ivan
0398df0901
uralkal: camunda keycloak — Secret keycloak-keytab из sarex.keytab через secretGenerator
2026-11-05 12:50:53 +05:00
ivan
6855db88b8
uralkal: camunda keycloak — доверие корневому CA BER-CA1 для LDAPS к AD
...
ConfigMap uralkali-ca с PEM BER-CA1 монтируется в /opt/uralkali-ca,
KC_TRUSTSTORE_PATHS=/opt/uralkali-ca/ber-ca1.crt добавляет его в Truststore SPI
Keycloak 25 поверх системных корней, без пересборки образа.
2026-11-05 11:39:25 +05:00
ivan
e6392cbbfe
uralkal: camunda keycloak — keytab из Secret keycloak-keytab и krb5.conf для LOCAL.URALKALI.COM
2026-11-03 17:09:50 +05:00
e4e5e06aec
++ camunda legacy wait
2026-10-31 17:45:29 +03:00
9f2c6932d7
++ camunda timeout 30m
2026-10-31 15:21:43 +03:00
0037411aae
++ stand camunda via vault
2026-10-28 15:18:25 +03:00
957dc3aed1
++ es processing via postrenderer
2026-10-21 17:29:09 +03:00
1b2469a6ea
++ es on processing node
2026-10-21 17:19:40 +03:00
d5ebf66329
++ es heap and limits
2026-10-21 17:01:58 +03:00
0fc547c16f
++ optimize replicas via config
2026-10-21 16:52:28 +03:00
ac809510da
++ optimize zero replicas
2026-10-21 16:45:42 +03:00
57f3b8bee2
++ camunda public domains
2026-10-19 19:36:49 +03:00
0ad267ffb1
++ camunda no rollback
2026-10-19 16:42:47 +03:00
6361da35ec
++ camunda vk chart
2026-10-19 15:59:19 +03:00
4ce31d94aa
++ camunda ha zones
2026-10-19 15:54:55 +03:00
2961d1cad4
++ camunda node selector
2026-10-19 15:49:38 +03:00
04e07394bc
++ camunda vk prod
2026-10-19 15:31:38 +03:00
247a753f5d
++ camunda processing nodes
2026-10-07 15:06:31 +03:00
e23783997e
++ uralkal istio-config domains
2026-09-28 11:02:53 +03:00
69c45fc7f1
++ uralkal apps
2026-09-25 16:46:07 +03:00
d14b072432
++ vad camunda identity urls to flat sarex- scheme
2026-09-17 13:28:24 +03:00
2bbf786aa6
++ revert keycloak db password to allowed vault path
2026-08-26 14:17:25 +03:00
7b5f249581
++ read identity password from canonical vault key, drop staging secret
2026-08-26 14:03:22 +03:00
09b0d4e8d1
++ point keycloak db password at its own vault path
2026-08-26 12:53:12 +03:00
30e58fdc30
++ fix gateway wildcard and drop foreign domains
2026-08-26 12:32:46 +03:00
c38032e64e
++ add kafka camunda zitadel overlays for vad
2026-08-26 11:32:23 +03:00
c10d84861f
fix identity.fullURL for ugmk, was falling back to chart default identity.camunda.sarex.io instead of camunda-identity.sarex-k8s.uralmine.com
2026-08-07 14:43:35 +03:00
ivan
8a0eee6538
++
2026-08-03 20:41:38 +05:00
fb30bab0b8
++ prefix uralmine service domains with sarex
2026-08-03 11:06:10 +03:00
a4f1424403
++ move uralmine service domains up one level
2026-08-03 10:56:18 +03:00
6abde9cce2
++ change infra domains
2026-07-15 14:53:57 +03:00
63cdb767e6
++ move ugmk infrastructure patches to overlays
2026-07-15 13:00:34 +03:00
emelinda
ba6fe89549
Refactor yc-k8s-test infrastructure by splitting kustomization files into resource-specific directories.
2026-06-23 11:56:05 +03:00
79a4ff4c9b
add vault support
2026-04-15 17:53:46 +03:00
ce4857491a
add vault support
2026-04-15 17:43:35 +03:00
b836c4e492
add vault support
2026-04-15 17:30:03 +03:00
bcb7aab9fe
add vault support
2026-04-15 16:56:02 +03:00
30b3854bd3
add camunda
2026-04-09 18:31:30 +03:00
80ed29036d
add camunda
2026-04-09 18:28:18 +03:00
36f493c9ed
add camunda
2026-04-09 18:18:35 +03:00
b4a1d7714c
add camunda
2026-04-09 18:06:29 +03:00
ca7416f986
add camunda
2026-04-09 17:58:37 +03:00
7fe9987241
update camunda chart version and remove postrenderer workaround
2026-04-09 17:45:33 +03:00
645ba91169
add camunda
2026-04-09 16:44:32 +03:00