFg2SnNUZw== ---- -apiVersion: v1 -kind: Secret -metadata: - name: user-db-secret - namespace: control-interface -type: Opaque -data: - user-db-host: MTAuMTMzLjAuMjQ5 - user-db-name: c2FyZXhfZGI= - user-db-password: QXNOUkE3WUhoUVlIWnNCRXFRUVBxRUUwdEU0ZmtwTTU= - user-db-port: NTQzMg== - user-db-user: ZGphbmdv ---- -apiVersion: v1 -kind: Secret -metadata: - name: zitadel-token-secret - namespace: control-interface -type: Opaque -data: - zitadel-access-token: SHBKVjljeUxNM3ZJWXJOVklUbVdNMDE4QnJUV3kzVmVyM3JLc0EwSlFzZFJOT01oUnpzbVdxTk1MeF9kUDlkZ0ZVUnoxZm8= - zitadel-host: aHR0cHM6Ly9sb2dpbi5zYXJleC5sb2NhbC51cmFsa2FsaS5jb20= diff --git a/apps/control-interface/uralkal/kustomization.yaml b/apps/control-interface/uralkal/kustomization.yaml index 30987e4..8dea209 100644 --- a/apps/control-interface/uralkal/kustomization.yaml +++ b/apps/control-interface/uralkal/kustomization.yaml @@ -4,4 +4,3 @@ resources: - ../base - namespace.yaml - psql-tools-debug.yaml - - ams-sync.yaml From f936f5ffb0cba02fefaa2f1746b9035245aea20f Mon Sep 17 00:00:00 2001 From: diamondrigido Date: Wed, 28 Oct 2026 12:31:00 +0200 Subject: [PATCH 7/7] fix: image documentation updated --- apps/documentations/base/api.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/documentations/base/api.yaml b/apps/documentations/base/api.yaml index efc3684..9cdddfb 100644 --- a/apps/documentations/base/api.yaml +++ b/apps/documentations/base/api.yaml @@ -65,7 +65,7 @@ spec: enabled: false image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_fef3add2 + _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_89c8039a pullPolicy: _default: IfNotPresent service: