Commit Graph

524 Commits

Author SHA1 Message Date
9391ea9c82 add vault to wb 2026-08-11 12:23:55 +03:00
c55bec5b5d ++ fix acme http01 challenges on external-stage, route all domains through istio instead of the dead nginx solver 2026-08-05 17:24:04 +03:00
emelinda
9da34bb9cc Re-enable Django app in yc-ecp cluster Kustomization file. 2026-08-05 02:12:32 +03:00
emelinda
8d9e1d3d9e Comment out Django app in yc-ecp cluster Kustomization file. 2026-08-05 02:11:22 +03:00
emelinda
218d233eb7 Add Django frontend app to yc-ecp: define namespace, configure HelmRelease with chart and deployment details, update Istio configuration, and include in cluster Kustomization 2026-08-05 01:58:35 +03:00
emelinda
64412e1b94 Add Measurements app to yc-ecp: define namespace, update HelmRelease with chart details, and include in cluster Kustomization 2026-08-05 00:35:29 +03:00
emelinda
4abcd33cd5 Comment out Measurements app in yc-ecp cluster Kustomization file. 2026-08-05 00:26:54 +03:00
emelinda
3a5b3b07e6 Add Measurements app to yc-ecp: define HelmRelease, configure Istio certificates, and update cluster Kustomization 2026-08-05 00:00:06 +03:00
emelinda
172e889f00 Add Kubernetes Dashboard configuration to yc-ecp: define HelmRelease, update Istio Gateway and VirtualService, and include in cluster Kustomization 2026-08-04 23:34:53 +03:00
emelinda
c4e6c079f7 Migrate cert-manager configuration to yc-ecp infrastructure directory with updated HelmRelease, ClusterIssuer, and Kustomization files. 2026-08-04 22:53:59 +03:00
emelinda
6e94f826c3 Migrate Istio and Vault configurations to separate yc-ecp infrastructure directories with updated HelmRelease and Kustomization files. 2026-08-04 22:34:42 +03:00
ivan
8a0eee6538 ++ 2026-08-03 20:41:38 +05:00
a4f1424403 ++ move uralmine service domains up one level 2026-08-03 10:56:18 +03:00
ivan
c7b749fd09 ++ 2026-07-31 12:55:03 +05:00
emelinda
2296dae803 Disable initChownData in Grafana configuration within Prometheus Stack. 2026-07-30 20:04:12 +03:00
emelinda
833652bbc3 Reduce Prometheus Stack timeout to 5m and set disableWait for install, upgrade, and rollback operations. 2026-07-30 19:51:19 +03:00
emelinda
86cbaceeb3 Reduce gotk-sync interval from 10m to 1m in Flux configuration. 2026-07-30 18:20:07 +03:00
emelinda
432fdf4c2e Update Istio configuration to rename Superset references to BI in host mappings 2026-07-30 18:17:53 +03:00
ivan
da9494b483 change charts 2026-07-30 19:42:35 +05:00
emelinda
7553651efd Update Grafana securityContext in Prometheus Stack to enforce non-root user settings 2026-07-30 17:23:31 +03:00
ivan
5726d02b62 ++ 2026-07-29 18:19:52 +05:00
ivan
73ec054bba ++ 2026-07-29 17:34:10 +05:00
ivan
76a3ba7d4e ++ 2026-07-28 19:15:38 +05:00
ivan
24521afd47 ++ 2026-07-28 19:10:02 +05:00
ivan
5c43502cba ++ 2026-07-28 17:05:43 +05:00
ivan
7bf12669d5 ++ 2026-07-28 15:19:32 +05:00
ivan
2bd1276cdb ++ 2026-07-25 21:18:11 +05:00
ivan
12e4d88957 ++ 2026-07-25 20:40:22 +05:00
ivan
377280b2fa ++ 2026-07-25 20:32:08 +05:00
d2ac44a245 ++ fix superset redis image 2026-07-22 13:50:01 +03:00
d8f9c4381d ++ fix superset env duplicates 2026-07-22 13:28:22 +03:00
46d0de18fb add ss + trino to wb 2026-07-22 13:10:48 +03:00
ivan
52ab310c65 ++ 2026-07-21 14:22:34 +05:00
446284bf4a remove bootstrap jobs form ugmk 2026-07-20 18:48:11 +03:00
emelinda
ccbfd63a08 Migrate attachments app to HelmRelease in d8-ugmk-prod, enable in kustomization, and update related configurations. Remove legacy namespace resource. 2026-07-18 21:43:49 +03:00
emelinda
3febe6382b Remove attachments app from d8-ugmk-prod kustomization and its namespace resource 2026-07-18 20:47:24 +03:00
emelinda
0d87e03126 add control-interface in d8-ugmk-prod 2026-07-15 18:42:26 +03:00
emelinda
06acc89567 remove control-interface in d8-ugmk-prod 2026-07-15 18:35:57 +03:00
emelinda
a8aeb7df0e Migrate auth-flow app from raw manifest definitions to HelmRelease and add to d8-ugmk-prod kustomization. Remove deprecated deployment and service resources and update related configurations. 2026-07-15 18:04:32 +03:00
emelinda
0e0108ea52 Migrate remarks app from raw manifest definitions to HelmRelease and add to d8-ugmk-prod kustomization. Remove deprecated resources and update related configurations. 2026-07-15 17:55:40 +03:00
emelinda
68b2fc9eaf Migrate reviews app from raw manifest definitions to HelmRelease and add to d8-ugmk-prod kustomization. Remove deprecated resources and update related configurations. 2026-07-15 17:30:01 +03:00
emelinda
c46132f75c Migrate cross-section-static from raw manifest definitions to HelmRelease and add to d8-ugmk-prod kustomization. Remove deprecated resources and update related configurations. 2026-07-15 17:13:06 +03:00
emelinda
d60dc2a5e1 Enable attachments app in d8-ugmk-prod kustomization 2026-07-15 15:44:43 +03:00
emelinda
58c189cd69 Comment out attachments app in d8-ugmk-prod kustomization 2026-07-15 15:42:46 +03:00
6abde9cce2 ++ change infra domains 2026-07-15 14:53:57 +03:00
emelinda
8a350b4391 Restructure d8-ugmk-prod kustomization to directly include infrastructure resources instead of nested directory. 2026-07-15 14:41:59 +03:00
ivan
ed80fd33e6 ++ 2026-07-15 16:32:44 +05:00
63cdb767e6 ++ move ugmk infrastructure patches to overlays 2026-07-15 13:00:34 +03:00
52f90cb00c ++ clear postgresql chart node selector 2026-07-15 12:34:47 +03:00
b343438779 ++ move zitadel postgresql to master node 2026-07-15 12:26:52 +03:00
4b165fe6e1 ++ add deckhouse istio ingress and selfsigned tls 2026-07-15 12:07:54 +03:00
26f10ce34b ++ add istio routes for ugmk services 2026-07-15 11:50:31 +03:00
77b8c84b71 ++ move camunda databases external and scale down 2026-07-15 11:05:02 +03:00
67ad879aa3 ++ remove default sts selector from postgresql 2026-07-14 16:44:07 +03:00
576b67f566 ++ fix generic scheduling for postgresql and zitadel 2026-07-14 16:24:53 +03:00
089c125fa3 ++ fix postgresql namespace for zitadel 2026-07-14 16:17:43 +03:00
6beaa1bbbf ++ deploy zitadel to a dedicated postgresql 17 2026-07-14 16:04:32 +03:00
9f582bdc84 fuhrer fixes 2026-07-13 21:11:55 +03:00
7dba565792 ++ add d8 ugmk prod service infra 2026-07-13 20:32:32 +03:00
38b96ebecc ++ patch vault workloads to generic in d8-ugmk-prod 2026-07-13 17:26:31 +03:00
cb5ca1633c ++ pin vault to generic nodes in d8-ugmk-prod 2026-07-13 17:21:00 +03:00
097696fdb4 ++ disable istio injection for vault in d8-ugmk-prod 2026-07-13 17:13:35 +03:00
5dcd01daa4 ++ add d8-ugmk-prod flux bootstrap and vault 2026-07-13 17:06:40 +03:00
ivan
5516bd7074 ++ 2026-07-08 15:05:04 +05:00
6a111ccc18 ++ enable vault prometheus metrics 2026-07-01 17:10:16 +03:00
ivan
21052884cb ++ 2026-06-29 14:38:29 +05:00
c02e553ba4 ++ add otel istio tracing config 2026-06-24 15:25:48 +03:00
emelinda
ba6fe89549 Refactor yc-k8s-test infrastructure by splitting kustomization files into resource-specific directories. 2026-06-23 11:56:05 +03:00
7960ce5106 Fix brusnika kafka and rabbitmq dashboards 2026-06-18 13:04:37 +03:00
721f62270e Fix brusnika observability exporters and alerts 2026-06-18 12:26:04 +03:00
849e0bfd9e Tune brusnika stage CPU throttling alert 2026-06-18 11:18:22 +03:00
be808a600a Fix brusnika observability alerting and grafana secrets 2026-06-18 11:10:38 +03:00
c22151e766 Add explicit vault inject for brusnika prod openobserve 2026-06-17 21:49:03 +03:00
729b7abf05 Preserve vault inject annotations for openobserve 2026-06-17 21:42:24 +03:00
191cf8336d Disable istio injection for brusnika prod openobserve 2026-06-17 21:40:04 +03:00
9f93bd9761 Fix brusnika prod minio and openobserve rollout 2026-06-17 20:05:15 +03:00
7aa875282d Enable brusnika prod vm observability resources 2026-06-17 19:43:29 +03:00
d1d25f5587 Bootstrap brusnika prod observability CRDs first 2026-06-17 19:41:00 +03:00
b7b65a03c2 Add observability stack for brusnika prod 2026-06-17 19:35:39 +03:00
176445e9f9 Tune sanitizer postgres and bump workflow image 2026-06-16 17:15:05 +03:00
1c13a407a2 Move brusnika-stage vmalert to port 8880 2026-06-16 14:39:51 +03:00
1aa171b31b Use recreate strategy for brusnika-stage vmalert 2026-06-16 14:33:26 +03:00
28f0c78b43 Enable host network for brusnika-stage vmalert 2026-06-16 14:21:52 +03:00
be737a2ec6 Add stage Alertmanager notifier for brusnika-stage 2026-06-16 13:29:54 +03:00
531ef1256f Fix brusnika-stage PrometheusRule cluster labels 2026-06-16 13:17:45 +03:00
4fc24151ea Fix brusnika-stage vmstack alert routing 2026-06-16 13:10:38 +03:00
e75601354e Fix brusnika-stage alert labels 2026-06-16 12:47:27 +03:00
87d89c22f2 Guard YC Kafka silence alert window 2026-06-16 12:21:33 +03:00
c0162c7fa3 Use host network for brusnika-stage YC Kafka exporter 2026-06-16 12:08:27 +03:00
3c3ad8ea5a Patch YC Kafka exporter node selector 2026-06-16 12:03:51 +03:00
5735c7871d Pin brusnika-stage YC Kafka exporter to egress node 2026-06-16 12:00:13 +03:00
840bd2e544 Relax brusnika-stage YC Kafka exporter probes 2026-06-16 11:49:20 +03:00
7489bf07da Unblock brusnika-stage YC Kafka exporter release 2026-06-16 11:38:55 +03:00
69d07ba476 Add brusnika-stage YC Kafka exporter monitoring 2026-06-16 11:33:38 +03:00
1fd954fd68 Avoid waiting for sanitizer PostgreSQL rollout 2026-06-15 16:42:27 +03:00
6a8a43960c Tune sanitizer PostgreSQL probes 2026-06-15 16:35:26 +03:00
2ea18c8183 Fix brusnika-stage dashboard node variable queries 2026-06-15 15:42:03 +03:00
982638c5cb Fix brusnika-stage observability dashboard variables 2026-06-15 15:36:11 +03:00
c8e57ec88d Fix brusnika-stage observability dashboard scrapes 2026-06-15 15:21:49 +03:00
a86707c4b1 change kafka-exporter image 2026-06-15 14:42:52 +03:00