brusnika-stage: align images with wb, add missing backend envs

Образы подтянуты под теги wb там, где это один и тот же сервис.
В backend-файлах добавлены недостающие env-переменные — с адаптацией
доменов под конвенцию brusnika-stage (test.sarex.brusnika.tech), без
слепого копирования wb-специфичных значений (доменов/секретов).

Не тронуты apps/comparisons/brusnika-stage/backend.yaml,
apps/faas/brusnika-stage/backend.yaml, apps/notes/brusnika-stage/backend.yaml —
по содержимому принадлежат другим приложениям/клиенту, требуют отдельного
разбора.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/attachments/brusnika-stage/backend.yaml

@@ -110,6 +110,10 @@ spec:
           - name: YANDEX_S3_VERIFY
             value:
               _default: "false"
+
+          - name: YANDEX_S3_USE_SSL
+            value:
+              _default: "false"
         secretEnvs:
           - name: DATABASE_HOST
             secretName:

apps/bim/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:prod_b0bd750b
+            _default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:donstroi1
           pullPolicy:
             _default: IfNotPresent
 

apps/checklists/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/checklists-backend:preprod_b1980fc6
+            _default: cr.yandex/crp3ccidau046kdj8g9q/checklists-backend:production_3d148228
           pullPolicy:
             _default: IfNotPresent
 

apps/django/brusnika-stage/celery.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_8f05291e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_7d0ec48b
           pullPolicy:
             _default: IfNotPresent
 

apps/django/brusnika-stage/export-project.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_37a48176
+            _default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_ef8aa756
           pullPolicy:
             _default: IfNotPresent
 

apps/django/brusnika-stage/sarex-backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_8f05291e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_7d0ec48b
           pullPolicy:
             _default: IfNotPresent
 
@@ -132,6 +132,14 @@ spec:
           monitoring: prometheus
 
         envs:
+          - name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED
+            value:
+              _default: "True"
+
+          - name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED
+            value:
+              _default: "True"
+
           - name: SERVER_SUPERSET_HOST
             value:
               _default: "https://superset.test.sarex.brusnika.tech"

apps/django/brusnika-stage/sarex-frontend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.16.3
+            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.22.3
           pullPolicy:
             _default: IfNotPresent
 

apps/documentations/brusnika-stage/api.yaml

@@ -37,7 +37,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_5904312b
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_179e518c
           pullPolicy:
             _default: IfNotPresent
 
@@ -100,6 +100,26 @@ spec:
         labels:
           monitoring: prometheus
         envs:
+          - name: ENABLE_AUTH_JWT_IN_URL
+            value:
+              _default: "false"
+
+          - name: ENABLE_MAILGUN
+            value:
+              _default: "False"
+
+          - name: ENABLE_SIGNATURE_IN_URL
+            value:
+              _default: "true"
+
+          - name: ENABLE_SMTP
+            value:
+              _default: "True"
+
+          - name: LAST_SLAVE_1_BIM
+            value:
+              _default: "1000000"
+
           - name: POSTGRES_ADDRESS
             value:
               _default: "192.168.2.45"

apps/documentations/brusnika-stage/filestream.yaml

@@ -37,7 +37,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_5904312b
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_3f19a21d
           pullPolicy:
             _default: IfNotPresent
 

apps/documentations/brusnika-stage/frontend.yaml

@@ -37,7 +37,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentation-frontend-app:brusnika_5a4e4adc
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentation-frontend-app:brusnika_e5f99d7c
           pullPolicy:
             _default: IfNotPresent
 

apps/eav/brusnika-stage/helmrelease.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/eav:prod_2460295f
+            _default: cr.yandex/crp3ccidau046kdj8g9q/eav:prod_0dcebba6
           pullPolicy:
             _default: IfNotPresent
 
@@ -131,6 +131,10 @@ spec:
         labels:
           monitoring: prometheus
         envs:
+          - name: KAFKA_ENABLED
+            value:
+              _default: "True"
+
           - name: KAFKA_USERNAME
             value:
               _default: "sarex"

apps/flows/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_42cf0e6e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_a7dc8216
           pullPolicy:
             _default: IfNotPresent
 
@@ -87,6 +87,22 @@ spec:
           monitoring: prometheus
 
         envs:
+          - name: CHECKLIST_HOST
+            value:
+              _default: "http://checklists-backend-service.checklists.svc.cluster.local:80"
+
+          - name: PLANNING_HOST
+            value:
+              _default: "http://backend-service.pm.svc.cluster.local:8000/api/pm/msp"
+
+          - name: PLANNING_USE
+            value:
+              _default: "True"
+
+          - name: PROXY_PATH_PREFIX
+            value:
+              _default: "/flows"
+
           - name: LOG_LEVEL
             value:
               _default: "DEBUG"

apps/flows/brusnika-stage/celery.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_42cf0e6e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_a7dc8216
           pullPolicy:
             _default: IfNotPresent
 

apps/flows/brusnika-stage/frontend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_55af772e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_dcc5b5e6
           pullPolicy:
             _default: IfNotPresent
 

apps/iam/brusnika-stage/backend.yaml

@@ -87,6 +87,26 @@ spec:
           monitoring: prometheus
 
         envs:
+          - name: AUTH_ENABLED
+            value:
+              _default: "true"
+
+          - name: ZITADEL_ENABLED
+            value:
+              _default: "true"
+
+          - name: ZITADEL_HOST
+            value:
+              _default: "https://sarex-login.uralmine.com"
+
+          - name: ZITADEL_ORG_RULES_FILE
+            value:
+              _default: "config/zitadel/org-rules-prod.json"
+
+          - name: KAFKA_TOPIC_LEGACY_AMS_SYNC
+            value:
+              _default: "ams-sync"
+
           - name: ENVIRONMENT
             value:
               _default: "prod"

apps/inspections/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_5fcce90d
+            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_1a33f6f4
           pullPolicy:
             _default: IfNotPresent
 
@@ -130,6 +130,90 @@ spec:
           - name: API_ADDRESS
             value:
               _default: "8000"
+
+          - name: DEBUG
+            value:
+              _default: "false"
+
+          - name: EAV_URL
+            value:
+              _default: "http://eav-service.eav"
+
+          - name: EAV_TIMEOUT
+            value:
+              _default: "30"
+
+          - name: HTTP_APP_HOST
+            value:
+              _default: "0.0.0.0"
+
+          - name: HTTP_APP_PORT
+            value:
+              _default: "8000"
+
+          - name: HTTP_APP_ROOT_PATH
+            value:
+              _default: "/inspections"
+
+          - name: HTTP_APP_WORKERS
+            value:
+              _default: "3"
+
+          - name: HTTP_APP_ADMIN_ENABLE
+            value:
+              _default: "true"
+
+          - name: KAFKA_EAV_ASSETS_TOPIC
+            value:
+              _default: "assets_broadcast"
+
+          - name: JWT_AUTH_ENABLE
+            value:
+              _default: "true"
+
+          - name: NOTIFICATIONS_ENABLE
+            value:
+              _default: "true"
+
+          - name: NOTIFICATIONS_EMAIL_FROM
+            value:
+              _default: "hello@sarex.io"
+
+          - name: SAREX_BACKEND_URL
+            value:
+              _default: "https://test.sarex.brusnika.tech"
+
+          - name: SAREX_BACKEND_TIMEOUT
+            value:
+              _default: "30"
+
+          - name: MAILER_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+
+          - name: MAILER_TIMEOUT
+            value:
+              _default: "30"
+
+          - name: MOBILE_APP_REQUIRED_VERSION
+            value:
+              _default: "1.0.0"
+
+          - name: MOBILE_APP_RECOMMENDED_VERSION
+            value:
+              _default: "1.0.0"
+
+          - name: MOBILE_APP_CURRENT_VERSION
+            value:
+              _default: "1.0.0"
+
+          - name: WORKFLOWS_EMAIL_DOCKER_IMAGE
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q/notification:email"
+
+          - name: WORKFLOWS_TIMEOUT
+            value:
+              _default: "30"
         secretEnvs:
           - name: DATABASE_USER
             secretName:

apps/issues/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_f1b6c05c
+            _default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_bbb9d29a
           pullPolicy:
             _default: IfNotPresent
 

apps/issues/brusnika-stage/celery.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_f1b6c05c
+            _default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_bbb9d29a
           pullPolicy:
             _default: IfNotPresent
 

apps/issues/brusnika-stage/frontend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/contour_issues-frontend:893c9953
+            _default: cr.yandex/crp3ccidau046kdj8g9q/contour_issues-frontend:b56b9da1
           pullPolicy:
             _default: IfNotPresent
 

apps/message-hub/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_d11aa910
+            _default: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_e8010fe4
           pullPolicy:
             _default: IfNotPresent
 
@@ -87,6 +87,10 @@ spec:
           monitoring: prometheus
 
         envs:
+          - name: SETTINGS_PDF_CONVERTER_HOST
+            value:
+              _default: "http://export-project-service.django.svc.cluster.local:8000"
+
           - name: WORKER_TIMEOUT
             value:
               _default: "60"

apps/pm/brusnika-stage/backend.yaml

@@ -37,7 +37,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_8b930b70
+            _default: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_fa0f1551
           pullPolicy:
             _default: IfNotPresent
 

apps/rfi/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:dev4
+            _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:production_d1e2e80d
           pullPolicy:
             _default: IfNotPresent
 

apps/rfi/brusnika-stage/frontend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-frontend:wb_b81d2efd
+            _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-frontend:production_b827756f_wb
 
           pullPolicy:
             _default: IfNotPresent

apps/system-log/brusnika-stage/api.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/system-log:prod_6ed1b27e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/system-log:prod_08141511
           pullPolicy:
             _default: IfNotPresent
 

apps/transmittal/brusnika-stage/backend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_a9d879ae
+            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_4e0db600
           pullPolicy:
             _default: IfNotPresent
 
@@ -345,6 +345,11 @@ spec:
             value:
               _default: "hello@wb.io"
         secretEnvs:
+          - name: YC-PG-CERTIFICATE
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "certificate"
+
           - name: TRANSMITTAL_SERVICE_DATABASE__USER
             secretName:
               _default: "postgres-secret"

apps/transmittal/brusnika-stage/worker.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_d94cce67
+            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_4e0db600
           pullPolicy:
             _default: IfNotPresent
 

apps/workspaces/brusnika-stage/frontend.yaml

@@ -35,7 +35,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/workspaces-v2-frontend:contour_8b87e5b0
+            _default: cr.yandex/crp3ccidau046kdj8g9q/workspaces-v2-frontend:contour_2a4ce3fd
           pullPolicy:
             _default: IfNotPresent