diff --git a/apps/ams-sync/ugok/kustomization.yaml b/apps/ams-sync/ugok/kustomization.yaml new file mode 100644 index 0000000..0c6f206 --- /dev/null +++ b/apps/ams-sync/ugok/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: ams-sync +resources: + - ../base diff --git a/apps/attachments/ugok/kustomization.yaml b/apps/attachments/ugok/kustomization.yaml new file mode 100644 index 0000000..6fae072 --- /dev/null +++ b/apps/attachments/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: attachments +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: attachments diff --git a/apps/attachments/ugok/patch.yaml b/apps/attachments/ugok/patch.yaml new file mode 100644 index 0000000..a0d11f1 --- /dev/null +++ b/apps/attachments/ugok/patch.yaml @@ -0,0 +1,66 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: attachments + namespace: attachments +spec: + values: + services: + attachments: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/att9:dev + volumes: + _default: + - name: attachments-s3-secret + mountPath: + _default: /etc/sarex/yc-s3-storage + readOnly: + _default: true + secret: + secretName: + _default: attachments-s3-secret + envs: + - name: POSTGRES_POOL_SIZE + value: + _default: "10" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: YANDEX_S3_ACCOUNT_PATH + value: + _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json + - name: BUCKET_NAME + value: + _default: attachments-storage + - name: DATABASE_SSL_MODE + value: + _default: disable + - name: YANDEX_S3_VERIFY + value: + _default: "false" + - name: YANDEX_S3_USE_SSL + value: + _default: "true" + secretEnvs: + - name: DATABASE_HOST + secretName: + _default: attachments-postgresql-secret + secretKey: host + - name: DATABASE_PORT + secretName: + _default: attachments-postgresql-secret + secretKey: port + - name: DATABASE_NAME + secretName: + _default: attachments-postgresql-secret + secretKey: database + - name: DATABASE_USER + secretName: + _default: attachments-postgresql-secret + secretKey: username + - name: DATABASE_PASSWORD + secretName: + _default: attachments-postgresql-secret + secretKey: password diff --git a/apps/bim/ugok/kustomization.yaml b/apps/bim/ugok/kustomization.yaml new file mode 100644 index 0000000..f7ec7c3 --- /dev/null +++ b/apps/bim/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: bim +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: backend diff --git a/apps/bim/ugok/patch.yaml b/apps/bim/ugok/patch.yaml new file mode 100644 index 0000000..5f8d060 --- /dev/null +++ b/apps/bim/ugok/patch.yaml @@ -0,0 +1,119 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: bim +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:prod_2bde8e0a + envs: + - name: LAST_MASTER_BIM + value: + _default: "100000" + - name: LAST_SLAVE_1_BIM + value: + _default: "94015" + - name: LAST_MASTER_BIM_V3 + value: + _default: "100000" + - name: LAST_SLAVE_1_BIM_V3 + value: + _default: "0" + - name: DB_CERT_PATH_2 + value: + _default: /root/yandex_pg.pem + - name: DB_CERT_PATH_3 + value: + _default: /root/yandex_pg.pem + - name: DB_CERT_PATH_4 + value: + _default: /root/yandex_pg.pem + - name: POSTGRES_ADDRESS + value: + _default: postgresql-service + - name: POSTGRES_ADDRESS_2 + value: + _default: postgresql-service + - name: POSTGRES_ADDRESS_3 + value: + _default: postgresql-service + - name: POSTGRES_ADDRESS_4 + value: + _default: postgresql-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: POSTGRES_PORT_2 + value: + _default: "5432" + - name: POSTGRES_PORT_3 + value: + _default: "5432" + - name: POSTGRES_PORT_4 + value: + _default: "5432" + - name: POSTGRES_DB + value: + _default: bim_db + - name: POSTGRES_DB_2 + value: + _default: bim_db + - name: POSTGRES_DB_3 + value: + _default: bim_db + - name: POSTGRES_DB_4 + value: + _default: bim_db + - name: POSTGRES_POOL_SIZE + value: + _default: "30" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: ENABLE_SSL + value: + _default: "0" + secretEnvs: + - name: POSTGRES_USER + secretName: + _default: bim-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: bim-postgresql-secret + secretKey: password + - name: POSTGRES_USER_2 + secretName: + _default: bim-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD_2 + secretName: + _default: bim-postgresql-secret + secretKey: password + - name: POSTGRES_USER_3 + secretName: + _default: bim-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD_3 + secretName: + _default: bim-postgresql-secret + secretKey: password + - name: POSTGRES_USER_4 + secretName: + _default: bim-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD_4 + secretName: + _default: bim-postgresql-secret + secretKey: password diff --git a/apps/checklists/ugok/kustomization.yaml b/apps/checklists/ugok/kustomization.yaml new file mode 100644 index 0000000..30177f7 --- /dev/null +++ b/apps/checklists/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: checklists +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: checklists diff --git a/apps/checklists/ugok/patch.yaml b/apps/checklists/ugok/patch.yaml new file mode 100644 index 0000000..71e6d95 --- /dev/null +++ b/apps/checklists/ugok/patch.yaml @@ -0,0 +1,60 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: checklists + namespace: checklists +spec: + values: + services: + checklists: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/checklists-backend:production_3d148228 + envs: + - name: HTTP_APP_HOST + value: + _default: 0.0.0.0 + - name: HTTP_APP_PORT + value: + _default: "8000" + - name: HTTP_APP_ROOT_PATH + value: + _default: /checklists + - name: HTTP_APP_WORKERS + value: + _default: "8" + - name: HTTP_APP_ADMIN_ENABLE + value: + _default: "true" + - name: JWT_AUTH_ENABLE + value: + _default: "true" + - name: DEBUG + value: + _default: "false" + secretEnvs: + - name: DATABASE_HOST + secretName: + _default: checklists-postgresql-secret + secretKey: hostname + - name: DATABASE_PORT + secretName: + _default: checklists-postgresql-secret + secretKey: port + - name: DATABASE_NAME + secretName: + _default: checklists-postgresql-secret + secretKey: database + - name: DATABASE_USER + secretName: + _default: checklists-postgresql-secret + secretKey: username + - name: DATABASE_PASSWORD + secretName: + _default: checklists-postgresql-secret + secretKey: password + - name: JWT_AUTH_PUBLIC_KEY + secretName: + _default: checklists-public-key + secretKey: key diff --git a/apps/comparisons/ugok/kustomization.yaml b/apps/comparisons/ugok/kustomization.yaml new file mode 100644 index 0000000..e24c110 --- /dev/null +++ b/apps/comparisons/ugok/kustomization.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: comparisons +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/comparisons/ugok/patch-backend.yaml b/apps/comparisons/ugok/patch-backend.yaml new file mode 100644 index 0000000..20df1b4 --- /dev/null +++ b/apps/comparisons/ugok/patch-backend.yaml @@ -0,0 +1,117 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: comparisons +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-backend:c864f102a3a476b9a80658148da2b3f7acb772ac + envs: + - name: HTTP_PORT + value: + _default: "8080" + - name: LAST_MASTER_BIM + value: + _default: "100_000" + - name: APP_NAME + value: + _default: comparisons-api-v2 + - name: APP_VERSION + value: + _default: 0.0.1 + - name: LOGGER_LOG_LEVEL + value: + _default: info + - name: DATABASE_HOST + value: + _default: postgres-service + - name: DATABASE_PORT + value: + _default: "5432" + - name: DATABASE_NAME + value: + _default: postgres + - name: DATABASE_DB + value: + _default: comparisons_db + - name: API_ADDRESS + value: + _default: 0.0.0.0:8080 + - name: API_ADDRESS_FILE + value: + _default: 0.0.0.0:8080 + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: DOCUMENTATIONS_INTERNAL_HOST + value: + _default: http://documentations-service.documentations.svc.cluster.local:8080 + - name: DOCUMENTATIONS_EXTERNAL_HOST + value: + _default: http://documentations-service.documentations.svc.cluster.local:8080/ + - name: DOCUMENTATION_URL + value: + _default: http://documentations-service.documentations.svc.cluster.local:8080/ + - name: DOCUMENTATION_FILESTREAM_URL + value: + _default: http://documentations-filestream-service.documentations.svc.cluster.local:8080/ + - name: WORKFLOWS_HOST + value: + _default: http://workflows-service.workflow.svc.cluster.local:8000/ + - name: EAV_HOST + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: WORKSPACES_HOST + value: + _default: http://workspaces-service.workspaces.svc.cluster.local:8000/ + - name: COMPARISON_URL + value: + _default: http://backend-service.comparisons.svc.cluster.local:8080/ + - name: WORKFLOWS_IMAGE_VERSION + value: + _default: master + - name: EXTERNAL_DOCUMENTATION_URL + value: + _default: http://documentations-service.documentations.svc.cluster.local:8080/ + - name: WORKFLOWS_BIMV2_INTERNAL_HOST + value: + _default: http://backend-service.bim.svc.cluster.local:8000/ + - name: ENABLE_SSL + value: + _default: "0" + - name: WORKFLOWS_DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: POSTGRES_POOL_SIZE + value: + _default: "10" + - name: LAST_SLAVE_1_BIM + value: + _default: "94015" + - name: LAST_SLAVE_2_BIM + value: + _default: "135771" + - name: ABAP_FIXED_CONC + value: + _default: "0" + - name: WORKFLOWS_CONFIG_FILEPATH + value: + _default: /etc/app/tasks-execution-config.json + secretEnvs: + - name: DATABASE_USER + secretName: + _default: comparisons-postgresql-secret + secretKey: username + - name: DATABASE_PASSWORD + secretName: + _default: comparisons-postgresql-secret + secretKey: password + - name: AUTH_PUBLIC_KEY + secretName: + _default: public-key + secretKey: key diff --git a/apps/comparisons/ugok/patch-frontend.yaml b/apps/comparisons/ugok/patch-frontend.yaml new file mode 100644 index 0000000..33af743 --- /dev/null +++ b/apps/comparisons/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: comparisons +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-frontend-static:69d50235fdc8fd654ae63308e23fc27f28e9cd99_relative diff --git a/apps/contracts/ugok/kustomization.yaml b/apps/contracts/ugok/kustomization.yaml new file mode 100644 index 0000000..eeeb8d7 --- /dev/null +++ b/apps/contracts/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: contracts +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: contracts diff --git a/apps/contracts/ugok/patch.yaml b/apps/contracts/ugok/patch.yaml new file mode 100644 index 0000000..7e47582 --- /dev/null +++ b/apps/contracts/ugok/patch.yaml @@ -0,0 +1,22 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: contracts + namespace: contracts +spec: + values: + services: + contracts: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/contracts:prod_d3bbd9fc + secretEnvs: + - name: DB_URL + secretName: + _default: contracts-postgresql-secret + secretKey: url + - name: PUBLIC_KEY + secretName: + _default: contracts-public-key + secretKey: key diff --git a/apps/control-interface/ugok/kustomization.yaml b/apps/control-interface/ugok/kustomization.yaml new file mode 100644 index 0000000..2bb5db5 --- /dev/null +++ b/apps/control-interface/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: control-interface +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/control-interface/ugok/patch.yaml b/apps/control-interface/ugok/patch.yaml new file mode 100644 index 0000000..1dc366a --- /dev/null +++ b/apps/control-interface/ugok/patch.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: control-interface +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/srx-admin:prod_feb59026 diff --git a/apps/cross-section/ugok/kustomization.yaml b/apps/cross-section/ugok/kustomization.yaml new file mode 100644 index 0000000..c9f901d --- /dev/null +++ b/apps/cross-section/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: cross-section +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: cross-section-static diff --git a/apps/cross-section/ugok/patch.yaml b/apps/cross-section/ugok/patch.yaml new file mode 100644 index 0000000..dbb3856 --- /dev/null +++ b/apps/cross-section/ugok/patch.yaml @@ -0,0 +1,15 @@ +--- +# В ugok образ реально называется cross-section-static (не cross-section-app, +# как в base) — берём как есть из дампа кластера. +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: cross-section-static + namespace: cross-section +spec: + values: + services: + frontend: + image: + name: + _default: 10.4.10.187:80/library/cross-section-static:988a872bfe72ca29ffa6a43e074b94118e9e655a diff --git a/apps/django/ugok/auth-flow-frontend.yaml b/apps/django/ugok/auth-flow-frontend.yaml new file mode 100644 index 0000000..f1d1b86 --- /dev/null +++ b/apps/django/ugok/auth-flow-frontend.yaml @@ -0,0 +1,97 @@ +--- +# Скопировано из apps/django/wb/auth-flow-frontend.yaml (см. pdf-markings.yaml +# для причины) — компонент auth-flow, развёрнутый в ns django. +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: auth-flow-frontend + namespace: django + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.7" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + auth-flow-frontend: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/auth-flow-frontend:contour_fe9ea2a3 + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: auth-flow-frontend + + replicaCount: + _default: 1 + + port: + _default: 80 + + resources: + requests: + cpu: + _default: 100m + memory: + _default: 128Mi + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: true + + name: + _default: auth-flow-frontend-service + + type: + _default: ClusterIP + + port: + _default: 80 + + targetPort: + _default: 80 + + portName: + _default: http + + imagePullSecrets: + enabled: + _default: true + name: + _default: dockerhub + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/django/ugok/export-project.yaml b/apps/django/ugok/export-project.yaml new file mode 100644 index 0000000..49720e9 --- /dev/null +++ b/apps/django/ugok/export-project.yaml @@ -0,0 +1,109 @@ +--- +# Скопировано из apps/django/wb/export-project.yaml — в base нет HelmRelease +# для этого сервиса (только в wb overlay), а ссылаться на файл в другом +# оверлее kustomize не даёт (вне дерева каталога). Образ/envs совпадают с +# дампом ugok уже "из коробки" (только регистр другой — правится патчем). +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: export-project + namespace: django + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.7" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + export-project: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_ef8aa756 + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: export-project + + replicaCount: + _default: 1 + + port: + _default: 8000 + + resources: + limits: + cpu: + _default: "2" + memory: + _default: 8Gi + requests: + cpu: + _default: "1" + memory: + _default: 512Mi + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: true + + name: + _default: export-project-service + + type: + _default: ClusterIP + + port: + _default: 8000 + + targetPort: + _default: 8000 + + portName: + _default: http + + imagePullSecrets: + enabled: + _default: true + name: + _default: dockerhub + + envs: + - name: TIMEOUT + value: + _default: "180" + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/django/ugok/kustomization.yaml b/apps/django/ugok/kustomization.yaml new file mode 100644 index 0000000..4e6345f --- /dev/null +++ b/apps/django/ugok/kustomization.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: django +resources: + - ../base + - auth-flow-frontend.yaml + - export-project.yaml +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-celery.yaml + target: + kind: HelmRelease + name: celery + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend + - path: patch-s3-proxy.yaml + target: + kind: HelmRelease + name: s3-proxy + - path: patch-redis-image.yaml + target: + kind: Deployment + name: redis + - path: patch-auth-flow-frontend.yaml + target: + kind: HelmRelease + name: auth-flow-frontend + - path: patch-export-project.yaml + target: + kind: HelmRelease + name: export-project + - path: patch-srx-admin.yaml + target: + kind: HelmRelease + name: srx-admin-frontend diff --git a/apps/django/ugok/patch-auth-flow-frontend.yaml b/apps/django/ugok/patch-auth-flow-frontend.yaml new file mode 100644 index 0000000..5330efe --- /dev/null +++ b/apps/django/ugok/patch-auth-flow-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: auth-flow-frontend + namespace: django +spec: + values: + services: + auth-flow-frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/auth-flow-frontend:contour_fe9ea2a3 diff --git a/apps/django/ugok/patch-backend.yaml b/apps/django/ugok/patch-backend.yaml new file mode 100644 index 0000000..ad0d421 --- /dev/null +++ b/apps/django/ugok/patch-backend.yaml @@ -0,0 +1,257 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: django +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_7d0ec48b + volumes: + _default: + - name: kafka-cert-volume + mountPath: + _default: /usr/local/share/ca-certificates + readOnly: + _default: true + configMap: + name: + _default: kafka-cert + envs: + - name: ALLOWED_HOSTS + value: + _default: "*" + - name: SERVER_USE_CHANGELOG + value: + _default: "0" + - name: SERVER_ZITADEL_ENABLED + value: + _default: "True" + - name: DJANGO_SETTINGS_MODULE + value: + _default: config.settings.production + - name: CELERY_REDIS_HOST + value: + _default: redis-service + - name: CELERY_REDIS_PORT + value: + _default: "6379" + - name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED + value: + _default: "True" + - name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED + value: + _default: "True" + - name: DJANGO_REDIS_HOST + value: + _default: redis-service + - name: DJANGO_REDIS_PORT + value: + _default: "6379" + - name: BIMV2_INTERNAL_HOST + value: + _default: http://bim-backend-v2-service.bim-api + - name: BIMV2_TIMEOUT + value: + _default: "60" + - name: JWT_KID + value: + _default: "1" + - name: PDM_SYNC + value: + _default: "1" + - name: KC_SYNC_ENABLE + value: + _default: "0" + - name: MEASUREMENTS_HOST + value: + _default: http://measurement-svc.measurements.svc.cluster.local:8000/api + - name: MEASUREMENTS_USE_MEASUREMENTS + value: + _default: "1" + - name: SERVER_API_HOST + value: + _default: https://ugok-sarex.uralmine.com + - name: SERVER_HOST + value: + _default: https://ugok-sarex.uralmine.com + - name: WORKFLOWS_HOST + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000 + - name: WORKFLOWS_BASE_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: WORKFLOWS_PREFIX + value: + _default: /internal/v1 + - name: WORKFLOWS_USE + value: + _default: "1" + - name: SERVER_S3_STREAM_IMPORT + value: + _default: "1" + - name: SERVER_SAVE_DIFF_DEM + value: + _default: "1" + - name: SERVER_USE_CLICKHOUSE + value: + _default: "0" + - name: SERVER_USE_CREATE_COMPARED_GEOTIFF_TASK + value: + _default: "0" + - name: SERVER_USE_DJANGO_STORAGE + value: + _default: "1" + - name: SERVER_USE_METASHAPE + value: + _default: "0" + - name: SERVER_CHANGELOG_MODE_SYSTEM_LOG + value: + _default: "1" + - name: SERVER_CHANGELOG_MODE + value: + _default: "0" + - name: SERVER_DJANGO_URLS + value: + _default: "1" + - name: CHECK_IMPORT_HASH + value: + _default: "1" + - name: ZITADEL_HOST + value: + _default: https://ugok-zitadel-sarex.uralmine.com + - name: EAV_ENABLE + value: + _default: "1" + - name: SERVER_CHECK_IMPORT_HASH + value: + _default: "1" + - name: SERVER_CHUNKED_PATH + value: + _default: /tmp/chunked_uploads/%Y/%m/%d + - name: SERVER_HIDE_USER_SCROLL_PERMISSIONS + value: + _default: "0" + - name: SERVER_USE_WRORKFLOW_STATUS + value: + _default: "1" + - name: SERVER_KAFKA_ENABLED + value: + _default: "True" + - name: RESOURCES_INTERNAL_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: KAFKA_TOPICS + value: + _default: '{"planning": "message-hub-stage", "ams-sync": "ams-sync"}' + - name: KAFKA_BOOTSTRAP_SERVERS + value: + _default: '["ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"]' + - name: KAFKA_SECURITY_PROTOCOL + value: + _default: SSL + - name: KAFKA_SASL_MECHANISM + value: + _default: SCRAM-SHA-512 + - name: KAFKA_SSL_CAFILE + value: + _default: /usr/local/share/ca-certificates/kafka.crt + - name: S3_HOST + value: + _default: http://minio.minio.svc.cluster.local:9000 + - name: KC_USE_REDIRECT_LOGOUT + value: + _default: "False" + secretEnvs: + - name: ZITADEL_ACCESS_TOKEN + secretName: + _default: zitadel-secret + secretKey: access_token + - name: KAFKA_SASL_PLAIN_USERNAME + secretName: + _default: kafka-secret + secretKey: username + - name: KAFKA_SASL_PLAIN_PASSWORD + secretName: + _default: kafka-secret + secretKey: password + - name: AWS_S3_ENDPOINT_URL + secretName: + _default: sarex-s3-secret + secretKey: endpoint + - name: CELERY_RABBITMQ_HOST + secretName: + _default: sarex-rabbitmq-secret + secretKey: host + - name: CELERY_RABBITMQ_USER + secretName: + _default: sarex-rabbitmq-secret + secretKey: username + - name: CELERY_RABBITMQ_PASSWORD + secretName: + _default: sarex-rabbitmq-secret + secretKey: password + - name: CELERY_RABBITMQ_VHOST + secretName: + _default: sarex-rabbitmq-secret + secretKey: vhost + - name: DJANGO_POSTGRES_HOST + secretName: + _default: sarex-postgresql-secret + secretKey: host + - name: DJANGO_POSTGRES_PORTS + secretName: + _default: sarex-postgresql-secret + secretKey: port + - name: DJANGO_POSTGRES_USER + secretName: + _default: sarex-postgresql-secret + secretKey: username + - name: DJANGO_POSTGRES_PASSWORD + secretName: + _default: sarex-postgresql-secret + secretKey: password + - name: DJANGO_POSTGRES_DATABASE + secretName: + _default: sarex-postgresql-secret + secretKey: database + - name: DJANGO_RABBIT_HOSTNAME + secretName: + _default: sarex-rabbitmq-secret + secretKey: host + - name: DJANGO_RABBIT_USER + secretName: + _default: sarex-rabbitmq-secret + secretKey: username + - name: DJANGO_RABBIT_PASS + secretName: + _default: sarex-rabbitmq-secret + secretKey: password + - name: DJANGO_RABBIT_VHOST + secretName: + _default: sarex-rabbitmq-secret + secretKey: vhost + - name: JWT_PRIVATE_KEY + secretName: + _default: backend-secret + secretKey: ssh_private.key + - name: JWT_PUBLIC_KEY + secretName: + _default: backend-secret + secretKey: ssh_public.key + - name: S3_BUCKET + secretName: + _default: sarex-s3-secret + secretKey: bucket + - name: S3_LOGIN + secretName: + _default: sarex-s3-secret + secretKey: access_key + - name: S3_PASSWORD + secretName: + _default: sarex-s3-secret + secretKey: secret_key diff --git a/apps/django/ugok/patch-celery.yaml b/apps/django/ugok/patch-celery.yaml new file mode 100644 index 0000000..0055ba8 --- /dev/null +++ b/apps/django/ugok/patch-celery.yaml @@ -0,0 +1,257 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: celery + namespace: django +spec: + values: + services: + celery: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_7d0ec48b + deployment: + command: + _default: ["celery", "-A", "config", "worker", "-B", "-l", "info", "-E", "-Q", "default", "-n", "default_worker.%h", "--concurrency=2"] + volumes: + _default: + - name: kafka-cert-volume + mountPath: + _default: /usr/local/share/ca-certificates + readOnly: + _default: true + configMap: + name: + _default: kafka-cert + envs: + - name: ALLOWED_HOSTS + value: + _default: "*" + - name: SERVER_USE_CHANGELOG + value: + _default: "0" + - name: SERVER_ZITADEL_ENABLED + value: + _default: "True" + - name: DJANGO_SETTINGS_MODULE + value: + _default: config.settings.production + - name: CELERY_REDIS_HOST + value: + _default: redis-service + - name: CELERY_REDIS_PORT + value: + _default: "6379" + - name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED + value: + _default: "True" + - name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED + value: + _default: "True" + - name: DJANGO_REDIS_HOST + value: + _default: redis-service + - name: DJANGO_REDIS_PORT + value: + _default: "6379" + - name: BIMV2_INTERNAL_HOST + value: + _default: http://bim-backend-v2-service.bim-api + - name: BIMV2_TIMEOUT + value: + _default: "60" + - name: JWT_KID + value: + _default: "1" + - name: PDM_SYNC + value: + _default: "1" + - name: KC_SYNC_ENABLE + value: + _default: "0" + - name: MEASUREMENTS_HOST + value: + _default: http://measurement-svc.measurements.svc.cluster.local:8000/api + - name: MEASUREMENTS_USE_MEASUREMENTS + value: + _default: "1" + - name: SERVER_API_HOST + value: + _default: https://sarex.ugok.la + - name: SERVER_HOST + value: + _default: https://sarex.ugok.la + - name: WORKFLOWS_HOST + value: + _default: https://sarex.ugok.la + - name: WORKFLOWS_BASE_HOST + value: + _default: https://sarex.ugok.la + - name: WORKFLOWS_USE + value: + _default: "1" + - name: SERVER_S3_STREAM_IMPORT + value: + _default: "1" + - name: SERVER_SAVE_DIFF_DEM + value: + _default: "1" + - name: SERVER_USE_CLICKHOUSE + value: + _default: "0" + - name: SERVER_USE_CREATE_COMPARED_GEOTIFF_TASK + value: + _default: "0" + - name: SERVER_USE_DJANGO_STORAGE + value: + _default: "1" + - name: SERVER_USE_METASHAPE + value: + _default: "0" + - name: SERVER_CHANGELOG_MODE_SYSTEM_LOG + value: + _default: "1" + - name: SERVER_CHANGELOG_MODE + value: + _default: "0" + - name: SERVER_DJANGO_URLS + value: + _default: "1" + - name: CHECK_IMPORT_HASH + value: + _default: "1" + - name: EAV_ENABLE + value: + _default: "1" + - name: SERVER_CHECK_IMPORT_HASH + value: + _default: "1" + - name: SERVER_CHUNKED_PATH + value: + _default: /tmp/chunked_uploads/%Y/%m/%d + - name: SERVER_HIDE_USER_SCROLL_PERMISSIONS + value: + _default: "0" + - name: SERVER_USE_WRORKFLOW_STATUS + value: + _default: "1" + - name: SERVER_KAFKA_ENABLED + value: + _default: "True" + - name: KAFKA_TOPICS + value: + _default: '{"planning": "message-hub-stage", "ams-sync": "ams-sync"}' + - name: KAFKA_BOOTSTRAP_SERVERS + value: + _default: '["ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"]' + - name: KAFKA_SECURITY_PROTOCOL + value: + _default: SSL + - name: KAFKA_SASL_MECHANISM + value: + _default: SCRAM-SHA-512 + - name: KAFKA_SSL_CAFILE + value: + _default: /usr/local/share/ca-certificates/kafka.crt + - name: S3_HOST + value: + _default: http://minio.minio.svc.cluster.local:9000 + - name: CACHE_HOST + value: + _default: redis.pm.svc.cluster.local + - name: ZITADEL_HOST + value: + _default: https://ugok-zitadel-sarex.uralmine.com + - name: KC_USE_REDIRECT_LOGOUT + value: + _default: "False" + secretEnvs: + - name: ZITADEL_ACCESS_TOKEN + secretName: + _default: zitadel-secret + secretKey: access_token + - name: KAFKA_SASL_PLAIN_USERNAME + secretName: + _default: kafka-secret + secretKey: username + - name: KAFKA_SASL_PLAIN_PASSWORD + secretName: + _default: kafka-secret + secretKey: password + - name: AWS_S3_ENDPOINT_URL + secretName: + _default: sarex-s3-secret + secretKey: endpoint + - name: CELERY_RABBITMQ_HOST + secretName: + _default: sarex-rabbitmq-secret + secretKey: host + - name: CELERY_RABBITMQ_USER + secretName: + _default: sarex-rabbitmq-secret + secretKey: username + - name: CELERY_RABBITMQ_PASSWORD + secretName: + _default: sarex-rabbitmq-secret + secretKey: password + - name: CELERY_RABBITMQ_VHOST + secretName: + _default: sarex-rabbitmq-secret + secretKey: vhost + - name: DJANGO_POSTGRES_HOST + secretName: + _default: sarex-postgresql-secret + secretKey: host + - name: DJANGO_POSTGRES_PORTS + secretName: + _default: sarex-postgresql-secret + secretKey: port + - name: DJANGO_POSTGRES_USER + secretName: + _default: sarex-postgresql-secret + secretKey: username + - name: DJANGO_POSTGRES_PASSWORD + secretName: + _default: sarex-postgresql-secret + secretKey: password + - name: DJANGO_POSTGRES_DATABASE + secretName: + _default: sarex-postgresql-secret + secretKey: database + - name: DJANGO_RABBIT_HOSTNAME + secretName: + _default: sarex-rabbitmq-secret + secretKey: host + - name: DJANGO_RABBIT_USER + secretName: + _default: sarex-rabbitmq-secret + secretKey: username + - name: DJANGO_RABBIT_PASS + secretName: + _default: sarex-rabbitmq-secret + secretKey: password + - name: DJANGO_RABBIT_VHOST + secretName: + _default: sarex-rabbitmq-secret + secretKey: vhost + - name: JWT_PRIVATE_KEY + secretName: + _default: backend-secret + secretKey: ssh_private.key + - name: JWT_PUBLIC_KEY + secretName: + _default: backend-secret + secretKey: ssh_public.key + - name: S3_BUCKET + secretName: + _default: sarex-s3-secret + secretKey: bucket + - name: S3_LOGIN + secretName: + _default: sarex-s3-secret + secretKey: access_key + - name: S3_PASSWORD + secretName: + _default: sarex-s3-secret + secretKey: secret_key diff --git a/apps/django/ugok/patch-export-project.yaml b/apps/django/ugok/patch-export-project.yaml new file mode 100644 index 0000000..3ae516f --- /dev/null +++ b/apps/django/ugok/patch-export-project.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: export-project + namespace: django +spec: + values: + services: + export-project: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_ef8aa756 diff --git a/apps/django/ugok/patch-frontend.yaml b/apps/django/ugok/patch-frontend.yaml new file mode 100644 index 0000000..52d9157 --- /dev/null +++ b/apps/django/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: django +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.22.3 diff --git a/apps/django/ugok/patch-redis-image.yaml b/apps/django/ugok/patch-redis-image.yaml new file mode 100644 index 0000000..9a5ea61 --- /dev/null +++ b/apps/django/ugok/patch-redis-image.yaml @@ -0,0 +1,4 @@ +--- +- op: replace + path: /spec/template/spec/containers/0/image + value: cr.yandex/crp3ccidau046kdj8g9q/redis:latest diff --git a/apps/django/ugok/patch-s3-proxy.yaml b/apps/django/ugok/patch-s3-proxy.yaml new file mode 100644 index 0000000..65639cf --- /dev/null +++ b/apps/django/ugok/patch-s3-proxy.yaml @@ -0,0 +1,36 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: s3-proxy + namespace: django +spec: + values: + services: + s3-proxy: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/s3-proxy:stable + envs: + - name: AWS_API_ENDPOINT + value: + _default: http://minio.minio.svc.cluster.local:9000 + - name: ACCESS_LOG + value: + _default: "true" + - name: CORS_ALLOW_HEADERS + value: + _default: "Content-Type, Accept-Ranges, Content-Range, Content-Encoding" + secretEnvs: + - name: AWS_ACCESS_KEY_ID + secretName: + _default: sarex-s3-secret + secretKey: access_key + - name: AWS_SECRET_ACCESS_KEY + secretName: + _default: sarex-s3-secret + secretKey: secret_key + - name: AWS_S3_BUCKET + secretName: + _default: sarex-s3-secret + secretKey: bucket diff --git a/apps/django/ugok/patch-srx-admin.yaml b/apps/django/ugok/patch-srx-admin.yaml new file mode 100644 index 0000000..212ddc1 --- /dev/null +++ b/apps/django/ugok/patch-srx-admin.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: srx-admin-frontend + namespace: django +spec: + values: + services: + srx-admin: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/srx-admin:prod_638c3442 diff --git a/apps/document-link/ugok/kustomization.yaml b/apps/document-link/ugok/kustomization.yaml new file mode 100644 index 0000000..3abf54b --- /dev/null +++ b/apps/document-link/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: document-link +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/document-link/ugok/patch.yaml b/apps/document-link/ugok/patch.yaml new file mode 100644 index 0000000..8c6a75a --- /dev/null +++ b/apps/document-link/ugok/patch.yaml @@ -0,0 +1,17 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: document-link +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/document-link-frontend:wb_cb2027ce + envs: + - name: NODE_ENV + value: + _default: production diff --git a/apps/documentations/ugok/kustomization.yaml b/apps/documentations/ugok/kustomization.yaml new file mode 100644 index 0000000..a654301 --- /dev/null +++ b/apps/documentations/ugok/kustomization.yaml @@ -0,0 +1,32 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: documentations +resources: + - ../base + - pdf-markings.yaml +patches: + - path: patch-api.yaml + target: + kind: HelmRelease + name: documentations-api + - path: patch-filestream.yaml + target: + kind: HelmRelease + name: documentations-filestream + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend + - path: patch-pdf-markings-amqp.yaml + target: + kind: HelmRelease + name: documentations-pdf-markings-amqp + - path: patch-pdf-markings.yaml + target: + kind: HelmRelease + name: pdf-markings + - path: patch-pdm.yaml + target: + kind: HelmRelease + name: pdm-api diff --git a/apps/documentations/ugok/patch-api.yaml b/apps/documentations/ugok/patch-api.yaml new file mode 100644 index 0000000..49acbda --- /dev/null +++ b/apps/documentations/ugok/patch-api.yaml @@ -0,0 +1,183 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: documentations-api + namespace: documentations +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:UGOK_4bf15a64 + envs: + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: POSTGRES_DB + value: + _default: documentations_db + - name: POSTGRES_POOL_SIZE + value: + _default: "20" + - name: USE_LEGACY_BIM_FLOW + value: + _default: "true" + - name: USE_ZITADEL + value: + _default: "1" + - name: FLOWS_URL + value: + _default: http://backend-service.flows.svc.cluster.local:8000 + - name: LAST_MASTER_BIM + value: + _default: "36311" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8080 + - name: API_ADDRESS_FILE + value: + _default: 0.0.0.0:8080 + - name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES + value: + _default: "5" + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: ENABLE_SSL + value: + _default: "0" + - name: WORKSPACE_V2_EXTERNAL_URL + value: + _default: https://ugok-sarex.uralmine.com/workspaces-v2/ + - name: ENABLE_S3 + value: + _default: "1" + - name: CONTAINER_REGISTRY + value: + _default: cr.yandex/crp3ccidau046kdj8g9q + - name: ENVIRONMENT + value: + _default: production + - name: LAST_SLAVE_1_BIM + value: + _default: "1000000" + - name: HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: FILE_STREAM_HOST + value: + _default: wb.sarex.io + - name: DOCUMENTATION_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/ + - name: WORKFLOW_URL + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000/ + - name: WORKSPACE_URL + value: + _default: http://backend-svc.workspaces.svc.cluster.local:8000/ + - name: BIM_API_URL + value: + _default: http://bim-api-service.bim.svc.cluster.local:8080/ + - name: BIM_API_V2_URL + value: + _default: http://backend-svc.bim.svc.cluster.local:8000/ + - name: WORKSPACE_BUNDLE_VERSION + value: + _default: v1 + - name: SYSTEM_LOG_URL + value: + _default: http://api-service.system-log.svc.cluster.local:8000 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: MARKS_PROCESSING_URL + value: + _default: http://marks-service:8000 + - name: PUBLIC_LINK_HOST + value: + _default: https://ugok-document-link-sarex.uralmine.com + - name: NAMESPACE + value: + _default: documentations + - name: DJANGO_ORIGINATOR + value: + _default: docs_prod + - name: WORKFLOW_IMAGES_VERSION + value: + _default: master + - name: WORKFLOWS_IMAGES_VERSION + value: + _default: master + - name: S3_SERVICE_ACCOUNT + value: + _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json + - name: READ_WRITE_TIMEOUT_FILE_STREAM + value: + _default: 6h + - name: CACHE_DEFAULT_EXPIRATION + value: + _default: 60s + - name: ENABLE_SMTP + value: + _default: "True" + - name: ENABLE_MAILGUN + value: + _default: "False" + - name: CACHE_CLEANUP_INTERVAL + value: + _default: 60s + - name: USE_CACHE_IN_FILE_STREAMER + value: + _default: "1" + - name: ZITADEL_ACCOUNT + value: + _default: /etc/sarex/zitadel/zitadel-account.json + - name: ZITADEL_DOMAIN + value: + _default: ugok-zitadel-sarex.uralmine.com + - name: ENABLE_AUTH_JWT_IN_URL + value: + _default: "false" + - name: ENABLE_SIGNATURE_IN_URL + value: + _default: "true" + - name: VALKEY_ADDR + value: + _default: redis:6379 + - name: VALKEY_HOST + value: + _default: redis + - name: VALKEY_PORT + value: + _default: "6379" + secretEnvs: + - name: PUBLIC_KEY + secretName: + _default: public-key + secretKey: key + - name: DOCUMENT_PUBLIC_LINK_JWT_SECRET + secretName: + _default: yc-jwt-secret + secretKey: secret + - name: POSTGRES_USER + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: DJANGO_BASIC_AUTH + secretName: + _default: django-auth + secretKey: key + - name: DJANGO_BASIC_AUTH_FOR_GET_USER + secretName: + _default: django-auth + secretKey: key diff --git a/apps/documentations/ugok/patch-filestream.yaml b/apps/documentations/ugok/patch-filestream.yaml new file mode 100644 index 0000000..65a9347 --- /dev/null +++ b/apps/documentations/ugok/patch-filestream.yaml @@ -0,0 +1,153 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: documentations-filestream + namespace: documentations +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_dfaa58f7_ugok + envs: + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: POSTGRES_DB + value: + _default: documentations_db + - name: POSTGRES_POOL_SIZE + value: + _default: "20" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8080 + - name: API_ADDRESS_FILE + value: + _default: 0.0.0.0:8080 + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: ENABLE_SSL + value: + _default: "0" + - name: ENABLE_S3 + value: + _default: "1" + - name: USE_ZITADEL + value: + _default: "1" + - name: CONTAINER_REGISTRY + value: + _default: cr.yandex/crp3ccidau046kdj8g9q + - name: ENVIRONMENT + value: + _default: production + - name: HOST + value: + _default: http://documentations-service.documentations.svc.cluster.local:8080 + - name: FILE_STREAM_HOST + value: + _default: sarex.ugok.lan + - name: DOCUMENTATION_URL + value: + _default: http://documentations-service.documentations.svc.cluster.local:8080/ + - name: WORKFLOW_URL + value: + _default: http://workflows-service.workflow.svc.cluster.local:8000/ + - name: WORKSPACE_URL + value: + _default: http://backend-svc.workspaces.svc.cluster.local:8000/ + - name: BIM_API_URL + value: + _default: http://bim-api-service.bim.svc.cluster.local:8080/ + - name: BIM_API_V2_URL + value: + _default: http://backend-svc.bim.svc.cluster.local:8000/ + - name: WORKSPACE_BUNDLE_VERSION + value: + _default: v1 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: NAMESPACE + value: + _default: sarex-documentations + - name: DJANGO_ORIGINATOR + value: + _default: docs_prod + - name: WORKFLOW_IMAGES_VERSION + value: + _default: master + - name: WORKFLOWS_IMAGES_VERSION + value: + _default: master + - name: S3_SERVICE_ACCOUNT + value: + _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json + - name: READ_WRITE_TIMEOUT_FILE_STREAM + value: + _default: 6h + - name: CACHE_DEFAULT_EXPIRATION + value: + _default: 60s + - name: CACHE_CLEANUP_INTERVAL + value: + _default: 60s + - name: USE_CACHE_IN_FILE_STREAMER + value: + _default: "1" + - name: ZITADEL_ACCOUNT + value: + _default: /etc/sarex/zitadel/zitadel-account.json + - name: ZITADEL_DOMAIN + value: + _default: ugok-zitadel-sarex.uralmine.com + - name: ENABLE_AUTH_JWT_IN_URL + value: + _default: "false" + - name: ENABLE_SIGNATURE_IN_URL + value: + _default: "true" + - name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES + value: + _default: "5" + - name: VALKEY_ADDR + value: + _default: redis:6379 + - name: VALKEY_HOST + value: + _default: redis + - name: VALKEY_PORT + value: + _default: "6379" + secretEnvs: + - name: DJANGO_BASIC_AUTH_FOR_GET_USER + secretName: + _default: django-auth + secretKey: key + - name: DOCUMENT_PUBLIC_LINK_JWT_SECRET + secretName: + _default: yc-jwt-secret + secretKey: secret + - name: POSTGRES_USER + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: DJANGO_BASIC_AUTH + secretName: + _default: django-auth + secretKey: key + - name: PUBLIC_KEY + secretName: + _default: public-key + secretKey: key diff --git a/apps/documentations/ugok/patch-frontend.yaml b/apps/documentations/ugok/patch-frontend.yaml new file mode 100644 index 0000000..1dc24ec --- /dev/null +++ b/apps/documentations/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: documentations +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/documentation-frontend-app:brusnika_5a4e4adc diff --git a/apps/documentations/ugok/patch-pdf-markings-amqp.yaml b/apps/documentations/ugok/patch-pdf-markings-amqp.yaml new file mode 100644 index 0000000..66104e1 --- /dev/null +++ b/apps/documentations/ugok/patch-pdf-markings-amqp.yaml @@ -0,0 +1,110 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: documentations-pdf-markings-amqp + namespace: documentations +spec: + values: + services: + backend: + image: + name: + _default: 10.4.10.187:80/library/pdf-markings-amqp:prod_53ebb837 + envs: + - name: APP_NAME + value: + _default: pdm_v2 + - name: VERIFY + value: + _default: "False" + - name: APP_VERSION + value: + _default: 0.0.1 + - name: LOG_LEVEL + value: + _default: INFO + - name: HTTP_PORT + value: + _default: "8000" + - name: DOC_POSTGRES_HOST + value: + _default: postgres-service + - name: DOC_POSTGRES_PORT + value: + _default: "5432" + - name: DOC_POSTGRES_DB + value: + _default: documentations_db + - name: DOC_POSTGRES_POOL_SIZE + value: + _default: "10" + - name: DOC_POSTGRES_SSL_MODE + value: + _default: disable + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: DATABASE_SSL_MODE + value: + _default: disable + - name: YANDEX_S3_USE_SSL + value: + _default: "0" + - name: ENVIRONMENT + value: + _default: production + - name: YANDEX_S3_ACCOUNT_PATH + value: + _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json + - name: REDIRECT_URL_QR + value: + _default: https://ugok-stamp-verification-sarex.uralmine.com/ + - name: BASE_DOCUMENT_URL + value: + _default: https://ugok-sarex.uralmine.com + secretEnvs: + - name: DOC_POSTGRES_USER + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: DOC_POSTGRES_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: YANDEX_S3_ENDPOINT_URL + secretName: + _default: documentations-s3-secret + secretKey: endpoint + - name: YANDEX_S3_SECRET_ACCESS_KEY + secretName: + _default: documentations-s3-secret + secretKey: secret_key + - name: YANDEX_S3_ACCESS_KEY_ID + secretName: + _default: documentations-s3-secret + secretKey: access_key + - name: RABBITMQ_HOST + secretName: + _default: documentations-rabbitmq-secret + secretKey: host + - name: RABBITMQ_PORT + secretName: + _default: documentations-rabbitmq-secret + secretKey: port + - name: RABBITMQ_USERNAME + secretName: + _default: documentations-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: documentations-rabbitmq-secret + secretKey: password + - name: RABBITMQ_VHOST + secretName: + _default: documentations-rabbitmq-secret + secretKey: vhost + - name: RABBITMQ_HEARTBEAT + secretName: + _default: documentations-rabbitmq-secret + secretKey: heartbeat diff --git a/apps/documentations/ugok/patch-pdf-markings.yaml b/apps/documentations/ugok/patch-pdf-markings.yaml new file mode 100644 index 0000000..1b1939b --- /dev/null +++ b/apps/documentations/ugok/patch-pdf-markings.yaml @@ -0,0 +1,113 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: pdf-markings + namespace: documentations +spec: + values: + services: + pdf-markings: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/pdf-markings:prod_7d892636 + envs: + - name: APP_NAME + value: + _default: pdm_v2 + - name: VERIFY + value: + _default: "False" + - name: APP_VERSION + value: + _default: 0.0.1 + - name: LOG_LEVEL + value: + _default: INFO + - name: HTTP_PORT + value: + _default: "8000" + - name: DOC_POSTGRES_HOST + value: + _default: postgres-service + - name: DOC_POSTGRES_PORT + value: + _default: "5432" + - name: DOC_POSTGRES_DB + value: + _default: documentations_db + - name: DOC_POSTGRES_POOL_SIZE + value: + _default: "10" + - name: DOC_POSTGRES_SSL_MODE + value: + _default: disable + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: DATABASE_SSL_MODE + value: + _default: disable + - name: YANDEX_S3_USE_SSL + value: + _default: "0" + - name: ENVIRONMENT + value: + _default: production + - name: YANDEX_S3_ACCOUNT_PATH + value: + _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json + - name: REDIRECT_URL_QR + value: + _default: https://stamp-verification.sarex.ugok.lan/ + - name: BASE_DOCUMENT_URL + value: + _default: https://sarex.ugok.lan + - name: SENTRY_DSN + value: + _default: "" + secretEnvs: + - name: DOC_POSTGRES_USER + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: DOC_POSTGRES_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: YANDEX_S3_ENDPOINT_URL + secretName: + _default: documentations-s3-secret + secretKey: endpoint + - name: YANDEX_S3_SECRET_ACCESS_KEY + secretName: + _default: documentations-s3-secret + secretKey: secret_key + - name: YANDEX_S3_ACCESS_KEY_ID + secretName: + _default: documentations-s3-secret + secretKey: access_key + - name: RABBITMQ_HOST + secretName: + _default: documentations-rabbitmq-secret + secretKey: host + - name: RABBITMQ_PORT + secretName: + _default: documentations-rabbitmq-secret + secretKey: port + - name: RABBITMQ_USERNAME + secretName: + _default: documentations-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: documentations-rabbitmq-secret + secretKey: password + - name: RABBITMQ_VHOST + secretName: + _default: documentations-rabbitmq-secret + secretKey: vhost + - name: RABBITMQ_HEARTBEAT + secretName: + _default: documentations-rabbitmq-secret + secretKey: heartbeat diff --git a/apps/documentations/ugok/patch-pdm.yaml b/apps/documentations/ugok/patch-pdm.yaml new file mode 100644 index 0000000..b16d185 --- /dev/null +++ b/apps/documentations/ugok/patch-pdm.yaml @@ -0,0 +1,200 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: pdm-api + namespace: documentations +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/pdmv2:prod_9507c2d5 + envs: + - name: USE_EXPERIMENTAL + value: + _default: "true" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8080 + - name: API_ADDRESS_FILE + value: + _default: 0.0.0.0:8080 + - name: BUCKET_NAME + value: + _default: attachments-storage + - name: API_HOST_PREFIX + value: + _default: / + - name: APP_NAME + value: + _default: pdm_v2 + - name: APP_VERSION + value: + _default: 0.0.1 + - name: ENABLE_PERMISSIONS_FILTER + value: + _default: "1" + - name: PERMISSIONS_FILTER_COMPANIES + value: + _default: '[1]' + - name: TRANSMITTALS_ENABLE + value: + _default: "false" + - name: DRAWINGS_INTERNAL_URL + value: + _default: http://drawings-api-service.drawings.svc.cluster.local:80 + - name: ATTACHMENTS_URL + value: + _default: http://attachments-service.attachments.svc.cluster.local:8000 + - name: BIM_API_V2_URL + value: + _default: http://backend-svc.bim.svc.cluster.local:8000/ + - name: BIM_V2_HOST + value: + _default: http://backend-svc.bim.svc.cluster.local:8000/ + - name: CACHE_CLEANUP_INTERVAL + value: + _default: 60s + - name: CACHE_DEFAULT_EXPIRATION + value: + _default: 60s + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: DJANGO_ORIGINATOR + value: + _default: docs_prod + - name: DOCUMENTATION_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/ + - name: EAV_URL + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: ENABLE_OBSERVABILITY + value: + _default: "false" + - name: ENABLE_S3 + value: + _default: "1" + - name: ENABLE_SSL + value: + _default: "0" + - name: ENVIRONMENT + value: + _default: prod + - name: FLOWS_URL + value: + _default: http://backend-service.flows.svc.cluster.local:8000 + - name: HEIGHT_THUMB_ATTACHMENTS + value: + _default: "300" + - name: HEIGHT_THUMB_STATES + value: + _default: "73" + - name: HTTP_PORT + value: + _default: "8080" + - name: INSPECTIONS_URL + value: + _default: http://inspections-service.inspections.svc.cluster.local:80 + - name: LOG_LEVEL + value: + _default: INFO + - name: OBSERVABILITY_COLLECTOR_ENDPOINT + value: + _default: temp + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_DB + value: + _default: documentations_db + - name: POSTGRES_POOL_SIZE + value: + _default: "20" + - name: TRANSMITTALS_BASE_URL + value: + _default: mock + - name: POSTGRES_PORT + value: + _default: "5432" + - name: READ_WRITE_TIMEOUT_FILE_STREAM + value: + _default: 6h + - name: RELEASES_URL + value: + _default: https://gitlab.com + - name: REMARKS_URL + value: + _default: http://remarks-static-service.remarks.svc.cluster.local:8080/remarks + - name: RESOURCES_URL + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: S3_SERVICE_ACCOUNT + value: + _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json + - name: STATES_URL + value: + _default: http://backend-svc.workspaces.svc.cluster.local:8000/ + - name: SUBSCRIPTIONS_URL + value: + _default: http://sarex-subscriptions-service.subscriptions.svc.cluster.local:80 + - name: SYSTEM_LOG_URL + value: + _default: http://api-service.system-log.svc.cluster.local:8000 + - name: TARGET_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: USE_CACHE_IN_FILE_STREAMER + value: + _default: "1" + - name: USE_SUBSCRIPTIONS + value: + _default: "false" + - name: WIDTH_THUMB_ATTACHMENTS + value: + _default: "300" + - name: WIDTH_THUMB_STATES + value: + _default: "120" + - name: WORKFLOWS_IMAGES_VERSION + value: + _default: master + - name: WORKFLOW_IMAGES_VERSION + value: + _default: master + - name: WORKFLOW_URL + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000/ + - name: WORKSPACE_BUNDLE_VERSION + value: + _default: v1 + - name: WORKSPACE_URL + value: + _default: http://backend-svc.workspaces.svc.cluster.local:8000/ + - name: NOTES_URL + value: + _default: "" + secretEnvs: + - name: RELEASES_TOKEN + secretName: + _default: releases-token + secretKey: key + - name: POSTGRES_USER + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: DJANGO_BASIC_AUTH + secretName: + _default: django-auth + secretKey: key + - name: PUBLIC_KEY + secretName: + _default: public-key + secretKey: key diff --git a/apps/documentations/ugok/pdf-markings.yaml b/apps/documentations/ugok/pdf-markings.yaml new file mode 100644 index 0000000..ad82c03 --- /dev/null +++ b/apps/documentations/ugok/pdf-markings.yaml @@ -0,0 +1,103 @@ +--- +# Скопировано из apps/documentations/wb/pdf-markings.yaml — в base для этого +# сервиса нет HelmRelease (только documentations-pdf-markings-amqp), а из другого +# оверлея (wb) kustomize напрямую ссылаться не даёт (вне дерева каталога). +# Значения ниже перекрыты патчем patch-pdf-markings.yaml под дамп ugok. +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: pdf-markings + namespace: documentations + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.7" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + pdf-markings: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/pdf-markings:prod_7d892636 + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: pdf-markings + + replicaCount: + _default: 1 + + port: + _default: 8000 + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: true + + name: + _default: marks-service + + type: + _default: ClusterIP + + port: + _default: 8000 + + targetPort: + _default: 8000 + + portName: + _default: http + + imagePullSecrets: + enabled: + _default: true + name: + _default: dockerhub + + volumes: + _default: + - name: yc-s3 + mountPath: + _default: /etc/sarex/yc-s3-storage + readOnly: + _default: true + secret: + secretName: + _default: documentations-yc-s3 + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/drawings/ugok/kustomization.yaml b/apps/drawings/ugok/kustomization.yaml new file mode 100644 index 0000000..584ce37 --- /dev/null +++ b/apps/drawings/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: drawings +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: backend diff --git a/apps/drawings/ugok/patch.yaml b/apps/drawings/ugok/patch.yaml new file mode 100644 index 0000000..ceca2a9 --- /dev/null +++ b/apps/drawings/ugok/patch.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: drawings +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/drawings-api:015e68e1b2a3dcc13f0b405e1f761b154a825d24 + envs: + - name: POSTGRES_POOL_SIZE + value: + _default: "3" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: ENABLE_SSL + value: + _default: "0" + secretEnvs: + - name: POSTGRES_USER + secretName: + _default: drawings-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: drawings-postgresql-secret + secretKey: password + - name: POSTGRES_ADDRESS + secretName: + _default: drawings-postgresql-secret + secretKey: host + - name: POSTGRES_DB + secretName: + _default: drawings-postgresql-secret + secretKey: database diff --git a/apps/eav/ugok/kustomization.yaml b/apps/eav/ugok/kustomization.yaml new file mode 100644 index 0000000..9c3a68a --- /dev/null +++ b/apps/eav/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: eav +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: backend diff --git a/apps/eav/ugok/patch.yaml b/apps/eav/ugok/patch.yaml new file mode 100644 index 0000000..2df48c5 --- /dev/null +++ b/apps/eav/ugok/patch.yaml @@ -0,0 +1,87 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: eav +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/eav:prod_0dcebba6 + volumes: + _default: + - name: django-configmap + mountPath: + _default: /server/config/settings/production.py + subPath: + _default: production.py + configMap: + name: + _default: django-configmap + items: + - key: production.py + path: + _default: production.py + envs: + - name: KAFKA_ENABLED + value: + _default: "False" + - name: ASSETS_TOPIC + value: + _default: sarex + - name: DJANGO_SETTINGS_MODULE + value: + _default: config.settings.production + - name: DJANGO_POSTGRES_HOST + value: + _default: postgres-service + - name: DJANGO_POSTGRES_DATABASE + value: + _default: eav_db + - name: YC_S3_ENDPOINT_URL + value: + _default: http://minio.minio.svc.cluster.local:9000 + - name: YC_S3_BUCKET_NAME + value: + _default: eav + - name: KAFKA_USERNAME + value: + _default: sarex + - name: KAFKA_SSL_CAFILE + value: + _default: /usr/local/share/ca-certificates/kafka.crt + - name: KAFKA_HOST + value: + _default: ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093 + secretEnvs: + - name: DJANGO_POSTGRES_USER + secretName: + _default: eav-postgresql-secret + secretKey: username + - name: DJANGO_POSTGRES_PASSWORD + secretName: + _default: eav-postgresql-secret + secretKey: password + - name: JWT_PRIVATE_KEY + secretName: + _default: backend-secret + secretKey: ssh_private.key + - name: JWT_PUBLIC_KEY + secretName: + _default: backend-secret + secretKey: ssh_public.key + - name: YC_S3_ACCESS_KEY_ID + secretName: + _default: eav-s3-secret + secretKey: secret_key + - name: YC_S3_SECRET_ACCESS_KEY + secretName: + _default: eav-s3-secret + secretKey: access_key + - name: KAFKA_PASSWORD + secretName: + _default: kafka-cred + secretKey: password diff --git a/apps/faas/ugok/kustomization.yaml b/apps/faas/ugok/kustomization.yaml new file mode 100644 index 0000000..edc4f4b --- /dev/null +++ b/apps/faas/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: faas +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: export-reviews diff --git a/apps/faas/ugok/patch.yaml b/apps/faas/ugok/patch.yaml new file mode 100644 index 0000000..8e12f80 --- /dev/null +++ b/apps/faas/ugok/patch.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: export-reviews + namespace: faas +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/export-reviews:prod_c4cae4ee diff --git a/apps/flows/ugok/kustomization.yaml b/apps/flows/ugok/kustomization.yaml new file mode 100644 index 0000000..b12fd72 --- /dev/null +++ b/apps/flows/ugok/kustomization.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: flows +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-celery.yaml + target: + kind: HelmRelease + name: celery + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/flows/ugok/patch-backend.yaml b/apps/flows/ugok/patch-backend.yaml new file mode 100644 index 0000000..4be0057 --- /dev/null +++ b/apps/flows/ugok/patch-backend.yaml @@ -0,0 +1,169 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: flows +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_a7dc8216 + envs: + - name: LOG_LEVEL + value: + _default: DEBUG + - name: BASE_HOST + value: + _default: https://sarex.ugok.lan + - name: CELERY_QUEUE + value: + _default: flow + - name: EAV_HOST + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000/api + - name: PLANNING_HOST + value: + _default: http://backend-service.pm.svc.cluster.local:8000/api/pm/msp + - name: PLANNING_USE + value: + _default: "True" + - name: DOCUMENTATION_HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/internal/v1 + - name: DOCUMENTATION_EXTERNAL_HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/api/v1 + - name: ENABLE_ANALYTICS + value: + _default: "1" + - name: ENABLE_CELERY + value: + _default: "1" + - name: ENABLE_MAILGUN + value: + _default: "0" + - name: ENABLE_METRICS + value: + _default: "0" + - name: FROM_EMAIL + value: + _default: sarex@uchgok.ru + - name: GATEWAY_URL + value: + _default: http://pdm-api.documentations.svc.cluster.local:8080 + - name: PG_HOST + value: + _default: postgres-service + - name: PG_PORT + value: + _default: "5432" + - name: RABBITMQ_HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + - name: RABBITMQ_PORT + value: + _default: "5672" + - name: RESOURCE_URL + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: SERVICE_HOST + value: + _default: https://sarex.ugok.lan/flows/api/v1 + - name: SMTP_HOST + value: + _default: mail.uchgok.ru + - name: DOCUMENTATION_PG_PORT + value: + _default: "5432" + - name: DOCUMENTATION_PG_DATABASE + value: + _default: documentations_db + - name: DOCUMENTATION_PG_HOST + value: + _default: postgres-service.documentations.svc.cluster.local + - name: CHECKLIST_HOST + value: + _default: http://checklists-backend-service.checklists.svc.cluster.local:80 + - name: SMTP_PORT + value: + _default: "25" + - name: SYNC_RESOURCE_ID + value: + _default: "1" + - name: TIMEOUT + value: + _default: "120" + - name: WORKFLOWS_HOST + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000/api/v1 + - name: WORKFLOWS_TIMEOUT + value: + _default: "60" + - name: DOCUMENTATION_TIMEOUT + value: + _default: "60" + - name: KAFKA_HOST + value: + _default: ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093 + - name: PROXY_PATH_PREFIX + value: + _default: /flows + secretEnvs: + - name: KAFKA_USERNAME + secretName: + _default: kafka-secret + secretKey: username + - name: KAFKA_PASSWORD + secretName: + _default: kafka-secret + secretKey: password + - name: ADMIN_PANEL_SECRET_KEY + secretName: + _default: admin-secret + secretKey: key + - name: JWT_PUBLIC_KEY + secretName: + _default: jwt-secret + secretKey: public_key + - name: DOCUMENTATION_PG_USERNAME + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: DOCUMENTATION_PG_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: DJANGO_TOKEN + secretName: + _default: django-secret + secretKey: token + - name: PG_DB + secretName: + _default: flows-postgresql-secret + secretKey: database + - name: PG_LOGIN + secretName: + _default: flows-postgresql-secret + secretKey: username + - name: PG_PASSWORD + secretName: + _default: flows-postgresql-secret + secretKey: password + - name: RABBITMQ_USERNAME + secretName: + _default: flows-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: flows-rabbitmq-secret + secretKey: password + - name: RABBITMQ_VHOST + secretName: + _default: flows-rabbitmq-secret + secretKey: vhost diff --git a/apps/flows/ugok/patch-celery.yaml b/apps/flows/ugok/patch-celery.yaml new file mode 100644 index 0000000..5e8e69f --- /dev/null +++ b/apps/flows/ugok/patch-celery.yaml @@ -0,0 +1,179 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: celery + namespace: flows +spec: + values: + services: + celery: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_a7dc8216 + envs: + - name: LOG_LEVEL + value: + _default: DEBUG + - name: DOCUMENTATION_PG_PORT + value: + _default: "5432" + - name: DOCUMENTATION_PG_DATABASE + value: + _default: documentations_db + - name: DOCUMENTATION_PG_HOST + value: + _default: postgres-service.documentations.svc.cluster.local + - name: BASE_HOST + value: + _default: https://sarex.ugok.lan/ + - name: CELERY_QUEUE + value: + _default: flow + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000/api + - name: DOCUMENTATION_HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/internal/v1 + - name: DOCUMENTATION_EXTERNAL_HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/api/v1 + - name: ENABLE_ANALYTICS + value: + _default: "1" + - name: ENABLE_CELERY + value: + _default: "1" + - name: ENABLE_MAILGUN + value: + _default: "0" + - name: ENABLE_METRICS + value: + _default: "0" + - name: FROM_EMAIL + value: + _default: sarex.ru + - name: GATEWAY_URL + value: + _default: http://pdm-api.documentations.svc.cluster.local:8080 + - name: PG_HOST + value: + _default: postgres-service + - name: PG_PORT + value: + _default: "5432" + - name: RABBITMQ_HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + - name: RABBITMQ_PORT + value: + _default: "5672" + - name: RESOURCE_URL + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: SERVICE_HOST + value: + _default: https://sarex.ugok.lan/flows/api/v1 + - name: SMTP_HOST + value: + _default: smtp-relay.com + - name: SMTP_PORT + value: + _default: "587" + - name: SYNC_RESOURCE_ID + value: + _default: "1" + - name: TIMEOUT + value: + _default: "120" + - name: WORKFLOWS_HOST + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000/api/v1 + - name: WORKFLOWS_TIMEOUT + value: + _default: "60" + - name: DOCUMENTATION_TIMEOUT + value: + _default: "60" + - name: KAFKA_HOST + value: + _default: ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093 + - name: FLOWS_HOST + value: + _default: http://backend-service.flows.svc.cluster.local:8000 + - name: RESOURCES_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000/ + - name: DJANGO_BASE_HOST + value: + _default: https://ugok-sarex.uralmine.com + secretEnvs: + - name: FLOWS_DB_DB + secretName: + _default: flows-postgresql-secret + secretKey: database + - name: FLOWS_DB_USERNAME + secretName: + _default: flows-postgresql-secret + secretKey: username + - name: FLOWS_DB_PASSWORD + secretName: + _default: flows-postgresql-secret + secretKey: password + - name: DJANGO_AUTH + secretName: + _default: django-secret + secretKey: token + - name: KAFKA_USERNAME + secretName: + _default: kafka-secret + secretKey: username + - name: KAFKA_PASSWORD + secretName: + _default: kafka-secret + secretKey: password + - name: ADMIN_PANEL_SECRET_KEY + secretName: + _default: admin-secret + secretKey: key + - name: JWT_PUBLIC_KEY + secretName: + _default: jwt-secret + secretKey: public_key + - name: DOCUMENTATION_PG_USERNAME + secretName: + _default: documentations-postgresql-secret + secretKey: username + - name: DOCUMENTATION_PG_PASSWORD + secretName: + _default: documentations-postgresql-secret + secretKey: password + - name: DJANGO_TOKEN + secretName: + _default: django-secret + secretKey: token + - name: PG_DB + secretName: + _default: flows-postgresql-secret + secretKey: database + - name: PG_LOGIN + secretName: + _default: flows-postgresql-secret + secretKey: username + - name: PG_PASSWORD + secretName: + _default: flows-postgresql-secret + secretKey: password + - name: RABBITMQ_USERNAME + secretName: + _default: flows-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: flows-rabbitmq-secret + secretKey: password + - name: RABBITMQ_VHOST + secretName: + _default: flows-rabbitmq-secret + secretKey: vhost diff --git a/apps/flows/ugok/patch-frontend.yaml b/apps/flows/ugok/patch-frontend.yaml new file mode 100644 index 0000000..7f5453a --- /dev/null +++ b/apps/flows/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: flows +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_dcc5b5e6 diff --git a/apps/inspections/ugok/kustomization.yaml b/apps/inspections/ugok/kustomization.yaml new file mode 100644 index 0000000..b644d0a --- /dev/null +++ b/apps/inspections/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: inspections +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: backend diff --git a/apps/inspections/ugok/patch.yaml b/apps/inspections/ugok/patch.yaml new file mode 100644 index 0000000..b135207 --- /dev/null +++ b/apps/inspections/ugok/patch.yaml @@ -0,0 +1,123 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: inspections +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_1a33f6f4 + envs: + - name: DEBUG + value: + _default: "false" + - name: SERVICE_URL + value: + _default: https://sarex.ugok.lan + - name: HTTP_APP_HOST + value: + _default: 0.0.0.0 + - name: HTTP_APP_PORT + value: + _default: "8000" + - name: HTTP_APP_ROOT_PATH + value: + _default: /inspections + - name: HTTP_APP_WORKERS + value: + _default: "3" + - name: HTTP_APP_ADMIN_ENABLE + value: + _default: "true" + - name: KAFKA_SSL_CAFILE + value: + _default: /usr/local/share/ca-certificates/Yandex/YandexInternalRootCA.crt + - name: KAFKA_EAV_ASSETS_TOPIC + value: + _default: assets_broadcast + - name: JWT_AUTH_ENABLE + value: + _default: "true" + - name: NOTIFICATIONS_ENABLE + value: + _default: "true" + - name: NOTIFICATIONS_EMAIL_FROM + value: + _default: hello@sarex.io + - name: SAREX_BACKEND_URL + value: + _default: https://sarex.ugok.lan + - name: SAREX_BACKEND_TIMEOUT + value: + _default: "30" + - name: EAV_URL + value: + _default: http://eav-service.eav + - name: EAV_TIMEOUT + value: + _default: "30" + - name: WORKFLOWS_URL + value: + _default: http://workflows-service.processing-prod + - name: WORKFLOWS_TIMEOUT + value: + _default: "30" + - name: WORKFLOWS_EMAIL_DOCKER_IMAGE + value: + _default: cr.yandex/crp3ccidau046kdj8g9q/notification:email + - name: MOBILE_APP_CURRENT_VERSION + value: + _default: "1.0.0" + - name: MOBILE_APP_RECOMMENDED_VERSION + value: + _default: "1.0.0" + - name: MOBILE_APP_REQUIRED_VERSION + value: + _default: "1.0.0" + - name: MAILER_URL + value: + _default: http://mailer-service.mailer:8000 + - name: MAILER_TIMEOUT + value: + _default: "30" + secretEnvs: + - name: DATABASE_USER + secretName: + _default: inspections-postgresql-secret + secretKey: username + - name: DATABASE_PORT + secretName: + _default: inspections-postgresql-secret + secretKey: port + - name: DATABASE_NAME + secretName: + _default: inspections-postgresql-secret + secretKey: database + - name: DATABASE_HOST + secretName: + _default: inspections-postgresql-secret + secretKey: host + - name: DATABASE_PASSWORD + secretName: + _default: inspections-postgresql-secret + secretKey: password + - name: KAFKA_HOST + secretName: + _default: kafka-secret + secretKey: host + - name: KAFKA_USERNAME + secretName: + _default: kafka-secret + secretKey: username + - name: KAFKA_PASSWORD + secretName: + _default: kafka-secret + secretKey: password + - name: SAREX_BACKEND_AUTH + secretName: + _default: sarex-backend-auth-secret + secretKey: key diff --git a/apps/issues/ugok/kustomization.yaml b/apps/issues/ugok/kustomization.yaml new file mode 100644 index 0000000..8236879 --- /dev/null +++ b/apps/issues/ugok/kustomization.yaml @@ -0,0 +1,23 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: issues +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-celery.yaml + target: + kind: HelmRelease + name: celery + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend + - path: patch-redis-image.yaml + target: + kind: Deployment + name: redis diff --git a/apps/issues/ugok/patch-backend.yaml b/apps/issues/ugok/patch-backend.yaml new file mode 100644 index 0000000..d900c6c --- /dev/null +++ b/apps/issues/ugok/patch-backend.yaml @@ -0,0 +1,123 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: issues +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_bbb9d29a + envs: + - name: ENVIRONMENT + value: + _default: production + - name: AERO_PUBLIC_HOST + value: + _default: https://ugok-sarex.uralmine.com + - name: AERO_HOST + value: + _default: https://ugok-sarex.uralmine.com + - name: BASE_AERO_URL + value: + _default: https://ugok-sarex.uralmine.com + - name: BASE_AUTH_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: WORKFLOWS_HOST + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000 + - name: WORKFLOWS_URL + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000 + - name: RESOURCES_API_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: EAV_HOST + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: SAREX_API + value: + _default: https://ugok-sarex.uralmine.com + - name: DOCUMENTATIONS_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: DJANGO_SETTINGS_MODULE + value: + _default: config.settings.production + - name: DATABASE_HOST + value: + _default: postgres-service + - name: DATABASE_PORT + value: + _default: "5432" + - name: API_ADDRESS + value: + _default: "8000" + - name: RABBITMQ_HOSTNAME + value: + _default: rabbitmq.rabbitmq.svc.cluster.local:5672 + secretEnvs: + - name: YC_S3_ACCESS_KEY_ID + secretName: + _default: issues-s3-secret + secretKey: access_key + - name: YC_S3_SECRET_ACCESS_KEY + secretName: + _default: issues-s3-secret + secretKey: secret_key + - name: YC_S3_BUCKET_NAME + secretName: + _default: issues-s3-secret + secretKey: bucket + - name: YC_S3_ENDPOINT_URL + secretName: + _default: issues-s3-secret + secretKey: endpoint + - name: DJANGO_BASIC_AUTH + secretName: + _default: django-auth + secretKey: key + - name: SAREX_USERNAME + secretName: + _default: sarex-auth + secretKey: username + - name: SAREX_PASSWORD + secretName: + _default: sarex-auth + secretKey: password + - name: DATABASE_USER + secretName: + _default: issues-postgresql-secret + secretKey: username + - name: DATABASE_PASSWORD + secretName: + _default: issues-postgresql-secret + secretKey: password + - name: DATABASE_NAME + secretName: + _default: issues-postgresql-secret + secretKey: database + - name: RABBITMQ_VHOST + secretName: + _default: issues-rabbitmq-secret + secretKey: vhost + - name: RABBITMQ_USERNAME + secretName: + _default: issues-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: issues-rabbitmq-secret + secretKey: password + - name: JWT_PRIVATE_KEY + secretName: + _default: backend-secret + secretKey: ssh_private.key + - name: JWT_PUBLIC_KEY + secretName: + _default: backend-secret + secretKey: ssh_public.key diff --git a/apps/issues/ugok/patch-celery.yaml b/apps/issues/ugok/patch-celery.yaml new file mode 100644 index 0000000..f0ca818 --- /dev/null +++ b/apps/issues/ugok/patch-celery.yaml @@ -0,0 +1,132 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: celery + namespace: issues +spec: + values: + services: + celery: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_bbb9d29a + deployment: + command: + _default: ["celery", "-A", "config", "worker", "-l", "info", "-E"] + envs: + - name: ENVIRONMENT + value: + _default: production + - name: AERO_PUBLIC_HOST + value: + _default: https://sarex.ugok.lan + - name: AERO_HOST + value: + _default: https://sarex.ugok.lan + - name: BASE_AERO_URL + value: + _default: https://sarex.ugok.lan + - name: BASE_AUTH_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: WORKFLOWS_HOST + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000 + - name: WORKFLOWS_URL + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000 + - name: RESOURCES_API_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: EAV_HOST + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: SAREX_API + value: + _default: https://sarex.ugok.lan + - name: DOCUMENTATIONS_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: DJANGO_SETTINGS_MODULE + value: + _default: config.settings.production + - name: DATABASE_HOST + value: + _default: postgres-service + - name: DATABASE_PORT + value: + _default: "5432" + - name: API_ADDRESS + value: + _default: "8000" + - name: RABBITMQ_HOSTNAME + value: + _default: rabbitmq.rabbitmq.svc.cluster.local:5672 + - name: USE_NOTIFICATIONS + value: + _default: "True" + - name: ENABLE_MAILGUN + value: + _default: "False" + secretEnvs: + - name: YC_S3_ACCESS_KEY_ID + secretName: + _default: issues-s3-secret + secretKey: access_key + - name: YC_S3_SECRET_ACCESS_KEY + secretName: + _default: issues-s3-secret + secretKey: secret_key + - name: YC_S3_BUCKET_NAME + secretName: + _default: issues-s3-secret + secretKey: bucket + - name: YC_S3_ENDPOINT_URL + secretName: + _default: issues-s3-secret + secretKey: endpoint + - name: DJANGO_BASIC_AUTH + secretName: + _default: django-auth + secretKey: key + - name: SAREX_USERNAME + secretName: + _default: sarex-auth + secretKey: username + - name: SAREX_PASSWORD + secretName: + _default: sarex-auth + secretKey: password + - name: DATABASE_USER + secretName: + _default: issues-postgresql-secret + secretKey: username + - name: DATABASE_PASSWORD + secretName: + _default: issues-postgresql-secret + secretKey: password + - name: DATABASE_NAME + secretName: + _default: issues-postgresql-secret + secretKey: database + - name: RABBITMQ_VHOST + secretName: + _default: issues-rabbitmq-secret + secretKey: vhost + - name: RABBITMQ_USERNAME + secretName: + _default: issues-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: issues-rabbitmq-secret + secretKey: password + - name: JWT_PRIVATE_KEY + secretName: + _default: backend-secret + secretKey: ssh_private.key + - name: JWT_PUBLIC_KEY + secretName: + _default: backend-secret + secretKey: ssh_public.key diff --git a/apps/issues/ugok/patch-frontend.yaml b/apps/issues/ugok/patch-frontend.yaml new file mode 100644 index 0000000..2a2bc57 --- /dev/null +++ b/apps/issues/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: issues +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/contour_issues-frontend:b56b9da1 diff --git a/apps/issues/ugok/patch-redis-image.yaml b/apps/issues/ugok/patch-redis-image.yaml new file mode 100644 index 0000000..fd60e37 --- /dev/null +++ b/apps/issues/ugok/patch-redis-image.yaml @@ -0,0 +1,6 @@ +--- +# redis-deployment.yaml — сырой Deployment (не universal-chart), образ меняем +# через JSON6902, т.к. strategic-merge на список containers ненадёжен для CRD-less объектов. +- op: replace + path: /spec/template/spec/containers/0/image + value: cr.yandex/crp3ccidau046kdj8g9q/redis:latest diff --git a/apps/mapper/ugok/kustomization.yaml b/apps/mapper/ugok/kustomization.yaml new file mode 100644 index 0000000..fb2061d --- /dev/null +++ b/apps/mapper/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: mapper +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: backend diff --git a/apps/mapper/ugok/patch.yaml b/apps/mapper/ugok/patch.yaml new file mode 100644 index 0000000..f7a9317 --- /dev/null +++ b/apps/mapper/ugok/patch.yaml @@ -0,0 +1,22 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: mapper +spec: + values: + services: + backend: + deployment: + resources: + limits: + cpu: + _default: "2" + memory: + _default: 512Mi + requests: + cpu: + _default: "1" + memory: + _default: 128Mi diff --git a/apps/measurements/ugok/kustomization.yaml b/apps/measurements/ugok/kustomization.yaml new file mode 100644 index 0000000..bbca337 --- /dev/null +++ b/apps/measurements/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: measurements +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: measurements diff --git a/apps/measurements/ugok/patch.yaml b/apps/measurements/ugok/patch.yaml new file mode 100644 index 0000000..39de557 --- /dev/null +++ b/apps/measurements/ugok/patch.yaml @@ -0,0 +1,29 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: measurements + namespace: measurements +spec: + values: + services: + backend: + deployment: + resources: + requests: + cpu: + _default: 500m + memory: + _default: 512Mi + envs: + - name: DJANGO_HOST + value: + _default: https://lk.sarex.io + - name: S3_JSON_FILE + value: + _default: /opt/cred_s3.json + secretEnvs: + - name: S3_JSON_SETTINGS + secretName: + _default: s3-json-settings + secretKey: S3_JSON_SETTINGS diff --git a/apps/message-hub/ugok/kustomization.yaml b/apps/message-hub/ugok/kustomization.yaml new file mode 100644 index 0000000..9ae124a --- /dev/null +++ b/apps/message-hub/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: message-hub +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: message-hub diff --git a/apps/message-hub/ugok/patch.yaml b/apps/message-hub/ugok/patch.yaml new file mode 100644 index 0000000..dcf1855 --- /dev/null +++ b/apps/message-hub/ugok/patch.yaml @@ -0,0 +1,98 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: message-hub + namespace: message-hub +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_e8010fe4 + envs: + - name: WORKER_TIMEOUT + value: + _default: "60" + - name: PYTHONPATH + value: + _default: src + - name: SETTINGS_MAX_RETRIES + value: + _default: "1" + - name: SETTINGS_TOPICS + value: + _default: '{"planning": "pm", "assets": "assets_broadcast", "project_entity": "issues_broadcast"}' + - name: SETTINGS_PDF_CONVERTER_HOST + value: + _default: http://export-project-service.django.svc.cluster.local:8000 + - name: SAREX_BASE_HOST + value: + _default: http://backend-service.pm.svc.cluster.local:8000 + - name: DB_HOST + value: + _default: postgres-service.pm.svc.cluster.local + - name: DB_PORT + value: + _default: "5432" + - name: DB_DATABASE + value: + _default: pm_db + - name: CACHE_HOST + value: + _default: redis.pm.svc.cluster.local + - name: CACHE_PORT + value: + _default: "6379" + - name: CACHE_SSL + value: + _default: "0" + - name: KAFKA_HOST + value: + _default: kafka.kafka.svc.cluster.local + - name: KAFKA_PORT + value: + _default: "9092" + - name: KAFKA_SECURITY_PROTOCOL + value: + _default: SASL_PLAINTEXT + - name: KAFKA_SASL_MECHANISM + value: + _default: PLAIN + - name: KAFKA_SSL_CAFILE + value: + _default: /usr/local/share/ca-certificates/kafka.crt + secretEnvs: + - name: KAFKA_USERNAME + secretName: + _default: message-hub-kafka-secret + secretKey: username + - name: KAFKA_PASSWORD + secretName: + _default: message-hub-kafka-secret + secretKey: password + - name: DB_USERNAME + secretName: + _default: pm-postgresql-secret + secretKey: username + - name: DB_PASSWORD + secretName: + _default: pm-postgresql-secret + secretKey: password + - name: S3_LOGIN + secretName: + _default: message-hub-s3-secret + secretKey: access_key + - name: S3_PASSWORD + secretName: + _default: message-hub-s3-secret + secretKey: secret_key + - name: S3_BUCKET + secretName: + _default: message-hub-s3-secret + secretKey: bucket + - name: S3_HOST + secretName: + _default: message-hub-s3-secret + secretKey: endpoint diff --git a/apps/notes/ugok/kustomization.yaml b/apps/notes/ugok/kustomization.yaml new file mode 100644 index 0000000..45e6b52 --- /dev/null +++ b/apps/notes/ugok/kustomization.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: notes +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/notes/ugok/patch-backend.yaml b/apps/notes/ugok/patch-backend.yaml new file mode 100644 index 0000000..485ca92 --- /dev/null +++ b/apps/notes/ugok/patch-backend.yaml @@ -0,0 +1,80 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: notes +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/notes-backend:production_81366854 + envs: + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: DOCUMENTATIONS_HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080/api/v1 + - name: BASE_HOST + value: + _default: https://sarex.ugok.lan/notes + - name: FAAS_SERVICE + value: + _default: http://generate-document-service.faas.svc.cluster.local:8000 + - name: WORKSPACE_URL + value: + _default: http://backend-svc.workspaces.svc.cluster.local:8000/api/v1 + - name: WORKFLOW_HOST + value: + _default: http://workflows-api-service.workflow.svc.cluster.local:8000/api/v1 + - name: WORKFLOW_TAG + value: + _default: stable + - name: ENABLE_METRICS + value: + _default: "0" + - name: ENABLE_LOCAL_STORAGE + value: + _default: "0" + - name: REGISTRY + value: + _default: 10.4.10.187:80/library/ + - name: TIMEOUT + value: + _default: "120" + - name: ATTACHMENT_HOST + value: + _default: http://attachments-service.attachments.svc.cluster.local:8000/api/v1 + - name: PG_SSL_MODE + value: + _default: verify-full + - name: SYNC_RESOURCE_ID + value: + _default: "0" + - name: ENABLE_ND + value: + _default: "0" + secretEnvs: + - name: PG_DB + secretName: + _default: notes-postgresql-secret + secretKey: database + - name: PG_LOGIN + secretName: + _default: notes-postgresql-secret + secretKey: username + - name: PG_PASSWORD + secretName: + _default: notes-postgresql-secret + secretKey: password + - name: PG_HOST + secretName: + _default: notes-postgresql-secret + secretKey: hostname + - name: DJANGO_TOKEN + secretName: + _default: notes-django-auth + secretKey: key diff --git a/apps/notes/ugok/patch-frontend.yaml b/apps/notes/ugok/patch-frontend.yaml new file mode 100644 index 0000000..1ba24c8 --- /dev/null +++ b/apps/notes/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: notes +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/notes-frontend:production_0cb0909f diff --git a/apps/pm/ugok/kustomization.yaml b/apps/pm/ugok/kustomization.yaml new file mode 100644 index 0000000..148c870 --- /dev/null +++ b/apps/pm/ugok/kustomization.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: pm +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-celery.yaml + target: + kind: HelmRelease + name: celery + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/pm/ugok/patch-backend.yaml b/apps/pm/ugok/patch-backend.yaml new file mode 100644 index 0000000..df3ed22 --- /dev/null +++ b/apps/pm/ugok/patch-backend.yaml @@ -0,0 +1,53 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: pm +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_fa0f1551 + volumes: + _default: + - name: kafka-cert-volume + mountPath: + _default: /usr/local/share/ca-certificates + readOnly: + _default: true + configMap: + name: + _default: kafka-cert + + - name: env-file + mountPath: + _default: /opt/sarex/.env + subPath: + _default: .env + readOnly: + _default: true + secret: + secretName: + _default: sarex-env + envs: + - name: USERS_INTERNAL_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: RESOURCES_INTERNAL_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: EAV_HOST + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: EAV_API_PREFIX + value: + _default: /api/v0 + - name: SETTINGS_VERIFY_SSL + value: + _default: "True" + - name: EAV_API_PREFIX_V1 + value: + _default: /api/v1 diff --git a/apps/pm/ugok/patch-celery.yaml b/apps/pm/ugok/patch-celery.yaml new file mode 100644 index 0000000..f000a3f --- /dev/null +++ b/apps/pm/ugok/patch-celery.yaml @@ -0,0 +1,56 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: celery + namespace: pm +spec: + values: + services: + celery: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_fa0f1551 + volumes: + _default: + - name: kafka-cert-volume + mountPath: + _default: /usr/local/share/ca-certificates + readOnly: + _default: true + configMap: + name: + _default: kafka-cert + + - name: env-file + mountPath: + _default: /opt/sarex/.env + subPath: + _default: .env + readOnly: + _default: true + secret: + secretName: + _default: sarex-env + envs: + - name: USERS_INTERNAL_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: RESOURCES_INTERNAL_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: EAV_HOST + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: EAV_API_PREFIX + value: + _default: /api/v0 + - name: EAV_API_PREFIX_V1 + value: + _default: /api/v1 + - name: PLANNING_HOST + value: + _default: http://backend-service.pm.svc.cluster.local:8000/api/pm/msp + - name: PLANNING_USE + value: + _default: "True" diff --git a/apps/pm/ugok/patch-frontend.yaml b/apps/pm/ugok/patch-frontend.yaml new file mode 100644 index 0000000..672250d --- /dev/null +++ b/apps/pm/ugok/patch-frontend.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: pm +spec: + values: + services: + frontend: + image: + name: + _default: 10.4.10.187:80/library/pm-frontend:contour_e5c3d387 + resources: + requests: + cpu: + _default: 100m + memory: + _default: 100Mi diff --git a/apps/prescriptions/ugok/kustomization.yaml b/apps/prescriptions/ugok/kustomization.yaml new file mode 100644 index 0000000..451708e --- /dev/null +++ b/apps/prescriptions/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: prescriptions +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/prescriptions/ugok/patch.yaml b/apps/prescriptions/ugok/patch.yaml new file mode 100644 index 0000000..cde1b51 --- /dev/null +++ b/apps/prescriptions/ugok/patch.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: prescriptions +spec: + values: + services: + frontend: + image: + name: + _default: 10.4.10.187:80/library/prescriptions-frontend:production_357a42d6 diff --git a/apps/processing/ugok/engine-low.yaml b/apps/processing/ugok/engine-low.yaml new file mode 100644 index 0000000..efe6e04 --- /dev/null +++ b/apps/processing/ugok/engine-low.yaml @@ -0,0 +1,319 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: engine-low + namespace: workflow + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.9" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + backend: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:production_f5fe4688 + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: engine-low + + replicaCount: + _default: 1 + + port: + _default: 8080 + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: false + + imagePullSecrets: + enabled: + _default: true + name: + _default: regcred + + envs: + - name: TOLERATION_KEY + value: + _default: dedicated + - name: TOLERATION_VALUE + value: + _default: processing-light + - name: TOLERATION_KEY_HIGH_MEM + value: + _default: dedicated + - name: TOLERATION_VALUE_HIGH_MEM + value: + _default: processing + - name: DEFAULT_TOLERATION_KEY + value: + _default: dedicated + - name: DEFAULT_TOLERATION_VALUE + value: + _default: processing-light + - name: TOLERATION_KEY_PERSISTENT + value: + _default: dedicated + - name: TOLERATION_VALUE_PERSISTENT + value: + _default: processing + - name: RABBITMQ_HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + - name: RABBITMQ_PORT + value: + _default: "5672" + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: WORKFLOWS_SENTRY_DSN + value: + _default: "https://866b532efdbb4764a7551b76231232fc@o279218.ingest.sentry.io/543123" + - name: WORKFLOWS_SENTRY_DEBUG + value: + _default: "0" + - name: POSTGRES_POOL_SIZE + value: + _default: "20" + - name: ENABLE_SMTP + value: + _default: "1" + - name: SMTP + value: + _default: /etc/smtp-secret/smtp.json + - name: ENVIRONMENT + value: + _default: prod + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: S3_SERVICE_ACCOUNT + value: + _default: /etc/sarex/yc-s3/yc-s3-service-account.json + - name: BIM_API_V2_DB + value: + _default: /etc/sarex/bim-api-v2-db-prod.json + - name: PDM_API_DB + value: + _default: /etc/pdm/pdm-api-db-prod.json + - name: WORKSPACE_API_DB + value: + _default: /etc/ws/ws-api-db-prod.json + - name: ISSUE_API_DB + value: + _default: /etc/issues/issue-api-db-prod.json + - name: MAILGUN + value: + _default: /etc/mailgun-secret/env.json + - name: INTERNAL_PDM_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: INTERNAL_FILESTREAM_URL + value: + _default: http://documentations-filestream.documentations.svc.cluster.local:8080 + - name: EXTERNAL_PDM_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: EXTERNAL_FILESTREAM_URL + value: + _default: http://documentations-filestream-service.documentations.svc.cluster.local:8080 + - name: RESOURCES_API_INTERNAL_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: ENABLE_S3_STORAGE + value: + _default: "1" + - name: ENABLE_S3V2_STORAGE + value: + _default: "1" + - name: ENABLE_PDM_STORAGE + value: + _default: "1" + - name: ENABLE_URL_STORAGE + value: + _default: "1" + - name: ENABLE_SRX_TMP + value: + _default: "1" + - name: ENABLE_BIM_API_V2_DB + value: + _default: "1" + - name: ENABLE_WORKSPACE_API_DB + value: + _default: "1" + - name: ENABLE_ISSUE_API_DB + value: + _default: "1" + - name: ENABLE_RESOURCES_API + value: + _default: "1" + - name: ENABLE_PDM_API_DB + value: + _default: "1" + - name: ENABLE_COMPARISONS_API_DB + value: + _default: "1" + - name: ENABLE_MAIL_GUN + value: + _default: "0" + - name: ENABLE_AMQP_EXECUTOR + value: + _default: "1" + - name: ENABLE_KUBERNETES_EXECUTOR + value: + _default: "1" + - name: MAX_WORKFLOWS_LIMIT + value: + _default: "5" + - name: CPU_COUNT + value: + _default: "1" + - name: MEMORY_GI + value: + _default: "1" + - name: CPU_COUNT_LOW_RESOURCES + value: + _default: "1" + - name: MEMORY_GI_LOW_RESOURCES + value: + _default: "1" + - name: CPU_COUNT_HIGH_MEM + value: + _default: "1" + - name: MEMORY_GI_HIGH_MEM + value: + _default: "1" + - name: ENABLE_TOLERATION + value: + _default: "1" + - name: COUNT_RUNNING_WORKERS + value: + _default: "1" + - name: COUNT_CANCELING_WORKERS + value: + _default: "1" + - name: COUNT_HANDLE_JOB_WORKERS + value: + _default: "1" + - name: BIM_API_DEBUG + value: + _default: "0" + - name: BIM_API_V2_DEBUG + value: + _default: "0" + - name: PDM_API_DEBUG + value: + _default: "0" + - name: COMPARISONS_API_DEBUG + value: + _default: "0" + - name: WORKSPACE_API_DEBUG + value: + _default: "0" + - name: DEFAULT_NODE_SELECTOR_KEY + value: + _default: dedicated + - name: DEFAULT_NODE_SELECTOR_VALUE + value: + _default: processing-ligh + - name: JOBS_NAMESPACE + value: + _default: workflow + - name: ISSUE_API_DEBUG + value: + _default: "0" + - name: RABBITMQ_CREATE_EXCHANGE + value: + _default: autodesk.inputMessage + - name: RABBITMQ_CANCEL_EXCHANGE + value: + _default: autodesk.cancelMessage + - name: RABBITMQ_CREATE_ROUTING_KEY + value: + _default: converting + - name: RABBITMQ_CANCEL_TOPIC + value: + _default: cancel + - name: RABBITMQ_COMPLETENESS_EXCHANGE + value: + _default: autodesk.outputMessage + - name: RABBITMQ_COMPLETENESS_TOPIC + value: + _default: output + - name: CONTROL_PLANE_PERIOD + value: + _default: 10s + - name: WORKFLOW_PRIORITY + value: + _default: low + + secretEnvs: + - name: RABBITMQ_USER + secretName: + _default: workflow-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASS + secretName: + _default: workflow-rabbitmq-secret + secretKey: password + - name: POSTGRES_USER + secretName: + _default: workflow-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: workflow-postgresql-secret + secretKey: password + - name: POSTGRES_DB + secretName: + _default: workflow-postgresql-secret + secretKey: database + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/processing/ugok/engine.yaml b/apps/processing/ugok/engine.yaml new file mode 100644 index 0000000..33e4046 --- /dev/null +++ b/apps/processing/ugok/engine.yaml @@ -0,0 +1,319 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: engine + namespace: workflow + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.9" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + backend: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:production_f5fe4688 + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: engine + + replicaCount: + _default: 1 + + port: + _default: 8080 + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: false + + imagePullSecrets: + enabled: + _default: true + name: + _default: regcred + + envs: + - name: TOLERATION_KEY + value: + _default: dedicated + - name: TOLERATION_VALUE + value: + _default: processing-light + - name: TOLERATION_KEY_HIGH_MEM + value: + _default: dedicated + - name: TOLERATION_VALUE_HIGH_MEM + value: + _default: processing + - name: DEFAULT_TOLERATION_KEY + value: + _default: dedicated + - name: DEFAULT_TOLERATION_VALUE + value: + _default: processing-light + - name: TOLERATION_KEY_PERSISTENT + value: + _default: dedicated + - name: TOLERATION_VALUE_PERSISTENT + value: + _default: processing + - name: RABBITMQ_HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + - name: RABBITMQ_PORT + value: + _default: "5672" + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: WORKFLOWS_SENTRY_DSN + value: + _default: "https://866b532efdbb4764a7551b76231232fc@o279218.ingest.sentry.io/543123" + - name: WORKFLOWS_SENTRY_DEBUG + value: + _default: "0" + - name: POSTGRES_POOL_SIZE + value: + _default: "20" + - name: ENABLE_SMTP + value: + _default: "1" + - name: SMTP + value: + _default: /etc/smtp-secret/smtp.json + - name: ENVIRONMENT + value: + _default: prod + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: S3_SERVICE_ACCOUNT + value: + _default: /etc/sarex/yc-s3/yc-s3-service-account.json + - name: BIM_API_V2_DB + value: + _default: /etc/sarex/bim-api-v2-db-prod.json + - name: PDM_API_DB + value: + _default: /etc/pdm/pdm-api-db-prod.json + - name: WORKSPACE_API_DB + value: + _default: /etc/ws/ws-api-db-prod.json + - name: ISSUE_API_DB + value: + _default: /etc/issues/issue-api-db-prod.json + - name: MAILGUN + value: + _default: /etc/mailgun-secret/env.json + - name: INTERNAL_PDM_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: INTERNAL_FILESTREAM_URL + value: + _default: http://documentations-filestream.documentations.svc.cluster.local:8080 + - name: EXTERNAL_PDM_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: EXTERNAL_FILESTREAM_URL + value: + _default: http://documentations-filestream-service.documentations.svc.cluster.local:8080 + - name: RESOURCES_API_INTERNAL_HOST + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: ENABLE_S3_STORAGE + value: + _default: "1" + - name: ENABLE_S3V2_STORAGE + value: + _default: "1" + - name: ENABLE_PDM_STORAGE + value: + _default: "1" + - name: ENABLE_URL_STORAGE + value: + _default: "1" + - name: ENABLE_SRX_TMP + value: + _default: "1" + - name: ENABLE_BIM_API_V2_DB + value: + _default: "1" + - name: ENABLE_WORKSPACE_API_DB + value: + _default: "1" + - name: ENABLE_ISSUE_API_DB + value: + _default: "1" + - name: ENABLE_RESOURCES_API + value: + _default: "1" + - name: ENABLE_PDM_API_DB + value: + _default: "1" + - name: ENABLE_COMPARISONS_API_DB + value: + _default: "1" + - name: ENABLE_MAIL_GUN + value: + _default: "0" + - name: ENABLE_AMQP_EXECUTOR + value: + _default: "1" + - name: ENABLE_KUBERNETES_EXECUTOR + value: + _default: "1" + - name: MAX_WORKFLOWS_LIMIT + value: + _default: "5" + - name: CPU_COUNT + value: + _default: "1" + - name: MEMORY_GI + value: + _default: "1" + - name: CPU_COUNT_LOW_RESOURCES + value: + _default: "1" + - name: MEMORY_GI_LOW_RESOURCES + value: + _default: "1" + - name: CPU_COUNT_HIGH_MEM + value: + _default: "1" + - name: MEMORY_GI_HIGH_MEM + value: + _default: "1" + - name: ENABLE_TOLERATION + value: + _default: "1" + - name: COUNT_RUNNING_WORKERS + value: + _default: "1" + - name: COUNT_CANCELING_WORKERS + value: + _default: "1" + - name: COUNT_HANDLE_JOB_WORKERS + value: + _default: "1" + - name: BIM_API_DEBUG + value: + _default: "0" + - name: BIM_API_V2_DEBUG + value: + _default: "0" + - name: PDM_API_DEBUG + value: + _default: "0" + - name: COMPARISONS_API_DEBUG + value: + _default: "0" + - name: WORKSPACE_API_DEBUG + value: + _default: "0" + - name: DEFAULT_NODE_SELECTOR_KEY + value: + _default: dedicated + - name: DEFAULT_NODE_SELECTOR_VALUE + value: + _default: processing-ligh + - name: JOBS_NAMESPACE + value: + _default: workflow + - name: ISSUE_API_DEBUG + value: + _default: "0" + - name: RABBITMQ_CREATE_EXCHANGE + value: + _default: autodesk.inputMessage + - name: RABBITMQ_CANCEL_EXCHANGE + value: + _default: autodesk.cancelMessage + - name: RABBITMQ_CREATE_ROUTING_KEY + value: + _default: converting + - name: RABBITMQ_CANCEL_TOPIC + value: + _default: cancel + - name: RABBITMQ_COMPLETENESS_EXCHANGE + value: + _default: autodesk.outputMessage + - name: RABBITMQ_COMPLETENESS_TOPIC + value: + _default: output + - name: CONTROL_PLANE_PERIOD + value: + _default: 10s + - name: WORKFLOW_PRIORITY + value: + _default: high + + secretEnvs: + - name: RABBITMQ_USER + secretName: + _default: workflow-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASS + secretName: + _default: workflow-rabbitmq-secret + secretKey: password + - name: POSTGRES_USER + secretName: + _default: workflow-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: workflow-postgresql-secret + secretKey: password + - name: POSTGRES_DB + secretName: + _default: workflow-postgresql-secret + secretKey: database + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/processing/ugok/frontend.yaml b/apps/processing/ugok/frontend.yaml new file mode 100644 index 0000000..52120d2 --- /dev/null +++ b/apps/processing/ugok/frontend.yaml @@ -0,0 +1,88 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: workflow + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.9" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + frontend: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-frontend:ugok2_85f6ce2c + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: frontend + + replicaCount: + _default: 1 + + port: + _default: 8080 + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: true + + name: + _default: frontend-svc + + type: + _default: ClusterIP + + port: + _default: 8080 + + targetPort: + _default: 8080 + + portName: + _default: http + + imagePullSecrets: + enabled: + _default: true + name: + _default: regcred + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/processing/ugok/kustomization.yaml b/apps/processing/ugok/kustomization.yaml new file mode 100644 index 0000000..68df113 --- /dev/null +++ b/apps/processing/ugok/kustomization.yaml @@ -0,0 +1,14 @@ +--- +# processing разворачивается в ugok в неймспейс workflow (как и в wb). +# base — vault-native (secretEnvs через Vault Agent), а в ugok Vault вообще +# не используется (весь дамп кластера — ни одной vault.hashicorp.com +# аннотации), поэтому не наследуем base, а собираем отдельные standalone +# HelmRelease с обычными secretEnvs — по образцу apps/processing/wb/engine.yaml. +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: workflow +resources: + - engine.yaml + - engine-low.yaml + - frontend.yaml + - workflows-api.yaml diff --git a/apps/processing/ugok/workflows-api.yaml b/apps/processing/ugok/workflows-api.yaml new file mode 100644 index 0000000..924f312 --- /dev/null +++ b/apps/processing/ugok/workflows-api.yaml @@ -0,0 +1,132 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: workflows-api + namespace: workflow + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.9" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + backend: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workflows-api:prod_e963403f + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: workflows-api + + replicaCount: + _default: 1 + + port: + _default: 8080 + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: true + + name: + _default: workflows-api-service + + type: + _default: ClusterIP + + port: + _default: 8000 + + targetPort: + _default: 8080 + + portName: + _default: http + + imagePullSecrets: + enabled: + _default: true + name: + _default: regcred + + envs: + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: POSTGRES_POOL_SIZE + value: + _default: "3" + - name: HTTP_HOST + value: + _default: 0.0.0.0:8080 + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: S3_SERVICE_ACCOUNT + value: + _default: /etc/sarex/yc-s3/yc-s3-service-account.json + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: POSTGRES_SSL_USE + value: + _default: "0" + + secretEnvs: + - name: PUBLIC_KEY + secretName: + _default: public-key + secretKey: key + - name: POSTGRES_USER + secretName: + _default: workflow-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: workflow-postgresql-secret + secretKey: password + - name: POSTGRES_DB + secretName: + _default: workflow-postgresql-secret + secretKey: database + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/projects/ugok/kustomization.yaml b/apps/projects/ugok/kustomization.yaml new file mode 100644 index 0000000..8ae6044 --- /dev/null +++ b/apps/projects/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: projects +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/projects/ugok/patch.yaml b/apps/projects/ugok/patch.yaml new file mode 100644 index 0000000..398ca35 --- /dev/null +++ b/apps/projects/ugok/patch.yaml @@ -0,0 +1,20 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: projects +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/project-frontend-app:ugok1_7c96b54d + deployment: + resources: + requests: + cpu: + _default: 100m + memory: + _default: 100Mi diff --git a/apps/remarks/ugok/kustomization.yaml b/apps/remarks/ugok/kustomization.yaml new file mode 100644 index 0000000..061ce35 --- /dev/null +++ b/apps/remarks/ugok/kustomization.yaml @@ -0,0 +1,11 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: remarks +resources: + - ../base +patches: + - path: patch.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/remarks/ugok/patch.yaml b/apps/remarks/ugok/patch.yaml new file mode 100644 index 0000000..ba8f78b --- /dev/null +++ b/apps/remarks/ugok/patch.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: remarks +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/remarks-frontend:contour_1bed3986 diff --git a/apps/rfi/ugok/kustomization.yaml b/apps/rfi/ugok/kustomization.yaml new file mode 100644 index 0000000..725ccb6 --- /dev/null +++ b/apps/rfi/ugok/kustomization.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: rfi +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-celery.yaml + target: + kind: HelmRelease + name: celery + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/rfi/ugok/patch-backend.yaml b/apps/rfi/ugok/patch-backend.yaml new file mode 100644 index 0000000..63bd145 --- /dev/null +++ b/apps/rfi/ugok/patch-backend.yaml @@ -0,0 +1,98 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: rfi +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:production_d1e2e80d + envs: + - name: JWT_AUTH_ENABLE + value: + _default: "True" + - name: NOTIFICATIONS_ENABLE + value: + _default: "false" + - name: NOTIFICATIONS_EMAIL_FROM + value: + _default: hello@sarex.io + - name: NOTIFICATIONS_SERVICE_URL + value: + _default: https://sarex.ugok.lan/rfi + - name: SAREX_BACKEND_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: EAV_URL + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: GATEWAY_URL + value: + _default: http://pdm-api.documentations.svc.cluster.local:8080 + - name: RABBITMQ_PORT + value: + _default: "5672" + - name: RABBITMQ_HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + secretEnvs: + - name: DJANGO_SECRET_KEY + secretName: + _default: django-secret + secretKey: django_secret_key + - name: DB_HOST + secretName: + _default: rfi-postgresql-secret + secretKey: host + - name: DB_PORT + secretName: + _default: rfi-postgresql-secret + secretKey: port + - name: DB_NAME + secretName: + _default: rfi-postgresql-secret + secretKey: database + - name: DB_USER + secretName: + _default: rfi-postgresql-secret + secretKey: username + - name: DB_PASSWORD + secretName: + _default: rfi-postgresql-secret + secretKey: password + - name: SAREX_BACKEND_AUTH + secretName: + _default: django-secret + secretKey: token + - name: YC_S3_ACCESS_KEY_ID + secretName: + _default: rfi-s3-secret + secretKey: access_key + - name: YC_S3_SECRET_ACCESS_KEY + secretName: + _default: rfi-s3-secret + secretKey: secret_key + - name: YC_S3_BUCKET_NAME + secretName: + _default: rfi-s3-secret + secretKey: bucket + - name: YC_S3_ENDPOINT_URL + secretName: + _default: rfi-s3-secret + secretKey: endpoint + - name: RABBITMQ_VHOST + secretName: + _default: rfi-rabbitmq-secret + secretKey: vhost + - name: RABBITMQ_USERNAME + secretName: + _default: rfi-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: rfi-rabbitmq-secret + secretKey: password diff --git a/apps/rfi/ugok/patch-celery.yaml b/apps/rfi/ugok/patch-celery.yaml new file mode 100644 index 0000000..fdb550b --- /dev/null +++ b/apps/rfi/ugok/patch-celery.yaml @@ -0,0 +1,103 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: celery + namespace: rfi +spec: + values: + services: + celery: + image: + name: + _default: 10.4.10.187:80/library/rfi-backend:production_79888e2f + deployment: + command: + _default: ["uv"] + args: + _default: ["run", "celery", "-A", "config", "worker", "-l", "info"] + envs: + - name: JWT_AUTH_ENABLE + value: + _default: "True" + - name: NOTIFICATIONS_ENABLE + value: + _default: "false" + - name: NOTIFICATIONS_EMAIL_FROM + value: + _default: hello@sarex.io + - name: NOTIFICATIONS_SERVICE_URL + value: + _default: https://sarex.ugok.lan/rfi + - name: SAREX_BACKEND_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: EAV_URL + value: + _default: http://eav-service.eav.svc.cluster.local:8000 + - name: GATEWAY_URL + value: + _default: http://pdm-api.documentations.svc.cluster.local:8080 + - name: RABBITMQ_PORT + value: + _default: "5672" + - name: RABBITMQ_HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + secretEnvs: + - name: DJANGO_SECRET_KEY + secretName: + _default: django-secret + secretKey: django_secret_key + - name: DB_HOST + secretName: + _default: rfi-postgresql-secret + secretKey: host + - name: DB_PORT + secretName: + _default: rfi-postgresql-secret + secretKey: port + - name: DB_NAME + secretName: + _default: rfi-postgresql-secret + secretKey: database + - name: DB_USER + secretName: + _default: rfi-postgresql-secret + secretKey: username + - name: DB_PASSWORD + secretName: + _default: rfi-postgresql-secret + secretKey: password + - name: SAREX_BACKEND_AUTH + secretName: + _default: django-secret + secretKey: token + - name: YC_S3_ACCESS_KEY_ID + secretName: + _default: rfi-s3-secret + secretKey: access_key + - name: YC_S3_SECRET_ACCESS_KEY + secretName: + _default: rfi-s3-secret + secretKey: secret_key + - name: YC_S3_BUCKET_NAME + secretName: + _default: rfi-s3-secret + secretKey: bucket + - name: YC_S3_ENDPOINT_URL + secretName: + _default: rfi-s3-secret + secretKey: endpoint + - name: RABBITMQ_VHOST + secretName: + _default: rfi-rabbitmq-secret + secretKey: vhost + - name: RABBITMQ_USERNAME + secretName: + _default: rfi-rabbitmq-secret + secretKey: username + - name: RABBITMQ_PASSWORD + secretName: + _default: rfi-rabbitmq-secret + secretKey: password diff --git a/apps/rfi/ugok/patch-frontend.yaml b/apps/rfi/ugok/patch-frontend.yaml new file mode 100644 index 0000000..8a59216 --- /dev/null +++ b/apps/rfi/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: rfi +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-frontend:production_b827756f_wb diff --git a/apps/stamp-verification/ugok/kustomization.yaml b/apps/stamp-verification/ugok/kustomization.yaml new file mode 100644 index 0000000..f0d1ddb --- /dev/null +++ b/apps/stamp-verification/ugok/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: stamp-verification +resources: + - ../base diff --git a/apps/subscriptions/ugok/backend.yaml b/apps/subscriptions/ugok/backend.yaml new file mode 100644 index 0000000..e4acdfe --- /dev/null +++ b/apps/subscriptions/ugok/backend.yaml @@ -0,0 +1,184 @@ +--- +# subscriptions/base — сырой Deployment (не universal-chart), а wb использует +# отдельный standalone HelmRelease (apps/subscriptions/wb/backend.yaml), не +# наследуя base. Для ugok — та же схема, значения из дампа кластера. +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: sarex-subscriptions + namespace: subscriptions + +spec: + interval: 10m + + chart: + spec: + chart: universal-chart + version: "0.1.7" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + + install: + remediation: + retries: 3 + + upgrade: + remediation: + retries: 3 + + values: + global: + env: _default + + services: + sarex-subscriptions: + enabled: true + + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/subscriptions:prod_a50928e1 + pullPolicy: + _default: IfNotPresent + + deployment: + enabled: true + + name: + _default: sarex-subscriptions + + replicaCount: + _default: 1 + + port: + _default: 8000 + + probes: + liveness: + enabled: false + readiness: + enabled: false + + service: + enabled: true + + name: + _default: backend-svc + + type: + _default: ClusterIP + + port: + _default: 8000 + + targetPort: + _default: 8000 + + portName: + _default: http + + imagePullSecrets: + enabled: + _default: true + name: + _default: regcred + + volumes: + _default: + - name: uwsgi-configmap + mountPath: + _default: /opt/server/uwsgi.ini + subPath: + _default: uwsgi.ini + readOnly: + _default: true + configMap: + name: + _default: uwsgi-configmap + items: + - key: uwsgi.ini + path: + _default: uwsgi.ini + + - name: django-configmap + mountPath: + _default: /server/config/settings/production.py + subPath: + _default: production.py + readOnly: + _default: true + configMap: + name: + _default: django-configmap + items: + - key: production.py + path: + _default: production.py + + envs: + - name: DATABASE_HOST + value: + _default: postgres-service + - name: DATABASE_PORT + value: + _default: "5432" + - name: DATABASE_NAME + value: + _default: subscriptions_db + - name: API_ADDRESS + value: + _default: "8000" + - name: SYSTEM_LOG_HOST + value: + _default: http://api-service.system-log + - name: USER_SERVICE_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: IS_USE_TELEGRAM + value: + _default: "false" + - name: IS_MAILGUN_USE + value: + _default: "0" + - name: SMTP_EMAIL_FROM + value: + _default: sarex@rb.ru + - name: SMTP_EMAIL_HOST + value: + _default: mail.rb.ru + - name: SMTP_EMAIL_PORT + value: + _default: "465" + + secretEnvs: + - name: DATABASE_USER + secretName: + _default: subscriptions-postgresql-secret + secretKey: username + - name: DATABASE_PASSWORD + secretName: + _default: subscriptions-postgresql-secret + secretKey: password + - name: YC_S3_ACCESS_KEY_ID + secretName: + _default: subscriptions-s3-secret + secretKey: access_key + - name: YC_S3_SECRET_ACCESS_KEY + secretName: + _default: subscriptions-s3-secret + secretKey: secret_key + - name: YC_S3_BUCKET_NAME + secretName: + _default: subscriptions-s3-secret + secretKey: bucket + - name: YC_S3_ENDPOINT_URL + secretName: + _default: subscriptions-s3-secret + secretKey: endpoint + + commitSha: "" + gitlabUri: "" + gitlabJobUrl: "" + owner: "" diff --git a/apps/subscriptions/ugok/kustomization.yaml b/apps/subscriptions/ugok/kustomization.yaml new file mode 100644 index 0000000..e6591b1 --- /dev/null +++ b/apps/subscriptions/ugok/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: subscriptions +resources: + - backend.yaml diff --git a/apps/system-log/ugok/kustomization.yaml b/apps/system-log/ugok/kustomization.yaml new file mode 100644 index 0000000..17ba36b --- /dev/null +++ b/apps/system-log/ugok/kustomization.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: system-log +resources: + - ../base +patches: + - path: patch-api.yaml + target: + kind: HelmRelease + name: api + - path: patch-worker.yaml + target: + kind: HelmRelease + name: worker diff --git a/apps/system-log/ugok/patch-api.yaml b/apps/system-log/ugok/patch-api.yaml new file mode 100644 index 0000000..a1c45aa --- /dev/null +++ b/apps/system-log/ugok/patch-api.yaml @@ -0,0 +1,96 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: api + namespace: system-log +spec: + values: + services: + api: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/system-log:prod_08141511 + envs: + - name: KAFKA_ENABLE + value: + _default: "0" + - name: KAFKA_BROKERS + value: + _default: localhost:9091 + - name: KAFKA_GROUP + value: + _default: system-log-stage + - name: KAFKA_CLIENT_ID + value: + _default: system-log-stage + - name: KAFKA_USE_SSL + value: + _default: "0" + - name: KAFKA_ENABLE_LOGGING + value: + _default: "0" + - name: KAFKA_TOPIC + value: + _default: topic + - name: APP_NAME + value: + _default: system_log + - name: APP_VERSION + value: + _default: 0.0.1 + - name: LOG_LEVEL + value: + _default: INFO + - name: HTTP_HOST + value: + _default: 0.0.0.0 + - name: HTTP_PORT + value: + _default: "8000" + - name: NAMESPACE + value: + _default: system-log + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: POSTGRES_DB + value: + _default: system_log_db + - name: POSTGRES_POOL_SIZE + value: + _default: "3" + - name: ENABLE_SSL + value: + _default: "0" + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + secretEnvs: + - name: POSTGRES_USER + secretName: + _default: system-log-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: system-log-postgresql-secret + secretKey: password + - name: KAFKA_USERNAME + secretName: + _default: ya-kafka-secret + secretKey: username + - name: KAFKA_PASSWORD + secretName: + _default: ya-kafka-secret + secretKey: password + - name: KAFKA_PEM_CERT + secretName: + _default: yc-kafka-certificate + secretKey: certificate + - name: KAFKA_PEM_PATH + secretName: + _default: yc-kafka-certificate + secretKey: certificate diff --git a/apps/system-log/ugok/patch-worker.yaml b/apps/system-log/ugok/patch-worker.yaml new file mode 100644 index 0000000..86de85e --- /dev/null +++ b/apps/system-log/ugok/patch-worker.yaml @@ -0,0 +1,70 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: worker + namespace: system-log +spec: + values: + services: + worker: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/system_log_worker:de6a0147d285afa273e85c0f074c8b6049d03a32 + envs: + - name: APP_NAME + value: + _default: system_log + - name: APP_VERSION + value: + _default: 0.0.1 + - name: LOG_LEVEL + value: + _default: INFO + - name: HTTP_HOST + value: + _default: 0.0.0.0 + - name: HTTP_PORT + value: + _default: "8000" + - name: NAMESPACE + value: + _default: system-log + - name: DOCUMENTATIONS_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: POSTGRES_ADDRESS + value: + _default: postgres-service + - name: POSTGRES_PORT + value: + _default: "5432" + - name: POSTGRES_DB + value: + _default: system_log_db + - name: POSTGRES_POOL_SIZE + value: + _default: "3" + - name: ENABLE_SSL + value: + _default: "0" + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + secretEnvs: + - name: POSTGRES_USER + secretName: + _default: system-log-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: system-log-postgresql-secret + secretKey: password + - name: SUPER_USERNAME + secretName: + _default: superuser + secretKey: username + - name: SUPER_PASSWORD + secretName: + _default: superuser + secretKey: password diff --git a/apps/transmittal/ugok/kustomization.yaml b/apps/transmittal/ugok/kustomization.yaml new file mode 100644 index 0000000..29d0807 --- /dev/null +++ b/apps/transmittal/ugok/kustomization.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: transmittal +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-worker.yaml + target: + kind: HelmRelease + name: worker + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/transmittal/ugok/patch-backend.yaml b/apps/transmittal/ugok/patch-backend.yaml new file mode 100644 index 0000000..0ca5cd7 --- /dev/null +++ b/apps/transmittal/ugok/patch-backend.yaml @@ -0,0 +1,249 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: transmittal +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_4e0db600 + resources: + requests: + cpu: + _default: "1" + memory: + _default: 1Gi + envs: + - name: TRANSMITTAL_SERVICE_APP__NAME + value: + _default: Transmittal Service + - name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL + value: + _default: ERROR + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL + value: + _default: http://backend-service.flows.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT + value: + _default: "30" + - name: TRANSMITTAL_SERVICE_APP__HOST + value: + _default: https://lk.srx.wb.ru:30443/transmittal + - name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT + value: + _default: prod + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS + value: + _default: '["*"]' + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS + value: + _default: '["*"]' + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS + value: + _default: '["*"]' + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS + value: + _default: "true" + - name: TRANSMITTAL_SERVICE_UVICORN__HOST + value: + _default: 0.0.0.0 + - name: TRANSMITTAL_SERVICE_UVICORN__PORT + value: + _default: "8000" + - name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_OTEL__ENABLE + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_OTEL__HOST + value: + _default: http://signoz-otel-collector-external.signoz.svc.cluster.local:4317 + - name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME + value: + _default: backend.transmittals-prod + - name: TRANSMITTAL_SERVICE_OTEL__INSECURE + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE + value: + _default: verify-full + - name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH + value: + _default: /opt/.postgresql/root.crt + - name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL + value: + _default: info + - name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS + value: + _default: "2" + - name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH + value: + _default: "" + - name: TRANSMITTAL_SERVICE_DATABASE__HOST + value: + _default: postgres-service + - name: TRANSMITTAL_SERVICE_DATABASE__PORT + value: + _default: "5432" + - name: TRANSMITTAL_SERVICE_DATABASE__NAME + value: + _default: transmittal_db + - name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_RABBITMQ__VHOST + value: + _default: transmittal + - name: TRANSMITTAL_SERVICE_RABBITMQ__HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + - name: TRANSMITTAL_SERVICE_RABBITMQ__PORT + value: + _default: "5672" + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT + value: + _default: "50" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME + value: + _default: ru-central1 + - name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY + value: + _default: "true" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET + value: + _default: transmittal-storage + - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT + value: + _default: 10.49.10.90:9000 + - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL + value: + _default: http://export-project-service.django.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT + value: + _default: "50" + - name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL + value: + _default: http://marks-service.documentations.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT + value: + _default: "50" + - name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL + value: + _default: https://api.mailgun.net/v3/mg.sarex.io + - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL + value: + _default: hello@wb.io + secretEnvs: + - name: TRANSMITTAL_SERVICE_DATABASE__USER + secretName: + _default: transmittal-postgresql-secret + secretKey: username + - name: TRANSMITTAL_SERVICE_DATABASE__PASSWORD + secretName: + _default: transmittal-postgresql-secret + secretKey: password + - name: TRANSMITTAL_SERVICE_AUTH__PUBLIC_KEY + secretName: + _default: public-key + secretKey: key + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASIC_AUTH_ENCODED + secretName: + _default: django-auth + secretKey: key + - name: TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY + secretName: + _default: transmittal-s3-secret + secretKey: access_key + - name: TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY + secretName: + _default: transmittal-s3-secret + secretKey: secret_key + - name: TRANSMITTAL_SERVICE_RABBITMQ__USER + secretName: + _default: transmittal-rabbitmq-secret + secretKey: username + - name: TRANSMITTAL_SERVICE_RABBITMQ__PASSWORD + secretName: + _default: transmittal-rabbitmq-secret + secretKey: password + - name: TRANSMITTAL_SERVICE_MAILGUN__API_KEY + secretName: + _default: mailgun-cred + secretKey: api_key diff --git a/apps/transmittal/ugok/patch-frontend.yaml b/apps/transmittal/ugok/patch-frontend.yaml new file mode 100644 index 0000000..4c920ce --- /dev/null +++ b/apps/transmittal/ugok/patch-frontend.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: transmittal +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-frontend:wb1_dbf61443 + resources: + requests: + cpu: + _default: 100m + memory: + _default: 100Mi diff --git a/apps/transmittal/ugok/patch-worker.yaml b/apps/transmittal/ugok/patch-worker.yaml new file mode 100644 index 0000000..391eff1 --- /dev/null +++ b/apps/transmittal/ugok/patch-worker.yaml @@ -0,0 +1,252 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: worker + namespace: transmittal +spec: + values: + services: + worker: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_4e0db600 + deployment: + command: + _default: ["taskiq", "worker", "--no-parse", "transmittal_service.tasks.broker:broker", "transmittal_service.tasks.transmittal.tasks", "transmittal_service.tasks.email.tasks"] + resources: + requests: + cpu: + _default: "1" + memory: + _default: 1Gi + envs: + - name: TRANSMITTAL_SERVICE_APP__NAME + value: + _default: Transmittal Service + - name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL + value: + _default: ERROR + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL + value: + _default: http://backend-service.flows.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT + value: + _default: "30" + - name: TRANSMITTAL_SERVICE_APP__HOST + value: + _default: https://sarex.ugok.lan/transmittal + - name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT + value: + _default: prod + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS + value: + _default: '["*"]' + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS + value: + _default: '["*"]' + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS + value: + _default: '["*"]' + - name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS + value: + _default: "true" + - name: TRANSMITTAL_SERVICE_UVICORN__HOST + value: + _default: 0.0.0.0 + - name: TRANSMITTAL_SERVICE_UVICORN__PORT + value: + _default: "8000" + - name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_OTEL__ENABLE + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_OTEL__HOST + value: + _default: http://signoz-otel-collector-external.signoz.svc.cluster.local:4317 + - name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME + value: + _default: backend.transmittals-prod + - name: TRANSMITTAL_SERVICE_OTEL__INSECURE + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE + value: + _default: verify-full + - name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH + value: + _default: /opt/.postgresql/root.crt + - name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL + value: + _default: info + - name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS + value: + _default: "2" + - name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH + value: + _default: "" + - name: TRANSMITTAL_SERVICE_DATABASE__HOST + value: + _default: postgres-service + - name: TRANSMITTAL_SERVICE_DATABASE__PORT + value: + _default: "5432" + - name: TRANSMITTAL_SERVICE_DATABASE__NAME + value: + _default: transmittal_db + - name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_RABBITMQ__VHOST + value: + _default: transmittal + - name: TRANSMITTAL_SERVICE_RABBITMQ__HOST + value: + _default: rabbitmq.rabbitmq.svc.cluster.local + - name: TRANSMITTAL_SERVICE_RABBITMQ__PORT + value: + _default: "5672" + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL + value: + _default: http://resources-service.resources.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT + value: + _default: "50" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME + value: + _default: ru-central1 + - name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY + value: + _default: "true" + - name: TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET + value: + _default: transmittal-storage + - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT + value: + _default: 10.49.10.90:9000 + - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL + value: + _default: "false" + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL + value: + _default: http://export-project-service.django.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT + value: + _default: "50" + - name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL + value: + _default: http://marks-service.documentations.svc.cluster.local:8000 + - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT + value: + _default: "50" + - name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL + value: + _default: https://api.mailgun.net/v3/mg.sarex.io + - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS + value: + _default: "10" + - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + - name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT + value: + _default: "15" + - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL + value: + _default: hello@t.io + secretEnvs: + - name: TRANSMITTAL_SERVICE_DATABASE__USER + secretName: + _default: transmittal-postgresql-secret + secretKey: username + - name: TRANSMITTAL_SERVICE_DATABASE__PASSWORD + secretName: + _default: transmittal-postgresql-secret + secretKey: password + - name: TRANSMITTAL_SERVICE_AUTH__PUBLIC_KEY + secretName: + _default: public-key + secretKey: key + - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASIC_AUTH_ENCODED + secretName: + _default: django-auth + secretKey: key + - name: TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY + secretName: + _default: transmittal-s3-secret + secretKey: access_key + - name: TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY + secretName: + _default: transmittal-s3-secret + secretKey: secret_key + - name: TRANSMITTAL_SERVICE_RABBITMQ__USER + secretName: + _default: transmittal-rabbitmq-secret + secretKey: username + - name: TRANSMITTAL_SERVICE_RABBITMQ__PASSWORD + secretName: + _default: transmittal-rabbitmq-secret + secretKey: password + - name: TRANSMITTAL_SERVICE_MAILGUN__API_KEY + secretName: + _default: mailgun-cred + secretKey: api_key diff --git a/apps/workspaces/ugok/kustomization.yaml b/apps/workspaces/ugok/kustomization.yaml new file mode 100644 index 0000000..1687c8a --- /dev/null +++ b/apps/workspaces/ugok/kustomization.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: workspaces +resources: + - ../base +patches: + - path: patch-backend.yaml + target: + kind: HelmRelease + name: backend + - path: patch-frontend.yaml + target: + kind: HelmRelease + name: frontend diff --git a/apps/workspaces/ugok/patch-backend.yaml b/apps/workspaces/ugok/patch-backend.yaml new file mode 100644 index 0000000..3ac5e85 --- /dev/null +++ b/apps/workspaces/ugok/patch-backend.yaml @@ -0,0 +1,78 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: backend + namespace: workspaces +spec: + values: + services: + backend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workspaces:production_bfd943b2 + envs: + - name: POSTGRES_POOL_SIZE + value: + _default: "3" + - name: BUNDLES_RETRY_COUNT + value: + _default: "5" + - name: BUNDLES_NJOBS + value: + _default: "5" + - name: API_ADDRESS + value: + _default: 0.0.0.0:8000 + - name: NAMESPACE + value: + _default: workspaces + - name: ENABLE_SQL_QUERY + value: + _default: "0" + - name: ENABLE_SSL + value: + _default: "0" + - name: DOCUMENTATION_HOST + value: + _default: http://documentations-api.documentations.svc.cluster.local:8080 + - name: DOCUMENTATION_LOGGER_FEATURE + value: + _default: "0" + - name: DOCUMENTATION_ORIGINATOR + value: + _default: prod_ws + - name: ENVIRONMENT + value: + _default: prod + - name: DJANGO_HOST + value: + _default: http://backend.django.svc.cluster.local:8000 + - name: DJANGO_ORIGINATOR + value: + _default: docs_prod + secretEnvs: + - name: POSTGRES_ADDRESS + secretName: + _default: workspaces-postgresql-secret + secretKey: hostname + - name: POSTGRES_PORT + secretName: + _default: workspaces-postgresql-secret + secretKey: port + - name: POSTGRES_DB + secretName: + _default: workspaces-postgresql-secret + secretKey: database + - name: POSTGRES_USER + secretName: + _default: workspaces-postgresql-secret + secretKey: username + - name: POSTGRES_PASSWORD + secretName: + _default: workspaces-postgresql-secret + secretKey: password + - name: DJANGO_BASIC_AUTH + secretName: + _default: workspaces-django-auth + secretKey: key diff --git a/apps/workspaces/ugok/patch-frontend.yaml b/apps/workspaces/ugok/patch-frontend.yaml new file mode 100644 index 0000000..4221e71 --- /dev/null +++ b/apps/workspaces/ugok/patch-frontend.yaml @@ -0,0 +1,13 @@ +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: frontend + namespace: workspaces +spec: + values: + services: + frontend: + image: + name: + _default: cr.yandex/crp3ccidau046kdj8g9q/workspaces-v2-frontend:contour_2a4ce3fd diff --git a/clusters/ugok/kustomization.yaml b/clusters/ugok/kustomization.yaml index a8f77bb..26cb6a7 100644 --- a/clusters/ugok/kustomization.yaml +++ b/clusters/ugok/kustomization.yaml @@ -5,3 +5,37 @@ resources: - ./helm-repositories.yaml - ../../infrastructure/vault/ugok + +# # apps +# - ../../apps/ams-sync/ugok +# - ../../apps/attachments/ugok +# - ../../apps/bim/ugok +# - ../../apps/checklists/ugok +# - ../../apps/contracts/ugok +# - ../../apps/control-interface/ugok +# - ../../apps/cross-section/ugok +# - ../../apps/document-link/ugok +# - ../../apps/drawings/ugok +# - ../../apps/eav/ugok +# - ../../apps/faas/ugok +# - ../../apps/inspections/ugok +# - ../../apps/mapper/ugok +# - ../../apps/measurements/ugok +# - ../../apps/message-hub/ugok +# - ../../apps/prescriptions/ugok +# - ../../apps/projects/ugok +# - ../../apps/remarks/ugok +# - ../../apps/stamp-verification/ugok +# - ../../apps/subscriptions/ugok +# - ../../apps/comparisons/ugok +# - ../../apps/flows/ugok +# - ../../apps/rfi/ugok +# - ../../apps/transmittal/ugok +# - ../../apps/notes/ugok +# - ../../apps/system-log/ugok +# - ../../apps/workspaces/ugok +# - ../../apps/issues/ugok +# - ../../apps/pm/ugok +# - ../../apps/documentations/ugok +# - ../../apps/django/ugok +# - ../../apps/processing/ugok