issues: SAREX_API from env, in-cluster Django in uralkal, vad, ugmk

The base production.py hardcoded SAREX_API = https://srx.wb.ru, ignoring the
env, so issue export (GET /api/core/users/<id>/) failed from closed contours
with CERTIFICATE_VERIFY_FAILED. Read it from SAREX_API with the old value as
default; wb keeps it.

uralkal, vad, d8-ugmk-prod: SAREX_API -> backend-svc.django:80 (server-side
calls, no TLS), and SAREX_HOST set to the contour's public host so links in
exports and notifications stay external.

apps/issues/base/production-configmap.yaml

@@ -122,7 +122,7 @@ data:
         "PUT",
     ]
 
-    SAREX_API = "https://srx.wb.ru"
+    SAREX_API = os.getenv("SAREX_API", "https://srx.wb.ru")
 
     AERO_PUBLIC_HOST = os.getenv("AERO_PUBLIC_HOST", default=SAREX_API)
 

apps/issues/d8-ugmk-prod/backend-s3.yaml

@@ -108,6 +108,10 @@ spec:
           # там SAREX_API переприсваивается после `from .base import *`.
           # См. apps/issues/d8-ugmk-prod/production-configmap.yaml (INFRA-3005).
           - name: SAREX_API
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: SAREX_HOST
             value:
               _default: "https://sarex.uralmine.com"
 

apps/issues/d8-ugmk-prod/celery-s3.yaml

@@ -102,6 +102,10 @@ spec:
 
           # Реально действует значение из production-configmap, см. там.
           - name: SAREX_API
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: SAREX_HOST
             value:
               _default: "https://sarex.uralmine.com"
 

apps/issues/uralkal/backend-s3.yaml

@@ -96,7 +96,11 @@ spec:
 
           - name: SAREX_API
             value:
-              _default: "https://sarex.contour.infra.sarex.tech"
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: SAREX_HOST
+            value:
+              _default: "https://sarex.local.uralkali.com"
 
           - name: DOCUMENTATIONS_URL
             value:

apps/issues/uralkal/celery-s3.yaml

@@ -96,7 +96,11 @@ spec:
 
           - name: SAREX_API
             value:
-              _default: "https://srx.wb.ru"
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: SAREX_HOST
+            value:
+              _default: "https://sarex.local.uralkali.com"
 
           - name: DOCUMENTATIONS_URL
             value:

apps/issues/vad/backend-s3.yaml

@@ -96,7 +96,11 @@ spec:
 
           - name: SAREX_API
             value:
-              _default: "https://sarex.contour.infra.sarex.tech"
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: SAREX_HOST
+            value:
+              _default: "https://sarex.vadroad.ru"
 
           - name: DOCUMENTATIONS_URL
             value:

apps/issues/vad/celery-s3.yaml

@@ -96,7 +96,11 @@ spec:
 
           - name: SAREX_API
             value:
-              _default: "https://srx.wb.ru"
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: SAREX_HOST
+            value:
+              _default: "https://sarex.vadroad.ru"
 
           - name: DOCUMENTATIONS_URL
             value: