577 changed files with 418 additions and 47278 deletions
--- a/.DS_Store
+++ b/.DS_Store
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@ -4,8 +4,6 @@ include:

 stages:
  - build
-  - slices
-  - slices-publish

 variables:
  RELEASE_NAME: iac-offline
@ -35,31 +33,3 @@ build_offline_mirror:
    - docker push ${IMAGE_NAME}
    - docker push ${CR}/${RELEASE_NAME}:latest
  timeout: 30m
-
-generate_slice_jobs:
-  stage: slices
-  image: ${CR}/infra/slice-builder:1.0.0
-  tags:
-    - build
-  rules:
-    - if: $CI_COMMIT_TAG =~ /^v?(?:\d+\.){2}\d+$/
-  variables:
-    GIT_DEPTH: "1"
-  script:
-    - python3 ci/publish-slice.py generate --release "$CI_COMMIT_TAG" --commit "$CI_COMMIT_SHA" --out slices-pipeline.yml
-    - cat slices-pipeline.yml
-  artifacts:
-    paths:
-      - slices-pipeline.yml
-
-publish_contour_slices:
-  stage: slices-publish
-  rules:
-    - if: $CI_COMMIT_TAG =~ /^v?(?:\d+\.){2}\d+$/
-  needs:
-    - generate_slice_jobs
-  trigger:
-    include:
-      - artifact: slices-pipeline.yml
-        job: generate_slice_jobs
-    strategy: depend
--- a/CLAUDE.md
+++ b/CLAUDE.md
@ -25,13 +25,11 @@

 | Путь | Что |
 |---|---|
-| `clusters/` | 17 точек входа Flux + шаблон `contour` — **источник истины «что где раскатано»** |
-| `infrastructure/` | 44 платформенных компонента |
-| `apps/` | 39 прикладных сервисов |
-| `docs/apps/` | 34 mermaid-диаграммы по сервисам + `README.md` с доменной группировкой |
-| `docs/architecture/` | модель контура в ArchiMate + скрипты-сканеры (`scan_calls.py`, `scan_contour.py`) и сборка (`build_archimate.py`); реальные значения инсталляций сюда не кладутся, только `*.example.json` |
+| `clusters/` | 10 точек входа Flux — **источник истины «что где раскатано»** |
+| `infrastructure/` | 36 платформенных компонентов |
+| `apps/` | 37 прикладных сервисов |
+| `docs/apps/` | 35 mermaid-диаграмм по сервисам + `README.md` с доменной группировкой |
 | `docs/closed-contour-deployment.md` | ранбук поднятия закрытого контура |
-| `ci/`, `.gitlab-ci.yml`, `Dockerfile` | на тег `vX.Y.Z`: образ офлайн-зеркала `iac-offline` и публикация «слайсов» контуров (см. ниже) |
 | `README.md` | mermaid-мегакарта платформы, структура репозитория, инструкции по добавлению app / infra / кластера |
 | `IAC-CATALOG.md` | каталог всего `infra/*`; §5 — про этот репозиторий |
 | `inventory.yaml` | сгенерированный снимок прода: 59 namespace → kind → имена |
@ -40,18 +38,14 @@

 **Кластер.** `clusters/<cluster>/kustomization.yaml` — плоский список `../../apps/<app>/<cluster>`. Инфраструктура подключается двумя разными способами:

- `d8-ugmk-prod`, `sarex-contour`, `ugok`, `uralkal`, `vad` — прямо в корневом kustomization как `../../infrastructure/<comp>/<c>`;
- `brusnika-prod`, `brusnika-stage`, `vk-infra`, `vk-prod` — через `clusters/<c>/infrastructure/kustomization.yaml`, который ссылается на оверлеи `../../../infrastructure/<comp>/<c>` (`base` + патч HelmRelease + сопутствующие манифесты компонента);
- `wb`, `yc-cps-prod`, `yc-infra-prod`, `yc-k8s-test-02` — через `clusters/<c>/infrastructure/kustomization.yaml`, который ссылается на `../../../infrastructure/<comp>` (резолвится в `base`), а различия лежат в `clusters/<c>/infrastructure/patches/*.yaml`;
- `stand` — послойно: `layers.yaml` объявляет Flux-`Kustomization` `00-vault → 10-mesh → 20-data → 30-platform → 40-routing` (каталоги `clusters/stand/<NN>-<layer>/`). Слои ссылаются на оверлеи `infrastructure/<comp>/contour-template`, а значения контура (`${STORAGE_CLASS}`, `${HOST_*}`, `${GATEWAY_REPLICAS}`) Flux подставляет через `postBuild.substituteFrom` из ConfigMap `contour-vars`.
+- `d8-ugmk-prod` — прямо в корневом kustomization как `../../infrastructure/<comp>/d8-ugmk-prod`;
+- `brusnika-prod`, `brusnika-stage`, `wb` — через `clusters/<c>/infrastructure/kustomization.yaml`, который ссылается на `../../../infrastructure/<comp>` (резолвится в `base`), а различия лежат в `clusters/<c>/infrastructure/patches/*.yaml`.

-Кластеры с приложениями: `asterus`, `brusnika-prod`, `brusnika-stage`, `d8-ugmk-prod`, `sarex-contour`, `ugok`, `uralkal`, `vad`, `wb`, `yc-ecp`, `yc-k8s-test`. Только инфраструктура: `stand`, `vk-infra`, `vk-prod`, `yc-cps-prod`, `yc-infra-prod`, `yc-k8s-test-02`. Шаблон: `contour`.
+Кластеры: `brusnika-prod`, `brusnika-stage`, `d8-ugmk-prod`, `wb`, `yc-cps-prod`, `yc-ecp`, `yc-infra-prod`, `yc-k8s-test`, `yc-k8s-test-02`, `contour`.

 **Приложение.** `apps/<app>/base/` — по одному `.yaml` на процесс (`backend.yaml`, `celery.yaml`, `frontend.yaml`) плюс `namespace.yaml`; оверлеи в `apps/<app>/<cluster>/`. Namespace = имя приложения. Рядом с манифестами лежит документация: `CONFIGURATION.md` (все env-переменные и откуда берутся), `ENDPOINTS.md` (исходящие HTTP-вызовы), `openapi.yaml` (входящий контракт), `.env.example`. Если процессов несколько — файлы с префиксом процесса: `api.ENDPOINTS.md`, `pdm.CONFIGURATION.md`, `frontend.CONFIGURATION.md`.

-**Инфра-компонент.** `infrastructure/<comp>/base/` + оверлеи `<comp>/<cluster>/`. Корневой `infrastructure/<comp>/kustomization.yaml` всегда указывает просто на `base`. Оверлей `contour-template` (есть у vault, istio-*, cert-manager, postgresql, kafka, rabbitmq, zitadel, camunda, istio-config) — параметризованный `${VAR}`, а не привязанный к конкретному кластеру. Чарты идут с суффиксом контура: `vault-contour`, `keycloak-contour`, `postgresql-contour` и — внимание — `idp-contour` это Zitadel.
-
-**Слайсы.** На тег `vX.Y.Z` `ci/publish-slice.py generate` создаёт child-pipeline с отдельной джобой на каждый `clusters/*/kustomization.yaml`. Джоба вызывает `ci/build-slice.py`: тот обходит дерево Kustomize от `clusters/<c>` и упаковывает только нужные файлы в tar. Результат публикуется как OCI-артефакт `cr.yandex/crpct2b2lsmao4nm0cjk/<c>-iac:<tag>` (media type `application/vnd.sarex.slice.config.v1+json`). Так закрытый контур получает только свой срез. Тесты — `ci/tests/test_build_slice.py`.
+**Инфра-компонент.** `infrastructure/<comp>/base/` + оверлеи `<comp>/<cluster>/`. Корневой `infrastructure/<comp>/kustomization.yaml` всегда указывает просто на `base`. Чарты идут с суффиксом контура: `vault-contour`, `keycloak-contour`, `postgresql-contour` и — внимание — `idp-contour` это Zitadel.

 ## Где искать конкретное

@ -67,23 +61,18 @@
 | Тег образа в контуре | `apps/<app>/<cluster>/*.yaml`, поле `image.tag` |
 | Что реально в проде по namespace | `inventory.yaml` |
 | Где лежит исходный код приложения | `IAC-CATALOG.md` §5.3.8 |
-| Что попадёт в слайс контура | `python3 ci/build-slice.py` по `clusters/<c>` (логика сбора — там же) |
-| Переменные шаблонного контура | `${...}` в `infrastructure/*/contour-template`; значения — ConfigMap `contour-vars` в кластере, не в репозитории |

 ## Ловушки

 - **`dsinv/`** — оверлей есть у 25 приложений, но `clusters/dsinv/` не существует. Это материализованный снимок живого контура WB, а не источник деплоя. Развёрнутым не считать.
- **Две несовместимые конвенции оверлеев** (`IAC-CATALOG.md` §5.3.4). `d8-ugmk-prod`, `yc-k8s-test`, `vad`, `uralkal`, `sarex-contour`, `dsinv` наследуют `base` и патчат его. `brusnika-prod`, `brusnika-stage`, `yc-ecp`, `asterus` — полные копии HelmRelease, которые молча дрейфуют от base. Правка `base` на них не влияет. **`wb` (4 из 27) и `ugok` (9 из 33) смешанные** — проверяйте `resources:` конкретного оверлея; в `ugok` причина обычно указана комментарием в его `kustomization.yaml`.
- **`asterus` подключён почти пустым**: оверлеи есть у 26 приложений, но в `clusters/asterus/kustomization.yaml` активен только `auth-flow`, остальные закомментированы. Инфраструктуры в кластере нет.
- **Слайс публикуется для каждого `clusters/*/kustomization.yaml`** — в том числе для тестовых и инфраструктурных кластеров. Новая папка в `clusters/` с этим файлом автоматически станет слайсом на следующем теге. У `contour` такого файла нет, поэтому для него слайс не собирается.
+- **Две несовместимые конвенции оверлеев** (`IAC-CATALOG.md` §5.3.4). `d8-ugmk-prod`, `yc-k8s-test`, `dsinv` наследуют `base` и патчат его. `brusnika-prod`, `brusnika-stage`, `yc-ecp` — полные копии HelmRelease, которые молча дрейфуют от base. Правка `base` на них не влияет.
 - **`IAC-CATALOG.md` — снимок на 05.08.2026** и по составу приложений на контур уже расходится с реальностью (там у `wb` ноль приложений, фактически 26 оверлеев). Всегда сверяться с `clusters/*/kustomization.yaml`.
 - **Мегадиаграмма в `README.md` идеализирована** — рисована руками, показывает все приложения на одной Postgres и все фронтенды за `control-interface`. Проверяемые источники — env-переменные и istio-config.
 - **`clusters/contour/` — не кластер, а шаблон**: в нём нет `flux-system`, только `apps.yaml`, `infrastructure.yaml`, `helm-repositories.yaml`.
- **Path-роутинг лежит в `infrastructure/istio-config/<c>/` у большинства контуров, но не у WB.** В `clusters/wb/infrastructure/patches/istio-config.yaml` через Istio публикуются только платформенные UI (Gitea, Grafana, OpenObserve, Superset, Vault, GoAlert), а прикладной трафик разводится вне репозитория. В Brusnika схема смешанная: часть путей идёт напрямую в сервисы, остальное — одним правилом в `yet-another-nginx-service.global-ingress`.
- **`vk-prod` маршрутизирует в namespace с суффиксом `-prod`** (`eav-prod`, `pm-prod`, `inspections-prod`), а приложений из `apps/` в этом кластере нет: сервисы раскатываются не этим репозиторием.
- **Имена namespace расходятся между источниками**: `inventory.yaml` и `vk-prod` используют суффикс (`flows-prod`), `apps/` — голое имя (`flows`).
- **66 оверлеев приложений не подключены ни к одному кластеру**: 25 — `dsinv`, 25 — закомментированные в `asterus`, остальные 16 — мёртвый код (в основном `brusnika-prod`, плюс `bi`/`iam` в `wb` и `yc-k8s-test`).
- **Нет диаграмм** в `docs/apps/` для `ams-sync`, `auth-flow`, `bi`, `iam`, `premises`.
+- **Path-роутинг виден в репозитории только у `d8-ugmk-prod` и `yc-ecp`.** В Brusnika и WB весь прикладной трафик уходит одним правилом в `nginx-service.global-ingress` / `yet-another-nginx-service.global-ingress`, а разводка по путям происходит вне репозитория. Через Istio там публикуются только платформенные UI (Gitea, Grafana, OpenObserve, Superset, Vault, Zitadel, Camunda, MinIO).
+- **Имена namespace расходятся между источниками**: `inventory.yaml` использует суффикс (`flows-prod`), `apps/` — голое имя (`flows`).
+- **17 оверлеев приложений не подключены ни к одному кластеру** — мёртвый код.
+- **Нет диаграмм** в `docs/apps/` для `iam`, `auth-flow`, `ams-sync`.
 - **Чистые фронтенды без бэкенда в этом репозитории**: `auth-flow`, `control-interface`, `cross-section`, `document-link`, `prescriptions`, `projects`, `remarks`, `reviews`, `stamp-verification`. Бэкенд `projects` живёт в `planning/projects-backend`.
 - Самые центральные сервисы по числу входящих ссылок: `documentations` (~85), `processing` / `workflow` (~76), `django` (~53), `eav` (~47), `resources` (~44), `bim` (~39), `flows` (~38). Менять их конфигурацию — дороже всего.

--- a/apps/.DS_Store
+++ b/apps/.DS_Store
--- a/apps/ams-sync/brusnika-stage/backend.yaml
+++ b/apps/ams-sync/brusnika-stage/backend.yaml
@ -138,10 +138,6 @@ spec:
          - name: KAFKA_SASL_MECHANISM
            value:
              _default: "SCRAM-SHA-512"
-          - name: RESOURCES_INTERNAL_HOST
-            value:
-              _default: "http://iams.iam.svc.cluster.local:8080"
-
        secretEnvs:
          - name: TELEGRAM_TOKEN
            secretName:
--- a/apps/attachments/asterus/backend.yaml
+++ b/apps/attachments/asterus/backend.yaml
@ -1,139 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: attachments
-  namespace: attachments
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      attachments:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/attachments:production_6dbb4dce
-          pullPolicy:
-            _default: Always
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: attachments
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: attachments-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 80
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        volumes:
-          _default:
-            - name: yc-s3
-              mountPath:
-                _default: /etc/sarex/yc-s3-storage
-              readOnly:
-                _default: true
-              secret:
-                secretName:
-                  _default: yc-s3
-
-        envs:
-          - name: DATABASE_SSL_MODE
-            value:
-              _default: disable
-          - name: POSTGRES_POOL_SIZE
-            value:
-              _default: "4"
-          - name: API_ADDRESS
-            value:
-              _default: 0.0.0.0:8000
-          - name: YANDEX_S3_ACCOUNT_PATH
-            value:
-              _default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
-          - name: BUCKET_NAME
-            value:
-              _default: attachments
-          - name: YANDEX_S3_VERIFY
-            value:
-              _default: "false"
-          - name: DATABASE_PORT
-            value:
-              _default: "5432"
-          - name: DATABASE_HOST
-            value:
-              _default: postgres-service
-
-        secretEnvs:
-          - name: DATABASE_USER
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: DATABASE_PASSWORD
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-          - name: DATABASE_NAME
-            secretName:
-              _default: postgres-secret
-            secretKey: database
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/attachments/asterus/kustomization.yaml
+++ b/apps/attachments/asterus/kustomization.yaml
@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: attachments
-resources:
-  - backend.yaml
--- a/apps/attachments/brusnika-stage/backend.yaml
+++ b/apps/attachments/brusnika-stage/backend.yaml
@ -35,7 +35,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/att9:dev
+            _default: cr.yandex/crp3ccidau046kdj8g9q/attachments:production_6dbb4dce
          pullPolicy:
            _default: IfNotPresent

@ -110,10 +110,6 @@ spec:
          - name: YANDEX_S3_VERIFY
            value:
              _default: "false"
-          - name: YANDEX_S3_USE_SSL
-            value:
-              _default: "false"
-
        secretEnvs:
          - name: DATABASE_HOST
            secretName:
--- a/apps/attachments/uralkal/kustomization.yaml
+++ b/apps/attachments/uralkal/kustomization.yaml
@ -1,10 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: attachments
-resources:
-  - ../base
-patches:
-  - path: patch.yaml
-    target:
-      kind: HelmRelease
-      name: attachments
--- a/apps/attachments/uralkal/patch.yaml
+++ b/apps/attachments/uralkal/patch.yaml
@ -1,34 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: attachments
-  namespace: attachments
-spec:
-  values:
-    services:
-      attachments:
-        podAnnotations:
-          _default:
-            vault.hashicorp.com/auth-path: auth/kubernetes
-            vault.hashicorp.com/role: attachments
-            vault.hashicorp.com/agent-inject-secret-attachments-db: secrets/data/apps/attachments/postgres
-            vault.hashicorp.com/agent-inject-template-attachments-db: |-
-              {{- with secret "secrets/data/apps/attachments/postgres" -}}
-              DATABASE_HOST={{ index .Data.data "host" }}
-              DATABASE_PORT={{ index .Data.data "port" }}
-              DATABASE_NAME={{ index .Data.data "database" }}
-              DATABASE_USER={{ index .Data.data "username" }}
-              DATABASE_PASSWORD={{ index .Data.data "password" }}
-              DATABASE_SSL_MODE=disable
-              {{- end -}}
-            vault.hashicorp.com/agent-inject-secret-attachments-s3: secrets/data/minio/apps/attachments
-            vault.hashicorp.com/agent-inject-template-attachments-s3: |-
-              {{- with secret "secrets/data/minio/apps/attachments" -}}
-              YANDEX_S3_ENDPOINT_URL=10.133.0.245:9000
-              YANDEX_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
-              YANDEX_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
-              YANDEX_S3_USE_SSL=false
-              YANDEX_S3_REGION=ru-central
-              YANDEX_S3_VERIFY=false
-              BUCKET_NAME=attachments
-              {{- end -}}
--- a/apps/auth-flow/uralkal/helmrelease.yaml
+++ b/apps/auth-flow/uralkal/helmrelease.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: frontend
-  namespace: auth-flow
-spec:
-  values:
-    services:
-      frontend:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/auth-flow/uralkal/kustomization.yaml
+++ b/apps/auth-flow/uralkal/kustomization.yaml
@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: helmrelease.yaml
-    target:
-      kind: HelmRelease
-      name: frontend
--- a/apps/bi/base/backend.yaml
+++ b/apps/bi/base/backend.yaml
@ -71,9 +71,9 @@ spec:
          resources:
            requests:
              cpu:
-                _default: 25m
+                _default: 500m
              memory:
-                _default: 128Mi
+                _default: 1Gi

          probes:
            liveness:
--- a/apps/bi/brusnika-stage/backend.yaml
+++ b/apps/bi/brusnika-stage/backend.yaml
@ -37,7 +37,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/bi-backend:production_e607dcc6
+            _default: cr.yandex/crp3ccidau046kdj8g9q/bi-backend:production_37902c73
          pullPolicy:
            _default: IfNotPresent

@ -119,10 +119,6 @@ spec:
            _default: regcred

        envs:
-          - name: SUPERSET_HOST
-            value:
-              _default: "https://superset.test.sarex.brusnika.tech"
-
          - name: SETTINGS_DEBUG
            value:
              _default: "0"
--- a/apps/bi/brusnika-stage/frontend.yaml
+++ b/apps/bi/brusnika-stage/frontend.yaml
@ -37,7 +37,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/bi-frontend:contour_9cfd1a0b
+            _default: cr.yandex/crp3ccidau046kdj8g9q/bi-frontend:production_afb137d4
          pullPolicy:
            _default: IfNotPresent

--- a/apps/bi/uralkal/backend.yaml
+++ b/apps/bi/uralkal/backend.yaml
@ -1,79 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: bi-backend
-  namespace: bi
-spec:
-  values:
-    services:
-      main:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
-        envs:
-          - name: SETTINGS_DEBUG
-            value:
-              _default: "0"
-
-          - name: SETTINGS_VERIFY_SSL
-            value:
-              _default: "1"
-
-          - name: SETTINGS_API_V1_PREFIX
-            value:
-              _default: "/api/v1"
-
-          - name: AUTH_HOST
-            value:
-              _default: "https://sarex.local.uralkali.com"
-
-          - name: WORKER_TIMEOUT
-            value:
-              _default: "120"
-
-          - name: SUPERSET_HOST
-            value:
-              _default: "https://sarex-bi.sarex.local.uralkali.com/"
-
-          - name: PYTHONPATH
-            value:
-              _default: "src"
-
-          - name: ISSUES_SERVICE_HOST
-            value:
-              _default: "http://backend-svc.issues.svc.cluster.local"
-
-          - name: EAV_SERVICE_HOST
-            value:
-              _default: "http://backend-svc.eav.svc.cluster.local"
-
-          - name: PM_SERVICE_HOST
-            value:
-              _default: "http://backend-svc.pm.svc.cluster.local:8000"
-
-          - name: SUPERSET_SYSTEM_WIDGETS
-            value:
-              _default: '{"MDR": {"id": "e7343f21-1ee0-4a87-b712-e8cfd413cc49","name": "MDR"},"SC": {"id": "d63d25e4-eab6-452f-8b31-065094bc2cb6","name": "Стройконтроль"}}'
-
-          - name: SUPERSET_DOCUMENTATION_URL
-            value:
-              _default: "https://sarex.local.uralkali.com/documentations/"
-          
-          - name: SUPERSET_JWT_SECRET
-            value:
-              _default: "6TosZjqxxZ3kAPiht4miaGICRV5AbfvuenWnYfOUnxfbYJJXUNWedOS0QeJQaryr"
-
-          - name: KAFKA_BOOTSTRAP_SERVERS
-            value:
-              _default: '["kafka-kafka-contour.kafka.svc.cluster.local:9092"]'
-
-          - name: KAFKA_TOPICS
-            value:
-              _default: '{"planning": "message-hub-prod"}'
-
-          - name: KAFKA_ENABLE
-            value:
-              _default: "0"
--- a/apps/bi/uralkal/frontend.yaml
+++ b/apps/bi/uralkal/frontend.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: bi-frontend
-  namespace: bi
-spec:
-  values:
-    services:
-      frontend:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/bi/uralkal/kustomization.yaml
+++ b/apps/bi/uralkal/kustomization.yaml
@ -1,13 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: backend.yaml
-    target:
-      kind: HelmRelease
-      name: bi-backend
-  - path: frontend.yaml
-    target:
-      kind: HelmRelease
-      name: bi-frontend
--- a/apps/bim/asterus/backend.yaml
+++ b/apps/bim/asterus/backend.yaml
@ -1,199 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: backend
-  namespace: bim
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      backend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:97de42bb1e5de1228e04b1caad0530715bf9bc63
-          pullPolicy:
-            _default: Always
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: backend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: backend-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8000
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        envs:
-          - name: LAST_MASTER_BIM
-            value:
-              _default: "100000"
-          - name: LAST_SLAVE_1_BIM
-            value:
-              _default: "100000"
-          - name: LAST_MASTER_BIM_V3
-            value:
-              _default: "100000"
-          - name: LAST_SLAVE_1_BIM_V3
-            value:
-              _default: "100000"
-          - name: LAST_SLAVE_1_BIM_V4
-            value:
-              _default: "100000"
-          - name: LAST_SLAVE_2_BIM
-            value:
-              _default: "1000000000"
-          - name: DB_CERT_PATH_3
-            value:
-              _default: /root/yandex_pg.pem
-          - name: POSTGRES_ADDRESS_3
-            value:
-              _default: postgres-service
-          - name: POSTGRES_PORT_3
-            value:
-              _default: "5432"
-          - name: POSTGRES_DB_3
-            value:
-              _default: bimapidb
-          - name: DB_CERT_PATH_2
-            value:
-              _default: /root/yandex_pg.pem
-          - name: POSTGRES_ADDRESS_2
-            value:
-              _default: postgres-service
-          - name: POSTGRES_ADDRESS_4
-            value:
-              _default: postgres-service
-          - name: POSTGRES_PORT_2
-            value:
-              _default: "5432"
-          - name: POSTGRES_PORT_4
-            value:
-              _default: "5432"
-          - name: POSTGRES_DB_2
-            value:
-              _default: bimapidb
-          - name: POSTGRES_DB_4
-            value:
-              _default: bimapidb
-          - name: POSTGRES_ADDRESS
-            value:
-              _default: postgres-service
-          - name: POSTGRES_PORT
-            value:
-              _default: "5432"
-          - name: POSTGRES_DB
-            value:
-              _default: bimapidb
-          - name: POSTGRES_POOL_SIZE
-            value:
-              _default: "30"
-          - name: API_ADDRESS
-            value:
-              _default: 0.0.0.0:8000
-          - name: DJANGO_HOST
-            value:
-              _default: http://backend.django.svc.cluster.local:8000
-          - name: ENABLE_SQL_QUERY
-            value:
-              _default: "0"
-          - name: ENABLE_SSL
-            value:
-              _default: "0"
-
-        secretEnvs:
-          - name: POSTGRES_USER
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: POSTGRES_PASSWORD
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-          - name: POSTGRES_USER_2
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: POSTGRES_PASSWORD_2
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-          - name: POSTGRES_USER_3
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: POSTGRES_PASSWORD_3
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-          - name: POSTGRES_USER_4
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: POSTGRES_PASSWORD_4
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/bim/asterus/kustomization.yaml
+++ b/apps/bim/asterus/kustomization.yaml
@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: bim
-resources:
-  - backend.yaml
--- a/apps/bim/brusnika-stage/backend.yaml
+++ b/apps/bim/brusnika-stage/backend.yaml
@ -35,7 +35,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:prod_2bde8e0a
+            _default: cr.yandex/crp3ccidau046kdj8g9q/bim-backend-v2:donstroi1
          pullPolicy:
            _default: IfNotPresent

--- a/apps/bim/uralkal/backend.yaml
+++ b/apps/bim/uralkal/backend.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: backend
-  namespace: bim
-spec:
-  values:
-    services:
-      backend:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/bim/uralkal/kustomization.yaml
+++ b/apps/bim/uralkal/kustomization.yaml
@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: backend.yaml
-    target:
-      kind: HelmRelease
-      name: backend
--- a/apps/cde/base/cde-flowscallback.yaml
+++ b/apps/cde/base/cde-flowscallback.yaml
@ -71,9 +71,9 @@ spec:
          resources:
            requests:
              cpu:
-                _default: 25m
+                _default: 500m
              memory:
-                _default: 128Mi
+                _default: 1Gi

          probes:
            liveness:
--- a/apps/cde/base/cde-worker-copy.yaml
+++ b/apps/cde/base/cde-worker-copy.yaml
@ -71,9 +71,9 @@ spec:
          resources:
            requests:
              cpu:
-                _default: 25m
+                _default: "1"
              memory:
-                _default: 228Mi
+                _default: 1Gi

          probes:
            liveness:
--- a/apps/cde/base/cde.yaml
+++ b/apps/cde/base/cde.yaml
@ -71,7 +71,7 @@ spec:
          resources:
            requests:
              cpu:
-                _default: 250m
+                _default: 500m
              memory:
                _default: 512Mi

--- a/apps/cde/brusnika-stage/cde-flowscallback.yaml
+++ b/apps/cde/brusnika-stage/cde-flowscallback.yaml
@ -1,40 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-flowscallback
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-flowscallback
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-flowscallback
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-flowscallback
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: IS_CONTOUR
-          value: 'True'
-        - name: S3_IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/flowscallback-worker:preprod_0986a572
-        imagePullPolicy: Always
-        name: cde-worker-flowscallback
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-splitpdf.yaml
+++ b/apps/cde/brusnika-stage/cde-splitpdf.yaml
@ -1,40 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-splitpdf
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-splitpdf
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-splitpdf
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-splitpdf
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: S3_IS_CONTOUR
-          value: 'true'
-        - name: IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/splitpdf-worker:prod_4.4.1
-        imagePullPolicy: Always
-        name: cde-worker-splitpdf
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-worker-alert.yaml
+++ b/apps/cde/brusnika-stage/cde-worker-alert.yaml
@ -1,35 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-worker-alert
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-alert
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 0
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-alert
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-alert
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/orchestrator:latest
-        imagePullPolicy: Always
-        name: cde-worker-alert
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-worker-copy.yaml
+++ b/apps/cde/brusnika-stage/cde-worker-copy.yaml
@ -1,40 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-worker-copy
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-copy
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-copy
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-copy
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: IS_CONTOUR
-          value: 'True'
-        - name: S3_IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/copy-worker:preprod_0986a572
-        imagePullPolicy: Always
-        name: cde-worker-copy
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-worker-copyv2.yaml
+++ b/apps/cde/brusnika-stage/cde-worker-copyv2.yaml
@ -1,41 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-worker-copyv2
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: name
-    app.kubernetes.io/name: cde-worker-copyv2
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: name
-      app.kubernetes.io/name: cde-worker-copy
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: name
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-copy
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: S3_IS_CONTOUR
-          value: 'true'
-        - name: IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/copyv2-worker:prod_4.0.2
-        imagePullPolicy: Always
-        name: cde-worker-copy
-        securityContext: {}
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-worker-markings.yaml
+++ b/apps/cde/brusnika-stage/cde-worker-markings.yaml
@ -1,40 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-worker-markings
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-markings
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-markings
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-markings
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: IS_CONTOUR
-          value: 'True'
-        - name: S3_IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/markings-worker:preprod_eb50f30e
-        imagePullPolicy: Always
-        name: cde-worker-markings
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-worker-sign.yaml
+++ b/apps/cde/brusnika-stage/cde-worker-sign.yaml
@ -1,40 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-worker-sign
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-sign
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-sign
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-sign
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: IS_CONTOUR
-          value: 'True'
-        - name: S3_IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/sign-worker:preprod_0986a572
-        imagePullPolicy: Always
-        name: cde-worker-sign
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde-worker-update-bundles.yaml
+++ b/apps/cde/brusnika-stage/cde-worker-update-bundles.yaml
@ -1,40 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde-worker-update-bundles
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde-worker-updatebundles
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde-worker-updatebundles
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-updatebundles
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: IS_CONTOUR
-          value: 'True'
-        - name: S3_IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/updatebundles-worker:preprod_0986a572
-        imagePullPolicy: Always
-        name: cde-worker-update-bundles
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/cde.yaml
+++ b/apps/cde/brusnika-stage/cde.yaml
@ -1,55 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cde
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: cde
-      app.kubernetes.io/name: cde
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: cde
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/cde:production_e5316bd0
-        imagePullPolicy: Always
-        livenessProbe:
-          failureThreshold: 3
-          initialDelaySeconds: 15
-          periodSeconds: 10
-          successThreshold: 1
-          tcpSocket:
-            port: 8080
-          timeoutSeconds: 1
-        name: cde
-        ports:
-        - containerPort: 8080
-          name: http
-          protocol: TCP
-        readinessProbe:
-          failureThreshold: 3
-          initialDelaySeconds: 15
-          periodSeconds: 10
-          successThreshold: 1
-          tcpSocket:
-            port: 8080
-          timeoutSeconds: 1
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/createversionsv2-worke.yaml
+++ b/apps/cde/brusnika-stage/createversionsv2-worke.yaml
@ -1,41 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: createversionsv2-worke
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: name
-    app.kubernetes.io/name: cde-worker-createversions
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: name
-      app.kubernetes.io/name: cde-worker-createversions
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: name
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-createversions
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: S3_IS_CONTOUR
-          value: 'true'
-        - name: IS_CONTOUR
-          value: 'true'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/createversionsv2-worker:preprod_90202b78
-        imagePullPolicy: Always
-        name: createversionsv2-worke
-        securityContext: {}
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/kustomization.yaml
+++ b/apps/cde/brusnika-stage/kustomization.yaml
@ -1,19 +1,6 @@
 ---
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: orchestrator
+namespace: contracts
 resources:
-  - serviceaccount.yaml
-  - service.yaml
-  - cde.yaml
-  - cde-flowscallback.yaml
-  - cde-splitpdf.yaml
-  - cde-worker-alert.yaml
-  - cde-worker-copy.yaml
-  - cde-worker-markings.yaml
-  - cde-worker-sign.yaml
-  - cde-worker-update-bundles.yaml
-  - cde-worker-copyv2.yaml
-  - createversionsv2-worke.yaml
-  - markingsv2-worker.yaml
-  - signv2-worker.yaml
+  - helmrelease.yaml
--- a/apps/cde/brusnika-stage/markingsv2-worker.yaml
+++ b/apps/cde/brusnika-stage/markingsv2-worker.yaml
@ -1,41 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: markingsv2-worker
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: name
-    app.kubernetes.io/name: cde-worker-markings
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: name
-      app.kubernetes.io/name: cde-worker-markings
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: name
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-markings
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: S3_IS_CONTOUR
-          value: 'true'
-        - name: IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/markingsv2-worker:prod_4.0.2
-        imagePullPolicy: Always
-        name: cde-worker-markings
-        securityContext: {}
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/brusnika-stage/service.yaml
+++ b/apps/cde/brusnika-stage/service.yaml
@ -1,19 +0,0 @@
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: cde
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde
-spec:
-  type: ClusterIP
-  selector:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde
-  ports:
-  - name: http
-    port: 8080
-    protocol: TCP
-    targetPort: 8080
--- a/apps/cde/brusnika-stage/serviceaccount.yaml
+++ b/apps/cde/brusnika-stage/serviceaccount.yaml
@ -1,10 +0,0 @@
---
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: cde
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: cde
-    app.kubernetes.io/name: cde
-    app.kubernetes.io/version: 0.0.1
--- a/apps/cde/brusnika-stage/signv2-worker.yaml
+++ b/apps/cde/brusnika-stage/signv2-worker.yaml
@ -1,41 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: signv2-worker
-  namespace: orchestrator
-  labels:
-    app.kubernetes.io/instance: name
-    app.kubernetes.io/name: cde-worker-sign
-    app.kubernetes.io/version: 0.0.1
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/instance: name
-      app.kubernetes.io/name: cde-worker-sign
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/instance: name
-        app.kubernetes.io/managed-by: Helm
-        app.kubernetes.io/name: cde-worker-sign
-        app.kubernetes.io/version: 0.0.1
-        helm.sh/chart: cde-0.1.0
-    spec:
-      serviceAccountName: cde
-      containers:
-      - env:
-        - name: S3_IS_CONTOUR
-          value: 'true'
-        - name: IS_CONTOUR
-          value: 'True'
-        envFrom:
-        - secretRef:
-            name: cde-secret
-        image: cr.yandex/crp3ccidau046kdj8g9q/signv2-worker:prod_4.0.2
-        imagePullPolicy: Always
-        name: cde-worker-sign
-        securityContext: {}
-      imagePullSecrets:
-      - name: dockerhub
--- a/apps/cde/uralkal/cde-flowscallback.yaml
+++ b/apps/cde/uralkal/cde-flowscallback.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-flowscallback
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-flowscallback:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-splitpdf.yaml
+++ b/apps/cde/uralkal/cde-splitpdf.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-splitpdf
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-splitpdf:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-alert.yaml
+++ b/apps/cde/uralkal/cde-worker-alert.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-alert
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-alert:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-copy.yaml
+++ b/apps/cde/uralkal/cde-worker-copy.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-copy
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-copy:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-copyv2.yaml
+++ b/apps/cde/uralkal/cde-worker-copyv2.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-copyv2
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-copyv2:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-create-versions.yaml
+++ b/apps/cde/uralkal/cde-worker-create-versions.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-create-versions
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-create-versions:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-create-versionsv2.yaml
+++ b/apps/cde/uralkal/cde-worker-create-versionsv2.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-create-versionsv2
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-create-versionsv2:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-markings.yaml
+++ b/apps/cde/uralkal/cde-worker-markings.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-markings
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-markings:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-markingsv2.yaml
+++ b/apps/cde/uralkal/cde-worker-markingsv2.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-markingsv2
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-markingsv2:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-sign.yaml
+++ b/apps/cde/uralkal/cde-worker-sign.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-sign
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-sign:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-signv2.yaml
+++ b/apps/cde/uralkal/cde-worker-signv2.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-signv2
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-signv2:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde-worker-update-bundles.yaml
+++ b/apps/cde/uralkal/cde-worker-update-bundles.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde-worker-update-bundles
-  namespace: cde
-spec:
-  values:
-    services:
-      cde-worker-update-bundles:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/cde.yaml
+++ b/apps/cde/uralkal/cde.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cde
-  namespace: cde
-spec:
-  values:
-    services:
-      cde:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cde/uralkal/kustomization.yaml
+++ b/apps/cde/uralkal/kustomization.yaml
@ -1,57 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: cde-flowscallback.yaml
-    target:
-      kind: HelmRelease
-      name: cde-flowscallback
-  - path: cde-splitpdf.yaml
-    target:
-      kind: HelmRelease
-      name: cde-splitpdf
-  - path: cde-worker-alert.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-alert
-  - path: cde-worker-copy.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-copy
-  - path: cde-worker-copyv2.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-copyv2
-  - path: cde-worker-create-versions.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-create-versions
-  - path: cde-worker-create-versionsv2.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-create-versionsv2
-  - path: cde-worker-markings.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-markings
-  - path: cde-worker-markingsv2.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-markingsv2
-  - path: cde-worker-sign.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-sign
-  - path: cde-worker-signv2.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-signv2
-  - path: cde-worker-update-bundles.yaml
-    target:
-      kind: HelmRelease
-      name: cde-worker-update-bundles
-  - path: cde.yaml
-    target:
-      kind: HelmRelease
-      name: cde
--- a/apps/checklists/asterus/backend.yaml
+++ b/apps/checklists/asterus/backend.yaml
@ -1,137 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: backend
-  namespace: checklist
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      backend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/checklists-backend:preprod_b1980fc6
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: regcred
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: backend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: backend-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8000
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        envs:
-          - name: HTTP_APP_HOST
-            value:
-              _default: 0.0.0.0
-          - name: HTTP_APP_PORT
-            value:
-              _default: "8000"
-          - name: HTTP_APP_ROOT_PATH
-            value:
-              _default: /checklists
-          - name: HTTP_APP_WORKERS
-            value:
-              _default: "8"
-          - name: HTTP_APP_ADMIN_ENABLE
-            value:
-              _default: "true"
-          - name: JWT_AUTH_ENABLE
-            value:
-              _default: "true"
-          - name: DEBUG
-            value:
-              _default: "false"
-
-        secretEnvs:
-          - name: DATABASE_HOST
-            secretName:
-              _default: checklists-postgresql-secret
-            secretKey: hostname
-          - name: DATABASE_PORT
-            secretName:
-              _default: checklists-postgresql-secret
-            secretKey: port
-          - name: DATABASE_NAME
-            secretName:
-              _default: checklists-postgresql-secret
-            secretKey: database
-          - name: DATABASE_USER
-            secretName:
-              _default: checklists-postgresql-secret
-            secretKey: username
-          - name: DATABASE_PASSWORD
-            secretName:
-              _default: checklists-postgresql-secret
-            secretKey: password
-          - name: JWT_AUTH_PUBLIC_KEY
-            secretName:
-              _default: checklists-public-key
-            secretKey: key
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/checklists/asterus/kustomization.yaml
+++ b/apps/checklists/asterus/kustomization.yaml
@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: checklist
-resources:
-  - backend.yaml
--- a/apps/checklists/uralkal/helmrelease.yaml
+++ b/apps/checklists/uralkal/helmrelease.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: checklists
-  namespace: checklists
-spec:
-  values:
-    services:
-      checklists:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/checklists/uralkal/kustomization.yaml
+++ b/apps/checklists/uralkal/kustomization.yaml
@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: helmrelease.yaml
-    target:
-      kind: HelmRelease
-      name: checklists
--- a/apps/comparisons/asterus/backend.yaml
+++ b/apps/comparisons/asterus/backend.yaml
@ -1,148 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: backend
-  namespace: comparisons
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      backend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-backend:964d9d277da96990fd89ddacabcfb2f4d7243635
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: backend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: backend-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8000
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        envs:
-          - name: POSTGRES_ADDRESS
-            value:
-              _default: postgres-service
-          - name: POSTGRES_PORT
-            value:
-              _default: "5432"
-          - name: POSTGRES_DB
-            value:
-              _default: comparisons_db
-          - name: POSTGRES_POOL_SIZE
-            value:
-              _default: "3"
-          - name: API_ADDRESS
-            value:
-              _default: 0.0.0.0:8000
-          - name: API_ADDRESS_FILE
-            value:
-              _default: 0.0.0.0:8000
-          - name: ENABLE_SQL_QUERY
-            value:
-              _default: "0"
-          - name: DOCUMENTATION_URL
-            value:
-              _default: http://documentations-service.documentations.svc.cluster.local:80/
-          - name: DOCUMENTATION_FILESTREAM_URL
-            value:
-              _default: http://documentations-filestream-service.documentations.svc.cluster.local:80/
-          - name: WORKFLOW_URL
-            value:
-              _default: http://workflows-api-service.workflow.svc.cluster.local:80/
-          - name: WORKSPACE_URL
-            value:
-              _default: http://workspaces-service.workspaces.svc.cluster.local:80/
-          - name: COMPARISON_URL
-            value:
-              _default: http://backend-service.comparisons.svc.cluster.local:8000/
-          - name: WORKFLOW_IMAGES_VERSION
-            value:
-              _default: master
-          - name: EXTERNAL_DOCUMENTATION_URL
-            value:
-              _default: http://documentations-service.documentations.svc.cluster.local:80/
-          - name: BIM_V2_INTERNAL_URL
-            value:
-              _default: http://bim-backend-v2-service.bim-api.svc.cluster.local:80/
-          - name: ENABLE_SSL
-            value:
-              _default: "0"
-
-        secretEnvs:
-          - name: POSTGRES_USER
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: POSTGRES_PASSWORD
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/comparisons/asterus/frontend.yaml
+++ b/apps/comparisons/asterus/frontend.yaml
@ -1,88 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: frontend
-  namespace: comparisons
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      frontend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-frontend:contour_8ce2d431
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: frontend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 80
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: frontend-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 80
-
-          targetPort:
-            _default: 80
-
-          portName:
-            _default: http
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/comparisons/asterus/kustomization.yaml
+++ b/apps/comparisons/asterus/kustomization.yaml
@ -1,7 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: comparisons
-resources:
-  - backend.yaml
-  - frontend.yaml
--- a/apps/comparisons/base/frontend.yaml
+++ b/apps/comparisons/base/frontend.yaml
@ -36,7 +36,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-frontend:contour_0570a1f1
+            _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-frontend:prod_6dc6e0c2
          pullPolicy:
            _default: IfNotPresent

--- a/apps/comparisons/uralkal/backend.yaml
+++ b/apps/comparisons/uralkal/backend.yaml
@ -1,112 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: backend
-  namespace: comparisons
-spec:
-  values:
-    services:
-      backend:
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-api-v2:contour_9a2bab4e
-
-        deployment:
-          port:
-            _default: 8080
-
-          args:
-            _default:
-              - |
-                set -a
-                [ -f /vault/secrets/comparisons-db ] && . /vault/secrets/comparisons-db
-                [ -f /vault/secrets/comparisons-jwt-public ] && export AUTH_PUBLIC_KEY="$(cat /vault/secrets/comparisons-jwt-public)"
-                set +a
-                cd /opt/comparisons
-                ./migrations up
-                exec ./api
-
-          resources:
-            requests:
-              cpu: null
-              memory: null
-
-          probes:
-            liveness:
-              httpGet:
-                port:
-                  _default: 8080
-            readiness:
-              httpGet:
-                port:
-                  _default: 8080
-
-        service:
-          targetPort:
-            _default: 8080
-
-        envs:
-          - name: APP_NAME
-            value:
-              _default: "comparisons-api-v2"
-
-          - name: APP_VERSION
-            value:
-              _default: "0.0.1"
-
-          - name: LOGGER_LOG_LEVEL
-            value:
-              _default: "info"
-
-          - name: DATABASE_NAME
-            value:
-              _default: "postgres"
-
-          - name: PGSSLMODE
-            value:
-              _default: "disable"
-
-          - name: HTTP_PORT
-            value:
-              _default: "8080"
-
-          - name: DOCUMENTATIONS_INTERNAL_HOST
-            value:
-              _default: "http://backend-api-svc.documentations.svc.cluster.local"
-
-          - name: DOCUMENTATIONS_EXTERNAL_HOST
-            value:
-              _default: "http://backend-api-svc.documentations.svc.cluster.local"
-
-          - name: WORKFLOWS_HOST
-            value:
-              _default: "http://backend-svc.processing.svc.cluster.local"
-
-          - name: WORKFLOWS_IMAGE_VERSION
-            value:
-              _default: "master"
-
-          - name: WORKFLOWS_DJANGO_HOST
-            value:
-              _default: "https://sarex.local.uralkali.com"
-
-          - name: WORKFLOWS_BIMV2_INTERNAL_HOST
-            value:
-              _default: "http://backend-svc.bim.svc.cluster.local"
-
-          - name: WORKSPACES_HOST
-            value:
-              _default: "http://backend-svc.workspaces.svc.cluster.local"
-
-          - name: EAV_HOST
-            value:
-              _default: "http://backend-svc.eav.svc.cluster.local"
-
-          - name: ABAP_FIXED_CONC
-            value:
-              _default: "0"
-
-          - name: WORKFLOWS_CONFIG_FILEPATH
-            value:
-              _default: "/etc/app/tasks-execution-config.json"
--- a/apps/comparisons/uralkal/frontend.yaml
+++ b/apps/comparisons/uralkal/frontend.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: frontend
-  namespace: comparisons
-spec:
-  values:
-    services:
-      frontend:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/comparisons/uralkal/kustomization.yaml
+++ b/apps/comparisons/uralkal/kustomization.yaml
@ -1,17 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: tasks-execution-config.yaml
-    target:
-      kind: ConfigMap
-      name: tasks-execution-config-comparisons-v2
-  - path: backend.yaml
-    target:
-      kind: HelmRelease
-      name: backend
-  - path: frontend.yaml
-    target:
-      kind: HelmRelease
-      name: frontend
--- a/apps/comparisons/uralkal/tasks-execution-config.yaml
+++ b/apps/comparisons/uralkal/tasks-execution-config.yaml
@ -1,122 +0,0 @@
---
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: tasks-execution-config-comparisons-v2
-  namespace: comparisons
-data:
-  tasks-execution-config-comparisons-v2.json: |
-    {
-        "abap": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "bim2bim_comparison": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "bim_api_metadata_inserter_v2": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "bim_api_metadata_inserter_v4": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "bim_abap_updater": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "build_ooc": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "calculate_deviation_job": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "cloud_to_cloud": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "cloud_to_surface": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "convert_to_potree": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "deviation_icp": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "las_to_tiff": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "pdf_cv_comparer": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "pdf_georeferencing": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "split_pdf_document": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        },
-        "webhook_caller": {
-            "executor": "k8s",
-            "resources": {
-                "cpu_requests": "2",
-                "memory_requests": "4Gi"
-            }
-        }
-    }
--- a/apps/contracts/uralkal/backend.yaml
+++ b/apps/contracts/uralkal/backend.yaml
@ -1,16 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: contracts
-  namespace: contracts
-spec:
-  values:
-    services:
-      contracts:
-        podAnnotations:
-          _default:
-            vault.hashicorp.com/agent-inject-template-contracts-db: |-
-              {{- with secret "secrets/data/apps/contracts/postgres" -}}
-              DB_URL=postgresql://{{ index .Data.data "username" }}:{{ index .Data.data "password" }}@{{ index .Data.data "host" }}:{{ index .Data.data "port" }}/{{ index .Data.data "database" }}?sslmode=disable
-              {{- end -}}
--- a/apps/contracts/uralkal/kustomization.yaml
+++ b/apps/contracts/uralkal/kustomization.yaml
@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: backend.yaml
-    target:
-      kind: HelmRelease
-      name: contracts
--- a/apps/control-interface/asterus/kustomization.yaml
+++ b/apps/control-interface/asterus/kustomization.yaml
@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: control-interface
-resources:
-  - srx-admin.yaml
--- a/apps/control-interface/asterus/srx-admin.yaml
+++ b/apps/control-interface/asterus/srx-admin.yaml
@ -1,95 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: srx-admin
-  namespace: control-interface
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      srx-admin:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/srx-admin:prod_feb59026
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: srx-admin
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 80
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: srx-admin-svc
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8080
-
-          targetPort:
-            _default: 80
-
-          portName:
-            _default: http
-
-        volumes:
-          _default:
-            - name: tmp-volume
-              mountPath:
-                _default: /tmp
-              emptyDir: {}
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/control-interface/base/admin-frontend.yaml
+++ b/apps/control-interface/base/admin-frontend.yaml
@ -1,94 +0,0 @@
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: admin-frontend
-  namespace: control-interface
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.7"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      admin-frontend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/admin-frontend:contour_9dc27b40
-          pullPolicy:
-            _default: IfNotPresent
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: admin-frontend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 80
-
-          resources:
-            requests:
-              cpu:
-                _default: 100m
-              memory:
-                _default: 100Mi
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: admin-frontend-svc
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8080
-
-          targetPort:
-            _default: 80
-
-          portName:
-            _default: http
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: regcred
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/control-interface/base/kustomization.yaml
+++ b/apps/control-interface/base/kustomization.yaml
@ -4,5 +4,4 @@ kind: Kustomization
 namespace: control-interface
 resources:
  - helmrelease.yaml
-  - admin-frontend.yaml

--- a/apps/control-interface/uralkal/kustomization.yaml
+++ b/apps/control-interface/uralkal/kustomization.yaml
@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-  - namespace.yaml
-  - psql-tools-debug.yaml
--- a/apps/control-interface/uralkal/namespace.yaml
+++ b/apps/control-interface/uralkal/namespace.yaml
@ -1,6 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: control-interface
-  labels:
-    istio-injection: enabled
--- a/apps/control-interface/uralkal/psql-tools-debug.yaml
+++ b/apps/control-interface/uralkal/psql-tools-debug.yaml
@ -1,25 +0,0 @@
---
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: psql-tools-debug
-  namespace: control-interface
-  labels:
-    app: psql-tools-debug
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: psql-tools-debug
-  template:
-    metadata:
-      labels:
-        app: psql-tools-debug
-    spec:
-      containers:
-        - name: debug
-          image: cr.yandex/crp3ccidau046kdj8g9q/mc-files:dev5
-          imagePullPolicy: IfNotPresent
-          command: ["/bin/sh", "-c", "while true; do sleep 3600; done"]
-      imagePullSecrets:
-        - name: regcred
--- a/apps/cross-section/asterus/frontend.yaml
+++ b/apps/cross-section/asterus/frontend.yaml
@ -1,88 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cross-section
-  namespace: cross-section
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      frontend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/cross-section-static:377ae058139538a53f3b90d2ee7e5585f9199497
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: frontend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: frontend-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8080
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/cross-section/asterus/kustomization.yaml
+++ b/apps/cross-section/asterus/kustomization.yaml
@ -1,6 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: cross-section
-resources:
-  - frontend.yaml
--- a/apps/cross-section/base/helmrelease.yaml
+++ b/apps/cross-section/base/helmrelease.yaml
@ -37,7 +37,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/cross-section-app:contour_c5e5d476
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cross-section-app:production_e09e648b
          pullPolicy:
            _default: IfNotPresent

--- a/apps/cross-section/uralkal/helmrelease.yaml
+++ b/apps/cross-section/uralkal/helmrelease.yaml
@ -1,15 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: cross-section-static
-  namespace: cross-section
-spec:
-  values:
-    services:
-      frontend:
-        deployment:
-          resources:
-            requests:
-              cpu: null
-              memory: null
--- a/apps/cross-section/uralkal/kustomization.yaml
+++ b/apps/cross-section/uralkal/kustomization.yaml
@ -1,9 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - ../base
-patches:
-  - path: helmrelease.yaml
-    target:
-      kind: HelmRelease
-      name: cross-section-static
--- a/apps/django/asterus/backend.yaml
+++ b/apps/django/asterus/backend.yaml
@ -1,359 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: backend
-  namespace: django
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      backend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_8f05291e
-          pullPolicy:
-            _default: Always
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: backend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: backend
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8000
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        volumes:
-          _default:
-            - name: django-configmap
-              mountPath:
-                _default: /opt/sarex/config/settings/production.py
-              subPath:
-                _default: production.py
-              readOnly:
-                _default: true
-              configMap:
-                name:
-                  _default: django-configmap
-                items:
-                  - key: production.py
-                    path:
-                      _default: production.py
-
-            - name: uwsgi-configmap
-              mountPath:
-                _default: /opt/sarex/uwsgi.ini
-              subPath:
-                _default: uwsgi.ini
-              readOnly:
-                _default: true
-              configMap:
-                name:
-                  _default: uwsgi-configmap
-                items:
-                  - key: uwsgi.ini
-                    path:
-                      _default: uwsgi.ini
-
-            - name: kafka-cert-volume
-              mountPath:
-                _default: /usr/local/share/ca-certificates
-              readOnly:
-                _default: true
-              configMap:
-                name:
-                  _default: kafka-cert
-
-        envs:
-          - name: ALLOWED_HOSTS
-            value:
-              _default: "*"
-          - name: SERVER_USE_CHANGELOG
-            value:
-              _default: "1"
-          - name: DJANGO_SETTINGS_MODULE
-            value:
-              _default: config.settings.production
-          - name: GATEWAY_HOST
-            value:
-              _default: http://pdm-api.documentations.svc.cluster.local:8080
-          - name: CELERY_REDIS_HOST
-            value:
-              _default: redis-service
-          - name: CELERY_REDIS_PORT
-            value:
-              _default: "6379"
-          - name: DJANGO_REDIS_HOST
-            value:
-              _default: redis-service
-          - name: DJANGO_REDIS_PORT
-            value:
-              _default: "6379"
-          - name: SERVER_ZITADEL_ENABLED
-            value:
-              _default: "False"
-          - name: SERVER_KAFKA_ENABLED
-            value:
-              _default: "False"
-          - name: KAFKA_TOPICS
-            value:
-              _default: '{"planning": "message-hub-stage", "ams-sync": "ams-sync"}'
-          - name: KAFKA_BOOTSTRAP_SERVERS
-            value:
-              _default: '["asterus-kafka-kafka-bootstrap.kafka.svc.cluster.local:9093"]'
-          - name: KAFKA_SECURITY_PROTOCOL
-            value:
-              _default: SSL
-          - name: KAFKA_SASL_MECHANISM
-            value:
-              _default: SCRAM-SHA-512
-          - name: KAFKA_SSL_CAFILE
-            value:
-              _default: /usr/local/share/ca-certificates/kafka.crt
-          - name: BIMV2_INTERNAL_HOST
-            value:
-              _default: http://bim-backend-v2-service.bim-api
-          - name: BIMV2_TIMEOUT
-            value:
-              _default: "60"
-          - name: JWT_KID
-            value:
-              _default: "1"
-          - name: SERVER_SYNC_KC_ADMIN_HANDLER
-            value:
-              _default: "True"
-          - name: PDM_SYNC
-            value:
-              _default: "1"
-          - name: KC_SYNC_ENABLE
-            value:
-              _default: "0"
-          - name: MEASUREMENTS_HOST
-            value:
-              _default: http://measurements-service.measurements.svc.cluster.local:8000/api
-          - name: MEASUREMENTS_USE_MEASUREMENTS
-            value:
-              _default: "1"
-          - name: SERVER_API_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: SERVER_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: WORKFLOWS_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: WORKFLOWS_BASE_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: SERVER_VERIFY_SSL
-            value:
-              _default: "False"
-          - name: WORKFLOWS_USE
-            value:
-              _default: "1"
-          - name: WORKFLOWS_TAG
-            value:
-              _default: stable
-          - name: SERVER_S3_STREAM_IMPORT
-            value:
-              _default: "1"
-          - name: SERVER_USE_CLICKHOUSE
-            value:
-              _default: "0"
-          - name: SERVER_USE_CREATE_COMPARED_GEOTIFF_TASK
-            value:
-              _default: "0"
-          - name: SERVER_USE_METASHAPE
-            value:
-              _default: "0"
-          - name: SERVER_CHANGELOG_MODE_SYSTEM_LOG
-            value:
-              _default: "0"
-          - name: SERVER_CHANGELOG_MODE
-            value:
-              _default: "1"
-          - name: ZITADEL_HOST
-            value:
-              _default: https://zitadel.asterus.ru
-          - name: SERVER_DJANGO_URLS
-            value:
-              _default: "1"
-          - name: CHECK_IMPORT_HASH
-            value:
-              _default: "1"
-          - name: EAV_ENABLE
-            value:
-              _default: "1"
-          - name: SERVER_CHECK_IMPORT_HASH
-            value:
-              _default: "1"
-          - name: SERVER_CHUNKED_PATH
-            value:
-              _default: /tmp/chunked_uploads/%Y/%m/%d
-          - name: SERVER_HIDE_USER_SCROLL_PERMISSIONS
-            value:
-              _default: "0"
-          - name: SERVER_USE_WRORKFLOW_STATUS
-            value:
-              _default: "1"
-          - name: GK_ENCRYPTION_KEY
-            value:
-              _default: zfDjuszywHSbAhY8KJQbESbpUYN74XTs
-          - name: SERVER_EXTERNAL_PDF_CONVERTER_HOST
-            value:
-              _default: http://export-project-service:8000
-          - name: S3_HOST
-            value:
-              _default: http://minio-service.minio.svc.cluster.local:9000
-          - name: AWS_S3_ENDPOINT_URL
-            value:
-              _default: http://minio-service.minio.svc.cluster.local:9000
-          - name: WORKFLOWS_TIMEOUT
-            value:
-              _default: "120"
-          - name: SERVER_LOGINGG_BODY_ACTION
-            value:
-              _default: "0"
-
-        secretEnvs:
-          - name: KC_CLIENT_ID
-            secretName:
-              _default: gatekeeper-secret
-            secretKey: client_id
-          - name: KC_CLIENT_SECRET
-            secretName:
-              _default: gatekeeper-secret
-            secretKey: client_secret
-          - name: KAFKA_SASL_PLAIN_USERNAME
-            secretName:
-              _default: kafka-secret
-            secretKey: username
-          - name: KAFKA_SASL_PLAIN_PASSWORD
-            secretName:
-              _default: kafka-secret
-            secretKey: password
-          - name: ZITADEL_ACCESS_TOKEN
-            secretName:
-              _default: zitadel-secret
-            secretKey: access_token
-          - name: JWT_PRIVATE_KEY
-            secretName:
-              _default: backend-secret
-            secretKey: ssh_private.key
-          - name: JWT_PUBLIC_KEY
-            secretName:
-              _default: backend-secret
-            secretKey: ssh_public.key
-          - name: DJANGO_POSTGRES_DATABASE
-            secretName:
-              _default: postgres-secret
-            secretKey: database
-          - name: DJANGO_POSTGRES_USER
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: DJANGO_POSTGRES_PASSWORD
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-          - name: DJANGO_POSTGRES_HOST
-            secretName:
-              _default: postgres-secret
-            secretKey: host
-          - name: DJANGO_POSTGRES_PORTS
-            secretName:
-              _default: postgres-secret
-            secretKey: port
-          - name: S3_LOGIN
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: login
-          - name: S3_PASSWORD
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: password
-          - name: S3_BUCKET
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: bucket
-          - name: CELERY_RABBITMQ_HOST
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: host
-          - name: CELERY_RABBITMQ_USER
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: username
-          - name: CELERY_RABBITMQ_PASSWORD
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: password
-          - name: CELERY_RABBITMQ_VHOST
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: vhost
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/django/asterus/celery.yaml
+++ b/apps/django/asterus/celery.yaml
@ -1,310 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: celery
-  namespace: django
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      celery:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/backend:production_8f05291e
-          pullPolicy:
-            _default: Always
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: celery
-
-          replicaCount:
-            _default: 1
-
-          command:
-            _default: ["celery", "-A", "config", "worker", "-B", "-l", "info", "-E", "-Q", "default", "-n", "default_worker.%h", "--concurrency=2"]
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: false
-
-        volumes:
-          _default:
-            - name: django-configmap
-              mountPath:
-                _default: /opt/sarex/config/settings/production.py
-              subPath:
-                _default: production.py
-              readOnly:
-                _default: true
-              configMap:
-                name:
-                  _default: django-configmap
-                items:
-                  - key: production.py
-                    path:
-                      _default: production.py
-
-            - name: kafka-cert-volume
-              mountPath:
-                _default: /usr/local/share/ca-certificates
-              readOnly:
-                _default: true
-              configMap:
-                name:
-                  _default: kafka-cert
-
-        envs:
-          - name: ALLOWED_HOSTS
-            value:
-              _default: "*"
-          - name: SERVER_USE_CHANGELOG
-            value:
-              _default: "1"
-          - name: DJANGO_SETTINGS_MODULE
-            value:
-              _default: config.settings.production
-          - name: CELERY_REDIS_HOST
-            value:
-              _default: redis-service
-          - name: CELERY_REDIS_PORT
-            value:
-              _default: "6379"
-          - name: DJANGO_REDIS_HOST
-            value:
-              _default: redis-service
-          - name: DJANGO_REDIS_PORT
-            value:
-              _default: "6379"
-          - name: BIMV2_INTERNAL_HOST
-            value:
-              _default: http://bim-backend-v2-service.bim-api
-          - name: BIMV2_TIMEOUT
-            value:
-              _default: "60"
-          - name: JWT_KID
-            value:
-              _default: "1"
-          - name: PDM_SYNC
-            value:
-              _default: "1"
-          - name: KC_SYNC_ENABLE
-            value:
-              _default: "0"
-          - name: MEASUREMENTS_HOST
-            value:
-              _default: http://measurements-service.measurements.svc.cluster.local:8000/api
-          - name: MEASUREMENTS_USE_MEASUREMENTS
-            value:
-              _default: "1"
-          - name: SERVER_API_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: SERVER_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: WORKFLOWS_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: WORKFLOWS_BASE_HOST
-            value:
-              _default: https://sarex.asterus.ru
-          - name: WORKFLOWS_USE
-            value:
-              _default: "1"
-          - name: WORKFLOWS_TAG
-            value:
-              _default: stable
-          - name: SERVER_S3_STREAM_IMPORT
-            value:
-              _default: "1"
-          - name: SERVER_USE_CLICKHOUSE
-            value:
-              _default: "0"
-          - name: SERVER_USE_CREATE_COMPARED_GEOTIFF_TASK
-            value:
-              _default: "0"
-          - name: SERVER_USE_METASHAPE
-            value:
-              _default: "0"
-          - name: SERVER_CHANGELOG_MODE_SYSTEM_LOG
-            value:
-              _default: "0"
-          - name: SERVER_CHANGELOG_MODE
-            value:
-              _default: "1"
-          - name: SERVER_DJANGO_URLS
-            value:
-              _default: "1"
-          - name: CHECK_IMPORT_HASH
-            value:
-              _default: "1"
-          - name: EAV_ENABLE
-            value:
-              _default: "1"
-          - name: SERVER_CHECK_IMPORT_HASH
-            value:
-              _default: "1"
-          - name: SERVER_ZITADEL_ENABLED
-            value:
-              _default: "True"
-          - name: SERVER_KAFKA_ENABLED
-            value:
-              _default: "True"
-          - name: SERVER_CHUNKED_PATH
-            value:
-              _default: /tmp/chunked_uploads/%Y/%m/%d
-          - name: SERVER_HIDE_USER_SCROLL_PERMISSIONS
-            value:
-              _default: "0"
-          - name: KAFKA_TOPICS
-            value:
-              _default: '{"planning": "message-hub-stage", "ams-sync": "ams-sync"}'
-          - name: KAFKA_BOOTSTRAP_SERVERS
-            value:
-              _default: '["asterus-kafka-kafka-bootstrap.kafka.svc.cluster.local:9093"]'
-          - name: KAFKA_SECURITY_PROTOCOL
-            value:
-              _default: SSL
-          - name: KAFKA_SASL_MECHANISM
-            value:
-              _default: SCRAM-SHA-512
-          - name: KAFKA_SSL_CAFILE
-            value:
-              _default: /usr/local/share/ca-certificates/kafka.crt
-          - name: SERVER_USE_WRORKFLOW_STATUS
-            value:
-              _default: "1"
-          - name: SERVER_EXTERNAL_PDF_CONVERTER_HOST
-            value:
-              _default: http://export-project-service:8000
-          - name: S3_HOST
-            value:
-              _default: http://minio-service.minio.svc.cluster.local:9000
-          - name: AWS_S3_ENDPOINT_URL
-            value:
-              _default: http://minio-service.minio.svc.cluster.local:9000
-          - name: WORKFLOWS_TIMEOUT
-            value:
-              _default: "120"
-          - name: SERVER_LOGINGG_BODY_ACTION
-            value:
-              _default: "0"
-
-        secretEnvs:
-          - name: KAFKA_SASL_PLAIN_USERNAME
-            secretName:
-              _default: kafka-secret
-            secretKey: username
-          - name: KAFKA_SASL_PLAIN_PASSWORD
-            secretName:
-              _default: kafka-secret
-            secretKey: password
-          - name: KC_USERNAME
-            secretName:
-              _default: kc-admin
-            secretKey: username
-          - name: KC_PASSWORD
-            secretName:
-              _default: kc-admin
-            secretKey: password
-          - name: JWT_PRIVATE_KEY
-            secretName:
-              _default: backend-secret
-            secretKey: ssh_private.key
-          - name: JWT_PUBLIC_KEY
-            secretName:
-              _default: backend-secret
-            secretKey: ssh_public.key
-          - name: DJANGO_POSTGRES_DATABASE
-            secretName:
-              _default: postgres-secret
-            secretKey: database
-          - name: DJANGO_POSTGRES_USER
-            secretName:
-              _default: postgres-secret
-            secretKey: username
-          - name: DJANGO_POSTGRES_PASSWORD
-            secretName:
-              _default: postgres-secret
-            secretKey: password
-          - name: DJANGO_POSTGRES_HOST
-            secretName:
-              _default: postgres-secret
-            secretKey: host
-          - name: DJANGO_POSTGRES_PORTS
-            secretName:
-              _default: postgres-secret
-            secretKey: port
-          - name: S3_LOGIN
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: login
-          - name: S3_PASSWORD
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: password
-          - name: S3_BUCKET
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: bucket
-          - name: CELERY_RABBITMQ_HOST
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: host
-          - name: CELERY_RABBITMQ_USER
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: username
-          - name: CELERY_RABBITMQ_PASSWORD
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: password
-          - name: CELERY_RABBITMQ_VHOST
-            secretName:
-              _default: rabbitmq-secret
-            secretKey: vhost
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/django/asterus/django-configmap.yaml
+++ b/apps/django/asterus/django-configmap.yaml
--- a/apps/django/asterus/export-project.yaml
+++ b/apps/django/asterus/export-project.yaml
@ -1,105 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: export-project
-  namespace: django
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      export-project:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_37a48176
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: export-project
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 8000
-
-          resources:
-            limits:
-              cpu:
-                _default: "2"
-              memory:
-                _default: 16Gi
-            requests:
-              cpu:
-                _default: "1"
-              memory:
-                _default: 512Mi
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: export-project-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 8000
-
-          targetPort:
-            _default: 8000
-
-          portName:
-            _default: http
-
-        envs:
-          - name: TIMEOUT
-            value:
-              _default: "180"
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/django/asterus/frontend.yaml
+++ b/apps/django/asterus/frontend.yaml
@ -1,105 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: frontend
-  namespace: django
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      frontend:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.16.3
-          pullPolicy:
-            _default: IfNotPresent
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: frontend
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 80
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: frontend-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 80
-
-          targetPort:
-            _default: 80
-
-          portName:
-            _default: http
-
-        volumes:
-          _default:
-            - name: nginx-configmap
-              mountPath:
-                _default: /etc/nginx/nginx.conf
-              subPath:
-                _default: nginx.conf
-              readOnly:
-                _default: true
-              configMap:
-                name:
-                  _default: nginx-configmap
-                items:
-                  - key: nginx.conf
-                    path:
-                      _default: nginx.conf
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/django/asterus/kafka-cert.yaml
+++ b/apps/django/asterus/kafka-cert.yaml
@ -1,37 +0,0 @@
-apiVersion: v1
-data:
-  kafka.crt: |
-    -----BEGIN CERTIFICATE-----
-    MIIFLTCCAxWgAwIBAgIUeuNKW4rB4ReiwjDidNIdob7VRokwDQYJKoZIhvcNAQEN
-    BQAwLTETMBEGA1UECgwKaW8uc3RyaW16aTEWMBQGA1UEAwwNY2x1c3Rlci1jYSB2
-    MDAeFw0yNTA4MjYxMDM0NDRaFw0yNjA4MjYxMDM0NDRaMC0xEzARBgNVBAoMCmlv
-    LnN0cmltemkxFjAUBgNVBAMMDWNsdXN0ZXItY2EgdjAwggIiMA0GCSqGSIb3DQEB
-    AQUAA4ICDwAwggIKAoICAQCv7lvKnTUpgnDd91YgCMQSYTSVUdkkQITXZENXj2km
-    UN5k2NhnDIMOeHD4Bu8fjSUvELcilNAgsPqKNWO97CWtU9/phxsQRMgDwywtyr8Q
-    W3Vc2RYk/7vcpi77M/IjmFoRExXowO9U3mLNd0vACk+yC7WObcNr9veFnVyrmoL3
-    iOqLbmzKiZvdIz1f6lwDDOXNuj26Ct6jRatV96HcqKzK50Jj9eS5SvV57JQLvTsZ
-    LbPnesAxgKzW7sci6N9lB9jrDirBl2h/QJXAmhUyg2yAvrU8wBTTpQWCdQRQ54Pv
-    LCZV3iXMkTYkxoyCg/GPbb2M7DF1sEe45iWsYkqDsWvdhirfp8BBVp+oni3xmj9J
-    +8hzB2MZhyA9i6v6Hfua7d0ExKUhuJkUxBcGyFHbXpC2m2m8plaHL2mNBXAuQZDw
-    wf+aHvHo2QLoNFL2xR8/63IHosnnRgzdKpZX6Z1Ftd8caHf/L+XgI3ET8LwklC55
-    y4FmFQwd8rOGiR38Ixg9zhr44tV3foWWrIM+sb/ni4UokeGkX2AymSsdln9pAnIj
-    usGG9ZuSZUPZ+w5HjtL3hxh9pbGdYja2YcfusCCQK56LBWRJnB8W/IafEOvVxMT/
-    gqx6Hee/geY3G2LRlMfsLRAbCvYOIi7kDzOM/LnM+XlbEkJO8uyjnT5wbCFCRnvy
-    nwIDAQABo0UwQzAdBgNVHQ4EFgQUeNSYqykN5qUxAfLJ7z9Say0XIHAwEgYDVR0T
-    AQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQENBQADggIB
-    AH82HGTXnJKbBln7q+Wx9chwMUFZc4u43Q0QAvCgGXMRFa5Dl4x/9rtrYYuDpZwh
-    /GKgOkhZ/SKLeuy9e7bgoHnt2sNR4CqAjK6YQp7o5aBNRGhiQZTkfjoG/P17AV7e
-    nKP65WXPAirouUxlvC8Kplh2vsuUkGcjzsKRTYQRNR1+yHw+P91qcX+RglrHFyMJ
-    wWKOldwgR3Mit+tAMbgioqrNTmwIEREDCF0DcJuX3LKTo7/q3I9cMFhz7/kk5CTm
-    pePoWMcvhgOX/cQcqNA7Q0HAOIV3OioxAod+XyjpaTo42YrTUSjq5Rl2a9U7GNN/
-    xazxT+YDs/mHSP0Yt/5jxMSjsifPP4l4KP9YvqiC7UZGrZ9ctzkg3UlQmr87Km9W
-    FqVLoX6Y1OmNB/c5XCg4S4g2q5VavXM792fn1ow6oR5hgDHXBLNA+TKWFmJ5UXJB
-    z4l7Hn7rFJB5e9QVEDRIzr8c2QcUZ668kicP3Oh45NywMcSV6GZO4PNDNsNW0kFf
-    3txTYwDEvT3n83C0lybw2hgLl3Q//lX+Zn3TMdqGVXkCXR0df45U8p14Wfe7QRtb
-    Jmg3tvOOpueyc3I+mrpDbyxdYQxr8IZdFoaV+mZUCi+ezMrHBNNNq0Lc/t2ICa+p
-    bpTSKuKNG91nPGXEd7sFGL8ZYypObQc5HC6wMCeVC3Cx
-    -----END CERTIFICATE-----
-kind: ConfigMap
-metadata:
-  name: kafka-cert
-  namespace: django
--- a/apps/django/asterus/kustomization.yaml
+++ b/apps/django/asterus/kustomization.yaml
@ -1,14 +0,0 @@
---
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-namespace: django
-resources:
-  - django-configmap.yaml
-  - uwsgi-configmap.yaml
-  - kafka-cert.yaml
-  - nginx-configmap.yaml
-  - backend.yaml
-  - celery.yaml
-  - export-project.yaml
-  - s3-proxy.yaml
-  - frontend.yaml
--- a/apps/django/asterus/nginx-configmap.yaml
+++ b/apps/django/asterus/nginx-configmap.yaml
@ -1,112 +0,0 @@
-apiVersion: v1
-data:
-  nginx.conf: |
-    worker_processes auto;
-
-    pid /var/run/nginx.pid;
-
-    events {
-        use epoll;
-        worker_connections 1024;
-    }
-
-    http {
-
-        # Basic Settings
-        large_client_header_buffers 8 128k;
-        sendfile on;
-        tcp_nopush on;
-        tcp_nodelay on;
-        keepalive_timeout 300;
-        types_hash_max_size 2048;
-        client_max_body_size 5000M;
-        client_header_buffer_size 5M;
-        # server_tokens off;
-        # server_names_hash_bucket_size 64;
-        # server_name_in_redirect off;
-        include /etc/nginx/mime.types;
-        default_type application/octet-stream;
-
-        # Logging Settings
-        access_log /var/log/nginx/access.log;
-        error_log /var/log/nginx/error.log;
-
-        # GZIP Settings
-        gzip on;
-        gzip_vary on;
-        gzip_proxied any;
-        gzip_comp_level 6;
-        gzip_buffers 16 8k;
-        gzip_http_version 1.1;
-        gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
-
-        log_format main '$remote_addr - $remote_user [$time_local] "$request" '
-                        '$status $body_bytes_sent "$http_referer" '
-                        '"$http_user_agent" "$http_x_forwarded_for"';
-
-        server {
-            listen 80;
-            listen [::]:80;
-            root /opt/react_client/;
-
-            proxy_set_header Host 'sarex.asterus.ru';
-
-            location ~^/workflows/(.+).js {
-                rewrite /workflows/(.+) /$1 break;
-                proxy_pass http://frontend-service.workflows.svc.cluster.local:8080;
-            }
-
-            location = /static/index.bundle.js {
-                add_header Cache-Control 'no-store no-cache, must-revalidate, proxy-revalidate, max-age=0';
-                if_modified_since off;
-                expires off;
-            }
-
-            location ~^/api/pm/ {
-              proxy_pass http://backend-service.pm.svc.cluster.local:8000;
-          }
-
-            location ~^/(api|admin)/ {
-                # proxy_set_header Host $host;
-                # proxy_set_header Referer $http_referer;
-                proxy_pass http://backend-service:8000;
-            }
-
-            location @index {
-                add_header Cache-Control 'no-cache, must-revalidate, proxy-revalidate, max-age=0';
-                if_modified_since off;
-                expires off;
-                try_files /static/index.html =404;
-            }
-
-            location /service-worker.js {
-                try_files /static/$uri @index;
-            }
-
-            location ~ ^/workspaces-v2/(.+)\.wasm$ {
-              rewrite /workspaces-v2/(.+) /$1 break;
-              proxy_pass http://workspaces-v2-frontend-static-service.workspaces.svc.cluster.local:80;
-
-                add_header Content-Type application/wasm;
-                proxy_set_header Accept application/wasm;
-
-            }
-
-          location ~ ^/workspaces-v2/(.+)\.js$ {
-              rewrite /workspaces-v2/(.+) /$1 break;
-              proxy_pass http://workspaces-v2-frontend-static-service.workspaces.svc.cluster.local:80;
-          }
-            location ~^/comparisons/static/(.+).js {
-                rewrite /comparisons/static/(.+) /$1 break;
-                proxy_pass http://frontend-service.comparisons.svc.cluster.local:80;
-            }
-
-            location / {
-                try_files $uri @index;
-            }
-        }
-    }
-kind: ConfigMap
-metadata:
-  name: nginx-configmap
-  namespace: django
--- a/apps/django/asterus/s3-proxy.yaml
+++ b/apps/django/asterus/s3-proxy.yaml
@ -1,113 +0,0 @@
---
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: s3-proxy
-  namespace: django
-
-spec:
-  interval: 10m
-
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-
-  install:
-    remediation:
-      retries: 3
-
-  upgrade:
-    remediation:
-      retries: 3
-
-  values:
-    global:
-      env: _default
-
-    services:
-      s3-proxy:
-        enabled: true
-
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/s3-proxy:stable
-          pullPolicy:
-            _default: Always
-
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: dockerhub
-
-        deployment:
-          enabled: true
-
-          name:
-            _default: s3-proxy
-
-          replicaCount:
-            _default: 1
-
-          port:
-            _default: 80
-
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-
-        service:
-          enabled: true
-
-          name:
-            _default: s3-proxy-service
-
-          type:
-            _default: ClusterIP
-
-          port:
-            _default: 80
-
-          targetPort:
-            _default: 80
-
-          portName:
-            _default: http
-
-        envs:
-          - name: AWS_API_ENDPOINT
-            value:
-              _default: http://minio-service.minio.svc.cluster.local:9000
-          - name: ACCESS_LOG
-            value:
-              _default: "true"
-          - name: CORS_ALLOW_HEADERS
-            value:
-              _default: "Content-Type, Accept-Ranges, Content-Range, Content-Encoding"
-
-        secretEnvs:
-          - name: AWS_ACCESS_KEY_ID
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: login
-          - name: AWS_SECRET_ACCESS_KEY
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: password
-          - name: AWS_S3_BUCKET
-            secretName:
-              _default: sarex-media-storage-secret
-            secretKey: bucket
-
-        commitSha: ""
-        gitlabUri: ""
-        gitlabJobUrl: ""
-        owner: ""
--- a/apps/django/asterus/uwsgi-configmap.yaml
+++ b/apps/django/asterus/uwsgi-configmap.yaml
@ -1,30 +0,0 @@
-apiVersion: v1
-data:
-  uwsgi.ini: |-
-    [uwsgi]
-    module                 = config.wsgi:application
-    DJANGO_SETTINGS_MODULE = config.settings.production
-    DEBUG                  = True
-    http                   = 0.0.0.0:8000
-    processes              = 8
-    master                 = true
-    vacuum                 = true
-    enable-threads         = true
-    buffer-size            = 65535
-    stats                  = :3031
-    stats-http             = true
-    memory-report          = true
-    lazy-apps              = true
-    # listen                 = 1024
-    disable-write-exception= 0
-    harakiri               = 300
-    socket-timeout         = 300
-    chunked-input-timeout  = 300
-    http-timeout           = 300
-    worker-reload-mercy    = 240
-    mule-reload-mercy      = 240
-    static-map = /api/static=/opt/sarex/static/
-kind: ConfigMap
-metadata:
-  name: uwsgi-configmap
-  namespace: django
--- a/apps/django/base/django-configmap.yaml
+++ b/apps/django/base/django-configmap.yaml
@ -87,7 +87,7 @@ data:
        'Bearer',
    )

-    HOST = os.environ.get("DJANGO_HOST", "https://sarex.contour.infra.sarex.tech")
+    HOST = "https://sarex.contour.infra.sarex.tech"

    POSTGRES_DATABASE = os.environ.get('DJANGO_POSTGRES_DATABASE')
    POSTGRES_USER = os.environ.get('DJANGO_POSTGRES_USER')
@ -305,11 +305,6 @@ data:
            "uri": "/management/projects"
        },

-        {
-            "name": "Справочники",
-            "uri": "/assets"
-        },
-
        #  {
        #     "name": "Обзор",
        #     "uri": "/projects"
--- a/apps/django/base/frontend.yaml
+++ b/apps/django/base/frontend.yaml
@ -29,7 +29,7 @@ spec:
        enabled: true
        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.30.1
+            _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-frontend-dev:contour_5.22.3
          pullPolicy:
            _default: IfNotPresent
        deployment:
--- a/apps/django/brusnika-prod/s3-proxy.yaml
+++ b/apps/django/brusnika-prod/s3-proxy.yaml
@ -35,7 +35,7 @@ spec:

        image:
          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/s3-proxy:stable
+            _default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_37a48176
          pullPolicy:
            _default: IfNotPresent

@ -89,7 +89,7 @@ spec:
        envs:
          - name: AWS_API_ENDPOINT
            value:
-              _default: "https://obs.ru-moscow-1.hc.sbercloud.ru"
+              _default: "http://minio-svc.minio.svc.cluster.local:9000"
          - name: APP_PORT
            value:
              _default: "8000"
--- a/apps/django/brusnika-stage/celery.yaml
+++ b/apps/django/brusnika-stage/celery.yaml
@ -330,14 +330,6 @@ spec:
          - name: KC_USE_REDIRECT_LOGOUT
            value:
              _default: "True"
-          - name: CACHE_HOST
-            value:
-              _default: "redis.pm.svc.cluster.local"
-
-          - name: RESOURCES_INTERNAL_HOST
-            value:
-              _default: "http://iams.iam.svc.cluster.local:8080"
-
        secretEnvs:
          - name: SERVER_SUPERSET_JWT_SECRET
            secretName:
--- a/apps/django/brusnika-stage/export-project.yaml
+++ b/apps/django/brusnika-stage/export-project.yaml
@ -88,11 +88,6 @@ spec:
        labels:
          monitoring: prometheus

-        envs:
-          - name: TIMEOUT
-            value:
-              _default: "180"
-
        commitSha: ""
        gitlabUri: ""
        gitlabJobUrl: ""
--- a/apps/django/brusnika-stage/nginx-configmap.yaml
+++ b/apps/django/brusnika-stage/nginx-configmap.yaml
@ -101,8 +101,7 @@ data:

            location = /static/pdf-runtime/assets/mupdf-wasm.wasm {
                alias /opt/react_client/static/pdf-runtime/assets/mupdf-wasm.wasm;
-                types { }
-                default_type application/wasm;
+                add_header Content-Type application/wasm always;
                add_header Cache-Control "public, max-age=31536000, immutable" always;
                add_header Access-Control-Allow-Origin "*" always;
                add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@ -111,8 +110,7 @@ data:

            location = /workspaces-v2/worker/static/viewer-pdf/mupdf-wasm.js {
                alias /opt/react_client/static/viewer-pdf/mupdf-wasm.js;
-                types { }
-                default_type application/javascript;
+                add_header Content-Type application/javascript always;
                add_header Cache-Control "public, max-age=31536000, immutable" always;
                add_header Access-Control-Allow-Origin "*" always;
                add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@ -121,8 +119,7 @@ data:

            location = /workspaces-v2/worker/mupdf.worker-3.3.9.js {
                alias /opt/react_client/static/pdf-runtime/mupdf.worker-3.3.9.js;
-                types { }
-                default_type application/javascript;
+                add_header Content-Type application/javascript always;
                add_header Cache-Control "public, max-age=31536000, immutable" always;
                add_header Access-Control-Allow-Origin "*" always;
                add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@ -131,8 +128,7 @@ data:

            location = /workspaces-v2/worker/static/viewer-pdf/mupdf.js {
                alias /opt/react_client/static/viewer-pdf/mupdf.js;
-                types { }
-                default_type application/javascript;
+                add_header Content-Type application/javascript always;
                add_header Cache-Control "public, max-age=31536000, immutable" always;
                add_header Access-Control-Allow-Origin "*" always;
                add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
@ -140,8 +136,7 @@ data:
            }

            location = /workspaces-v2/worker/static/viewer-pdf/mupdf-wasm.wasm {
-                types { }
-                default_type application/wasm;
+                add_header Content-Type application/wasm always;
                alias /opt/react_client/static/viewer-pdf/mupdf-wasm.wasm;
            }

@ -149,8 +144,7 @@ data:
            rewrite /workspaces-v2/(.+) /$1 break;
            proxy_pass http://workspaces-v2-frontend-static-service.workspaces.svc.cluster.local:8080;

-            proxy_hide_header Content-Type;
-            add_header Content-Type application/wasm always;
+            add_header Content-Type application/wasm;
            proxy_set_header Accept application/wasm;
        }

--- a/apps/django/brusnika-stage/sarex-backend.yaml
+++ b/apps/django/brusnika-stage/sarex-backend.yaml
@ -313,18 +313,6 @@ spec:
          - name: KC_USE_REDIRECT_LOGOUT
            value:
              _default: "True"
-          - name: RESOURCES_INTERNAL_HOST
-            value:
-              _default: "http://iams.iam.svc.cluster.local:8080"
-
-          - name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED
-            value:
-              _default: "True"
-
-          - name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED
-            value:
-              _default: "True"
-
        secretEnvs:
          - name: SERVER_SUPERSET_JWT_SECRET
            secretName:
--- a/apps/django/d8-ugmk-prod/backend.yaml
+++ b/apps/django/d8-ugmk-prod/backend.yaml
@ -8,9 +8,6 @@ spec:
  values:
    services:
      backend:
-        deployment:
-          replicaCount:
-            _default: 2
        envs:
          - name: ALLOWED_HOSTS
            value:
@ -21,9 +18,6 @@ spec:
          - name: SERVER_ZITADEL_ENABLED
            value:
              _default: "True"
-          - name: DJANGO_HOST
-            value:
-              _default: "https://sarex.uralmine.com"
          - name: DJANGO_SETTINGS_MODULE
            value:
              _default: config.settings.production
--- a/apps/django/ugok/django-configmap.yaml
+++ b/apps/django/ugok/django-configmap.yaml
--- a/Show More
+++ b/Show More