From bbe4d607058dbbd06a517f6a120dc9b33caf4bc9 Mon Sep 17 00:00:00 2001 From: ivan Date: Thu, 22 Oct 2026 14:41:39 +0500 Subject: [PATCH] notes/uralkal: own env with in-cluster addresses The overlay inherited base env copied from SaaS prod: DJANGO_HOST https://lk.sarex.io, workspaces/workflows on api.sarex.io and PG_SSL_MODE verify-full. From the closed contour every request to django failed with CERTIFICATE_VERIFY_FAILED. Point django, workspaces and workflows at their uralkal services, attachments at its real port 8000, disable postgres SSL (the uralkal server has none). FAAS_SERVICE and RESOURCE_URL stay as in base: neither service exists in uralkal. --- apps/notes/uralkal/backend.yaml | 49 +++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) diff --git a/apps/notes/uralkal/backend.yaml b/apps/notes/uralkal/backend.yaml index 40f1b2e..a3e7881 100644 --- a/apps/notes/uralkal/backend.yaml +++ b/apps/notes/uralkal/backend.yaml @@ -13,3 +13,52 @@ spec: requests: cpu: null memory: null + + envs: + - name: PG_SSL_MODE + value: + _default: "disable" + + - name: DJANGO_HOST + value: + _default: "http://backend-svc.django.svc.cluster.local" + + - name: BASE_HOST + value: + _default: "https://sarex.local.uralkali.com/notes" + + - name: TIMEOUT + value: + _default: "120" + + - name: FAAS_SERVICE + value: + _default: "https://api.sarex.io/lambdas" + + - name: WORKSPACE_URL + value: + _default: "http://backend-svc.workspaces.svc.cluster.local/api/v1" + + - name: WORKFLOW_HOST + value: + _default: "http://backend-svc.processing.svc.cluster.local/api/v1" + + - name: WORKFLOW_TAG + value: + _default: "stable" + + - name: RESOURCE_URL + value: + _default: "https://api.sarex.io/resources/api/v1" + + - name: SYNC_RESOURCE_ID + value: + _default: "0" + + - name: ENABLE_ND + value: + _default: "0" + + - name: ATTACHMENT_HOST + value: + _default: "http://attachments-service.attachments.svc.cluster.local:8000/api/v1"