sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,277 Commits 8 Branches 1 Tag 8 MiB
4d01736e8d
Commit Graph

1277 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
ivan
4d01736e8d ++ 2026-09-07 16:20:15 +05:00
ivan
3612f582a8 ++ 2026-09-07 16:15:16 +05:00
ivan
8905e3fab4 ++ 2026-09-07 16:03:55 +05:00
ivan
376f9f6c08 ++ 2026-09-07 13:52:56 +05:00
ivan
451ad6e472 ++ 2026-09-07 13:34:00 +05:00
ivan
1d3307f5a5 ++ 2026-09-04 17:16:19 +05:00
ivan
a191e35658 ++ 2026-09-03 13:01:19 +05:00
Kochetkov S
7c2cc383c1 ++ istio solver for stuck cert domains 2026-09-02 13:13:22 +03:00
ivan
26c05888f6 ++ 2026-09-02 14:10:34 +05:00
ivan
510cf875f4 ++ 2026-09-02 13:24:41 +05:00
Kochetkov S
d37c229249 ++ default local-path storage class to retain 2026-09-01 18:21:48 +03:00
ivan
2c252e52b2 ++ 2026-09-01 18:23:40 +05:00
ivan
4b9f6869e5 ++ 2026-09-01 17:45:25 +05:00
ivan
dbd9e25017 ++ 2026-09-01 14:42:10 +05:00
Kochetkov S
da34ec0bdf ++ exclude jwt-secret from flux-managed superset render 2026-09-01 11:28:33 +03:00
ivan
b441d1c913 ++ 2026-08-31 23:46:11 +05:00
ivan
6efd29da18 fix(brusnika-stage): битые внутрикластерные ссылки + чистка мусорных оверлеев 
- django/s3-proxy: образ export-project -> s3-proxy:stable
- message-hub: backend-service.pm -> backend-svc.pm
- processing: documentations-filestream-service -> documentations-filestream
- resources: minio-service -> minio-svc
- documentations: bim-api-service -> backend-service.bim:8000;
  inspections-service -> backend-service.inspections:8000;
  remarks-static-service.remarks -> remarks-static.issues:80
- notes: sarex-* namespace -> реальные, documentations-service -> documentations-api,
  sarex-processing -> ns workflow / workflows-api-service,
  BASE_HOST уралхим -> test.sarex.brusnika.tech/notes
- подключён inspections в clusters/brusnika-stage/kustomization.yaml
- удалены мёртвые копипаст-оверлеи cross-section/faas/prescriptions/comparisons
  (нигде не подключены, побайтовые копии documentations/drawings)

brusnika-prod не трогаем.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-31 20:51:07 +05:00
ivan
37063d38e1 feat(bi): standalone-оверлеи bi для ugok, brusnika-stage, brusnika-prod 
Не наследуют base (vault-native) — отдельные HelmRelease на universal-chart
с обычными secretEnvs, как остальные сервисы этих контуров. Свои хосты,
имена сервисов и kafka-bootstrap на контур; KAFKA_ENABLE=0, поэтому kafka
без секретов. Подключены к соответствующим clusters/*/kustomization.yaml.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-31 19:51:23 +05:00
ivan
0cfb386c90 fix(bi): bi-backend слушает :8000, не :80 
Приложение (gunicorn/uvicorn) биндится на 0.0.0.0:8000. Service targetPort
и containerPort были 80 -> istio -> svc:80 -> pod:80 (никто не слушает) -> 503.
targetPort и deployment.port -> 8000, service.port остаётся 80 (в него бьёт VS).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-31 17:04:23 +05:00
ivan
0c7f1f63e9 ++ 2026-08-31 16:56:22 +05:00
ivan
9591d770be ++ 2026-08-31 16:55:22 +05:00
ivan
1ffe61ea88 feat(bi/d8-ugmk-prod): istio-маршруты для bi на sarex-bi.uralmine.com 
/analytics-v2/api/ -> /api/  -> bi-backend-service.bi:80
/analytics-v2/static/, /analytics-v2/ -> / -> bi-frontend-frontend-svc.bi:80
Префиксы уже, чем catch-all `/` -> superset на том же хосте.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-31 16:54:09 +05:00
ivan
ce5280bef1 ++ 2026-08-31 16:33:57 +05:00
ivan
55156efab2 ++ 2026-08-31 16:23:28 +05:00
ivan
d3a973adea feat(bi): новое приложение bi (ns bi) на universal-chart + подключение к d8-ugmk-prod 
apps/bi/base — bi-backend (vault-native, SA bi-vault) и bi-frontend.
apps/bi/d8-ugmk-prod — патч env под контур УГМК (хосты issues/eav/pm,
AUTH_HOST, kafka), namespace с deckhouse pod-policy.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-31 16:08:29 +05:00
ivan
710f20a98e fix(flows/brusnika-stage): не создавать backend-service из celery HR 
celery.yaml и backend.yaml оба рендерили Service backend-service; релиз
celery выигрывал владение и ставил селектор app=celery -> трафик уходил
в celery-под -> 503. service.enabled: false, как в brusnika-prod.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-31 16:08:29 +05:00
ivan
42ff0855ed ++ 2026-08-31 14:54:08 +05:00
ivan
96e42f9899 ++ 2026-08-31 14:49:47 +05:00
ivan
ba72d321ba change images brusnika stage 2026-08-31 13:52:56 +05:00
ivan
eeb0330ed2 ++ 2026-08-31 01:23:17 +05:00
ivan
23cf83d92b ++ 2026-08-29 15:42:18 +05:00
ivan
bfa97c8286 ++ 2026-08-29 14:17:45 +05:00
ivan
6125cc9f4b ++ 2026-08-29 13:43:21 +05:00
ivan
c7c8f2683a ++ 2026-08-29 13:42:08 +05:00
ivan
9f7af7e39e ++ 2026-08-29 12:57:51 +05:00
ivan
dfcf9423f2 ++ 2026-08-29 12:55:04 +05:00
ivan
b8755c7399 ++ 2026-08-29 12:53:22 +05:00
ivan
bee1882830 ++ 2026-08-29 12:50:53 +05:00
ivan
75922e886e ++ 2026-08-29 04:54:22 +05:00
ivan
8dae7c76c7 ++ 2026-08-29 04:33:09 +05:00
ivan
43e8fd5408 ++ 2026-08-29 04:07:08 +05:00
ivan
2233069ce1 ++ 2026-08-29 04:00:37 +05:00
ivan
068badbe0b ++ 2026-08-29 03:57:01 +05:00
ivan
b757fa5452 ++ 2026-08-29 03:52:37 +05:00
ivan
ee9819a42f ++ 2026-08-29 03:38:35 +05:00
ivan
9cab91c074 ++ 2026-08-29 03:12:46 +05:00
ivan
3a6ee99866 ++ 2026-08-29 02:41:33 +05:00
ivan
60218f2306 ++ 2026-08-29 01:53:29 +05:00
ivan
98f5d6c0ae ugok: fix 11 images that regressed to cr.yandex during vault rebuild 
The standalone rebuild in the previous commit reconstructed several
services from base/wb reference values and missed re-applying the
cr.yandex -> 10.4.10.187 registry swap for: checklists, issues/frontend,
contracts, drawings, flows (backend/celery/frontend),
documentations/pdf-markings, django/s3-proxy, django/srx-admin,
inspections. All 32 previously wb-synced images now verified back on
10.4.10.187:80/library.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-29 01:41:52 +05:00
ivan
2077174ef6 ++ 2026-08-29 01:37:04 +05:00