apps/django/d8-ugmk-prod/backend.yaml

@@ -8,9 +8,6 @@ spec:
   values:
     services:
       backend:
-        deployment:
-          replicaCount:
-            _default: 2
         envs:
           - name: ALLOWED_HOSTS
             value:

apps/eav/wb/django-configmap.yaml

@@ -18,7 +18,7 @@ data:
 
     # DEBUG SETTINGS START
     # ---------------------------------------------------------------------------------------------------------------------
-    DEBUG = False
+    DEBUG = True
     ALLOWED_HOSTS = ['*']
     # ---------------------------------------------------------------------------------------------------------------------
     # DEBUG SETTINGS END

apps/flows/d8-ugmk-prod/backend.yaml

@@ -9,8 +9,6 @@ spec:
     services:
       backend:
         deployment:
-          replicaCount:
-            _default: 2
           args:
             _default:
               - |

apps/workspaces/base/frontend.yaml

@@ -29,7 +29,7 @@ spec:
         enabled: true
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/workspaces-v2-frontend:contour_2da2a00e
+            _default: cr.yandex/crp3ccidau046kdj8g9q/workspaces-v2-frontend:contour_1b5d64e4
           pullPolicy:
             _default: IfNotPresent
         deployment:

apps/workspaces/ugok/frontend.yaml

@@ -36,7 +36,7 @@ spec:
 
         image:
           name:
-            _default: 10.4.10.187:80/library/workspaces-v2-frontend:contour_1b5d64e4
+            _default: 10.4.10.187:80/library/workspaces-v2-frontend:contour_07373a45
           pullPolicy:
             _default: IfNotPresent
 

clusters/stand/00-vault/kustomization.yaml

@@ -1,5 +1,4 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - ./helm-repositories.yaml
   - ../../../infrastructure/vault/contour-template

clusters/stand/helm-repositories.yaml

@@ -7,8 +7,6 @@ metadata:
 spec:
   type: oci
   interval: 10m0s
-  url: ${CHART_REPO:=oci://cr.yandex/crp3ccidau046kdj8g9q/charts}
+  url: oci://cr.yandex/crp3ccidau046kdj8g9q/charts
   secretRef:
-    name: ${CHART_REPO_SECRET:=yc-cr-auth}
-  certSecretRef:
-    name: chart-repo-ca
+    name: yc-cr-auth

clusters/stand/kustomization.yaml

@@ -2,4 +2,5 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - ./flux-system
+  - ./helm-repositories.yaml
   - ./layers.yaml

clusters/stand/layers.yaml

@@ -61,7 +61,7 @@ metadata:
   namespace: flux-system
 spec:
   interval: 10m0s
-  timeout: 35m0s
+  timeout: 20m0s
   path: ./clusters/stand/30-platform
   prune: true
   wait: true

infrastructure/camunda/contour-template/camunda.yaml

@@ -6,9 +6,7 @@ metadata:
 spec:
   dependsOn: []
   interval: 5m
-  timeout: 30m
-  waitStrategy:
-    name: legacy
+  timeout: 15m
   postRenderers:
     - kustomize:
         patches:

infrastructure/kafka/contour-template/kafka.yaml

@@ -47,7 +47,7 @@ spec:
       automountServiceAccountToken: true
     listeners:
       client:
-        protocol: SASL_PLAINTEXT
+        protocol: SASL_SSL
         sslClientAuth: "none"
     provisioning:
       enabled: false

infrastructure/zitadel/contour-template/zitadel.yaml

@@ -110,17 +110,6 @@ spec:
       configmapConfig:
         ExternalDomain: ${HOST_LOGIN}
         ExternalSecure: true
-        # IAM_OWNER service user for sarexctl phase zitadel-setup; the chart stores its key
-        # in secret zitadel/sarex-installer. Created only on the first instance setup.
-        FirstInstance:
-          Org:
-            Machine:
-              Machine:
-                Username: sarex-installer
-                Name: sarexctl
-              MachineKey:
-                ExpirationDate: "2099-01-01T00:00:00Z"
-                Type: 1
       debug:
         enabled: false
     postgresqlSecret: