From 4b9f6869e5e59087283848ac8993a912858a9f3a Mon Sep 17 00:00:00 2001 From: ivan Date: Tue, 1 Sep 2026 17:45:25 +0500 Subject: [PATCH] ++ --- apps/cde/brusnika-stage/helmrelease.yaml | 1132 ++++++++--------- apps/django/brusnika-stage/s3-proxy.yaml | 6 + apps/measurements/brusnika-stage/backend.yaml | 24 +- 3 files changed, 591 insertions(+), 571 deletions(-) diff --git a/apps/cde/brusnika-stage/helmrelease.yaml b/apps/cde/brusnika-stage/helmrelease.yaml index aa78c2b..71815ed 100644 --- a/apps/cde/brusnika-stage/helmrelease.yaml +++ b/apps/cde/brusnika-stage/helmrelease.yaml @@ -30,583 +30,583 @@ spec: env: _default services: - cde: - enabled: true - deployment: + cde: enabled: true - name: - _default: cde - replicaCount: - _default: 1 - port: - _default: 8080 - probes: - liveness: - enabled: - _default: true - type: - _default: tcpSocket - tcpSocket: - port: - _default: 8080 - initialDelaySeconds: - _default: 15 - periodSeconds: - _default: 10 - readiness: - enabled: - _default: true - type: - _default: tcpSocket - tcpSocket: - port: - _default: 8080 - initialDelaySeconds: - _default: 15 - periodSeconds: - _default: 10 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/orchestrator:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: + deployment: + enabled: true + name: + _default: cde + replicaCount: + _default: 1 + port: + _default: 8080 + probes: + liveness: + enabled: + _default: true + type: + _default: tcpSocket + tcpSocket: + port: + _default: 8080 + initialDelaySeconds: + _default: 15 + periodSeconds: + _default: 10 + readiness: + enabled: + _default: true + type: + _default: tcpSocket + tcpSocket: + port: + _default: 8080 + initialDelaySeconds: + _default: 15 + periodSeconds: + _default: 10 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/orchestrator:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: true + name: + _default: cde + type: + _default: ClusterIP + portName: + _default: http + port: + _default: 8080 + targetPort: + _default: http + serviceAccount: + enabled: + _default: true + name: + _default: cde + automountServiceAccountToken: + _default: true + secretEnvs: &cde_secret_envs + - name: ENVIRONMENT + secretName: + _default: cde-secret + secretKey: + _default: ENVIRONMENT + - name: LOG_LEVEL + secretName: + _default: cde-secret + secretKey: + _default: LOG_LEVEL + - name: ZEEBE_GATEWAY + secretName: + _default: cde-secret + secretKey: + _default: ZEEBE_GATEWAY + - name: DATABASE_URL + secretName: + _default: cde-secret + secretKey: + _default: DATABASE_URL + - name: S3_ENDPOINT_URL + secretName: + _default: cde-secret + secretKey: + _default: S3_ENDPOINT_URL + - name: S3_ACCESS_KEY_ID + secretName: + _default: cde-secret + secretKey: + _default: S3_ACCESS_KEY_ID + - name: S3_SECRET_ACCESS_KEY + secretName: + _default: cde-secret + secretKey: + _default: S3_SECRET_ACCESS_KEY + - name: PUBLIC_KEY + secretName: + _default: cde-secret + secretKey: + _default: PUBLIC_KEY + - name: PDM_URL + secretName: + _default: cde-secret + secretKey: + _default: PDM_URL + - name: FLOWS_URL + secretName: + _default: cde-secret + secretKey: + _default: FLOWS_URL + - name: USERNAME + secretName: + _default: cde-secret + secretKey: + _default: USERNAME + - name: PASSWORD + secretName: + _default: cde-secret + secretKey: + _default: PASSWORD + - name: CAMUNDA_PROCESS_DEFINITION_ID + secretName: + _default: cde-secret + secretKey: + _default: CAMUNDA_PROCESS_DEFINITION_ID + - name: OPERATE_URL + secretName: + _default: cde-secret + secretKey: + _default: OPERATE_URL + - name: CAMUNDA_KEYCLOAK_URL + secretName: + _default: cde-secret + secretKey: + _default: CAMUNDA_KEYCLOAK_URL + - name: CAMUNDA_CLIENT_ID + secretName: + _default: cde-secret + secretKey: + _default: CAMUNDA_CLIENT_ID + - name: CAMUNDA_CLIENT_SECRET + secretName: + _default: cde-secret + secretKey: + _default: CAMUNDA_CLIENT_SECRET + - name: WORKFLOWS_HOST + secretName: + _default: cde-secret + secretKey: + _default: WORKFLOWS_HOST + - name: WORKSPACES_URL + secretName: + _default: cde-secret + secretKey: + _default: WORKSPACES_URL + - name: AUTH_HOST + secretName: + _default: cde-secret + secretKey: + _default: AUTH_HOST + - name: TELEGRAM_ALERT_GROUP_ID + secretName: + _default: cde-secret + secretKey: + _default: TELEGRAM_ALERT_GROUP_ID + - name: TELEGRAM_TOKEN + secretName: + _default: cde-secret + secretKey: + _default: TELEGRAM_TOKEN + - name: IS_CONTOUR + secretName: + _default: cde-secret + secretKey: + _default: IS_CONTOUR + - name: AMQP_HOST + secretName: + _default: cde-secret + secretKey: + _default: AMQP_HOST + - name: AMQP_PORT + secretName: + _default: cde-secret + secretKey: + _default: AMQP_PORT + - name: AMQP_USER + secretName: + _default: cde-secret + secretKey: + _default: AMQP_USER + - name: AMQP_PASSWORD + secretName: + _default: cde-secret + secretKey: + _default: AMQP_PASSWORD + - name: AMQP_PATH_API + secretName: + _default: cde-secret + secretKey: + _default: AMQP_PATH_API + cde-worker-copy: enabled: true - name: - _default: cde - type: - _default: ClusterIP - portName: - _default: http - port: - _default: 8080 - targetPort: - _default: http - serviceAccount: - enabled: - _default: true - name: - _default: cde - automountServiceAccountToken: - _default: true - secretEnvs: &cde_secret_envs - - name: ENVIRONMENT - secretName: - _default: cde-secret - secretKey: - _default: ENVIRONMENT - - name: LOG_LEVEL - secretName: - _default: cde-secret - secretKey: - _default: LOG_LEVEL - - name: ZEEBE_GATEWAY - secretName: - _default: cde-secret - secretKey: - _default: ZEEBE_GATEWAY - - name: DATABASE_URL - secretName: - _default: cde-secret - secretKey: - _default: DATABASE_URL - - name: S3_ENDPOINT_URL - secretName: - _default: cde-secret - secretKey: - _default: S3_ENDPOINT_URL - - name: S3_ACCESS_KEY_ID - secretName: - _default: cde-secret - secretKey: - _default: S3_ACCESS_KEY_ID - - name: S3_SECRET_ACCESS_KEY - secretName: - _default: cde-secret - secretKey: - _default: S3_SECRET_ACCESS_KEY - - name: PUBLIC_KEY - secretName: - _default: cde-secret - secretKey: - _default: PUBLIC_KEY - - name: PDM_URL - secretName: - _default: cde-secret - secretKey: - _default: PDM_URL - - name: FLOWS_URL - secretName: - _default: cde-secret - secretKey: - _default: FLOWS_URL - - name: USERNAME - secretName: - _default: cde-secret - secretKey: - _default: USERNAME - - name: PASSWORD - secretName: - _default: cde-secret - secretKey: - _default: PASSWORD - - name: CAMUNDA_PROCESS_DEFINITION_ID - secretName: - _default: cde-secret - secretKey: - _default: CAMUNDA_PROCESS_DEFINITION_ID - - name: OPERATE_URL - secretName: - _default: cde-secret - secretKey: - _default: OPERATE_URL - - name: CAMUNDA_KEYCLOAK_URL - secretName: - _default: cde-secret - secretKey: - _default: CAMUNDA_KEYCLOAK_URL - - name: CAMUNDA_CLIENT_ID - secretName: - _default: cde-secret - secretKey: - _default: CAMUNDA_CLIENT_ID - - name: CAMUNDA_CLIENT_SECRET - secretName: - _default: cde-secret - secretKey: - _default: CAMUNDA_CLIENT_SECRET - - name: WORKFLOWS_HOST - secretName: - _default: cde-secret - secretKey: - _default: WORKFLOWS_HOST - - name: WORKSPACES_URL - secretName: - _default: cde-secret - secretKey: - _default: WORKSPACES_URL - - name: AUTH_HOST - secretName: - _default: cde-secret - secretKey: - _default: AUTH_HOST - - name: TELEGRAM_ALERT_GROUP_ID - secretName: - _default: cde-secret - secretKey: - _default: TELEGRAM_ALERT_GROUP_ID - - name: TELEGRAM_TOKEN - secretName: - _default: cde-secret - secretKey: - _default: TELEGRAM_TOKEN - - name: IS_CONTOUR - secretName: - _default: cde-secret - secretKey: - _default: IS_CONTOUR - - name: AMQP_HOST - secretName: - _default: cde-secret - secretKey: - _default: AMQP_HOST - - name: AMQP_PORT - secretName: - _default: cde-secret - secretKey: - _default: AMQP_PORT - - name: AMQP_USER - secretName: - _default: cde-secret - secretKey: - _default: AMQP_USER - - name: AMQP_PASSWORD - secretName: - _default: cde-secret - secretKey: - _default: AMQP_PASSWORD - - name: AMQP_PATH_API - secretName: - _default: cde-secret - secretKey: - _default: AMQP_PATH_API - cde-worker-copy: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-copy + replicaCount: + _default: 1 + preprod: 2 + production: 2 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/copy-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-worker-copyv2: enabled: true - name: - _default: cde-worker-copy - replicaCount: - _default: 1 - preprod: 2 - production: 2 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/copy-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-worker-copyv2: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-copyv2 + replicaCount: + _default: 1 + preprod: 2 + production: 2 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/copyv2-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-worker-markings: enabled: true - name: - _default: cde-worker-copyv2 - replicaCount: - _default: 1 - preprod: 2 - production: 2 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/copyv2-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-worker-markings: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-markings + replicaCount: + _default: 1 + preprod: 2 + production: 2 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/markings-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-worker-markingsv2: enabled: true - name: - _default: cde-worker-markings - replicaCount: - _default: 1 - preprod: 2 - production: 2 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/markings-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-worker-markingsv2: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-markingsv2 + replicaCount: + _default: 1 + preprod: 2 + production: 2 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/markingsv2-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-worker-sign: enabled: true - name: - _default: cde-worker-markingsv2 - replicaCount: - _default: 1 - preprod: 2 - production: 2 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/markingsv2-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-worker-sign: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-sign + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/sign-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + cde-worker-signv2: enabled: true - name: - _default: cde-worker-sign - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/sign-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - cde-worker-signv2: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-signv2 + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/signv2-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-flowscallback: enabled: true - name: - _default: cde-worker-signv2 - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/signv2-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-flowscallback: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-flowscallback + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/flowscallback-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-splitpdf: enabled: true - name: - _default: cde-flowscallback - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/flowscallback-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-splitpdf: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-splitpdf + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/splitpdf-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + cde-worker-update-bundles: enabled: true - name: - _default: cde-splitpdf - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/splitpdf-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - cde-worker-update-bundles: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-update-bundles + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/updatebundles-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: true + production: true + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + cde-worker-create-versions: enabled: true - name: - _default: cde-worker-update-bundles - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/updatebundles-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: true - production: true - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - cde-worker-create-versions: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-create-versions + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/createversions-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: true + production: true + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-worker-create-versionsv2: enabled: true - name: - _default: cde-worker-create-versions - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/createversions-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: true - production: true - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-worker-create-versionsv2: - enabled: true - deployment: + deployment: + enabled: true + name: + _default: cde-worker-create-versionsv2 + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/createversionsv2-worker:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: true + production: true + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs + cde-worker-alert: enabled: true - name: - _default: cde-worker-create-versionsv2 - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/createversionsv2-worker:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: true - production: true - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs - cde-worker-alert: - enabled: true - deployment: - enabled: true - name: - _default: cde-worker-alert - replicaCount: - _default: 1 - port: - _default: 8080 - image: - name: - _default: cr.yandex/crp3ccidau046kdj8g9q/orchestrator:latest - pullPolicy: - _default: Always - imagePullSecrets: - enabled: - _default: false - stage: true - preprod: true - production: false - name: - _default: dockerhub - service: - enabled: false - serviceAccount: - enabled: - _default: false - name: - _default: cde - secretEnvs: *cde_secret_envs + deployment: + enabled: true + name: + _default: cde-worker-alert + replicaCount: + _default: 1 + port: + _default: 8080 + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/orchestrator:latest + pullPolicy: + _default: Always + imagePullSecrets: + enabled: + _default: false + stage: true + preprod: true + production: false + name: + _default: dockerhub + service: + enabled: false + serviceAccount: + enabled: + _default: false + name: + _default: cde + secretEnvs: *cde_secret_envs diff --git a/apps/django/brusnika-stage/s3-proxy.yaml b/apps/django/brusnika-stage/s3-proxy.yaml index 3bd7013..a9842a5 100644 --- a/apps/django/brusnika-stage/s3-proxy.yaml +++ b/apps/django/brusnika-stage/s3-proxy.yaml @@ -93,6 +93,12 @@ spec: - name: APP_PORT value: _default: "8000" + - name: ACCESS_LOG + value: + _default: "true" + - name: CORS_ALLOW_HEADERS + value: + _default: "Content-Type, Accept-Ranges, Content-Range, Content-Encoding" secretEnvs: - name: AWS_ACCESS_KEY_ID secretName: diff --git a/apps/measurements/brusnika-stage/backend.yaml b/apps/measurements/brusnika-stage/backend.yaml index c34c6db..8231b58 100644 --- a/apps/measurements/brusnika-stage/backend.yaml +++ b/apps/measurements/brusnika-stage/backend.yaml @@ -34,10 +34,13 @@ spec: services: backend: enabled: true + serviceAccount: + enabled: + _default: false image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_5904312b + _default: cr.yandex/crp3ccidau046kdj8g9q/measurements:production_a5bb3e84 pullPolicy: _default: IfNotPresent @@ -49,12 +52,16 @@ spec: replicaCount: _default: 1 - stage: 1 - preprod: 3 - production: 3 port: - _default: 8080 + _default: 8000 + + resources: + requests: + cpu: + _default: 25m + memory: + _default: 128Mi probes: liveness: @@ -89,6 +96,13 @@ spec: labels: monitoring: prometheus + envs: + - name: TRACING_USE + value: + _default: "false" + - name: DJANGO_HOST + value: + _default: "https://test.sarex.brusnika.tech" secretEnvs: - name: S3_JSON_SETTINGS secretName: