ivan
5e5148e951
uralkal: тестовый PostgreSQL с TLS и notes-backend с verify-full (п.31, INFRA-3062)
...
ns postgres-tls-test: postgresql-contour pg-tls с tls.autoGenerated,
ssl_min_protocol_version TLSv1.2, pg_hba только hostssl (local для
администрирования); notes-tls на образе notes-backend с
PG_SSL_MODE/PGSSLMODE=verify-full и CA из pg-tls-crt.
regcred в ns создаётся вручную.
2026-11-02 13:14:59 +05:00
ivan
eb112cd4dd
uralkal: образы eav и iam по digest (п.38, INFRA-3058)
2026-11-02 12:50:18 +05:00
ivan
56a75bf6a6
uralkal: образы remarks, reviews, prescriptions, projects, cross-section по digest (п.38, INFRA-3058)
...
Пилот на пяти статических фронтендах: image.name в оверлее uralkal
в виде <тег>@sha256:<digest>, digest манифестов из cr.yandex.
2026-11-02 12:46:35 +05:00
ivan
b7e7fc1c72
uralkal: drift detection для всех HelmRelease (п.39, INFRA-3058)
...
driftDetection.mode: enabled патчем в clusters/uralkal/kustomization.yaml,
base и другие контуры не затронуты. Исключены webhooks в
Mutating/ValidatingWebhookConfiguration (caBundle пишут vault-injector и
istiod) и /spec/replicas Deployment у istiod (HPA istio-system/istiod).
Kustomization flux-system уже prune: true, interval: 10m.
2026-11-02 12:32:59 +05:00
emelinda
30f1d32fc5
Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration
2026-11-02 09:22:20 +03:00
emelinda
2aaa45bf3c
Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration
2026-11-02 02:24:00 +03:00
emelinda
2f5e37f598
**Add Zitadel events ingestion pipeline with AuthorizationPolicy and initial Job configuration for security-audit namespace**
2026-11-02 00:57:05 +03:00
emelinda
ae1a683ada
**Add HelmRelease access-collector for processing ingress-gateway access logs in security-audit namespace with Kafka and Vault integration**
2026-11-02 00:33:20 +03:00
emelinda
ad7050ca7d
Add audit collector HelmRelease for security-audit namespace to process and export kube-apiserver audit logs, including Kafka and Vault integration
2026-11-01 22:02:54 +03:00
emelinda
5525cc33ff
Update CLAUDE.md to reflect revised cluster configurations, updated overlay conventions, and slice generation details. Clarify application, infrastructure, and routing specifics, including new clusters and template variables.
2026-11-01 21:35:44 +03:00
e4e5e06aec
++ camunda legacy wait
2026-10-31 17:45:29 +03:00
9f2c6932d7
++ camunda timeout 30m
2026-10-31 15:21:43 +03:00
ivan
cd94931c76
++ merge feat/zitadel-setup: sarex-installer machine user
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 13:53:12 +05:00
ivan
104bde49c4
++
2026-10-29 18:23:28 +05:00
ivan
b61571a858
++
2026-10-29 17:36:35 +05:00
13b9ca8a9f
++ stand chart repo from vars
2026-10-29 15:05:47 +03:00
ivan
31bdc74c80
++
2026-10-29 16:11:54 +05:00
ivan
9f4801af68
++ contour zitadel: sarex-installer machine user for zitadel-setup
...
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-29 15:32:27 +05:00
ivan
63b33aaafb
++
2026-10-29 13:06:42 +05:00
ivan
fb52d422ca
++
2026-10-29 12:37:46 +05:00
ivan
deb0d5f0eb
++
2026-10-28 20:06:09 +05:00
1613172dd6
++ contour kafka client sasl plaintext
2026-10-28 15:47:31 +03:00
b7c36a5348
++ stand routing layer
2026-10-28 15:31:36 +03:00
0037411aae
++ stand camunda via vault
2026-10-28 15:18:25 +03:00
c23b51e2a5
infra: route GoAlert through VK Istio
2026-10-28 14:39:19 +03:00
448a994fd4
Merge branch 'master' of https://gitlab.sarex.io/infra/iac
2026-10-28 14:38:14 +03:00
Дмитрий Лавренчук
bfad13da2f
Merge branch 'pdm/update-image-api-fix-copy' into 'master'
...
fix: image documentation updated
See merge request infra/iac!14
2026-10-28 10:36:26 +00:00
diamondrigido
f936f5ffb0
fix: image documentation updated
2026-10-28 12:31:00 +02:00
ivan
25b3536124
++
2026-10-28 14:51:22 +05:00
ivan
cdc2c34bca
++
2026-10-28 14:39:15 +05:00
ivan
3b53a99371
++
2026-10-28 14:30:36 +05:00
ivan
aa3365cb0d
++
2026-10-28 14:27:20 +05:00
ivan
7cf8b13f91
++
2026-10-28 14:00:45 +05:00
ivan
83bfd4e046
++
2026-10-28 13:32:52 +05:00
1c3525fc1b
++ stand platform layer zitadel
2026-10-28 11:15:41 +03:00
a3fa7ba4c0
++ stand data layer
2026-10-28 10:37:30 +03:00
32e4cff59e
++ stand flux cancel stale health check
2026-10-28 10:33:19 +03:00
4a46bb6626
++ contour cert-manager images
2026-10-28 10:33:19 +03:00
34cbe7c79e
++ stand mesh layer
2026-10-28 10:33:19 +03:00
ivan
ae911c7d38
++
2026-10-28 12:31:10 +05:00
ivan
bd4b6d4ea6
++
2026-10-28 12:02:22 +05:00
ivan
56ade56754
++
2026-10-28 11:48:59 +05:00
emelinda
8a3540ead7
Add CDE_API_ENABLED environment variable to api and filestream configurations
2026-10-28 08:32:37 +03:00
emelinda
3dadb7a87a
Merge branch 'master' of gitlab.sarex.io:infra/iac
2026-10-28 08:30:59 +03:00
emelinda
fc8ddcb511
Add CDE_API_ENABLED environment variable to filestream and api configurations in d8-ugmk-prod
2026-10-28 08:30:40 +03:00
f5a217e793
++ stand vault layer
2026-10-27 22:48:56 +03:00
eeb27c6e29
++ slice jobs allow failure
2026-10-27 22:36:55 +03:00
0fb5374e06
++ slice job per contour
2026-10-27 22:35:41 +03:00
0a81938175
++ publish contour slices
2026-10-27 22:30:13 +03:00
84f2555494
++ stand cluster and slicer
2026-10-27 22:30:13 +03:00
