Commit Graph

1593 Commits

Author SHA1 Message Date
emelinda
8a3540ead7 Add CDE_API_ENABLED environment variable to api and filestream configurations 2026-10-28 08:32:37 +03:00
emelinda
3dadb7a87a Merge branch 'master' of gitlab.sarex.io:infra/iac 2026-10-28 08:30:59 +03:00
emelinda
fc8ddcb511 Add CDE_API_ENABLED environment variable to filestream and api configurations in d8-ugmk-prod 2026-10-28 08:30:40 +03:00
f5a217e793 ++ stand vault layer 2026-10-27 22:48:56 +03:00
eeb27c6e29 ++ slice jobs allow failure 2026-10-27 22:36:55 +03:00
0fb5374e06 ++ slice job per contour 2026-10-27 22:35:41 +03:00
0a81938175 ++ publish contour slices 2026-10-27 22:30:13 +03:00
84f2555494 ++ stand cluster and slicer 2026-10-27 22:30:13 +03:00
faa1dd2cac Merge branch 'task/PDM-2628_download_not_work_wb' into 'master'
fix: update image for filestream wb

See merge request infra/iac!13
2026-10-27 18:55:21 +00:00
diamondrigido
f4a19774a2 fix: update image for filestream wb 2026-10-27 20:11:28 +02:00
emelinda
f39a907a87 [Message]
Update `d8-ugmk-prod` frontend image to `workspaces-v2-frontend:contour_1b5d64e4` in patch configuration
2026-10-27 21:07:58 +03:00
c401cf0dcb Merge branch 'pdm/update_pdf_markings' into 'master'
fix: update pdf markings amqp

See merge request infra/iac!12
2026-10-27 14:16:42 +00:00
diamondrigido
1d349b1a8c fix: move bundle in documentations 2026-10-27 15:47:58 +02:00
ivan
f6d4c2face ++ 2026-10-27 18:07:06 +05:00
diamondrigido
6fda7834ce fix: incorect in asterus pdf markings amqp 2026-10-27 14:49:27 +02:00
diamondrigido
0d4befa985 fix: update pdf markings amqp 2026-10-27 14:48:29 +02:00
ivan
9f263a97f3 ++ 2026-10-27 16:51:18 +05:00
b6f164f85e ++ outline db secret from tf 2026-10-27 13:37:58 +03:00
5e10d54d67 ++ outline pg sslmode 2026-10-27 13:37:58 +03:00
f190a6efa5 Merge branch 'pdm/fix_env_and_doc' into 'master'
fix: output_topic

See merge request infra/iac!10
2026-10-27 10:01:08 +00:00
5bccce5815 Merge branch 'feature/outline-vk-infra' into 'master'
Outline в vk-infra

See merge request infra/iac!11
2026-10-27 09:36:50 +00:00
0c696d3a3e ++ valkey image override 2026-10-27 12:31:57 +03:00
Pavel Ershov
385abf1092
Outline в vk-infra
- infrastructure/outline/vk-infra: namespace, HelmRelease outline-valkey (valkey 0.1.0, standalone) и outline (outline 0.1.0, Outline 1.12.0)
- clusters/vk-infra: подключение outline/vk-infra
- istio-config/vk-infra: Certificate, Gateway и VirtualService для wiki.sarex.space

Секреты outline и outline-valkey созданы в кластере вручную.
2026-10-26 20:49:39 +03:00
diamondrigido
3f7628cc54 fix: output_topic 2026-10-26 18:35:40 +02:00
2182c09031 Merge branch 'feature/infra-3023-pm-wb-kafka-topics' into 'master'
wb/pm: явно задать KAFKA_TOPICS planning → message-hub-prod (INFRA-3023)

See merge request infra/iac!9
2026-10-26 14:33:35 +00:00
emelinda
e33eaa1db8 Merge branch 'master' of gitlab.sarex.io:infra/iac into feature/infra-3023-pm-wb-kafka-topics
# Conflicts:
#	apps/pm/wb/backend.yaml
#	apps/pm/wb/celery.yaml
2026-10-26 19:32:58 +05:00
emelinda
cb99195564 Merge remote-tracking branch 'origin/master' 2026-10-26 18:11:13 +05:00
emelinda
f5ea728d29 Add Kafka configuration to wb backend and Celery YAML files 2026-10-26 18:11:04 +05:00
f86336741b Merge branch 'pdm/fix_env_and_doc' into 'master'
fix: незначительные изменения

See merge request infra/iac!8
2026-10-26 13:07:53 +00:00
4448188464 wb/pm: pin KAFKA_TOPICS planning -> message-hub-prod (INFRA-3023)
pm on WB published to Kafka topic "pm" (stale .env mounted via subPath),
while message-hub consumes "message-hub-prod". PDF export of KSG hung in
PENDING because get_converted_file never reached message-hub.

Set KAFKA_TOPICS explicitly in backend and celery so env overrides .env,
same as prod, d8-ugmk-prod, uralkal and vad.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01173KBT2kTwhxrzr2t3KutB
2026-10-26 12:49:31 +00:00
diamondrigido
af56004006 fix: незначительные изменения
1. Изменения базового образа для документации, чтоб копирование работало
2. output_navis env для wb engine
2026-10-26 13:49:08 +02:00
af112cfffe ++ srx ui kit pages 2026-10-26 14:42:34 +03:00
ivan
03eb83b362 ++ 2026-10-26 14:09:35 +05:00
ivan
a8716d51b3 ++ 2026-10-26 13:55:03 +05:00
ivan
a71b15ae18 ++ 2026-10-26 13:39:04 +05:00
ivan
a2f6a234cb ++ 2026-10-26 13:35:49 +05:00
ivan
6b5e2b7a1f ++ 2026-10-26 13:26:00 +05:00
ivan
5cbcdd4ff7 ++ 2026-10-26 13:07:14 +05:00
36b63ef189 ++ vk lb new fip 2026-10-26 10:56:02 +03:00
emelinda
4727e26c70 Update wb backend resource limits and service host references for consistency and performance 2026-10-26 11:48:24 +05:00
emelinda
91d6aa41d6 Add HelmRelease for pdf-markings-amqp in d8-ugmk-prod and update kustomization configuration 2026-10-26 09:53:21 +05:00
ivan
b3a1fe63c2 ++ 2026-10-24 12:53:11 +05:00
ivan
10d962dce5 ++ 2026-10-24 12:30:16 +05:00
ivan
3cfe74c301 ++ 2026-10-24 12:18:37 +05:00
ivan
c36406209f issues: SAREX_API from env, in-cluster Django in uralkal, vad, ugmk
The base production.py hardcoded SAREX_API = https://srx.wb.ru, ignoring the
env, so issue export (GET /api/core/users/<id>/) failed from closed contours
with CERTIFICATE_VERIFY_FAILED. Read it from SAREX_API with the old value as
default; wb keeps it.

uralkal, vad, d8-ugmk-prod: SAREX_API -> backend-svc.django:80 (server-side
calls, no TLS), and SAREX_HOST set to the contour's public host so links in
exports and notifications stay external.
2026-10-24 12:01:25 +05:00
emelinda
314d2103d0 Update wb Istio configuration: add CORS settings for https://srx.wb.ru and https://lk.srx.wb.ru 2026-10-23 18:13:26 +05:00
emelinda
ced8b7bc04 Update wb configurations: increase filestream resource limits, fix BIM_API_URL references, and add Istio routing for /bimv2/api/ 2026-10-23 18:09:28 +05:00
ivan
7d25e214cd ++ 2026-10-23 17:06:06 +05:00
ivan
934241a9b1 premises/d8-ugmk-prod: privileged pod-policy on the namespace
Deckhouse admission-policy-engine (baseline) rejected the pods because
istio-init needs NET_ADMIN and NET_RAW. Label the namespace
security.deckhouse.io/pod-policy=privileged like the other app namespaces in
ugmk.
2026-10-23 16:38:08 +05:00
ivan
54c036b23e premises in ugmk, inspections VS name fix, remarks contour image, debug pod sleep
premises: d8-ugmk-prod overlay (ugmk Kafka CA mounted, prod-sized requests
dropped), wired into the cluster, /premises/api/ routed on sarex.uralmine.com.
Terraform side is infra/terraform 856ab54.

istio-config d8-ugmk-prod, vad, uralkal: inspections-api reused the name
flows-api-virt-service, so two VirtualServices collided and one of
/flows/api/ and /inspections/api/ was lost. It is now
inspections-api-virt-service.

remarks base frontend image -> remarks-frontend:contour_013c5091.
psql-tools-debug in uralkal sleeps forever so it can be exec'd into.
2026-10-23 16:07:19 +05:00