ugok: bootstrap application layer on universal-chart from cluster dump
Adds apps/<app>/ugok overlays for 31 applications, derived strictly from a live cluster dump (kubectl get deployment/service/configmap/secret), following the wb overlay pattern (standalone HelmRelease patches on universal-chart, plain k8s Secret + secretKeyRef instead of Vault Agent since the ugok cluster has zero Vault usage cluster-wide). - processing (workflow namespace) does not extend base: base is vault-native, ugok is not, so it's four standalone HelmReleases modeled on apps/processing/wb/*. - issues/redis and django/redis are raw Deployments patched via JSON6902. - documentations/pdf-markings and django/auth-flow-frontend, export-project are copied in as standalone files (base has no HelmRelease for them, and kustomize forbids cross-overlay references outside a directory's own tree). - Images and images-with-registry updated to match wb where the same build lineage applies; left as-is where the wb tag carries a distinct client/cluster name (donstroi1, brusnika_*, dev4, UGOK_*, ugok1_*) or points at a different image repository entirely. - Missing backend envs backfilled from wb where safe (internal svc.cluster.local refs, feature flags, already-established ugok domains); skipped where wb-specific (external DB/Kafka hosts, TLS CA content, features not deployed in ugok like gatekeeper/Superset). - message-hub patch was missing its entire env block from the original bootstrap; rebuilt from the raw dump (not wb, whose Kafka/DB config is incompatible) plus a handful of small env gaps found while cross-checking every ugok app's rendered envs against the raw dump. clusters/ugok/kustomization.yaml keeps the apps section commented out — not wired into the Flux Kustomization yet, pending review. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
ivan
parent
935f8fa372
commit
e5c01279b7
6
apps/ams-sync/ugok/kustomization.yaml
Normal file
6
apps/ams-sync/ugok/kustomization.yaml
Normal file
@ -0,0 +1,6 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: ams-sync
|
||||
resources:
|
||||
- ../base
|
||||
11
apps/attachments/ugok/kustomization.yaml
Normal file
11
apps/attachments/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: attachments
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: attachments
|
||||
66
apps/attachments/ugok/patch.yaml
Normal file
66
apps/attachments/ugok/patch.yaml
Normal file
@ -0,0 +1,66 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: attachments
|
||||
namespace: attachments
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
attachments:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/att9:dev
|
||||
volumes:
|
||||
_default:
|
||||
- name: attachments-s3-secret
|
||||
mountPath:
|
||||
_default: /etc/sarex/yc-s3-storage
|
||||
readOnly:
|
||||
_default: true
|
||||
secret:
|
||||
secretName:
|
||||
_default: attachments-s3-secret
|
||||
envs:
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "10"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: YANDEX_S3_ACCOUNT_PATH
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
|
||||
- name: BUCKET_NAME
|
||||
value:
|
||||
_default: attachments-storage
|
||||
- name: DATABASE_SSL_MODE
|
||||
value:
|
||||
_default: disable
|
||||
- name: YANDEX_S3_VERIFY
|
||||
value:
|
||||
_default: "false"
|
||||
- name: YANDEX_S3_USE_SSL
|
||||
value:
|
||||
_default: "true"
|
||||
secretEnvs:
|
||||
- name: DATABASE_HOST
|
||||
secretName:
|
||||
_default: attachments-postgresql-secret
|
||||
secretKey: host
|
||||
- name: DATABASE_PORT
|
||||
secretName:
|
||||
_default: attachments-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DATABASE_NAME
|
||||
secretName:
|
||||
_default: attachments-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: attachments-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: attachments-postgresql-secret
|
||||
secretKey: password
|
||||
11
apps/bim/ugok/kustomization.yaml
Normal file
11
apps/bim/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: bim
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
119
apps/bim/ugok/patch.yaml
Normal file
119
apps/bim/ugok/patch.yaml
Normal file
@ -0,0 +1,119 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: bim
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:prod_2bde8e0a
|
||||
envs:
|
||||
- name: LAST_MASTER_BIM
|
||||
value:
|
||||
_default: "100000"
|
||||
- name: LAST_SLAVE_1_BIM
|
||||
value:
|
||||
_default: "94015"
|
||||
- name: LAST_MASTER_BIM_V3
|
||||
value:
|
||||
_default: "100000"
|
||||
- name: LAST_SLAVE_1_BIM_V3
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DB_CERT_PATH_2
|
||||
value:
|
||||
_default: /root/yandex_pg.pem
|
||||
- name: DB_CERT_PATH_3
|
||||
value:
|
||||
_default: /root/yandex_pg.pem
|
||||
- name: DB_CERT_PATH_4
|
||||
value:
|
||||
_default: /root/yandex_pg.pem
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgresql-service
|
||||
- name: POSTGRES_ADDRESS_2
|
||||
value:
|
||||
_default: postgresql-service
|
||||
- name: POSTGRES_ADDRESS_3
|
||||
value:
|
||||
_default: postgresql-service
|
||||
- name: POSTGRES_ADDRESS_4
|
||||
value:
|
||||
_default: postgresql-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_PORT_2
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_PORT_3
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_PORT_4
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_DB
|
||||
value:
|
||||
_default: bim_db
|
||||
- name: POSTGRES_DB_2
|
||||
value:
|
||||
_default: bim_db
|
||||
- name: POSTGRES_DB_3
|
||||
value:
|
||||
_default: bim_db
|
||||
- name: POSTGRES_DB_4
|
||||
value:
|
||||
_default: bim_db
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "30"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
secretEnvs:
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_USER_2
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD_2
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_USER_3
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD_3
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_USER_4
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD_4
|
||||
secretName:
|
||||
_default: bim-postgresql-secret
|
||||
secretKey: password
|
||||
11
apps/checklists/ugok/kustomization.yaml
Normal file
11
apps/checklists/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: checklists
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: checklists
|
||||
60
apps/checklists/ugok/patch.yaml
Normal file
60
apps/checklists/ugok/patch.yaml
Normal file
@ -0,0 +1,60 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: checklists
|
||||
namespace: checklists
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
checklists:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/checklists-backend:production_3d148228
|
||||
envs:
|
||||
- name: HTTP_APP_HOST
|
||||
value:
|
||||
_default: 0.0.0.0
|
||||
- name: HTTP_APP_PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: HTTP_APP_ROOT_PATH
|
||||
value:
|
||||
_default: /checklists
|
||||
- name: HTTP_APP_WORKERS
|
||||
value:
|
||||
_default: "8"
|
||||
- name: HTTP_APP_ADMIN_ENABLE
|
||||
value:
|
||||
_default: "true"
|
||||
- name: JWT_AUTH_ENABLE
|
||||
value:
|
||||
_default: "true"
|
||||
- name: DEBUG
|
||||
value:
|
||||
_default: "false"
|
||||
secretEnvs:
|
||||
- name: DATABASE_HOST
|
||||
secretName:
|
||||
_default: checklists-postgresql-secret
|
||||
secretKey: hostname
|
||||
- name: DATABASE_PORT
|
||||
secretName:
|
||||
_default: checklists-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DATABASE_NAME
|
||||
secretName:
|
||||
_default: checklists-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: checklists-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: checklists-postgresql-secret
|
||||
secretKey: password
|
||||
- name: JWT_AUTH_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: checklists-public-key
|
||||
secretKey: key
|
||||
15
apps/comparisons/ugok/kustomization.yaml
Normal file
15
apps/comparisons/ugok/kustomization.yaml
Normal file
@ -0,0 +1,15 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: comparisons
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
117
apps/comparisons/ugok/patch-backend.yaml
Normal file
117
apps/comparisons/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,117 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: comparisons
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-backend:c864f102a3a476b9a80658148da2b3f7acb772ac
|
||||
envs:
|
||||
- name: HTTP_PORT
|
||||
value:
|
||||
_default: "8080"
|
||||
- name: LAST_MASTER_BIM
|
||||
value:
|
||||
_default: "100_000"
|
||||
- name: APP_NAME
|
||||
value:
|
||||
_default: comparisons-api-v2
|
||||
- name: APP_VERSION
|
||||
value:
|
||||
_default: 0.0.1
|
||||
- name: LOGGER_LOG_LEVEL
|
||||
value:
|
||||
_default: info
|
||||
- name: DATABASE_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DATABASE_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DATABASE_NAME
|
||||
value:
|
||||
_default: postgres
|
||||
- name: DATABASE_DB
|
||||
value:
|
||||
_default: comparisons_db
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: API_ADDRESS_FILE
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DOCUMENTATIONS_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://documentations-service.documentations.svc.cluster.local:8080
|
||||
- name: DOCUMENTATIONS_EXTERNAL_HOST
|
||||
value:
|
||||
_default: http://documentations-service.documentations.svc.cluster.local:8080/
|
||||
- name: DOCUMENTATION_URL
|
||||
value:
|
||||
_default: http://documentations-service.documentations.svc.cluster.local:8080/
|
||||
- name: DOCUMENTATION_FILESTREAM_URL
|
||||
value:
|
||||
_default: http://documentations-filestream-service.documentations.svc.cluster.local:8080/
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: http://workflows-service.workflow.svc.cluster.local:8000/
|
||||
- name: EAV_HOST
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: WORKSPACES_HOST
|
||||
value:
|
||||
_default: http://workspaces-service.workspaces.svc.cluster.local:8000/
|
||||
- name: COMPARISON_URL
|
||||
value:
|
||||
_default: http://backend-service.comparisons.svc.cluster.local:8080/
|
||||
- name: WORKFLOWS_IMAGE_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: EXTERNAL_DOCUMENTATION_URL
|
||||
value:
|
||||
_default: http://documentations-service.documentations.svc.cluster.local:8080/
|
||||
- name: WORKFLOWS_BIMV2_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://backend-service.bim.svc.cluster.local:8000/
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: WORKFLOWS_DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "10"
|
||||
- name: LAST_SLAVE_1_BIM
|
||||
value:
|
||||
_default: "94015"
|
||||
- name: LAST_SLAVE_2_BIM
|
||||
value:
|
||||
_default: "135771"
|
||||
- name: ABAP_FIXED_CONC
|
||||
value:
|
||||
_default: "0"
|
||||
- name: WORKFLOWS_CONFIG_FILEPATH
|
||||
value:
|
||||
_default: /etc/app/tasks-execution-config.json
|
||||
secretEnvs:
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: comparisons-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: comparisons-postgresql-secret
|
||||
secretKey: password
|
||||
- name: AUTH_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
13
apps/comparisons/ugok/patch-frontend.yaml
Normal file
13
apps/comparisons/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: comparisons
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-frontend-static:69d50235fdc8fd654ae63308e23fc27f28e9cd99_relative
|
||||
11
apps/contracts/ugok/kustomization.yaml
Normal file
11
apps/contracts/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: contracts
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: contracts
|
||||
22
apps/contracts/ugok/patch.yaml
Normal file
22
apps/contracts/ugok/patch.yaml
Normal file
@ -0,0 +1,22 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: contracts
|
||||
namespace: contracts
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
contracts:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/contracts:prod_d3bbd9fc
|
||||
secretEnvs:
|
||||
- name: DB_URL
|
||||
secretName:
|
||||
_default: contracts-postgresql-secret
|
||||
secretKey: url
|
||||
- name: PUBLIC_KEY
|
||||
secretName:
|
||||
_default: contracts-public-key
|
||||
secretKey: key
|
||||
11
apps/control-interface/ugok/kustomization.yaml
Normal file
11
apps/control-interface/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: control-interface
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
13
apps/control-interface/ugok/patch.yaml
Normal file
13
apps/control-interface/ugok/patch.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: control-interface
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/srx-admin:prod_feb59026
|
||||
11
apps/cross-section/ugok/kustomization.yaml
Normal file
11
apps/cross-section/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: cross-section
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: cross-section-static
|
||||
15
apps/cross-section/ugok/patch.yaml
Normal file
15
apps/cross-section/ugok/patch.yaml
Normal file
@ -0,0 +1,15 @@
|
||||
---
|
||||
# В ugok образ реально называется cross-section-static (не cross-section-app,
|
||||
# как в base) — берём как есть из дампа кластера.
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: cross-section-static
|
||||
namespace: cross-section
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: 10.4.10.187:80/library/cross-section-static:988a872bfe72ca29ffa6a43e074b94118e9e655a
|
||||
97
apps/django/ugok/auth-flow-frontend.yaml
Normal file
97
apps/django/ugok/auth-flow-frontend.yaml
Normal file
@ -0,0 +1,97 @@
|
||||
---
|
||||
# Скопировано из apps/django/wb/auth-flow-frontend.yaml (см. pdf-markings.yaml
|
||||
# для причины) — компонент auth-flow, развёрнутый в ns django.
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: auth-flow-frontend
|
||||
namespace: django
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.7"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
auth-flow-frontend:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/auth-flow-frontend:contour_fe9ea2a3
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: auth-flow-frontend
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 80
|
||||
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: 100m
|
||||
memory:
|
||||
_default: 128Mi
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: auth-flow-frontend-service
|
||||
|
||||
type:
|
||||
_default: ClusterIP
|
||||
|
||||
port:
|
||||
_default: 80
|
||||
|
||||
targetPort:
|
||||
_default: 80
|
||||
|
||||
portName:
|
||||
_default: http
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: dockerhub
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
109
apps/django/ugok/export-project.yaml
Normal file
109
apps/django/ugok/export-project.yaml
Normal file
@ -0,0 +1,109 @@
|
||||
---
|
||||
# Скопировано из apps/django/wb/export-project.yaml — в base нет HelmRelease
|
||||
# для этого сервиса (только в wb overlay), а ссылаться на файл в другом
|
||||
# оверлее kustomize не даёт (вне дерева каталога). Образ/envs совпадают с
|
||||
# дампом ugok уже "из коробки" (только регистр другой — правится патчем).
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: export-project
|
||||
namespace: django
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.7"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
export-project:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_ef8aa756
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: export-project
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
resources:
|
||||
limits:
|
||||
cpu:
|
||||
_default: "2"
|
||||
memory:
|
||||
_default: 8Gi
|
||||
requests:
|
||||
cpu:
|
||||
_default: "1"
|
||||
memory:
|
||||
_default: 512Mi
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: export-project-service
|
||||
|
||||
type:
|
||||
_default: ClusterIP
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
targetPort:
|
||||
_default: 8000
|
||||
|
||||
portName:
|
||||
_default: http
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: dockerhub
|
||||
|
||||
envs:
|
||||
- name: TIMEOUT
|
||||
value:
|
||||
_default: "180"
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
41
apps/django/ugok/kustomization.yaml
Normal file
41
apps/django/ugok/kustomization.yaml
Normal file
@ -0,0 +1,41 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: django
|
||||
resources:
|
||||
- ../base
|
||||
- auth-flow-frontend.yaml
|
||||
- export-project.yaml
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-celery.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: celery
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
- path: patch-s3-proxy.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: s3-proxy
|
||||
- path: patch-redis-image.yaml
|
||||
target:
|
||||
kind: Deployment
|
||||
name: redis
|
||||
- path: patch-auth-flow-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: auth-flow-frontend
|
||||
- path: patch-export-project.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: export-project
|
||||
- path: patch-srx-admin.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: srx-admin-frontend
|
||||
13
apps/django/ugok/patch-auth-flow-frontend.yaml
Normal file
13
apps/django/ugok/patch-auth-flow-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: auth-flow-frontend
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
auth-flow-frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/auth-flow-frontend:contour_fe9ea2a3
|
||||
257
apps/django/ugok/patch-backend.yaml
Normal file
257
apps/django/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,257 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_7d0ec48b
|
||||
volumes:
|
||||
_default:
|
||||
- name: kafka-cert-volume
|
||||
mountPath:
|
||||
_default: /usr/local/share/ca-certificates
|
||||
readOnly:
|
||||
_default: true
|
||||
configMap:
|
||||
name:
|
||||
_default: kafka-cert
|
||||
envs:
|
||||
- name: ALLOWED_HOSTS
|
||||
value:
|
||||
_default: "*"
|
||||
- name: SERVER_USE_CHANGELOG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_ZITADEL_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: DJANGO_SETTINGS_MODULE
|
||||
value:
|
||||
_default: config.settings.production
|
||||
- name: CELERY_REDIS_HOST
|
||||
value:
|
||||
_default: redis-service
|
||||
- name: CELERY_REDIS_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
- name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: DJANGO_REDIS_HOST
|
||||
value:
|
||||
_default: redis-service
|
||||
- name: DJANGO_REDIS_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
- name: BIMV2_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://bim-backend-v2-service.bim-api
|
||||
- name: BIMV2_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: JWT_KID
|
||||
value:
|
||||
_default: "1"
|
||||
- name: PDM_SYNC
|
||||
value:
|
||||
_default: "1"
|
||||
- name: KC_SYNC_ENABLE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: MEASUREMENTS_HOST
|
||||
value:
|
||||
_default: http://measurement-svc.measurements.svc.cluster.local:8000/api
|
||||
- name: MEASUREMENTS_USE_MEASUREMENTS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_API_HOST
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
- name: SERVER_HOST
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000
|
||||
- name: WORKFLOWS_BASE_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: WORKFLOWS_PREFIX
|
||||
value:
|
||||
_default: /internal/v1
|
||||
- name: WORKFLOWS_USE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_S3_STREAM_IMPORT
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_SAVE_DIFF_DEM
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_USE_CLICKHOUSE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_USE_CREATE_COMPARED_GEOTIFF_TASK
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_USE_DJANGO_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_USE_METASHAPE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_CHANGELOG_MODE_SYSTEM_LOG
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_CHANGELOG_MODE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_DJANGO_URLS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CHECK_IMPORT_HASH
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ZITADEL_HOST
|
||||
value:
|
||||
_default: https://ugok-zitadel-sarex.uralmine.com
|
||||
- name: EAV_ENABLE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_CHECK_IMPORT_HASH
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_CHUNKED_PATH
|
||||
value:
|
||||
_default: /tmp/chunked_uploads/%Y/%m/%d
|
||||
- name: SERVER_HIDE_USER_SCROLL_PERMISSIONS
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_USE_WRORKFLOW_STATUS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_KAFKA_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: RESOURCES_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: KAFKA_TOPICS
|
||||
value:
|
||||
_default: '{"planning": "message-hub-stage", "ams-sync": "ams-sync"}'
|
||||
- name: KAFKA_BOOTSTRAP_SERVERS
|
||||
value:
|
||||
_default: '["ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"]'
|
||||
- name: KAFKA_SECURITY_PROTOCOL
|
||||
value:
|
||||
_default: SSL
|
||||
- name: KAFKA_SASL_MECHANISM
|
||||
value:
|
||||
_default: SCRAM-SHA-512
|
||||
- name: KAFKA_SSL_CAFILE
|
||||
value:
|
||||
_default: /usr/local/share/ca-certificates/kafka.crt
|
||||
- name: S3_HOST
|
||||
value:
|
||||
_default: http://minio.minio.svc.cluster.local:9000
|
||||
- name: KC_USE_REDIRECT_LOGOUT
|
||||
value:
|
||||
_default: "False"
|
||||
secretEnvs:
|
||||
- name: ZITADEL_ACCESS_TOKEN
|
||||
secretName:
|
||||
_default: zitadel-secret
|
||||
secretKey: access_token
|
||||
- name: KAFKA_SASL_PLAIN_USERNAME
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_SASL_PLAIN_PASSWORD
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: password
|
||||
- name: AWS_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: CELERY_RABBITMQ_HOST
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: host
|
||||
- name: CELERY_RABBITMQ_USER
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: CELERY_RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: CELERY_RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: DJANGO_POSTGRES_HOST
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: host
|
||||
- name: DJANGO_POSTGRES_PORTS
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DJANGO_POSTGRES_USER
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DJANGO_POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_POSTGRES_DATABASE
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DJANGO_RABBIT_HOSTNAME
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: host
|
||||
- name: DJANGO_RABBIT_USER
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: DJANGO_RABBIT_PASS
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_RABBIT_VHOST
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: JWT_PRIVATE_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_private.key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_public.key
|
||||
- name: S3_BUCKET
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: bucket
|
||||
- name: S3_LOGIN
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: access_key
|
||||
- name: S3_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: secret_key
|
||||
257
apps/django/ugok/patch-celery.yaml
Normal file
257
apps/django/ugok/patch-celery.yaml
Normal file
@ -0,0 +1,257 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: celery
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
celery:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_7d0ec48b
|
||||
deployment:
|
||||
command:
|
||||
_default: ["celery", "-A", "config", "worker", "-B", "-l", "info", "-E", "-Q", "default", "-n", "default_worker.%h", "--concurrency=2"]
|
||||
volumes:
|
||||
_default:
|
||||
- name: kafka-cert-volume
|
||||
mountPath:
|
||||
_default: /usr/local/share/ca-certificates
|
||||
readOnly:
|
||||
_default: true
|
||||
configMap:
|
||||
name:
|
||||
_default: kafka-cert
|
||||
envs:
|
||||
- name: ALLOWED_HOSTS
|
||||
value:
|
||||
_default: "*"
|
||||
- name: SERVER_USE_CHANGELOG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_ZITADEL_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: DJANGO_SETTINGS_MODULE
|
||||
value:
|
||||
_default: config.settings.production
|
||||
- name: CELERY_REDIS_HOST
|
||||
value:
|
||||
_default: redis-service
|
||||
- name: CELERY_REDIS_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
- name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: DJANGO_REDIS_HOST
|
||||
value:
|
||||
_default: redis-service
|
||||
- name: DJANGO_REDIS_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
- name: BIMV2_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://bim-backend-v2-service.bim-api
|
||||
- name: BIMV2_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: JWT_KID
|
||||
value:
|
||||
_default: "1"
|
||||
- name: PDM_SYNC
|
||||
value:
|
||||
_default: "1"
|
||||
- name: KC_SYNC_ENABLE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: MEASUREMENTS_HOST
|
||||
value:
|
||||
_default: http://measurement-svc.measurements.svc.cluster.local:8000/api
|
||||
- name: MEASUREMENTS_USE_MEASUREMENTS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_API_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.la
|
||||
- name: SERVER_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.la
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.la
|
||||
- name: WORKFLOWS_BASE_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.la
|
||||
- name: WORKFLOWS_USE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_S3_STREAM_IMPORT
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_SAVE_DIFF_DEM
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_USE_CLICKHOUSE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_USE_CREATE_COMPARED_GEOTIFF_TASK
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_USE_DJANGO_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_USE_METASHAPE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_CHANGELOG_MODE_SYSTEM_LOG
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_CHANGELOG_MODE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_DJANGO_URLS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CHECK_IMPORT_HASH
|
||||
value:
|
||||
_default: "1"
|
||||
- name: EAV_ENABLE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_CHECK_IMPORT_HASH
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_CHUNKED_PATH
|
||||
value:
|
||||
_default: /tmp/chunked_uploads/%Y/%m/%d
|
||||
- name: SERVER_HIDE_USER_SCROLL_PERMISSIONS
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SERVER_USE_WRORKFLOW_STATUS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SERVER_KAFKA_ENABLED
|
||||
value:
|
||||
_default: "True"
|
||||
- name: KAFKA_TOPICS
|
||||
value:
|
||||
_default: '{"planning": "message-hub-stage", "ams-sync": "ams-sync"}'
|
||||
- name: KAFKA_BOOTSTRAP_SERVERS
|
||||
value:
|
||||
_default: '["ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"]'
|
||||
- name: KAFKA_SECURITY_PROTOCOL
|
||||
value:
|
||||
_default: SSL
|
||||
- name: KAFKA_SASL_MECHANISM
|
||||
value:
|
||||
_default: SCRAM-SHA-512
|
||||
- name: KAFKA_SSL_CAFILE
|
||||
value:
|
||||
_default: /usr/local/share/ca-certificates/kafka.crt
|
||||
- name: S3_HOST
|
||||
value:
|
||||
_default: http://minio.minio.svc.cluster.local:9000
|
||||
- name: CACHE_HOST
|
||||
value:
|
||||
_default: redis.pm.svc.cluster.local
|
||||
- name: ZITADEL_HOST
|
||||
value:
|
||||
_default: https://ugok-zitadel-sarex.uralmine.com
|
||||
- name: KC_USE_REDIRECT_LOGOUT
|
||||
value:
|
||||
_default: "False"
|
||||
secretEnvs:
|
||||
- name: ZITADEL_ACCESS_TOKEN
|
||||
secretName:
|
||||
_default: zitadel-secret
|
||||
secretKey: access_token
|
||||
- name: KAFKA_SASL_PLAIN_USERNAME
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_SASL_PLAIN_PASSWORD
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: password
|
||||
- name: AWS_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: CELERY_RABBITMQ_HOST
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: host
|
||||
- name: CELERY_RABBITMQ_USER
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: CELERY_RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: CELERY_RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: DJANGO_POSTGRES_HOST
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: host
|
||||
- name: DJANGO_POSTGRES_PORTS
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DJANGO_POSTGRES_USER
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DJANGO_POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_POSTGRES_DATABASE
|
||||
secretName:
|
||||
_default: sarex-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DJANGO_RABBIT_HOSTNAME
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: host
|
||||
- name: DJANGO_RABBIT_USER
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: DJANGO_RABBIT_PASS
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_RABBIT_VHOST
|
||||
secretName:
|
||||
_default: sarex-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: JWT_PRIVATE_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_private.key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_public.key
|
||||
- name: S3_BUCKET
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: bucket
|
||||
- name: S3_LOGIN
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: access_key
|
||||
- name: S3_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: secret_key
|
||||
13
apps/django/ugok/patch-export-project.yaml
Normal file
13
apps/django/ugok/patch-export-project.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: export-project
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
export-project:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_ef8aa756
|
||||
13
apps/django/ugok/patch-frontend.yaml
Normal file
13
apps/django/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.22.3
|
||||
4
apps/django/ugok/patch-redis-image.yaml
Normal file
4
apps/django/ugok/patch-redis-image.yaml
Normal file
@ -0,0 +1,4 @@
|
||||
---
|
||||
- op: replace
|
||||
path: /spec/template/spec/containers/0/image
|
||||
value: cr.yandex/crp3ccidau046kdj8g9q/redis:latest
|
||||
36
apps/django/ugok/patch-s3-proxy.yaml
Normal file
36
apps/django/ugok/patch-s3-proxy.yaml
Normal file
@ -0,0 +1,36 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: s3-proxy
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
s3-proxy:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/s3-proxy:stable
|
||||
envs:
|
||||
- name: AWS_API_ENDPOINT
|
||||
value:
|
||||
_default: http://minio.minio.svc.cluster.local:9000
|
||||
- name: ACCESS_LOG
|
||||
value:
|
||||
_default: "true"
|
||||
- name: CORS_ALLOW_HEADERS
|
||||
value:
|
||||
_default: "Content-Type, Accept-Ranges, Content-Range, Content-Encoding"
|
||||
secretEnvs:
|
||||
- name: AWS_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: access_key
|
||||
- name: AWS_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: AWS_S3_BUCKET
|
||||
secretName:
|
||||
_default: sarex-s3-secret
|
||||
secretKey: bucket
|
||||
13
apps/django/ugok/patch-srx-admin.yaml
Normal file
13
apps/django/ugok/patch-srx-admin.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: srx-admin-frontend
|
||||
namespace: django
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
srx-admin:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/srx-admin:prod_638c3442
|
||||
11
apps/document-link/ugok/kustomization.yaml
Normal file
11
apps/document-link/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: document-link
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
17
apps/document-link/ugok/patch.yaml
Normal file
17
apps/document-link/ugok/patch.yaml
Normal file
@ -0,0 +1,17 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: document-link
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/document-link-frontend:wb_cb2027ce
|
||||
envs:
|
||||
- name: NODE_ENV
|
||||
value:
|
||||
_default: production
|
||||
32
apps/documentations/ugok/kustomization.yaml
Normal file
32
apps/documentations/ugok/kustomization.yaml
Normal file
@ -0,0 +1,32 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: documentations
|
||||
resources:
|
||||
- ../base
|
||||
- pdf-markings.yaml
|
||||
patches:
|
||||
- path: patch-api.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: documentations-api
|
||||
- path: patch-filestream.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: documentations-filestream
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
- path: patch-pdf-markings-amqp.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: documentations-pdf-markings-amqp
|
||||
- path: patch-pdf-markings.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: pdf-markings
|
||||
- path: patch-pdm.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: pdm-api
|
||||
183
apps/documentations/ugok/patch-api.yaml
Normal file
183
apps/documentations/ugok/patch-api.yaml
Normal file
@ -0,0 +1,183 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: documentations-api
|
||||
namespace: documentations
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/documentations:UGOK_4bf15a64
|
||||
envs:
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_DB
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "20"
|
||||
- name: USE_LEGACY_BIM_FLOW
|
||||
value:
|
||||
_default: "true"
|
||||
- name: USE_ZITADEL
|
||||
value:
|
||||
_default: "1"
|
||||
- name: FLOWS_URL
|
||||
value:
|
||||
_default: http://backend-service.flows.svc.cluster.local:8000
|
||||
- name: LAST_MASTER_BIM
|
||||
value:
|
||||
_default: "36311"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: API_ADDRESS_FILE
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES
|
||||
value:
|
||||
_default: "5"
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: WORKSPACE_V2_EXTERNAL_URL
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com/workspaces-v2/
|
||||
- name: ENABLE_S3
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CONTAINER_REGISTRY
|
||||
value:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: production
|
||||
- name: LAST_SLAVE_1_BIM
|
||||
value:
|
||||
_default: "1000000"
|
||||
- name: HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: FILE_STREAM_HOST
|
||||
value:
|
||||
_default: wb.sarex.io
|
||||
- name: DOCUMENTATION_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/
|
||||
- name: WORKFLOW_URL
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000/
|
||||
- name: WORKSPACE_URL
|
||||
value:
|
||||
_default: http://backend-svc.workspaces.svc.cluster.local:8000/
|
||||
- name: BIM_API_URL
|
||||
value:
|
||||
_default: http://bim-api-service.bim.svc.cluster.local:8080/
|
||||
- name: BIM_API_V2_URL
|
||||
value:
|
||||
_default: http://backend-svc.bim.svc.cluster.local:8000/
|
||||
- name: WORKSPACE_BUNDLE_VERSION
|
||||
value:
|
||||
_default: v1
|
||||
- name: SYSTEM_LOG_URL
|
||||
value:
|
||||
_default: http://api-service.system-log.svc.cluster.local:8000
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: MARKS_PROCESSING_URL
|
||||
value:
|
||||
_default: http://marks-service:8000
|
||||
- name: PUBLIC_LINK_HOST
|
||||
value:
|
||||
_default: https://ugok-document-link-sarex.uralmine.com
|
||||
- name: NAMESPACE
|
||||
value:
|
||||
_default: documentations
|
||||
- name: DJANGO_ORIGINATOR
|
||||
value:
|
||||
_default: docs_prod
|
||||
- name: WORKFLOW_IMAGES_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: WORKFLOWS_IMAGES_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: S3_SERVICE_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
|
||||
- name: READ_WRITE_TIMEOUT_FILE_STREAM
|
||||
value:
|
||||
_default: 6h
|
||||
- name: CACHE_DEFAULT_EXPIRATION
|
||||
value:
|
||||
_default: 60s
|
||||
- name: ENABLE_SMTP
|
||||
value:
|
||||
_default: "True"
|
||||
- name: ENABLE_MAILGUN
|
||||
value:
|
||||
_default: "False"
|
||||
- name: CACHE_CLEANUP_INTERVAL
|
||||
value:
|
||||
_default: 60s
|
||||
- name: USE_CACHE_IN_FILE_STREAMER
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ZITADEL_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/zitadel/zitadel-account.json
|
||||
- name: ZITADEL_DOMAIN
|
||||
value:
|
||||
_default: ugok-zitadel-sarex.uralmine.com
|
||||
- name: ENABLE_AUTH_JWT_IN_URL
|
||||
value:
|
||||
_default: "false"
|
||||
- name: ENABLE_SIGNATURE_IN_URL
|
||||
value:
|
||||
_default: "true"
|
||||
- name: VALKEY_ADDR
|
||||
value:
|
||||
_default: redis:6379
|
||||
- name: VALKEY_HOST
|
||||
value:
|
||||
_default: redis
|
||||
- name: VALKEY_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
secretEnvs:
|
||||
- name: PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
- name: DOCUMENT_PUBLIC_LINK_JWT_SECRET
|
||||
secretName:
|
||||
_default: yc-jwt-secret
|
||||
secretKey: secret
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_BASIC_AUTH
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: DJANGO_BASIC_AUTH_FOR_GET_USER
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
153
apps/documentations/ugok/patch-filestream.yaml
Normal file
153
apps/documentations/ugok/patch-filestream.yaml
Normal file
@ -0,0 +1,153 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: documentations-filestream
|
||||
namespace: documentations
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_dfaa58f7_ugok
|
||||
envs:
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_DB
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "20"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: API_ADDRESS_FILE
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_S3
|
||||
value:
|
||||
_default: "1"
|
||||
- name: USE_ZITADEL
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CONTAINER_REGISTRY
|
||||
value:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: production
|
||||
- name: HOST
|
||||
value:
|
||||
_default: http://documentations-service.documentations.svc.cluster.local:8080
|
||||
- name: FILE_STREAM_HOST
|
||||
value:
|
||||
_default: sarex.ugok.lan
|
||||
- name: DOCUMENTATION_URL
|
||||
value:
|
||||
_default: http://documentations-service.documentations.svc.cluster.local:8080/
|
||||
- name: WORKFLOW_URL
|
||||
value:
|
||||
_default: http://workflows-service.workflow.svc.cluster.local:8000/
|
||||
- name: WORKSPACE_URL
|
||||
value:
|
||||
_default: http://backend-svc.workspaces.svc.cluster.local:8000/
|
||||
- name: BIM_API_URL
|
||||
value:
|
||||
_default: http://bim-api-service.bim.svc.cluster.local:8080/
|
||||
- name: BIM_API_V2_URL
|
||||
value:
|
||||
_default: http://backend-svc.bim.svc.cluster.local:8000/
|
||||
- name: WORKSPACE_BUNDLE_VERSION
|
||||
value:
|
||||
_default: v1
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: NAMESPACE
|
||||
value:
|
||||
_default: sarex-documentations
|
||||
- name: DJANGO_ORIGINATOR
|
||||
value:
|
||||
_default: docs_prod
|
||||
- name: WORKFLOW_IMAGES_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: WORKFLOWS_IMAGES_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: S3_SERVICE_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
|
||||
- name: READ_WRITE_TIMEOUT_FILE_STREAM
|
||||
value:
|
||||
_default: 6h
|
||||
- name: CACHE_DEFAULT_EXPIRATION
|
||||
value:
|
||||
_default: 60s
|
||||
- name: CACHE_CLEANUP_INTERVAL
|
||||
value:
|
||||
_default: 60s
|
||||
- name: USE_CACHE_IN_FILE_STREAMER
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ZITADEL_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/zitadel/zitadel-account.json
|
||||
- name: ZITADEL_DOMAIN
|
||||
value:
|
||||
_default: ugok-zitadel-sarex.uralmine.com
|
||||
- name: ENABLE_AUTH_JWT_IN_URL
|
||||
value:
|
||||
_default: "false"
|
||||
- name: ENABLE_SIGNATURE_IN_URL
|
||||
value:
|
||||
_default: "true"
|
||||
- name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES
|
||||
value:
|
||||
_default: "5"
|
||||
- name: VALKEY_ADDR
|
||||
value:
|
||||
_default: redis:6379
|
||||
- name: VALKEY_HOST
|
||||
value:
|
||||
_default: redis
|
||||
- name: VALKEY_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
secretEnvs:
|
||||
- name: DJANGO_BASIC_AUTH_FOR_GET_USER
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: DOCUMENT_PUBLIC_LINK_JWT_SECRET
|
||||
secretName:
|
||||
_default: yc-jwt-secret
|
||||
secretKey: secret
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_BASIC_AUTH
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
13
apps/documentations/ugok/patch-frontend.yaml
Normal file
13
apps/documentations/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: documentations
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/documentation-frontend-app:brusnika_5a4e4adc
|
||||
110
apps/documentations/ugok/patch-pdf-markings-amqp.yaml
Normal file
110
apps/documentations/ugok/patch-pdf-markings-amqp.yaml
Normal file
@ -0,0 +1,110 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: documentations-pdf-markings-amqp
|
||||
namespace: documentations
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: 10.4.10.187:80/library/pdf-markings-amqp:prod_53ebb837
|
||||
envs:
|
||||
- name: APP_NAME
|
||||
value:
|
||||
_default: pdm_v2
|
||||
- name: VERIFY
|
||||
value:
|
||||
_default: "False"
|
||||
- name: APP_VERSION
|
||||
value:
|
||||
_default: 0.0.1
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: INFO
|
||||
- name: HTTP_PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: DOC_POSTGRES_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DOC_POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DOC_POSTGRES_DB
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: DOC_POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "10"
|
||||
- name: DOC_POSTGRES_SSL_MODE
|
||||
value:
|
||||
_default: disable
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: DATABASE_SSL_MODE
|
||||
value:
|
||||
_default: disable
|
||||
- name: YANDEX_S3_USE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: production
|
||||
- name: YANDEX_S3_ACCOUNT_PATH
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
|
||||
- name: REDIRECT_URL_QR
|
||||
value:
|
||||
_default: https://ugok-stamp-verification-sarex.uralmine.com/
|
||||
- name: BASE_DOCUMENT_URL
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
secretEnvs:
|
||||
- name: DOC_POSTGRES_USER
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DOC_POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: YANDEX_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: documentations-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: YANDEX_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: documentations-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YANDEX_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: documentations-s3-secret
|
||||
secretKey: access_key
|
||||
- name: RABBITMQ_HOST
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: host
|
||||
- name: RABBITMQ_PORT
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: port
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: RABBITMQ_HEARTBEAT
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: heartbeat
|
||||
113
apps/documentations/ugok/patch-pdf-markings.yaml
Normal file
113
apps/documentations/ugok/patch-pdf-markings.yaml
Normal file
@ -0,0 +1,113 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: pdf-markings
|
||||
namespace: documentations
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
pdf-markings:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/pdf-markings:prod_7d892636
|
||||
envs:
|
||||
- name: APP_NAME
|
||||
value:
|
||||
_default: pdm_v2
|
||||
- name: VERIFY
|
||||
value:
|
||||
_default: "False"
|
||||
- name: APP_VERSION
|
||||
value:
|
||||
_default: 0.0.1
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: INFO
|
||||
- name: HTTP_PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: DOC_POSTGRES_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DOC_POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DOC_POSTGRES_DB
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: DOC_POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "10"
|
||||
- name: DOC_POSTGRES_SSL_MODE
|
||||
value:
|
||||
_default: disable
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: DATABASE_SSL_MODE
|
||||
value:
|
||||
_default: disable
|
||||
- name: YANDEX_S3_USE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: production
|
||||
- name: YANDEX_S3_ACCOUNT_PATH
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
|
||||
- name: REDIRECT_URL_QR
|
||||
value:
|
||||
_default: https://stamp-verification.sarex.ugok.lan/
|
||||
- name: BASE_DOCUMENT_URL
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: SENTRY_DSN
|
||||
value:
|
||||
_default: ""
|
||||
secretEnvs:
|
||||
- name: DOC_POSTGRES_USER
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DOC_POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: YANDEX_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: documentations-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: YANDEX_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: documentations-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YANDEX_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: documentations-s3-secret
|
||||
secretKey: access_key
|
||||
- name: RABBITMQ_HOST
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: host
|
||||
- name: RABBITMQ_PORT
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: port
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: RABBITMQ_HEARTBEAT
|
||||
secretName:
|
||||
_default: documentations-rabbitmq-secret
|
||||
secretKey: heartbeat
|
||||
200
apps/documentations/ugok/patch-pdm.yaml
Normal file
200
apps/documentations/ugok/patch-pdm.yaml
Normal file
@ -0,0 +1,200 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: pdm-api
|
||||
namespace: documentations
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/pdmv2:prod_9507c2d5
|
||||
envs:
|
||||
- name: USE_EXPERIMENTAL
|
||||
value:
|
||||
_default: "true"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: API_ADDRESS_FILE
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: BUCKET_NAME
|
||||
value:
|
||||
_default: attachments-storage
|
||||
- name: API_HOST_PREFIX
|
||||
value:
|
||||
_default: /
|
||||
- name: APP_NAME
|
||||
value:
|
||||
_default: pdm_v2
|
||||
- name: APP_VERSION
|
||||
value:
|
||||
_default: 0.0.1
|
||||
- name: ENABLE_PERMISSIONS_FILTER
|
||||
value:
|
||||
_default: "1"
|
||||
- name: PERMISSIONS_FILTER_COMPANIES
|
||||
value:
|
||||
_default: '[1]'
|
||||
- name: TRANSMITTALS_ENABLE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: DRAWINGS_INTERNAL_URL
|
||||
value:
|
||||
_default: http://drawings-api-service.drawings.svc.cluster.local:80
|
||||
- name: ATTACHMENTS_URL
|
||||
value:
|
||||
_default: http://attachments-service.attachments.svc.cluster.local:8000
|
||||
- name: BIM_API_V2_URL
|
||||
value:
|
||||
_default: http://backend-svc.bim.svc.cluster.local:8000/
|
||||
- name: BIM_V2_HOST
|
||||
value:
|
||||
_default: http://backend-svc.bim.svc.cluster.local:8000/
|
||||
- name: CACHE_CLEANUP_INTERVAL
|
||||
value:
|
||||
_default: 60s
|
||||
- name: CACHE_DEFAULT_EXPIRATION
|
||||
value:
|
||||
_default: 60s
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: DJANGO_ORIGINATOR
|
||||
value:
|
||||
_default: docs_prod
|
||||
- name: DOCUMENTATION_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/
|
||||
- name: EAV_URL
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: ENABLE_OBSERVABILITY
|
||||
value:
|
||||
_default: "false"
|
||||
- name: ENABLE_S3
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: prod
|
||||
- name: FLOWS_URL
|
||||
value:
|
||||
_default: http://backend-service.flows.svc.cluster.local:8000
|
||||
- name: HEIGHT_THUMB_ATTACHMENTS
|
||||
value:
|
||||
_default: "300"
|
||||
- name: HEIGHT_THUMB_STATES
|
||||
value:
|
||||
_default: "73"
|
||||
- name: HTTP_PORT
|
||||
value:
|
||||
_default: "8080"
|
||||
- name: INSPECTIONS_URL
|
||||
value:
|
||||
_default: http://inspections-service.inspections.svc.cluster.local:80
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: INFO
|
||||
- name: OBSERVABILITY_COLLECTOR_ENDPOINT
|
||||
value:
|
||||
_default: temp
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_DB
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "20"
|
||||
- name: TRANSMITTALS_BASE_URL
|
||||
value:
|
||||
_default: mock
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: READ_WRITE_TIMEOUT_FILE_STREAM
|
||||
value:
|
||||
_default: 6h
|
||||
- name: RELEASES_URL
|
||||
value:
|
||||
_default: https://gitlab.com
|
||||
- name: REMARKS_URL
|
||||
value:
|
||||
_default: http://remarks-static-service.remarks.svc.cluster.local:8080/remarks
|
||||
- name: RESOURCES_URL
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: S3_SERVICE_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
|
||||
- name: STATES_URL
|
||||
value:
|
||||
_default: http://backend-svc.workspaces.svc.cluster.local:8000/
|
||||
- name: SUBSCRIPTIONS_URL
|
||||
value:
|
||||
_default: http://sarex-subscriptions-service.subscriptions.svc.cluster.local:80
|
||||
- name: SYSTEM_LOG_URL
|
||||
value:
|
||||
_default: http://api-service.system-log.svc.cluster.local:8000
|
||||
- name: TARGET_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: USE_CACHE_IN_FILE_STREAMER
|
||||
value:
|
||||
_default: "1"
|
||||
- name: USE_SUBSCRIPTIONS
|
||||
value:
|
||||
_default: "false"
|
||||
- name: WIDTH_THUMB_ATTACHMENTS
|
||||
value:
|
||||
_default: "300"
|
||||
- name: WIDTH_THUMB_STATES
|
||||
value:
|
||||
_default: "120"
|
||||
- name: WORKFLOWS_IMAGES_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: WORKFLOW_IMAGES_VERSION
|
||||
value:
|
||||
_default: master
|
||||
- name: WORKFLOW_URL
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000/
|
||||
- name: WORKSPACE_BUNDLE_VERSION
|
||||
value:
|
||||
_default: v1
|
||||
- name: WORKSPACE_URL
|
||||
value:
|
||||
_default: http://backend-svc.workspaces.svc.cluster.local:8000/
|
||||
- name: NOTES_URL
|
||||
value:
|
||||
_default: ""
|
||||
secretEnvs:
|
||||
- name: RELEASES_TOKEN
|
||||
secretName:
|
||||
_default: releases-token
|
||||
secretKey: key
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_BASIC_AUTH
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
103
apps/documentations/ugok/pdf-markings.yaml
Normal file
103
apps/documentations/ugok/pdf-markings.yaml
Normal file
@ -0,0 +1,103 @@
|
||||
---
|
||||
# Скопировано из apps/documentations/wb/pdf-markings.yaml — в base для этого
|
||||
# сервиса нет HelmRelease (только documentations-pdf-markings-amqp), а из другого
|
||||
# оверлея (wb) kustomize напрямую ссылаться не даёт (вне дерева каталога).
|
||||
# Значения ниже перекрыты патчем patch-pdf-markings.yaml под дамп ugok.
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: pdf-markings
|
||||
namespace: documentations
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.7"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
pdf-markings:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/pdf-markings:prod_7d892636
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: pdf-markings
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: marks-service
|
||||
|
||||
type:
|
||||
_default: ClusterIP
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
targetPort:
|
||||
_default: 8000
|
||||
|
||||
portName:
|
||||
_default: http
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: dockerhub
|
||||
|
||||
volumes:
|
||||
_default:
|
||||
- name: yc-s3
|
||||
mountPath:
|
||||
_default: /etc/sarex/yc-s3-storage
|
||||
readOnly:
|
||||
_default: true
|
||||
secret:
|
||||
secretName:
|
||||
_default: documentations-yc-s3
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
11
apps/drawings/ugok/kustomization.yaml
Normal file
11
apps/drawings/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: drawings
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
40
apps/drawings/ugok/patch.yaml
Normal file
40
apps/drawings/ugok/patch.yaml
Normal file
@ -0,0 +1,40 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: drawings
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/drawings-api:015e68e1b2a3dcc13f0b405e1f761b154a825d24
|
||||
envs:
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "3"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
secretEnvs:
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: drawings-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: drawings-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_ADDRESS
|
||||
secretName:
|
||||
_default: drawings-postgresql-secret
|
||||
secretKey: host
|
||||
- name: POSTGRES_DB
|
||||
secretName:
|
||||
_default: drawings-postgresql-secret
|
||||
secretKey: database
|
||||
11
apps/eav/ugok/kustomization.yaml
Normal file
11
apps/eav/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: eav
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
87
apps/eav/ugok/patch.yaml
Normal file
87
apps/eav/ugok/patch.yaml
Normal file
@ -0,0 +1,87 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: eav
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/eav:prod_0dcebba6
|
||||
volumes:
|
||||
_default:
|
||||
- name: django-configmap
|
||||
mountPath:
|
||||
_default: /server/config/settings/production.py
|
||||
subPath:
|
||||
_default: production.py
|
||||
configMap:
|
||||
name:
|
||||
_default: django-configmap
|
||||
items:
|
||||
- key: production.py
|
||||
path:
|
||||
_default: production.py
|
||||
envs:
|
||||
- name: KAFKA_ENABLED
|
||||
value:
|
||||
_default: "False"
|
||||
- name: ASSETS_TOPIC
|
||||
value:
|
||||
_default: sarex
|
||||
- name: DJANGO_SETTINGS_MODULE
|
||||
value:
|
||||
_default: config.settings.production
|
||||
- name: DJANGO_POSTGRES_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DJANGO_POSTGRES_DATABASE
|
||||
value:
|
||||
_default: eav_db
|
||||
- name: YC_S3_ENDPOINT_URL
|
||||
value:
|
||||
_default: http://minio.minio.svc.cluster.local:9000
|
||||
- name: YC_S3_BUCKET_NAME
|
||||
value:
|
||||
_default: eav
|
||||
- name: KAFKA_USERNAME
|
||||
value:
|
||||
_default: sarex
|
||||
- name: KAFKA_SSL_CAFILE
|
||||
value:
|
||||
_default: /usr/local/share/ca-certificates/kafka.crt
|
||||
- name: KAFKA_HOST
|
||||
value:
|
||||
_default: ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093
|
||||
secretEnvs:
|
||||
- name: DJANGO_POSTGRES_USER
|
||||
secretName:
|
||||
_default: eav-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DJANGO_POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: eav-postgresql-secret
|
||||
secretKey: password
|
||||
- name: JWT_PRIVATE_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_private.key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_public.key
|
||||
- name: YC_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: eav-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YC_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: eav-s3-secret
|
||||
secretKey: access_key
|
||||
- name: KAFKA_PASSWORD
|
||||
secretName:
|
||||
_default: kafka-cred
|
||||
secretKey: password
|
||||
11
apps/faas/ugok/kustomization.yaml
Normal file
11
apps/faas/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: faas
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: export-reviews
|
||||
13
apps/faas/ugok/patch.yaml
Normal file
13
apps/faas/ugok/patch.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: export-reviews
|
||||
namespace: faas
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/export-reviews:prod_c4cae4ee
|
||||
19
apps/flows/ugok/kustomization.yaml
Normal file
19
apps/flows/ugok/kustomization.yaml
Normal file
@ -0,0 +1,19 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: flows
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-celery.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: celery
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
169
apps/flows/ugok/patch-backend.yaml
Normal file
169
apps/flows/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,169 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: flows
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_a7dc8216
|
||||
envs:
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: DEBUG
|
||||
- name: BASE_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: CELERY_QUEUE
|
||||
value:
|
||||
_default: flow
|
||||
- name: EAV_HOST
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000/api
|
||||
- name: PLANNING_HOST
|
||||
value:
|
||||
_default: http://backend-service.pm.svc.cluster.local:8000/api/pm/msp
|
||||
- name: PLANNING_USE
|
||||
value:
|
||||
_default: "True"
|
||||
- name: DOCUMENTATION_HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/internal/v1
|
||||
- name: DOCUMENTATION_EXTERNAL_HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/api/v1
|
||||
- name: ENABLE_ANALYTICS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_CELERY
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_MAILGUN
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_METRICS
|
||||
value:
|
||||
_default: "0"
|
||||
- name: FROM_EMAIL
|
||||
value:
|
||||
_default: sarex@uchgok.ru
|
||||
- name: GATEWAY_URL
|
||||
value:
|
||||
_default: http://pdm-api.documentations.svc.cluster.local:8080
|
||||
- name: PG_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: PG_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: RABBITMQ_HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
- name: RABBITMQ_PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: RESOURCE_URL
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: SERVICE_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/flows/api/v1
|
||||
- name: SMTP_HOST
|
||||
value:
|
||||
_default: mail.uchgok.ru
|
||||
- name: DOCUMENTATION_PG_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DOCUMENTATION_PG_DATABASE
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: DOCUMENTATION_PG_HOST
|
||||
value:
|
||||
_default: postgres-service.documentations.svc.cluster.local
|
||||
- name: CHECKLIST_HOST
|
||||
value:
|
||||
_default: http://checklists-backend-service.checklists.svc.cluster.local:80
|
||||
- name: SMTP_PORT
|
||||
value:
|
||||
_default: "25"
|
||||
- name: SYNC_RESOURCE_ID
|
||||
value:
|
||||
_default: "1"
|
||||
- name: TIMEOUT
|
||||
value:
|
||||
_default: "120"
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000/api/v1
|
||||
- name: WORKFLOWS_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: DOCUMENTATION_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: KAFKA_HOST
|
||||
value:
|
||||
_default: ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093
|
||||
- name: PROXY_PATH_PREFIX
|
||||
value:
|
||||
_default: /flows
|
||||
secretEnvs:
|
||||
- name: KAFKA_USERNAME
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_PASSWORD
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: password
|
||||
- name: ADMIN_PANEL_SECRET_KEY
|
||||
secretName:
|
||||
_default: admin-secret
|
||||
secretKey: key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: jwt-secret
|
||||
secretKey: public_key
|
||||
- name: DOCUMENTATION_PG_USERNAME
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DOCUMENTATION_PG_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_TOKEN
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: token
|
||||
- name: PG_DB
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: database
|
||||
- name: PG_LOGIN
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: username
|
||||
- name: PG_PASSWORD
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: password
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: flows-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: flows-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: flows-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
179
apps/flows/ugok/patch-celery.yaml
Normal file
179
apps/flows/ugok/patch-celery.yaml
Normal file
@ -0,0 +1,179 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: celery
|
||||
namespace: flows
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
celery:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_a7dc8216
|
||||
envs:
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: DEBUG
|
||||
- name: DOCUMENTATION_PG_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DOCUMENTATION_PG_DATABASE
|
||||
value:
|
||||
_default: documentations_db
|
||||
- name: DOCUMENTATION_PG_HOST
|
||||
value:
|
||||
_default: postgres-service.documentations.svc.cluster.local
|
||||
- name: BASE_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/
|
||||
- name: CELERY_QUEUE
|
||||
value:
|
||||
_default: flow
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000/api
|
||||
- name: DOCUMENTATION_HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/internal/v1
|
||||
- name: DOCUMENTATION_EXTERNAL_HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/api/v1
|
||||
- name: ENABLE_ANALYTICS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_CELERY
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_MAILGUN
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_METRICS
|
||||
value:
|
||||
_default: "0"
|
||||
- name: FROM_EMAIL
|
||||
value:
|
||||
_default: sarex.ru
|
||||
- name: GATEWAY_URL
|
||||
value:
|
||||
_default: http://pdm-api.documentations.svc.cluster.local:8080
|
||||
- name: PG_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: PG_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: RABBITMQ_HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
- name: RABBITMQ_PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: RESOURCE_URL
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: SERVICE_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/flows/api/v1
|
||||
- name: SMTP_HOST
|
||||
value:
|
||||
_default: smtp-relay.com
|
||||
- name: SMTP_PORT
|
||||
value:
|
||||
_default: "587"
|
||||
- name: SYNC_RESOURCE_ID
|
||||
value:
|
||||
_default: "1"
|
||||
- name: TIMEOUT
|
||||
value:
|
||||
_default: "120"
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000/api/v1
|
||||
- name: WORKFLOWS_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: DOCUMENTATION_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: KAFKA_HOST
|
||||
value:
|
||||
_default: ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093
|
||||
- name: FLOWS_HOST
|
||||
value:
|
||||
_default: http://backend-service.flows.svc.cluster.local:8000
|
||||
- name: RESOURCES_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000/
|
||||
- name: DJANGO_BASE_HOST
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
secretEnvs:
|
||||
- name: FLOWS_DB_DB
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: database
|
||||
- name: FLOWS_DB_USERNAME
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: username
|
||||
- name: FLOWS_DB_PASSWORD
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_AUTH
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: token
|
||||
- name: KAFKA_USERNAME
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_PASSWORD
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: password
|
||||
- name: ADMIN_PANEL_SECRET_KEY
|
||||
secretName:
|
||||
_default: admin-secret
|
||||
secretKey: key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: jwt-secret
|
||||
secretKey: public_key
|
||||
- name: DOCUMENTATION_PG_USERNAME
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DOCUMENTATION_PG_PASSWORD
|
||||
secretName:
|
||||
_default: documentations-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_TOKEN
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: token
|
||||
- name: PG_DB
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: database
|
||||
- name: PG_LOGIN
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: username
|
||||
- name: PG_PASSWORD
|
||||
secretName:
|
||||
_default: flows-postgresql-secret
|
||||
secretKey: password
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: flows-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: flows-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: flows-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
13
apps/flows/ugok/patch-frontend.yaml
Normal file
13
apps/flows/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: flows
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_dcc5b5e6
|
||||
11
apps/inspections/ugok/kustomization.yaml
Normal file
11
apps/inspections/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: inspections
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
123
apps/inspections/ugok/patch.yaml
Normal file
123
apps/inspections/ugok/patch.yaml
Normal file
@ -0,0 +1,123 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: inspections
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_1a33f6f4
|
||||
envs:
|
||||
- name: DEBUG
|
||||
value:
|
||||
_default: "false"
|
||||
- name: SERVICE_URL
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: HTTP_APP_HOST
|
||||
value:
|
||||
_default: 0.0.0.0
|
||||
- name: HTTP_APP_PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: HTTP_APP_ROOT_PATH
|
||||
value:
|
||||
_default: /inspections
|
||||
- name: HTTP_APP_WORKERS
|
||||
value:
|
||||
_default: "3"
|
||||
- name: HTTP_APP_ADMIN_ENABLE
|
||||
value:
|
||||
_default: "true"
|
||||
- name: KAFKA_SSL_CAFILE
|
||||
value:
|
||||
_default: /usr/local/share/ca-certificates/Yandex/YandexInternalRootCA.crt
|
||||
- name: KAFKA_EAV_ASSETS_TOPIC
|
||||
value:
|
||||
_default: assets_broadcast
|
||||
- name: JWT_AUTH_ENABLE
|
||||
value:
|
||||
_default: "true"
|
||||
- name: NOTIFICATIONS_ENABLE
|
||||
value:
|
||||
_default: "true"
|
||||
- name: NOTIFICATIONS_EMAIL_FROM
|
||||
value:
|
||||
_default: hello@sarex.io
|
||||
- name: SAREX_BACKEND_URL
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: SAREX_BACKEND_TIMEOUT
|
||||
value:
|
||||
_default: "30"
|
||||
- name: EAV_URL
|
||||
value:
|
||||
_default: http://eav-service.eav
|
||||
- name: EAV_TIMEOUT
|
||||
value:
|
||||
_default: "30"
|
||||
- name: WORKFLOWS_URL
|
||||
value:
|
||||
_default: http://workflows-service.processing-prod
|
||||
- name: WORKFLOWS_TIMEOUT
|
||||
value:
|
||||
_default: "30"
|
||||
- name: WORKFLOWS_EMAIL_DOCKER_IMAGE
|
||||
value:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/notification:email
|
||||
- name: MOBILE_APP_CURRENT_VERSION
|
||||
value:
|
||||
_default: "1.0.0"
|
||||
- name: MOBILE_APP_RECOMMENDED_VERSION
|
||||
value:
|
||||
_default: "1.0.0"
|
||||
- name: MOBILE_APP_REQUIRED_VERSION
|
||||
value:
|
||||
_default: "1.0.0"
|
||||
- name: MAILER_URL
|
||||
value:
|
||||
_default: http://mailer-service.mailer:8000
|
||||
- name: MAILER_TIMEOUT
|
||||
value:
|
||||
_default: "30"
|
||||
secretEnvs:
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: inspections-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PORT
|
||||
secretName:
|
||||
_default: inspections-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DATABASE_NAME
|
||||
secretName:
|
||||
_default: inspections-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DATABASE_HOST
|
||||
secretName:
|
||||
_default: inspections-postgresql-secret
|
||||
secretKey: host
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: inspections-postgresql-secret
|
||||
secretKey: password
|
||||
- name: KAFKA_HOST
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: host
|
||||
- name: KAFKA_USERNAME
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_PASSWORD
|
||||
secretName:
|
||||
_default: kafka-secret
|
||||
secretKey: password
|
||||
- name: SAREX_BACKEND_AUTH
|
||||
secretName:
|
||||
_default: sarex-backend-auth-secret
|
||||
secretKey: key
|
||||
23
apps/issues/ugok/kustomization.yaml
Normal file
23
apps/issues/ugok/kustomization.yaml
Normal file
@ -0,0 +1,23 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: issues
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-celery.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: celery
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
- path: patch-redis-image.yaml
|
||||
target:
|
||||
kind: Deployment
|
||||
name: redis
|
||||
123
apps/issues/ugok/patch-backend.yaml
Normal file
123
apps/issues/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,123 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: issues
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_bbb9d29a
|
||||
envs:
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: production
|
||||
- name: AERO_PUBLIC_HOST
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
- name: AERO_HOST
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
- name: BASE_AERO_URL
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
- name: BASE_AUTH_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000
|
||||
- name: WORKFLOWS_URL
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000
|
||||
- name: RESOURCES_API_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: EAV_HOST
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: SAREX_API
|
||||
value:
|
||||
_default: https://ugok-sarex.uralmine.com
|
||||
- name: DOCUMENTATIONS_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: DJANGO_SETTINGS_MODULE
|
||||
value:
|
||||
_default: config.settings.production
|
||||
- name: DATABASE_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DATABASE_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: RABBITMQ_HOSTNAME
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local:5672
|
||||
secretEnvs:
|
||||
- name: YC_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: access_key
|
||||
- name: YC_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YC_S3_BUCKET_NAME
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: bucket
|
||||
- name: YC_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: DJANGO_BASIC_AUTH
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: SAREX_USERNAME
|
||||
secretName:
|
||||
_default: sarex-auth
|
||||
secretKey: username
|
||||
- name: SAREX_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-auth
|
||||
secretKey: password
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: issues-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: issues-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DATABASE_NAME
|
||||
secretName:
|
||||
_default: issues-postgresql-secret
|
||||
secretKey: database
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: issues-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: issues-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: issues-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: JWT_PRIVATE_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_private.key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_public.key
|
||||
132
apps/issues/ugok/patch-celery.yaml
Normal file
132
apps/issues/ugok/patch-celery.yaml
Normal file
@ -0,0 +1,132 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: celery
|
||||
namespace: issues
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
celery:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/issues:production_bbb9d29a
|
||||
deployment:
|
||||
command:
|
||||
_default: ["celery", "-A", "config", "worker", "-l", "info", "-E"]
|
||||
envs:
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: production
|
||||
- name: AERO_PUBLIC_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: AERO_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: BASE_AERO_URL
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: BASE_AUTH_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: WORKFLOWS_HOST
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000
|
||||
- name: WORKFLOWS_URL
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000
|
||||
- name: RESOURCES_API_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: EAV_HOST
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: SAREX_API
|
||||
value:
|
||||
_default: https://sarex.ugok.lan
|
||||
- name: DOCUMENTATIONS_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: DJANGO_SETTINGS_MODULE
|
||||
value:
|
||||
_default: config.settings.production
|
||||
- name: DATABASE_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DATABASE_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: RABBITMQ_HOSTNAME
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local:5672
|
||||
- name: USE_NOTIFICATIONS
|
||||
value:
|
||||
_default: "True"
|
||||
- name: ENABLE_MAILGUN
|
||||
value:
|
||||
_default: "False"
|
||||
secretEnvs:
|
||||
- name: YC_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: access_key
|
||||
- name: YC_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YC_S3_BUCKET_NAME
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: bucket
|
||||
- name: YC_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: issues-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: DJANGO_BASIC_AUTH
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: SAREX_USERNAME
|
||||
secretName:
|
||||
_default: sarex-auth
|
||||
secretKey: username
|
||||
- name: SAREX_PASSWORD
|
||||
secretName:
|
||||
_default: sarex-auth
|
||||
secretKey: password
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: issues-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: issues-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DATABASE_NAME
|
||||
secretName:
|
||||
_default: issues-postgresql-secret
|
||||
secretKey: database
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: issues-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: issues-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: issues-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: JWT_PRIVATE_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_private.key
|
||||
- name: JWT_PUBLIC_KEY
|
||||
secretName:
|
||||
_default: backend-secret
|
||||
secretKey: ssh_public.key
|
||||
13
apps/issues/ugok/patch-frontend.yaml
Normal file
13
apps/issues/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: issues
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/contour_issues-frontend:b56b9da1
|
||||
6
apps/issues/ugok/patch-redis-image.yaml
Normal file
6
apps/issues/ugok/patch-redis-image.yaml
Normal file
@ -0,0 +1,6 @@
|
||||
---
|
||||
# redis-deployment.yaml — сырой Deployment (не universal-chart), образ меняем
|
||||
# через JSON6902, т.к. strategic-merge на список containers ненадёжен для CRD-less объектов.
|
||||
- op: replace
|
||||
path: /spec/template/spec/containers/0/image
|
||||
value: cr.yandex/crp3ccidau046kdj8g9q/redis:latest
|
||||
11
apps/mapper/ugok/kustomization.yaml
Normal file
11
apps/mapper/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: mapper
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
22
apps/mapper/ugok/patch.yaml
Normal file
22
apps/mapper/ugok/patch.yaml
Normal file
@ -0,0 +1,22 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: mapper
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
deployment:
|
||||
resources:
|
||||
limits:
|
||||
cpu:
|
||||
_default: "2"
|
||||
memory:
|
||||
_default: 512Mi
|
||||
requests:
|
||||
cpu:
|
||||
_default: "1"
|
||||
memory:
|
||||
_default: 128Mi
|
||||
11
apps/measurements/ugok/kustomization.yaml
Normal file
11
apps/measurements/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: measurements
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: measurements
|
||||
29
apps/measurements/ugok/patch.yaml
Normal file
29
apps/measurements/ugok/patch.yaml
Normal file
@ -0,0 +1,29 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: measurements
|
||||
namespace: measurements
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
deployment:
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: 500m
|
||||
memory:
|
||||
_default: 512Mi
|
||||
envs:
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: https://lk.sarex.io
|
||||
- name: S3_JSON_FILE
|
||||
value:
|
||||
_default: /opt/cred_s3.json
|
||||
secretEnvs:
|
||||
- name: S3_JSON_SETTINGS
|
||||
secretName:
|
||||
_default: s3-json-settings
|
||||
secretKey: S3_JSON_SETTINGS
|
||||
11
apps/message-hub/ugok/kustomization.yaml
Normal file
11
apps/message-hub/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: message-hub
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: message-hub
|
||||
98
apps/message-hub/ugok/patch.yaml
Normal file
98
apps/message-hub/ugok/patch.yaml
Normal file
@ -0,0 +1,98 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: message-hub
|
||||
namespace: message-hub
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_e8010fe4
|
||||
envs:
|
||||
- name: WORKER_TIMEOUT
|
||||
value:
|
||||
_default: "60"
|
||||
- name: PYTHONPATH
|
||||
value:
|
||||
_default: src
|
||||
- name: SETTINGS_MAX_RETRIES
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SETTINGS_TOPICS
|
||||
value:
|
||||
_default: '{"planning": "pm", "assets": "assets_broadcast", "project_entity": "issues_broadcast"}'
|
||||
- name: SETTINGS_PDF_CONVERTER_HOST
|
||||
value:
|
||||
_default: http://export-project-service.django.svc.cluster.local:8000
|
||||
- name: SAREX_BASE_HOST
|
||||
value:
|
||||
_default: http://backend-service.pm.svc.cluster.local:8000
|
||||
- name: DB_HOST
|
||||
value:
|
||||
_default: postgres-service.pm.svc.cluster.local
|
||||
- name: DB_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DB_DATABASE
|
||||
value:
|
||||
_default: pm_db
|
||||
- name: CACHE_HOST
|
||||
value:
|
||||
_default: redis.pm.svc.cluster.local
|
||||
- name: CACHE_PORT
|
||||
value:
|
||||
_default: "6379"
|
||||
- name: CACHE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: KAFKA_HOST
|
||||
value:
|
||||
_default: kafka.kafka.svc.cluster.local
|
||||
- name: KAFKA_PORT
|
||||
value:
|
||||
_default: "9092"
|
||||
- name: KAFKA_SECURITY_PROTOCOL
|
||||
value:
|
||||
_default: SASL_PLAINTEXT
|
||||
- name: KAFKA_SASL_MECHANISM
|
||||
value:
|
||||
_default: PLAIN
|
||||
- name: KAFKA_SSL_CAFILE
|
||||
value:
|
||||
_default: /usr/local/share/ca-certificates/kafka.crt
|
||||
secretEnvs:
|
||||
- name: KAFKA_USERNAME
|
||||
secretName:
|
||||
_default: message-hub-kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_PASSWORD
|
||||
secretName:
|
||||
_default: message-hub-kafka-secret
|
||||
secretKey: password
|
||||
- name: DB_USERNAME
|
||||
secretName:
|
||||
_default: pm-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DB_PASSWORD
|
||||
secretName:
|
||||
_default: pm-postgresql-secret
|
||||
secretKey: password
|
||||
- name: S3_LOGIN
|
||||
secretName:
|
||||
_default: message-hub-s3-secret
|
||||
secretKey: access_key
|
||||
- name: S3_PASSWORD
|
||||
secretName:
|
||||
_default: message-hub-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: S3_BUCKET
|
||||
secretName:
|
||||
_default: message-hub-s3-secret
|
||||
secretKey: bucket
|
||||
- name: S3_HOST
|
||||
secretName:
|
||||
_default: message-hub-s3-secret
|
||||
secretKey: endpoint
|
||||
15
apps/notes/ugok/kustomization.yaml
Normal file
15
apps/notes/ugok/kustomization.yaml
Normal file
@ -0,0 +1,15 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: notes
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
80
apps/notes/ugok/patch-backend.yaml
Normal file
80
apps/notes/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,80 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: notes
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/notes-backend:production_81366854
|
||||
envs:
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: DOCUMENTATIONS_HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080/api/v1
|
||||
- name: BASE_HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/notes
|
||||
- name: FAAS_SERVICE
|
||||
value:
|
||||
_default: http://generate-document-service.faas.svc.cluster.local:8000
|
||||
- name: WORKSPACE_URL
|
||||
value:
|
||||
_default: http://backend-svc.workspaces.svc.cluster.local:8000/api/v1
|
||||
- name: WORKFLOW_HOST
|
||||
value:
|
||||
_default: http://workflows-api-service.workflow.svc.cluster.local:8000/api/v1
|
||||
- name: WORKFLOW_TAG
|
||||
value:
|
||||
_default: stable
|
||||
- name: ENABLE_METRICS
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_LOCAL_STORAGE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: REGISTRY
|
||||
value:
|
||||
_default: 10.4.10.187:80/library/
|
||||
- name: TIMEOUT
|
||||
value:
|
||||
_default: "120"
|
||||
- name: ATTACHMENT_HOST
|
||||
value:
|
||||
_default: http://attachments-service.attachments.svc.cluster.local:8000/api/v1
|
||||
- name: PG_SSL_MODE
|
||||
value:
|
||||
_default: verify-full
|
||||
- name: SYNC_RESOURCE_ID
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_ND
|
||||
value:
|
||||
_default: "0"
|
||||
secretEnvs:
|
||||
- name: PG_DB
|
||||
secretName:
|
||||
_default: notes-postgresql-secret
|
||||
secretKey: database
|
||||
- name: PG_LOGIN
|
||||
secretName:
|
||||
_default: notes-postgresql-secret
|
||||
secretKey: username
|
||||
- name: PG_PASSWORD
|
||||
secretName:
|
||||
_default: notes-postgresql-secret
|
||||
secretKey: password
|
||||
- name: PG_HOST
|
||||
secretName:
|
||||
_default: notes-postgresql-secret
|
||||
secretKey: hostname
|
||||
- name: DJANGO_TOKEN
|
||||
secretName:
|
||||
_default: notes-django-auth
|
||||
secretKey: key
|
||||
13
apps/notes/ugok/patch-frontend.yaml
Normal file
13
apps/notes/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: notes
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/notes-frontend:production_0cb0909f
|
||||
19
apps/pm/ugok/kustomization.yaml
Normal file
19
apps/pm/ugok/kustomization.yaml
Normal file
@ -0,0 +1,19 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: pm
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-celery.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: celery
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
53
apps/pm/ugok/patch-backend.yaml
Normal file
53
apps/pm/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,53 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: pm
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_fa0f1551
|
||||
volumes:
|
||||
_default:
|
||||
- name: kafka-cert-volume
|
||||
mountPath:
|
||||
_default: /usr/local/share/ca-certificates
|
||||
readOnly:
|
||||
_default: true
|
||||
configMap:
|
||||
name:
|
||||
_default: kafka-cert
|
||||
|
||||
- name: env-file
|
||||
mountPath:
|
||||
_default: /opt/sarex/.env
|
||||
subPath:
|
||||
_default: .env
|
||||
readOnly:
|
||||
_default: true
|
||||
secret:
|
||||
secretName:
|
||||
_default: sarex-env
|
||||
envs:
|
||||
- name: USERS_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: RESOURCES_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: EAV_HOST
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: EAV_API_PREFIX
|
||||
value:
|
||||
_default: /api/v0
|
||||
- name: SETTINGS_VERIFY_SSL
|
||||
value:
|
||||
_default: "True"
|
||||
- name: EAV_API_PREFIX_V1
|
||||
value:
|
||||
_default: /api/v1
|
||||
56
apps/pm/ugok/patch-celery.yaml
Normal file
56
apps/pm/ugok/patch-celery.yaml
Normal file
@ -0,0 +1,56 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: celery
|
||||
namespace: pm
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
celery:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/pm-backend:production_fa0f1551
|
||||
volumes:
|
||||
_default:
|
||||
- name: kafka-cert-volume
|
||||
mountPath:
|
||||
_default: /usr/local/share/ca-certificates
|
||||
readOnly:
|
||||
_default: true
|
||||
configMap:
|
||||
name:
|
||||
_default: kafka-cert
|
||||
|
||||
- name: env-file
|
||||
mountPath:
|
||||
_default: /opt/sarex/.env
|
||||
subPath:
|
||||
_default: .env
|
||||
readOnly:
|
||||
_default: true
|
||||
secret:
|
||||
secretName:
|
||||
_default: sarex-env
|
||||
envs:
|
||||
- name: USERS_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: RESOURCES_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: EAV_HOST
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: EAV_API_PREFIX
|
||||
value:
|
||||
_default: /api/v0
|
||||
- name: EAV_API_PREFIX_V1
|
||||
value:
|
||||
_default: /api/v1
|
||||
- name: PLANNING_HOST
|
||||
value:
|
||||
_default: http://backend-service.pm.svc.cluster.local:8000/api/pm/msp
|
||||
- name: PLANNING_USE
|
||||
value:
|
||||
_default: "True"
|
||||
19
apps/pm/ugok/patch-frontend.yaml
Normal file
19
apps/pm/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,19 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: pm
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: 10.4.10.187:80/library/pm-frontend:contour_e5c3d387
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: 100m
|
||||
memory:
|
||||
_default: 100Mi
|
||||
11
apps/prescriptions/ugok/kustomization.yaml
Normal file
11
apps/prescriptions/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: prescriptions
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
13
apps/prescriptions/ugok/patch.yaml
Normal file
13
apps/prescriptions/ugok/patch.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: prescriptions
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: 10.4.10.187:80/library/prescriptions-frontend:production_357a42d6
|
||||
319
apps/processing/ugok/engine-low.yaml
Normal file
319
apps/processing/ugok/engine-low.yaml
Normal file
@ -0,0 +1,319 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: engine-low
|
||||
namespace: workflow
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.9"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
backend:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:production_f5fe4688
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: engine-low
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8080
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: false
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: regcred
|
||||
|
||||
envs:
|
||||
- name: TOLERATION_KEY
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: TOLERATION_VALUE
|
||||
value:
|
||||
_default: processing-light
|
||||
- name: TOLERATION_KEY_HIGH_MEM
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: TOLERATION_VALUE_HIGH_MEM
|
||||
value:
|
||||
_default: processing
|
||||
- name: DEFAULT_TOLERATION_KEY
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: DEFAULT_TOLERATION_VALUE
|
||||
value:
|
||||
_default: processing-light
|
||||
- name: TOLERATION_KEY_PERSISTENT
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: TOLERATION_VALUE_PERSISTENT
|
||||
value:
|
||||
_default: processing
|
||||
- name: RABBITMQ_HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
- name: RABBITMQ_PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: WORKFLOWS_SENTRY_DSN
|
||||
value:
|
||||
_default: "https://866b532efdbb4764a7551b76231232fc@o279218.ingest.sentry.io/543123"
|
||||
- name: WORKFLOWS_SENTRY_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "20"
|
||||
- name: ENABLE_SMTP
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SMTP
|
||||
value:
|
||||
_default: /etc/smtp-secret/smtp.json
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: prod
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: S3_SERVICE_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3/yc-s3-service-account.json
|
||||
- name: BIM_API_V2_DB
|
||||
value:
|
||||
_default: /etc/sarex/bim-api-v2-db-prod.json
|
||||
- name: PDM_API_DB
|
||||
value:
|
||||
_default: /etc/pdm/pdm-api-db-prod.json
|
||||
- name: WORKSPACE_API_DB
|
||||
value:
|
||||
_default: /etc/ws/ws-api-db-prod.json
|
||||
- name: ISSUE_API_DB
|
||||
value:
|
||||
_default: /etc/issues/issue-api-db-prod.json
|
||||
- name: MAILGUN
|
||||
value:
|
||||
_default: /etc/mailgun-secret/env.json
|
||||
- name: INTERNAL_PDM_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: INTERNAL_FILESTREAM_URL
|
||||
value:
|
||||
_default: http://documentations-filestream.documentations.svc.cluster.local:8080
|
||||
- name: EXTERNAL_PDM_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: EXTERNAL_FILESTREAM_URL
|
||||
value:
|
||||
_default: http://documentations-filestream-service.documentations.svc.cluster.local:8080
|
||||
- name: RESOURCES_API_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_S3_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_S3V2_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_PDM_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_URL_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_SRX_TMP
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_BIM_API_V2_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_WORKSPACE_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_ISSUE_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_RESOURCES_API
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_PDM_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_COMPARISONS_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_MAIL_GUN
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_AMQP_EXECUTOR
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_KUBERNETES_EXECUTOR
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MAX_WORKFLOWS_LIMIT
|
||||
value:
|
||||
_default: "5"
|
||||
- name: CPU_COUNT
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MEMORY_GI
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CPU_COUNT_LOW_RESOURCES
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MEMORY_GI_LOW_RESOURCES
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CPU_COUNT_HIGH_MEM
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MEMORY_GI_HIGH_MEM
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_TOLERATION
|
||||
value:
|
||||
_default: "1"
|
||||
- name: COUNT_RUNNING_WORKERS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: COUNT_CANCELING_WORKERS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: COUNT_HANDLE_JOB_WORKERS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: BIM_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: BIM_API_V2_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: PDM_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: COMPARISONS_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: WORKSPACE_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DEFAULT_NODE_SELECTOR_KEY
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: DEFAULT_NODE_SELECTOR_VALUE
|
||||
value:
|
||||
_default: processing-ligh
|
||||
- name: JOBS_NAMESPACE
|
||||
value:
|
||||
_default: workflow
|
||||
- name: ISSUE_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: RABBITMQ_CREATE_EXCHANGE
|
||||
value:
|
||||
_default: autodesk.inputMessage
|
||||
- name: RABBITMQ_CANCEL_EXCHANGE
|
||||
value:
|
||||
_default: autodesk.cancelMessage
|
||||
- name: RABBITMQ_CREATE_ROUTING_KEY
|
||||
value:
|
||||
_default: converting
|
||||
- name: RABBITMQ_CANCEL_TOPIC
|
||||
value:
|
||||
_default: cancel
|
||||
- name: RABBITMQ_COMPLETENESS_EXCHANGE
|
||||
value:
|
||||
_default: autodesk.outputMessage
|
||||
- name: RABBITMQ_COMPLETENESS_TOPIC
|
||||
value:
|
||||
_default: output
|
||||
- name: CONTROL_PLANE_PERIOD
|
||||
value:
|
||||
_default: 10s
|
||||
- name: WORKFLOW_PRIORITY
|
||||
value:
|
||||
_default: low
|
||||
|
||||
secretEnvs:
|
||||
- name: RABBITMQ_USER
|
||||
secretName:
|
||||
_default: workflow-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASS
|
||||
secretName:
|
||||
_default: workflow-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_DB
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: database
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
319
apps/processing/ugok/engine.yaml
Normal file
319
apps/processing/ugok/engine.yaml
Normal file
@ -0,0 +1,319 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: engine
|
||||
namespace: workflow
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.9"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
backend:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/workflows-engine:production_f5fe4688
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: engine
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8080
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: false
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: regcred
|
||||
|
||||
envs:
|
||||
- name: TOLERATION_KEY
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: TOLERATION_VALUE
|
||||
value:
|
||||
_default: processing-light
|
||||
- name: TOLERATION_KEY_HIGH_MEM
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: TOLERATION_VALUE_HIGH_MEM
|
||||
value:
|
||||
_default: processing
|
||||
- name: DEFAULT_TOLERATION_KEY
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: DEFAULT_TOLERATION_VALUE
|
||||
value:
|
||||
_default: processing-light
|
||||
- name: TOLERATION_KEY_PERSISTENT
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: TOLERATION_VALUE_PERSISTENT
|
||||
value:
|
||||
_default: processing
|
||||
- name: RABBITMQ_HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
- name: RABBITMQ_PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: WORKFLOWS_SENTRY_DSN
|
||||
value:
|
||||
_default: "https://866b532efdbb4764a7551b76231232fc@o279218.ingest.sentry.io/543123"
|
||||
- name: WORKFLOWS_SENTRY_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "20"
|
||||
- name: ENABLE_SMTP
|
||||
value:
|
||||
_default: "1"
|
||||
- name: SMTP
|
||||
value:
|
||||
_default: /etc/smtp-secret/smtp.json
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: prod
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: S3_SERVICE_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3/yc-s3-service-account.json
|
||||
- name: BIM_API_V2_DB
|
||||
value:
|
||||
_default: /etc/sarex/bim-api-v2-db-prod.json
|
||||
- name: PDM_API_DB
|
||||
value:
|
||||
_default: /etc/pdm/pdm-api-db-prod.json
|
||||
- name: WORKSPACE_API_DB
|
||||
value:
|
||||
_default: /etc/ws/ws-api-db-prod.json
|
||||
- name: ISSUE_API_DB
|
||||
value:
|
||||
_default: /etc/issues/issue-api-db-prod.json
|
||||
- name: MAILGUN
|
||||
value:
|
||||
_default: /etc/mailgun-secret/env.json
|
||||
- name: INTERNAL_PDM_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: INTERNAL_FILESTREAM_URL
|
||||
value:
|
||||
_default: http://documentations-filestream.documentations.svc.cluster.local:8080
|
||||
- name: EXTERNAL_PDM_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: EXTERNAL_FILESTREAM_URL
|
||||
value:
|
||||
_default: http://documentations-filestream-service.documentations.svc.cluster.local:8080
|
||||
- name: RESOURCES_API_INTERNAL_HOST
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_S3_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_S3V2_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_PDM_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_URL_STORAGE
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_SRX_TMP
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_BIM_API_V2_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_WORKSPACE_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_ISSUE_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_RESOURCES_API
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_PDM_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_COMPARISONS_API_DB
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_MAIL_GUN
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_AMQP_EXECUTOR
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_KUBERNETES_EXECUTOR
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MAX_WORKFLOWS_LIMIT
|
||||
value:
|
||||
_default: "5"
|
||||
- name: CPU_COUNT
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MEMORY_GI
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CPU_COUNT_LOW_RESOURCES
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MEMORY_GI_LOW_RESOURCES
|
||||
value:
|
||||
_default: "1"
|
||||
- name: CPU_COUNT_HIGH_MEM
|
||||
value:
|
||||
_default: "1"
|
||||
- name: MEMORY_GI_HIGH_MEM
|
||||
value:
|
||||
_default: "1"
|
||||
- name: ENABLE_TOLERATION
|
||||
value:
|
||||
_default: "1"
|
||||
- name: COUNT_RUNNING_WORKERS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: COUNT_CANCELING_WORKERS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: COUNT_HANDLE_JOB_WORKERS
|
||||
value:
|
||||
_default: "1"
|
||||
- name: BIM_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: BIM_API_V2_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: PDM_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: COMPARISONS_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: WORKSPACE_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DEFAULT_NODE_SELECTOR_KEY
|
||||
value:
|
||||
_default: dedicated
|
||||
- name: DEFAULT_NODE_SELECTOR_VALUE
|
||||
value:
|
||||
_default: processing-ligh
|
||||
- name: JOBS_NAMESPACE
|
||||
value:
|
||||
_default: workflow
|
||||
- name: ISSUE_API_DEBUG
|
||||
value:
|
||||
_default: "0"
|
||||
- name: RABBITMQ_CREATE_EXCHANGE
|
||||
value:
|
||||
_default: autodesk.inputMessage
|
||||
- name: RABBITMQ_CANCEL_EXCHANGE
|
||||
value:
|
||||
_default: autodesk.cancelMessage
|
||||
- name: RABBITMQ_CREATE_ROUTING_KEY
|
||||
value:
|
||||
_default: converting
|
||||
- name: RABBITMQ_CANCEL_TOPIC
|
||||
value:
|
||||
_default: cancel
|
||||
- name: RABBITMQ_COMPLETENESS_EXCHANGE
|
||||
value:
|
||||
_default: autodesk.outputMessage
|
||||
- name: RABBITMQ_COMPLETENESS_TOPIC
|
||||
value:
|
||||
_default: output
|
||||
- name: CONTROL_PLANE_PERIOD
|
||||
value:
|
||||
_default: 10s
|
||||
- name: WORKFLOW_PRIORITY
|
||||
value:
|
||||
_default: high
|
||||
|
||||
secretEnvs:
|
||||
- name: RABBITMQ_USER
|
||||
secretName:
|
||||
_default: workflow-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASS
|
||||
secretName:
|
||||
_default: workflow-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_DB
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: database
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
88
apps/processing/ugok/frontend.yaml
Normal file
88
apps/processing/ugok/frontend.yaml
Normal file
@ -0,0 +1,88 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: workflow
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.9"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
frontend:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/workflows-frontend:ugok2_85f6ce2c
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: frontend
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8080
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: frontend-svc
|
||||
|
||||
type:
|
||||
_default: ClusterIP
|
||||
|
||||
port:
|
||||
_default: 8080
|
||||
|
||||
targetPort:
|
||||
_default: 8080
|
||||
|
||||
portName:
|
||||
_default: http
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: regcred
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
14
apps/processing/ugok/kustomization.yaml
Normal file
14
apps/processing/ugok/kustomization.yaml
Normal file
@ -0,0 +1,14 @@
|
||||
---
|
||||
# processing разворачивается в ugok в неймспейс workflow (как и в wb).
|
||||
# base — vault-native (secretEnvs через Vault Agent), а в ugok Vault вообще
|
||||
# не используется (весь дамп кластера — ни одной vault.hashicorp.com
|
||||
# аннотации), поэтому не наследуем base, а собираем отдельные standalone
|
||||
# HelmRelease с обычными secretEnvs — по образцу apps/processing/wb/engine.yaml.
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: workflow
|
||||
resources:
|
||||
- engine.yaml
|
||||
- engine-low.yaml
|
||||
- frontend.yaml
|
||||
- workflows-api.yaml
|
||||
132
apps/processing/ugok/workflows-api.yaml
Normal file
132
apps/processing/ugok/workflows-api.yaml
Normal file
@ -0,0 +1,132 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: workflows-api
|
||||
namespace: workflow
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.9"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
backend:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/workflows-api:prod_e963403f
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: workflows-api
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8080
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: workflows-api-service
|
||||
|
||||
type:
|
||||
_default: ClusterIP
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
targetPort:
|
||||
_default: 8080
|
||||
|
||||
portName:
|
||||
_default: http
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: regcred
|
||||
|
||||
envs:
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "3"
|
||||
- name: HTTP_HOST
|
||||
value:
|
||||
_default: 0.0.0.0:8080
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: S3_SERVICE_ACCOUNT
|
||||
value:
|
||||
_default: /etc/sarex/yc-s3/yc-s3-service-account.json
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: POSTGRES_SSL_USE
|
||||
value:
|
||||
_default: "0"
|
||||
|
||||
secretEnvs:
|
||||
- name: PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: password
|
||||
- name: POSTGRES_DB
|
||||
secretName:
|
||||
_default: workflow-postgresql-secret
|
||||
secretKey: database
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
11
apps/projects/ugok/kustomization.yaml
Normal file
11
apps/projects/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: projects
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
20
apps/projects/ugok/patch.yaml
Normal file
20
apps/projects/ugok/patch.yaml
Normal file
@ -0,0 +1,20 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: projects
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/project-frontend-app:ugok1_7c96b54d
|
||||
deployment:
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: 100m
|
||||
memory:
|
||||
_default: 100Mi
|
||||
11
apps/remarks/ugok/kustomization.yaml
Normal file
11
apps/remarks/ugok/kustomization.yaml
Normal file
@ -0,0 +1,11 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: remarks
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
13
apps/remarks/ugok/patch.yaml
Normal file
13
apps/remarks/ugok/patch.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: remarks
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/remarks-frontend:contour_1bed3986
|
||||
19
apps/rfi/ugok/kustomization.yaml
Normal file
19
apps/rfi/ugok/kustomization.yaml
Normal file
@ -0,0 +1,19 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: rfi
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-celery.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: celery
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
98
apps/rfi/ugok/patch-backend.yaml
Normal file
98
apps/rfi/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,98 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: rfi
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:production_d1e2e80d
|
||||
envs:
|
||||
- name: JWT_AUTH_ENABLE
|
||||
value:
|
||||
_default: "True"
|
||||
- name: NOTIFICATIONS_ENABLE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: NOTIFICATIONS_EMAIL_FROM
|
||||
value:
|
||||
_default: hello@sarex.io
|
||||
- name: NOTIFICATIONS_SERVICE_URL
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/rfi
|
||||
- name: SAREX_BACKEND_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: EAV_URL
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: GATEWAY_URL
|
||||
value:
|
||||
_default: http://pdm-api.documentations.svc.cluster.local:8080
|
||||
- name: RABBITMQ_PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: RABBITMQ_HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
secretEnvs:
|
||||
- name: DJANGO_SECRET_KEY
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: django_secret_key
|
||||
- name: DB_HOST
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: host
|
||||
- name: DB_PORT
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DB_NAME
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DB_USER
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DB_PASSWORD
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: password
|
||||
- name: SAREX_BACKEND_AUTH
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: token
|
||||
- name: YC_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: access_key
|
||||
- name: YC_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YC_S3_BUCKET_NAME
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: bucket
|
||||
- name: YC_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: rfi-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: rfi-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: rfi-rabbitmq-secret
|
||||
secretKey: password
|
||||
103
apps/rfi/ugok/patch-celery.yaml
Normal file
103
apps/rfi/ugok/patch-celery.yaml
Normal file
@ -0,0 +1,103 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: celery
|
||||
namespace: rfi
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
celery:
|
||||
image:
|
||||
name:
|
||||
_default: 10.4.10.187:80/library/rfi-backend:production_79888e2f
|
||||
deployment:
|
||||
command:
|
||||
_default: ["uv"]
|
||||
args:
|
||||
_default: ["run", "celery", "-A", "config", "worker", "-l", "info"]
|
||||
envs:
|
||||
- name: JWT_AUTH_ENABLE
|
||||
value:
|
||||
_default: "True"
|
||||
- name: NOTIFICATIONS_ENABLE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: NOTIFICATIONS_EMAIL_FROM
|
||||
value:
|
||||
_default: hello@sarex.io
|
||||
- name: NOTIFICATIONS_SERVICE_URL
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/rfi
|
||||
- name: SAREX_BACKEND_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: EAV_URL
|
||||
value:
|
||||
_default: http://eav-service.eav.svc.cluster.local:8000
|
||||
- name: GATEWAY_URL
|
||||
value:
|
||||
_default: http://pdm-api.documentations.svc.cluster.local:8080
|
||||
- name: RABBITMQ_PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: RABBITMQ_HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
secretEnvs:
|
||||
- name: DJANGO_SECRET_KEY
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: django_secret_key
|
||||
- name: DB_HOST
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: host
|
||||
- name: DB_PORT
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: port
|
||||
- name: DB_NAME
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: database
|
||||
- name: DB_USER
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DB_PASSWORD
|
||||
secretName:
|
||||
_default: rfi-postgresql-secret
|
||||
secretKey: password
|
||||
- name: SAREX_BACKEND_AUTH
|
||||
secretName:
|
||||
_default: django-secret
|
||||
secretKey: token
|
||||
- name: YC_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: access_key
|
||||
- name: YC_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YC_S3_BUCKET_NAME
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: bucket
|
||||
- name: YC_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: rfi-s3-secret
|
||||
secretKey: endpoint
|
||||
- name: RABBITMQ_VHOST
|
||||
secretName:
|
||||
_default: rfi-rabbitmq-secret
|
||||
secretKey: vhost
|
||||
- name: RABBITMQ_USERNAME
|
||||
secretName:
|
||||
_default: rfi-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: RABBITMQ_PASSWORD
|
||||
secretName:
|
||||
_default: rfi-rabbitmq-secret
|
||||
secretKey: password
|
||||
13
apps/rfi/ugok/patch-frontend.yaml
Normal file
13
apps/rfi/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: rfi
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/rfi-frontend:production_b827756f_wb
|
||||
6
apps/stamp-verification/ugok/kustomization.yaml
Normal file
6
apps/stamp-verification/ugok/kustomization.yaml
Normal file
@ -0,0 +1,6 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: stamp-verification
|
||||
resources:
|
||||
- ../base
|
||||
184
apps/subscriptions/ugok/backend.yaml
Normal file
184
apps/subscriptions/ugok/backend.yaml
Normal file
@ -0,0 +1,184 @@
|
||||
---
|
||||
# subscriptions/base — сырой Deployment (не universal-chart), а wb использует
|
||||
# отдельный standalone HelmRelease (apps/subscriptions/wb/backend.yaml), не
|
||||
# наследуя base. Для ugok — та же схема, значения из дампа кластера.
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: sarex-subscriptions
|
||||
namespace: subscriptions
|
||||
|
||||
spec:
|
||||
interval: 10m
|
||||
|
||||
chart:
|
||||
spec:
|
||||
chart: universal-chart
|
||||
version: "0.1.7"
|
||||
sourceRef:
|
||||
kind: HelmRepository
|
||||
name: yc-oci-charts
|
||||
namespace: flux-system
|
||||
interval: 10m
|
||||
|
||||
install:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
upgrade:
|
||||
remediation:
|
||||
retries: 3
|
||||
|
||||
values:
|
||||
global:
|
||||
env: _default
|
||||
|
||||
services:
|
||||
sarex-subscriptions:
|
||||
enabled: true
|
||||
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/subscriptions:prod_a50928e1
|
||||
pullPolicy:
|
||||
_default: IfNotPresent
|
||||
|
||||
deployment:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: sarex-subscriptions
|
||||
|
||||
replicaCount:
|
||||
_default: 1
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
probes:
|
||||
liveness:
|
||||
enabled: false
|
||||
readiness:
|
||||
enabled: false
|
||||
|
||||
service:
|
||||
enabled: true
|
||||
|
||||
name:
|
||||
_default: backend-svc
|
||||
|
||||
type:
|
||||
_default: ClusterIP
|
||||
|
||||
port:
|
||||
_default: 8000
|
||||
|
||||
targetPort:
|
||||
_default: 8000
|
||||
|
||||
portName:
|
||||
_default: http
|
||||
|
||||
imagePullSecrets:
|
||||
enabled:
|
||||
_default: true
|
||||
name:
|
||||
_default: regcred
|
||||
|
||||
volumes:
|
||||
_default:
|
||||
- name: uwsgi-configmap
|
||||
mountPath:
|
||||
_default: /opt/server/uwsgi.ini
|
||||
subPath:
|
||||
_default: uwsgi.ini
|
||||
readOnly:
|
||||
_default: true
|
||||
configMap:
|
||||
name:
|
||||
_default: uwsgi-configmap
|
||||
items:
|
||||
- key: uwsgi.ini
|
||||
path:
|
||||
_default: uwsgi.ini
|
||||
|
||||
- name: django-configmap
|
||||
mountPath:
|
||||
_default: /server/config/settings/production.py
|
||||
subPath:
|
||||
_default: production.py
|
||||
readOnly:
|
||||
_default: true
|
||||
configMap:
|
||||
name:
|
||||
_default: django-configmap
|
||||
items:
|
||||
- key: production.py
|
||||
path:
|
||||
_default: production.py
|
||||
|
||||
envs:
|
||||
- name: DATABASE_HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: DATABASE_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: DATABASE_NAME
|
||||
value:
|
||||
_default: subscriptions_db
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: SYSTEM_LOG_HOST
|
||||
value:
|
||||
_default: http://api-service.system-log
|
||||
- name: USER_SERVICE_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: IS_USE_TELEGRAM
|
||||
value:
|
||||
_default: "false"
|
||||
- name: IS_MAILGUN_USE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: SMTP_EMAIL_FROM
|
||||
value:
|
||||
_default: sarex@rb.ru
|
||||
- name: SMTP_EMAIL_HOST
|
||||
value:
|
||||
_default: mail.rb.ru
|
||||
- name: SMTP_EMAIL_PORT
|
||||
value:
|
||||
_default: "465"
|
||||
|
||||
secretEnvs:
|
||||
- name: DATABASE_USER
|
||||
secretName:
|
||||
_default: subscriptions-postgresql-secret
|
||||
secretKey: username
|
||||
- name: DATABASE_PASSWORD
|
||||
secretName:
|
||||
_default: subscriptions-postgresql-secret
|
||||
secretKey: password
|
||||
- name: YC_S3_ACCESS_KEY_ID
|
||||
secretName:
|
||||
_default: subscriptions-s3-secret
|
||||
secretKey: access_key
|
||||
- name: YC_S3_SECRET_ACCESS_KEY
|
||||
secretName:
|
||||
_default: subscriptions-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: YC_S3_BUCKET_NAME
|
||||
secretName:
|
||||
_default: subscriptions-s3-secret
|
||||
secretKey: bucket
|
||||
- name: YC_S3_ENDPOINT_URL
|
||||
secretName:
|
||||
_default: subscriptions-s3-secret
|
||||
secretKey: endpoint
|
||||
|
||||
commitSha: ""
|
||||
gitlabUri: ""
|
||||
gitlabJobUrl: ""
|
||||
owner: ""
|
||||
6
apps/subscriptions/ugok/kustomization.yaml
Normal file
6
apps/subscriptions/ugok/kustomization.yaml
Normal file
@ -0,0 +1,6 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: subscriptions
|
||||
resources:
|
||||
- backend.yaml
|
||||
15
apps/system-log/ugok/kustomization.yaml
Normal file
15
apps/system-log/ugok/kustomization.yaml
Normal file
@ -0,0 +1,15 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: system-log
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-api.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: api
|
||||
- path: patch-worker.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: worker
|
||||
96
apps/system-log/ugok/patch-api.yaml
Normal file
96
apps/system-log/ugok/patch-api.yaml
Normal file
@ -0,0 +1,96 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: api
|
||||
namespace: system-log
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
api:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/system-log:prod_08141511
|
||||
envs:
|
||||
- name: KAFKA_ENABLE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: KAFKA_BROKERS
|
||||
value:
|
||||
_default: localhost:9091
|
||||
- name: KAFKA_GROUP
|
||||
value:
|
||||
_default: system-log-stage
|
||||
- name: KAFKA_CLIENT_ID
|
||||
value:
|
||||
_default: system-log-stage
|
||||
- name: KAFKA_USE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: KAFKA_ENABLE_LOGGING
|
||||
value:
|
||||
_default: "0"
|
||||
- name: KAFKA_TOPIC
|
||||
value:
|
||||
_default: topic
|
||||
- name: APP_NAME
|
||||
value:
|
||||
_default: system_log
|
||||
- name: APP_VERSION
|
||||
value:
|
||||
_default: 0.0.1
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: INFO
|
||||
- name: HTTP_HOST
|
||||
value:
|
||||
_default: 0.0.0.0
|
||||
- name: HTTP_PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: NAMESPACE
|
||||
value:
|
||||
_default: system-log
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_DB
|
||||
value:
|
||||
_default: system_log_db
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "3"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
secretEnvs:
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: system-log-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: system-log-postgresql-secret
|
||||
secretKey: password
|
||||
- name: KAFKA_USERNAME
|
||||
secretName:
|
||||
_default: ya-kafka-secret
|
||||
secretKey: username
|
||||
- name: KAFKA_PASSWORD
|
||||
secretName:
|
||||
_default: ya-kafka-secret
|
||||
secretKey: password
|
||||
- name: KAFKA_PEM_CERT
|
||||
secretName:
|
||||
_default: yc-kafka-certificate
|
||||
secretKey: certificate
|
||||
- name: KAFKA_PEM_PATH
|
||||
secretName:
|
||||
_default: yc-kafka-certificate
|
||||
secretKey: certificate
|
||||
70
apps/system-log/ugok/patch-worker.yaml
Normal file
70
apps/system-log/ugok/patch-worker.yaml
Normal file
@ -0,0 +1,70 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: worker
|
||||
namespace: system-log
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
worker:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/system_log_worker:de6a0147d285afa273e85c0f074c8b6049d03a32
|
||||
envs:
|
||||
- name: APP_NAME
|
||||
value:
|
||||
_default: system_log
|
||||
- name: APP_VERSION
|
||||
value:
|
||||
_default: 0.0.1
|
||||
- name: LOG_LEVEL
|
||||
value:
|
||||
_default: INFO
|
||||
- name: HTTP_HOST
|
||||
value:
|
||||
_default: 0.0.0.0
|
||||
- name: HTTP_PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: NAMESPACE
|
||||
value:
|
||||
_default: system-log
|
||||
- name: DOCUMENTATIONS_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: POSTGRES_ADDRESS
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: POSTGRES_PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: POSTGRES_DB
|
||||
value:
|
||||
_default: system_log_db
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "3"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
secretEnvs:
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: system-log-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: system-log-postgresql-secret
|
||||
secretKey: password
|
||||
- name: SUPER_USERNAME
|
||||
secretName:
|
||||
_default: superuser
|
||||
secretKey: username
|
||||
- name: SUPER_PASSWORD
|
||||
secretName:
|
||||
_default: superuser
|
||||
secretKey: password
|
||||
19
apps/transmittal/ugok/kustomization.yaml
Normal file
19
apps/transmittal/ugok/kustomization.yaml
Normal file
@ -0,0 +1,19 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: transmittal
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-worker.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: worker
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
249
apps/transmittal/ugok/patch-backend.yaml
Normal file
249
apps/transmittal/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,249 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: transmittal
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_4e0db600
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: "1"
|
||||
memory:
|
||||
_default: 1Gi
|
||||
envs:
|
||||
- name: TRANSMITTAL_SERVICE_APP__NAME
|
||||
value:
|
||||
_default: Transmittal Service
|
||||
- name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL
|
||||
value:
|
||||
_default: ERROR
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://backend-service.flows.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "30"
|
||||
- name: TRANSMITTAL_SERVICE_APP__HOST
|
||||
value:
|
||||
_default: https://lk.srx.wb.ru:30443/transmittal
|
||||
- name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT
|
||||
value:
|
||||
_default: prod
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS
|
||||
value:
|
||||
_default: '["*"]'
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS
|
||||
value:
|
||||
_default: '["*"]'
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS
|
||||
value:
|
||||
_default: '["*"]'
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS
|
||||
value:
|
||||
_default: "true"
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__HOST
|
||||
value:
|
||||
_default: 0.0.0.0
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__ENABLE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__HOST
|
||||
value:
|
||||
_default: http://signoz-otel-collector-external.signoz.svc.cluster.local:4317
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME
|
||||
value:
|
||||
_default: backend.transmittals-prod
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__INSECURE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE
|
||||
value:
|
||||
_default: verify-full
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH
|
||||
value:
|
||||
_default: /opt/.postgresql/root.crt
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL
|
||||
value:
|
||||
_default: info
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS
|
||||
value:
|
||||
_default: "2"
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH
|
||||
value:
|
||||
_default: ""
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__NAME
|
||||
value:
|
||||
_default: transmittal_db
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__VHOST
|
||||
value:
|
||||
_default: transmittal
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT
|
||||
value:
|
||||
_default: "50"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME
|
||||
value:
|
||||
_default: ru-central1
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY
|
||||
value:
|
||||
_default: "true"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET
|
||||
value:
|
||||
_default: transmittal-storage
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT
|
||||
value:
|
||||
_default: 10.49.10.90:9000
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL
|
||||
value:
|
||||
_default: http://export-project-service.django.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT
|
||||
value:
|
||||
_default: "50"
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL
|
||||
value:
|
||||
_default: http://marks-service.documentations.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT
|
||||
value:
|
||||
_default: "50"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL
|
||||
value:
|
||||
_default: https://api.mailgun.net/v3/mg.sarex.io
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
|
||||
value:
|
||||
_default: hello@wb.io
|
||||
secretEnvs:
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__USER
|
||||
secretName:
|
||||
_default: transmittal-postgresql-secret
|
||||
secretKey: username
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__PASSWORD
|
||||
secretName:
|
||||
_default: transmittal-postgresql-secret
|
||||
secretKey: password
|
||||
- name: TRANSMITTAL_SERVICE_AUTH__PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASIC_AUTH_ENCODED
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY
|
||||
secretName:
|
||||
_default: transmittal-s3-secret
|
||||
secretKey: access_key
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY
|
||||
secretName:
|
||||
_default: transmittal-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__USER
|
||||
secretName:
|
||||
_default: transmittal-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__PASSWORD
|
||||
secretName:
|
||||
_default: transmittal-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__API_KEY
|
||||
secretName:
|
||||
_default: mailgun-cred
|
||||
secretKey: api_key
|
||||
19
apps/transmittal/ugok/patch-frontend.yaml
Normal file
19
apps/transmittal/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,19 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: transmittal
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-frontend:wb1_dbf61443
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: 100m
|
||||
memory:
|
||||
_default: 100Mi
|
||||
252
apps/transmittal/ugok/patch-worker.yaml
Normal file
252
apps/transmittal/ugok/patch-worker.yaml
Normal file
@ -0,0 +1,252 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: worker
|
||||
namespace: transmittal
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
worker:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_4e0db600
|
||||
deployment:
|
||||
command:
|
||||
_default: ["taskiq", "worker", "--no-parse", "transmittal_service.tasks.broker:broker", "transmittal_service.tasks.transmittal.tasks", "transmittal_service.tasks.email.tasks"]
|
||||
resources:
|
||||
requests:
|
||||
cpu:
|
||||
_default: "1"
|
||||
memory:
|
||||
_default: 1Gi
|
||||
envs:
|
||||
- name: TRANSMITTAL_SERVICE_APP__NAME
|
||||
value:
|
||||
_default: Transmittal Service
|
||||
- name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL
|
||||
value:
|
||||
_default: ERROR
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://backend-service.flows.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "30"
|
||||
- name: TRANSMITTAL_SERVICE_APP__HOST
|
||||
value:
|
||||
_default: https://sarex.ugok.lan/transmittal
|
||||
- name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT
|
||||
value:
|
||||
_default: prod
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS
|
||||
value:
|
||||
_default: '["*"]'
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS
|
||||
value:
|
||||
_default: '["*"]'
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS
|
||||
value:
|
||||
_default: '["*"]'
|
||||
- name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS
|
||||
value:
|
||||
_default: "true"
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__HOST
|
||||
value:
|
||||
_default: 0.0.0.0
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__PORT
|
||||
value:
|
||||
_default: "8000"
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__ENABLE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__HOST
|
||||
value:
|
||||
_default: http://signoz-otel-collector-external.signoz.svc.cluster.local:4317
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME
|
||||
value:
|
||||
_default: backend.transmittals-prod
|
||||
- name: TRANSMITTAL_SERVICE_OTEL__INSECURE
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE
|
||||
value:
|
||||
_default: verify-full
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH
|
||||
value:
|
||||
_default: /opt/.postgresql/root.crt
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL
|
||||
value:
|
||||
_default: info
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS
|
||||
value:
|
||||
_default: "2"
|
||||
- name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH
|
||||
value:
|
||||
_default: ""
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__HOST
|
||||
value:
|
||||
_default: postgres-service
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__PORT
|
||||
value:
|
||||
_default: "5432"
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__NAME
|
||||
value:
|
||||
_default: transmittal_db
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__VHOST
|
||||
value:
|
||||
_default: transmittal
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__HOST
|
||||
value:
|
||||
_default: rabbitmq.rabbitmq.svc.cluster.local
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__PORT
|
||||
value:
|
||||
_default: "5672"
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://resources-service.resources.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT
|
||||
value:
|
||||
_default: "50"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME
|
||||
value:
|
||||
_default: ru-central1
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY
|
||||
value:
|
||||
_default: "true"
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET
|
||||
value:
|
||||
_default: transmittal-storage
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT
|
||||
value:
|
||||
_default: 10.49.10.90:9000
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL
|
||||
value:
|
||||
_default: "false"
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL
|
||||
value:
|
||||
_default: http://export-project-service.django.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT
|
||||
value:
|
||||
_default: "50"
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL
|
||||
value:
|
||||
_default: http://marks-service.documentations.svc.cluster.local:8000
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT
|
||||
value:
|
||||
_default: "50"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL
|
||||
value:
|
||||
_default: https://api.mailgun.net/v3/mg.sarex.io
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS
|
||||
value:
|
||||
_default: "10"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT
|
||||
value:
|
||||
_default: "15"
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
|
||||
value:
|
||||
_default: hello@t.io
|
||||
secretEnvs:
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__USER
|
||||
secretName:
|
||||
_default: transmittal-postgresql-secret
|
||||
secretKey: username
|
||||
- name: TRANSMITTAL_SERVICE_DATABASE__PASSWORD
|
||||
secretName:
|
||||
_default: transmittal-postgresql-secret
|
||||
secretKey: password
|
||||
- name: TRANSMITTAL_SERVICE_AUTH__PUBLIC_KEY
|
||||
secretName:
|
||||
_default: public-key
|
||||
secretKey: key
|
||||
- name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASIC_AUTH_ENCODED
|
||||
secretName:
|
||||
_default: django-auth
|
||||
secretKey: key
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY
|
||||
secretName:
|
||||
_default: transmittal-s3-secret
|
||||
secretKey: access_key
|
||||
- name: TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY
|
||||
secretName:
|
||||
_default: transmittal-s3-secret
|
||||
secretKey: secret_key
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__USER
|
||||
secretName:
|
||||
_default: transmittal-rabbitmq-secret
|
||||
secretKey: username
|
||||
- name: TRANSMITTAL_SERVICE_RABBITMQ__PASSWORD
|
||||
secretName:
|
||||
_default: transmittal-rabbitmq-secret
|
||||
secretKey: password
|
||||
- name: TRANSMITTAL_SERVICE_MAILGUN__API_KEY
|
||||
secretName:
|
||||
_default: mailgun-cred
|
||||
secretKey: api_key
|
||||
15
apps/workspaces/ugok/kustomization.yaml
Normal file
15
apps/workspaces/ugok/kustomization.yaml
Normal file
@ -0,0 +1,15 @@
|
||||
---
|
||||
apiVersion: kustomize.config.k8s.io/v1beta1
|
||||
kind: Kustomization
|
||||
namespace: workspaces
|
||||
resources:
|
||||
- ../base
|
||||
patches:
|
||||
- path: patch-backend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: backend
|
||||
- path: patch-frontend.yaml
|
||||
target:
|
||||
kind: HelmRelease
|
||||
name: frontend
|
||||
78
apps/workspaces/ugok/patch-backend.yaml
Normal file
78
apps/workspaces/ugok/patch-backend.yaml
Normal file
@ -0,0 +1,78 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: backend
|
||||
namespace: workspaces
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
backend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/workspaces:production_bfd943b2
|
||||
envs:
|
||||
- name: POSTGRES_POOL_SIZE
|
||||
value:
|
||||
_default: "3"
|
||||
- name: BUNDLES_RETRY_COUNT
|
||||
value:
|
||||
_default: "5"
|
||||
- name: BUNDLES_NJOBS
|
||||
value:
|
||||
_default: "5"
|
||||
- name: API_ADDRESS
|
||||
value:
|
||||
_default: 0.0.0.0:8000
|
||||
- name: NAMESPACE
|
||||
value:
|
||||
_default: workspaces
|
||||
- name: ENABLE_SQL_QUERY
|
||||
value:
|
||||
_default: "0"
|
||||
- name: ENABLE_SSL
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DOCUMENTATION_HOST
|
||||
value:
|
||||
_default: http://documentations-api.documentations.svc.cluster.local:8080
|
||||
- name: DOCUMENTATION_LOGGER_FEATURE
|
||||
value:
|
||||
_default: "0"
|
||||
- name: DOCUMENTATION_ORIGINATOR
|
||||
value:
|
||||
_default: prod_ws
|
||||
- name: ENVIRONMENT
|
||||
value:
|
||||
_default: prod
|
||||
- name: DJANGO_HOST
|
||||
value:
|
||||
_default: http://backend.django.svc.cluster.local:8000
|
||||
- name: DJANGO_ORIGINATOR
|
||||
value:
|
||||
_default: docs_prod
|
||||
secretEnvs:
|
||||
- name: POSTGRES_ADDRESS
|
||||
secretName:
|
||||
_default: workspaces-postgresql-secret
|
||||
secretKey: hostname
|
||||
- name: POSTGRES_PORT
|
||||
secretName:
|
||||
_default: workspaces-postgresql-secret
|
||||
secretKey: port
|
||||
- name: POSTGRES_DB
|
||||
secretName:
|
||||
_default: workspaces-postgresql-secret
|
||||
secretKey: database
|
||||
- name: POSTGRES_USER
|
||||
secretName:
|
||||
_default: workspaces-postgresql-secret
|
||||
secretKey: username
|
||||
- name: POSTGRES_PASSWORD
|
||||
secretName:
|
||||
_default: workspaces-postgresql-secret
|
||||
secretKey: password
|
||||
- name: DJANGO_BASIC_AUTH
|
||||
secretName:
|
||||
_default: workspaces-django-auth
|
||||
secretKey: key
|
||||
13
apps/workspaces/ugok/patch-frontend.yaml
Normal file
13
apps/workspaces/ugok/patch-frontend.yaml
Normal file
@ -0,0 +1,13 @@
|
||||
---
|
||||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||||
kind: HelmRelease
|
||||
metadata:
|
||||
name: frontend
|
||||
namespace: workspaces
|
||||
spec:
|
||||
values:
|
||||
services:
|
||||
frontend:
|
||||
image:
|
||||
name:
|
||||
_default: cr.yandex/crp3ccidau046kdj8g9q/workspaces-v2-frontend:contour_2a4ce3fd
|
||||
@ -5,3 +5,37 @@ resources:
|
||||
- ./helm-repositories.yaml
|
||||
|
||||
- ../../infrastructure/vault/ugok
|
||||
|
||||
# # apps
|
||||
# - ../../apps/ams-sync/ugok
|
||||
# - ../../apps/attachments/ugok
|
||||
# - ../../apps/bim/ugok
|
||||
# - ../../apps/checklists/ugok
|
||||
# - ../../apps/contracts/ugok
|
||||
# - ../../apps/control-interface/ugok
|
||||
# - ../../apps/cross-section/ugok
|
||||
# - ../../apps/document-link/ugok
|
||||
# - ../../apps/drawings/ugok
|
||||
# - ../../apps/eav/ugok
|
||||
# - ../../apps/faas/ugok
|
||||
# - ../../apps/inspections/ugok
|
||||
# - ../../apps/mapper/ugok
|
||||
# - ../../apps/measurements/ugok
|
||||
# - ../../apps/message-hub/ugok
|
||||
# - ../../apps/prescriptions/ugok
|
||||
# - ../../apps/projects/ugok
|
||||
# - ../../apps/remarks/ugok
|
||||
# - ../../apps/stamp-verification/ugok
|
||||
# - ../../apps/subscriptions/ugok
|
||||
# - ../../apps/comparisons/ugok
|
||||
# - ../../apps/flows/ugok
|
||||
# - ../../apps/rfi/ugok
|
||||
# - ../../apps/transmittal/ugok
|
||||
# - ../../apps/notes/ugok
|
||||
# - ../../apps/system-log/ugok
|
||||
# - ../../apps/workspaces/ugok
|
||||
# - ../../apps/issues/ugok
|
||||
# - ../../apps/pm/ugok
|
||||
# - ../../apps/documentations/ugok
|
||||
# - ../../apps/django/ugok
|
||||
# - ../../apps/processing/ugok
|
||||
|
||||
Loading…
Reference in New Issue
Block a user