feat: дополнительные поддержка

1. outbox-relay для кафка
2. маршрутизация

CLAUDE.md

@@ -25,13 +25,11 @@
 
 | Путь | Что |
 |---|---|
-| `clusters/` | 17 точек входа Flux + шаблон `contour` — **источник истины «что где раскатано»** |
+| `clusters/` | 10 точек входа Flux — **источник истины «что где раскатано»** |
-| `infrastructure/` | 44 платформенных компонента |
+| `infrastructure/` | 36 платформенных компонентов |
-| `apps/` | 39 прикладных сервисов |
+| `apps/` | 37 прикладных сервисов |
-| `docs/apps/` | 34 mermaid-диаграммы по сервисам + `README.md` с доменной группировкой |
+| `docs/apps/` | 35 mermaid-диаграмм по сервисам + `README.md` с доменной группировкой |
-| `docs/architecture/` | модель контура в ArchiMate + скрипты-сканеры (`scan_calls.py`, `scan_contour.py`) и сборка (`build_archimate.py`); реальные значения инсталляций сюда не кладутся, только `*.example.json` |
 | `docs/closed-contour-deployment.md` | ранбук поднятия закрытого контура |
-| `ci/`, `.gitlab-ci.yml`, `Dockerfile` | на тег `vX.Y.Z`: образ офлайн-зеркала `iac-offline` и публикация «слайсов» контуров (см. ниже) |
 | `README.md` | mermaid-мегакарта платформы, структура репозитория, инструкции по добавлению app / infra / кластера |
 | `IAC-CATALOG.md` | каталог всего `infra/*`; §5 — про этот репозиторий |
 | `inventory.yaml` | сгенерированный снимок прода: 59 namespace → kind → имена |
@@ -40,18 +38,15 @@
 
 **Кластер.** `clusters/<cluster>/kustomization.yaml` — плоский список `../../apps/<app>/<cluster>`. Инфраструктура подключается двумя разными способами:
 
-- `d8-ugmk-prod`, `sarex-contour`, `ugok`, `uralkal`, `vad` — прямо в корневом kustomization как `../../infrastructure/<comp>/<c>`;
+- `d8-ugmk-prod` — прямо в корневом kustomization как `../../infrastructure/<comp>/d8-ugmk-prod`;
-- `brusnika-prod`, `brusnika-stage`, `vk-infra`, `vk-prod` — через `clusters/<c>/infrastructure/kustomization.yaml`, который ссылается на оверлеи `../../../infrastructure/<comp>/<c>` (`base` + патч HelmRelease + сопутствующие манифесты компонента);
+- `brusnika-prod`, `brusnika-stage` — через `clusters/<c>/infrastructure/kustomization.yaml`, который ссылается на оверлеи `../../../infrastructure/<comp>/<c>` (`base` + патч HelmRelease + сопутствующие манифесты компонента);
-- `wb`, `yc-cps-prod`, `yc-infra-prod`, `yc-k8s-test-02` — через `clusters/<c>/infrastructure/kustomization.yaml`, который ссылается на `../../../infrastructure/<comp>` (резолвится в `base`), а различия лежат в `clusters/<c>/infrastructure/patches/*.yaml`;
+- `wb` — через `clusters/wb/infrastructure/kustomization.yaml`, который ссылается на `../../../infrastructure/<comp>` (резолвится в `base`), а различия лежат в `clusters/wb/infrastructure/patches/*.yaml`.
-- `stand` — послойно: `layers.yaml` объявляет Flux-`Kustomization` `00-vault → 10-mesh → 20-data → 30-platform → 40-routing` (каталоги `clusters/stand/<NN>-<layer>/`). Слои ссылаются на оверлеи `infrastructure/<comp>/contour-template`, а значения контура (`${STORAGE_CLASS}`, `${HOST_*}`, `${GATEWAY_REPLICAS}`) Flux подставляет через `postBuild.substituteFrom` из ConfigMap `contour-vars`.
 
-Кластеры с приложениями: `asterus`, `brusnika-prod`, `brusnika-stage`, `d8-ugmk-prod`, `sarex-contour`, `ugok`, `uralkal`, `vad`, `wb`, `yc-ecp`, `yc-k8s-test`. Только инфраструктура: `stand`, `vk-infra`, `vk-prod`, `yc-cps-prod`, `yc-infra-prod`, `yc-k8s-test-02`. Шаблон: `contour`.
+Кластеры: `brusnika-prod`, `brusnika-stage`, `d8-ugmk-prod`, `wb`, `yc-cps-prod`, `yc-ecp`, `yc-infra-prod`, `yc-k8s-test`, `yc-k8s-test-02`, `contour`.
 
 **Приложение.** `apps/<app>/base/` — по одному `.yaml` на процесс (`backend.yaml`, `celery.yaml`, `frontend.yaml`) плюс `namespace.yaml`; оверлеи в `apps/<app>/<cluster>/`. Namespace = имя приложения. Рядом с манифестами лежит документация: `CONFIGURATION.md` (все env-переменные и откуда берутся), `ENDPOINTS.md` (исходящие HTTP-вызовы), `openapi.yaml` (входящий контракт), `.env.example`. Если процессов несколько — файлы с префиксом процесса: `api.ENDPOINTS.md`, `pdm.CONFIGURATION.md`, `frontend.CONFIGURATION.md`.
 
-**Инфра-компонент.** `infrastructure/<comp>/base/` + оверлеи `<comp>/<cluster>/`. Корневой `infrastructure/<comp>/kustomization.yaml` всегда указывает просто на `base`. Оверлей `contour-template` (есть у vault, istio-*, cert-manager, postgresql, kafka, rabbitmq, zitadel, camunda, istio-config) — параметризованный `${VAR}`, а не привязанный к конкретному кластеру. Чарты идут с суффиксом контура: `vault-contour`, `keycloak-contour`, `postgresql-contour` и — внимание — `idp-contour` это Zitadel.
+**Инфра-компонент.** `infrastructure/<comp>/base/` + оверлеи `<comp>/<cluster>/`. Корневой `infrastructure/<comp>/kustomization.yaml` всегда указывает просто на `base`. Чарты идут с суффиксом контура: `vault-contour`, `keycloak-contour`, `postgresql-contour` и — внимание — `idp-contour` это Zitadel.
-
-**Слайсы.** На тег `vX.Y.Z` `ci/publish-slice.py generate` создаёт child-pipeline с отдельной джобой на каждый `clusters/*/kustomization.yaml`. Джоба вызывает `ci/build-slice.py`: тот обходит дерево Kustomize от `clusters/<c>` и упаковывает только нужные файлы в tar. Результат публикуется как OCI-артефакт `cr.yandex/crpct2b2lsmao4nm0cjk/<c>-iac:<tag>` (media type `application/vnd.sarex.slice.config.v1+json`). Так закрытый контур получает только свой срез. Тесты — `ci/tests/test_build_slice.py`.
 
 ## Где искать конкретное
 
@@ -67,23 +62,18 @@
 | Тег образа в контуре | `apps/<app>/<cluster>/*.yaml`, поле `image.tag` |
 | Что реально в проде по namespace | `inventory.yaml` |
 | Где лежит исходный код приложения | `IAC-CATALOG.md` §5.3.8 |
-| Что попадёт в слайс контура | `python3 ci/build-slice.py` по `clusters/<c>` (логика сбора — там же) |
-| Переменные шаблонного контура | `${...}` в `infrastructure/*/contour-template`; значения — ConfigMap `contour-vars` в кластере, не в репозитории |
 
 ## Ловушки
 
 - **`dsinv/`** — оверлей есть у 25 приложений, но `clusters/dsinv/` не существует. Это материализованный снимок живого контура WB, а не источник деплоя. Развёрнутым не считать.
-- **Две несовместимые конвенции оверлеев** (`IAC-CATALOG.md` §5.3.4). `d8-ugmk-prod`, `yc-k8s-test`, `vad`, `uralkal`, `sarex-contour`, `dsinv` наследуют `base` и патчат его. `brusnika-prod`, `brusnika-stage`, `yc-ecp`, `asterus` — полные копии HelmRelease, которые молча дрейфуют от base. Правка `base` на них не влияет. **`wb` (4 из 27) и `ugok` (9 из 33) смешанные** — проверяйте `resources:` конкретного оверлея; в `ugok` причина обычно указана комментарием в его `kustomization.yaml`.
+- **Две несовместимые конвенции оверлеев** (`IAC-CATALOG.md` §5.3.4). `d8-ugmk-prod`, `yc-k8s-test`, `dsinv` наследуют `base` и патчат его. `brusnika-prod`, `brusnika-stage`, `yc-ecp` — полные копии HelmRelease, которые молча дрейфуют от base. Правка `base` на них не влияет.
-- **`asterus` подключён почти пустым**: оверлеи есть у 26 приложений, но в `clusters/asterus/kustomization.yaml` активен только `auth-flow`, остальные закомментированы. Инфраструктуры в кластере нет.
-- **Слайс публикуется для каждого `clusters/*/kustomization.yaml`** — в том числе для тестовых и инфраструктурных кластеров. Новая папка в `clusters/` с этим файлом автоматически станет слайсом на следующем теге. У `contour` такого файла нет, поэтому для него слайс не собирается.
 - **`IAC-CATALOG.md` — снимок на 05.08.2026** и по составу приложений на контур уже расходится с реальностью (там у `wb` ноль приложений, фактически 26 оверлеев). Всегда сверяться с `clusters/*/kustomization.yaml`.
 - **Мегадиаграмма в `README.md` идеализирована** — рисована руками, показывает все приложения на одной Postgres и все фронтенды за `control-interface`. Проверяемые источники — env-переменные и istio-config.
 - **`clusters/contour/` — не кластер, а шаблон**: в нём нет `flux-system`, только `apps.yaml`, `infrastructure.yaml`, `helm-repositories.yaml`.
-- **Path-роутинг лежит в `infrastructure/istio-config/<c>/` у большинства контуров, но не у WB.** В `clusters/wb/infrastructure/patches/istio-config.yaml` через Istio публикуются только платформенные UI (Gitea, Grafana, OpenObserve, Superset, Vault, GoAlert), а прикладной трафик разводится вне репозитория. В Brusnika схема смешанная: часть путей идёт напрямую в сервисы, остальное — одним правилом в `yet-another-nginx-service.global-ingress`.
+- **Path-роутинг виден в репозитории только у `d8-ugmk-prod` и `yc-ecp`.** В Brusnika и WB весь прикладной трафик уходит одним правилом в `nginx-service.global-ingress` / `yet-another-nginx-service.global-ingress`, а разводка по путям происходит вне репозитория. Через Istio там публикуются только платформенные UI (Gitea, Grafana, OpenObserve, Superset, Vault, Zitadel, Camunda, MinIO).
-- **`vk-prod` маршрутизирует в namespace с суффиксом `-prod`** (`eav-prod`, `pm-prod`, `inspections-prod`), а приложений из `apps/` в этом кластере нет: сервисы раскатываются не этим репозиторием.
+- **Имена namespace расходятся между источниками**: `inventory.yaml` использует суффикс (`flows-prod`), `apps/` — голое имя (`flows`).
-- **Имена namespace расходятся между источниками**: `inventory.yaml` и `vk-prod` используют суффикс (`flows-prod`), `apps/` — голое имя (`flows`).
+- **17 оверлеев приложений не подключены ни к одному кластеру** — мёртвый код.
-- **66 оверлеев приложений не подключены ни к одному кластеру**: 25 — `dsinv`, 25 — закомментированные в `asterus`, остальные 16 — мёртвый код (в основном `brusnika-prod`, плюс `bi`/`iam` в `wb` и `yc-k8s-test`).
+- **Нет диаграмм** в `docs/apps/` для `iam`, `auth-flow`, `ams-sync`.
-- **Нет диаграмм** в `docs/apps/` для `ams-sync`, `auth-flow`, `bi`, `iam`, `premises`.
 - **Чистые фронтенды без бэкенда в этом репозитории**: `auth-flow`, `control-interface`, `cross-section`, `document-link`, `prescriptions`, `projects`, `remarks`, `reviews`, `stamp-verification`. Бэкенд `projects` живёт в `planning/projects-backend`.
 - Самые центральные сервисы по числу входящих ссылок: `documentations` (~85), `processing` / `workflow` (~76), `django` (~53), `eav` (~47), `resources` (~44), `bim` (~39), `flows` (~38). Менять их конфигурацию — дороже всего.
 

apps/control-interface/uralkal/psql-tools-debug.yaml

@@ -18,7 +18,7 @@ spec:
     spec:
       containers:
         - name: debug
-          image: cr.yandex/crp3ccidau046kdj8g9q/mc-files:dev5
+          image: cr.yandex/crp3ccidau046kdj8g9q/mc-files:dev9
           imagePullPolicy: IfNotPresent
           command: ["/bin/sh", "-c", "while true; do sleep 3600; done"]
       imagePullSecrets:

apps/cross-section/uralkal/helmrelease.yaml

@@ -8,9 +8,6 @@ spec:
   values:
     services:
       frontend:
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/cross-section-app:contour_c5e5d476@sha256:04e0eb23df7138eb6c0dad6d790c7229607cb70eb7a4d7448aa70a236caa7d52
         deployment:
           resources:
             requests:

apps/django/d8-ugmk-prod/backend.yaml

@@ -8,9 +8,6 @@ spec:
   values:
     services:
       backend:
-        deployment:
-          replicaCount:
-            _default: 2
         envs:
           - name: ALLOWED_HOSTS
             value:
@@ -132,6 +129,10 @@ spec:
           - name: ZITADEL_HOST
             value:
               _default: https://sarex-login.uralmine.com
+          # Включено вместе с message-hub: он консьюмер топика message-hub-stage
+          # (SETTINGS_TOPICS в apps/message-hub/d8-ugmk-prod/message-hub.yaml),
+          # а писать в этот топик должен django. Vault-шаблон django-kafka
+          # и KAFKA_SSL_CAFILE уже есть в base — здесь только флаг.
           - name: SERVER_KAFKA_ENABLED
             value:
               _default: "True"

apps/documentations/base/api.yaml

@@ -65,7 +65,7 @@ spec:
               enabled: false
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_89c8039a
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_fef3add2
           pullPolicy:
             _default: IfNotPresent
         service:
@@ -89,9 +89,6 @@ spec:
           - name: POSTGRES_POOL_SIZE
             value:
               _default: "20"
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"
           - name: USE_LEGACY_BIM_FLOW
             value:
               _default: "true"
@@ -239,9 +236,6 @@ spec:
           - name: VALKEY_PORT
             value:
               _default: "6379"
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"
         podAnnotations:
           _default:
             traffic.sidecar.istio.io/excludeOutboundPorts: "8200"

apps/documentations/base/cde-api-worker-copy.yaml

@@ -0,0 +1,355 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-copy:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: worker-copy
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                [ -f /vault/secrets/cde-api-rabbitmq ] && . /vault/secrets/cde-api-rabbitmq
+                set +a
+                exec /opt/worker
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-copy:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-rabbitmq: secrets/data/rabbitmq/apps/cde
+            vault.hashicorp.com/agent-inject-template-cde-api-rabbitmq: |-
+              {{- with secret "secrets/data/rabbitmq/apps/cde" -}}
+              CDE_API_RABBITMQ__USER={{ index .Data.data "username" }}
+              CDE_API_RABBITMQ__PASSWORD={{ index .Data.data "password" }}
+              CDE_API_RABBITMQ__VHOST={{ index .Data.data "vhost" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/cde-api-worker-move.yaml

@@ -0,0 +1,337 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-move:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: worker-move
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                [ -f /vault/secrets/cde-api-rabbitmq ] && . /vault/secrets/cde-api-rabbitmq
+                set +a
+                exec /opt/worker
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-move:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-rabbitmq: secrets/data/rabbitmq/apps/cde
+            vault.hashicorp.com/agent-inject-template-cde-api-rabbitmq: |-
+              {{- with secret "secrets/data/rabbitmq/apps/cde" -}}
+              CDE_API_RABBITMQ__USER={{ index .Data.data "username" }}
+              CDE_API_RABBITMQ__PASSWORD={{ index .Data.data "password" }}
+              CDE_API_RABBITMQ__VHOST={{ index .Data.data "vhost" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,236 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-create-upload:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-create-upload
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                set +a
+                exec /opt/worker
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-create-upload:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,230 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-handle-error:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-handle-error
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 50m
+              memory:
+                _default: 64Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                set +a
+                exec /opt/worker
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-handle-error:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,299 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-process-workflows:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-process-workflows
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                set +a
+                exec /opt/worker
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-process-workflows:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,245 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-publish-documents:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-publish-documents
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                set +a
+                exec /opt/worker
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-publish-documents:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/cde-api.yaml

@@ -0,0 +1,430 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      cde-api:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: cde-api
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          port:
+            _default: 8000
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
+                [ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
+                [ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
+                [ -f /vault/secrets/cde-api-rabbitmq ] && . /vault/secrets/cde-api-rabbitmq
+                [ -f /vault/secrets/cde-api-django-auth ] && . /vault/secrets/cde-api-django-auth
+                set +a
+                [ -f /vault/secrets/cde-api-rsa-public ] && export CDE_API_PUBLIC_KEY="$(cat /vault/secrets/cde-api-rsa-public)"
+                exec /opt/main
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: true
+          name:
+            _default: cde-api
+          type:
+            _default: ClusterIP
+          port:
+            _default: 8000
+          targetPort:
+            _default: 8000
+          portName:
+            _default: http
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://document-link-srx.wb.ru"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
+              CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
+              CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
+              CDE_API_DATABASE__USER={{ index .Data.data "username" }}
+              CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
+            vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
+              {{- with secret "secrets/data/minio/apps/documentations" -}}
+              CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
+              CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
+              CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
+            vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
+              {{- with secret "secrets/data/apps/cde-api/zeebe" -}}
+              CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
+              CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
+              CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
+              CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-rabbitmq: secrets/data/rabbitmq/apps/cde
+            vault.hashicorp.com/agent-inject-template-cde-api-rabbitmq: |-
+              {{- with secret "secrets/data/rabbitmq/apps/cde" -}}
+              CDE_API_RABBITMQ__USER={{ index .Data.data "username" }}
+              CDE_API_RABBITMQ__PASSWORD={{ index .Data.data "password" }}
+              CDE_API_RABBITMQ__VHOST={{ index .Data.data "vhost" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-django-auth: secrets/data/vault/common/django_auth
+            vault.hashicorp.com/agent-inject-template-cde-api-django-auth: |-
+              {{- with secret "secrets/data/vault/common/django_auth" -}}
+              CDE_API_USERS_AUTH_TOKEN={{ index .Data.data "key" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-cde-api-rsa-public: secrets/data/vault/common/rsa_keys
+            vault.hashicorp.com/agent-inject-template-cde-api-rsa-public: |-
+              {{- with secret "secrets/data/vault/common/rsa_keys" -}}
+              {{ index .Data.data "public_key" }}
+              {{- end -}}
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/base/filestream.yaml

@@ -97,9 +97,6 @@ spec:
           - name: PUBLIC_LINK_FOLDER_CONNECTOR_ENABLED
             value:
               _default: "true"
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"
           - name: USE_ZITADEL
             value:
               _default: "1"
@@ -226,9 +223,6 @@ spec:
           - name: VALKEY_PORT
             value:
               _default: "6379"
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"
         podAnnotations:
           _default:
             traffic.sidecar.istio.io/excludeOutboundPorts: "8200"

apps/documentations/base/kustomization.yaml

@@ -12,3 +12,12 @@ resources:
   - hasher.yaml
   - redis-deployment.yaml
   - redis-service.yaml
+  - tasks-execution-config.yaml
+  - cde-api.yaml
+  - cde-api-worker-s32d-create-upload.yaml
+  - cde-api-worker-s32d-process-workflows.yaml
+  - cde-api-worker-s32d-publish-documents.yaml
+  - cde-api-worker-s32d-handle-error.yaml
+  - cde-api-worker-copy.yaml
+  - cde-api-worker-move.yaml
+  - outbox-relay.yaml

apps/documentations/base/outbox-relay.yaml

@@ -0,0 +1,149 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: outbox-relay
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      outbox-relay:
+        enabled: true
+        serviceAccount:
+          enabled:
+            _default: true
+          name:
+            _default: documentations-vault
+        deployment:
+          enabled: true
+          name:
+            _default: outbox-relay
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 128Mi
+          command:
+            _default: ["/bin/sh", "-ec"]
+          args:
+            _default:
+              - |
+                set -a
+                [ -f /vault/secrets/outbox-relay-postgres ] && . /vault/secrets/outbox-relay-postgres
+                [ -f /vault/secrets/outbox-relay-kafka ] && . /vault/secrets/outbox-relay-kafka
+                set +a
+                exec /opt/relay
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/outbox-relay:prod_bee3b2a
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: OUTBOX_RELAY_APP_NAME
+            value:
+              _default: "cde-api-outbox-relay"
+          - name: OUTBOX_RELAY_APP_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: OUTBOX_RELAY_SOURCE_SERVICE
+            value:
+              _default: "cde-api"
+          - name: OUTBOX_RELAY_SOURCE_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_PG__SSLMODE
+            value:
+              _default: "disable"
+          - name: OUTBOX_RELAY_PG__POOL_MIN
+            value:
+              _default: "1"
+          - name: OUTBOX_RELAY_PG__POOL_MAX
+            value:
+              _default: "3"
+          - name: OUTBOX_RELAY_PG__TABLE
+            value:
+              _default: "outbox"
+          - name: OUTBOX_RELAY_POLL_INTERVAL
+            value:
+              _default: "500ms"
+          - name: OUTBOX_RELAY_BATCH_SIZE
+            value:
+              _default: "100"
+          - name: OUTBOX_RELAY_MAX_ATTEMPTS
+            value:
+              _default: "8"
+          - name: OUTBOX_RELAY_INITIAL_BACKOFF
+            value:
+              _default: "1s"
+          - name: OUTBOX_RELAY_MAX_BACKOFF
+            value:
+              _default: "5m"
+          - name: OUTBOX_RELAY_SHUTDOWN_TIMEOUT
+            value:
+              _default: "30s"
+          - name: OUTBOX_RELAY_KAFKA__BROKERS
+            value:
+              _default: "kafka-kafka-contour.kafka.svc.cluster.local:9092"
+          - name: OUTBOX_RELAY_KAFKA__SECURITY_PROTOCOL
+            value:
+              _default: "SASL_SSL"
+          - name: OUTBOX_RELAY_KAFKA__INSECURE_SKIP_VERIFY
+            value:
+              _default: "true"
+        podAnnotations:
+          _default:
+            traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject: "true"
+            vault.hashicorp.com/agent-pre-populate-only: "true"
+            vault.hashicorp.com/auth-path: auth/kubernetes
+            vault.hashicorp.com/role: documentations
+            vault.hashicorp.com/agent-inject-secret-outbox-relay-postgres: secrets/data/apps/documentations/postgres
+            vault.hashicorp.com/agent-inject-template-outbox-relay-postgres: |-
+              {{- with secret "secrets/data/apps/documentations/postgres" -}}
+              OUTBOX_RELAY_PG__HOST={{ index .Data.data "host" }}
+              OUTBOX_RELAY_PG__PORT={{ index .Data.data "port" }}
+              OUTBOX_RELAY_PG__NAME={{ index .Data.data "database" }}
+              OUTBOX_RELAY_PG__USER={{ index .Data.data "username" }}
+              OUTBOX_RELAY_PG__PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}
+            vault.hashicorp.com/agent-inject-secret-outbox-relay-kafka: secrets/data/kafka/apps/documentations
+            vault.hashicorp.com/agent-inject-template-outbox-relay-kafka: |-
+              {{- with secret "secrets/data/kafka/apps/documentations" -}}
+              OUTBOX_RELAY_KAFKA__SASL_MECHANISM={{ if .Data.data.auth }}{{ index .Data.data.auth "sasl_mechanism" }}{{ else }}{{ index .Data.data "sasl_mechanism" }}{{ end }}
+              OUTBOX_RELAY_KAFKA__SASL_USERNAME={{ index .Data.data "username" }}
+              OUTBOX_RELAY_KAFKA__SASL_PASSWORD={{ index .Data.data "password" }}
+              {{- end -}}

apps/documentations/base/tasks-execution-config.yaml

@@ -0,0 +1,180 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tasks-execution-config-documentation-v2
+  namespace: documentations
+data:
+  tasks-execution-config-documentation-v2.json: |
+    {
+        "bim_api_metadata_inserter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v4": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_differ": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_updater": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "convert_to_potree": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "docx_to_pdf": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "dwg_to_geojson": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_limits": "4",
+                "cpu_requests": "100m",
+                "memory_limits": "40Gi",
+                "memory_requests": "64Mi"
+            }
+        },
+        "e57_to_las": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "ifc_converter_job": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "las_merge": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "parsing_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_converter_to_tiles": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_create_colored_surface_from_geotiff": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "rendering_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document_legacy": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "update_orthomosaic_data": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "web_hook_caller": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "xml_to_glb": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "document_converter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "sparkjs_converter_wrapper": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        }
+    }

apps/documentations/brusnika-prod/cde-api-worker-copy.yaml

@@ -0,0 +1,373 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-copy:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-copy
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-copy:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://bim-api-service.bim.svc.cluster.local:8080"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/cde-api-worker-move.yaml

@@ -0,0 +1,355 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-move:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-move
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-move:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://bim-api-service.bim.svc.cluster.local:8080"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,243 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-create-upload:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-create-upload
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-create-upload:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,237 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-handle-error:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-handle-error
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 50m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-handle-error:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,306 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-process-workflows:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-process-workflows
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-process-workflows:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://bim-api-service.bim.svc.cluster.local:8080"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,252 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-publish-documents:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-publish-documents
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-publish-documents:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/cde-api.yaml

@@ -0,0 +1,446 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      cde-api:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: cde-api
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          port:
+            _default: 8000
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: true
+          name:
+            _default: cde-api
+          type:
+            _default: ClusterIP
+          port:
+            _default: 8000
+          targetPort:
+            _default: 8000
+          portName:
+            _default: http
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://document-link.cde.brusnika.ru"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://bim-api-service.bim.svc.cluster.local:8080"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_PUBLIC_KEY
+            secretName:
+              _default: "public-key"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "hasher-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_USERS_AUTH_TOKEN
+            secretName:
+              _default: "django-auth"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-prod/kustomization.yaml

@@ -8,3 +8,12 @@ resources:
   - api.yaml
   - filestream.yaml
   - hasher.yaml
+  - tasks-execution-config.yaml
+  - cde-api.yaml
+  - cde-api-worker-s32d-create-upload.yaml
+  - cde-api-worker-s32d-process-workflows.yaml
+  - cde-api-worker-s32d-publish-documents.yaml
+  - cde-api-worker-s32d-handle-error.yaml
+  - cde-api-worker-copy.yaml
+  - cde-api-worker-move.yaml
+  - outbox-relay.yaml

apps/documentations/brusnika-prod/outbox-relay.yaml

@@ -0,0 +1,130 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: outbox-relay
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      outbox-relay:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: outbox-relay
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 128Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/outbox-relay:prod_bee3b2a
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: OUTBOX_RELAY_APP_NAME
+            value:
+              _default: "cde-api-outbox-relay"
+          - name: OUTBOX_RELAY_APP_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: OUTBOX_RELAY_SOURCE_SERVICE
+            value:
+              _default: "cde-api"
+          - name: OUTBOX_RELAY_SOURCE_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_PG__SSLMODE
+            value:
+              _default: "disable"
+          - name: OUTBOX_RELAY_PG__POOL_MIN
+            value:
+              _default: "1"
+          - name: OUTBOX_RELAY_PG__POOL_MAX
+            value:
+              _default: "3"
+          - name: OUTBOX_RELAY_PG__TABLE
+            value:
+              _default: "outbox"
+          - name: OUTBOX_RELAY_PG__HOST
+            value:
+              _default: "postgres-service"
+          - name: OUTBOX_RELAY_PG__PORT
+            value:
+              _default: "5432"
+          - name: OUTBOX_RELAY_PG__NAME
+            value:
+              _default: "documentations"
+          - name: OUTBOX_RELAY_POLL_INTERVAL
+            value:
+              _default: "500ms"
+          - name: OUTBOX_RELAY_BATCH_SIZE
+            value:
+              _default: "100"
+          - name: OUTBOX_RELAY_MAX_ATTEMPTS
+            value:
+              _default: "8"
+          - name: OUTBOX_RELAY_INITIAL_BACKOFF
+            value:
+              _default: "1s"
+          - name: OUTBOX_RELAY_MAX_BACKOFF
+            value:
+              _default: "5m"
+          - name: OUTBOX_RELAY_SHUTDOWN_TIMEOUT
+            value:
+              _default: "30s"
+          - name: OUTBOX_RELAY_KAFKA__BROKERS
+            value:
+              _default: "brusnika-stage-kafka-bootstrap.kafka.svc.cluster.local:9093"
+          - name: OUTBOX_RELAY_KAFKA__SECURITY_PROTOCOL
+            value:
+              _default: "SSL"
+          - name: OUTBOX_RELAY_KAFKA__INSECURE_SKIP_VERIFY
+            value:
+              _default: "true"
+        secretEnvs:
+          - name: OUTBOX_RELAY_PG__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: OUTBOX_RELAY_PG__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"

apps/documentations/brusnika-prod/tasks-execution-config.yaml

@@ -0,0 +1,180 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tasks-execution-config-documentation-v2
+  namespace: documentations
+data:
+  tasks-execution-config-documentation-v2.json: |
+    {
+        "bim_api_metadata_inserter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v4": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_differ": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_updater": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "convert_to_potree": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "docx_to_pdf": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "dwg_to_geojson": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_limits": "4",
+                "cpu_requests": "100m",
+                "memory_limits": "40Gi",
+                "memory_requests": "64Mi"
+            }
+        },
+        "e57_to_las": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "ifc_converter_job": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "las_merge": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "parsing_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_converter_to_tiles": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_create_colored_surface_from_geotiff": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "rendering_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document_legacy": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "update_orthomosaic_data": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "web_hook_caller": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "xml_to_glb": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "document_converter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "sparkjs_converter_wrapper": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        }
+    }

apps/documentations/brusnika-stage/cde-api-worker-copy.yaml

@@ -0,0 +1,373 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-copy:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-copy
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-copy:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "stage"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "false"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "2000"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "2250"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "15000"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/cde-api-worker-move.yaml

@@ -0,0 +1,355 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-move:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-move
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-move:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "stage"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "false"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "2000"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "2250"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "15000"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,243 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-create-upload:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-create-upload
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-create-upload:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,237 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-handle-error:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-handle-error
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 50m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-handle-error:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,306 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-process-workflows:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-process-workflows
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-process-workflows:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "1"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "stage"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "false"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "2000"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "2250"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "15000"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,252 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-publish-documents:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-publish-documents
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-publish-documents:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/cde-api.yaml

@@ -0,0 +1,446 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      cde-api:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: cde-api
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          port:
+            _default: 8000
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api:stage_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: true
+          name:
+            _default: cde-api
+          type:
+            _default: ClusterIP
+          port:
+            _default: 8000
+          targetPort:
+            _default: 8000
+          portName:
+            _default: http
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://document-link.test.sarex.brusnika.tech"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "stage"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "false"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "2000"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "2250"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "15000"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations"
+        secretEnvs:
+          - name: CDE_API_PUBLIC_KEY
+            secretName:
+              _default: "public-key"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_USERS_AUTH_TOKEN
+            secretName:
+              _default: "django-auth"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "rabbitmq"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/brusnika-stage/kustomization.yaml

@@ -9,3 +9,12 @@ resources:
   - filestream.yaml
   - hasher.yaml
   - pdf-markings-amqp.yaml
+  - tasks-execution-config.yaml
+  - cde-api.yaml
+  - cde-api-worker-s32d-create-upload.yaml
+  - cde-api-worker-s32d-process-workflows.yaml
+  - cde-api-worker-s32d-publish-documents.yaml
+  - cde-api-worker-s32d-handle-error.yaml
+  - cde-api-worker-copy.yaml
+  - cde-api-worker-move.yaml
+  - outbox-relay.yaml

apps/documentations/brusnika-stage/outbox-relay.yaml

@@ -0,0 +1,130 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: outbox-relay
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      outbox-relay:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: outbox-relay
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 128Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/outbox-relay:stage_bee3b2a
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        envs:
+          - name: OUTBOX_RELAY_APP_NAME
+            value:
+              _default: "cde-api-outbox-relay"
+          - name: OUTBOX_RELAY_APP_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: OUTBOX_RELAY_SOURCE_SERVICE
+            value:
+              _default: "cde-api"
+          - name: OUTBOX_RELAY_SOURCE_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_PG__SSLMODE
+            value:
+              _default: "disable"
+          - name: OUTBOX_RELAY_PG__POOL_MIN
+            value:
+              _default: "1"
+          - name: OUTBOX_RELAY_PG__POOL_MAX
+            value:
+              _default: "3"
+          - name: OUTBOX_RELAY_PG__TABLE
+            value:
+              _default: "outbox"
+          - name: OUTBOX_RELAY_PG__HOST
+            value:
+              _default: "192.168.2.45"
+          - name: OUTBOX_RELAY_PG__PORT
+            value:
+              _default: "5432"
+          - name: OUTBOX_RELAY_PG__NAME
+            value:
+              _default: "documentations"
+          - name: OUTBOX_RELAY_POLL_INTERVAL
+            value:
+              _default: "500ms"
+          - name: OUTBOX_RELAY_BATCH_SIZE
+            value:
+              _default: "100"
+          - name: OUTBOX_RELAY_MAX_ATTEMPTS
+            value:
+              _default: "8"
+          - name: OUTBOX_RELAY_INITIAL_BACKOFF
+            value:
+              _default: "1s"
+          - name: OUTBOX_RELAY_MAX_BACKOFF
+            value:
+              _default: "5m"
+          - name: OUTBOX_RELAY_SHUTDOWN_TIMEOUT
+            value:
+              _default: "30s"
+          - name: OUTBOX_RELAY_KAFKA__BROKERS
+            value:
+              _default: "brusnika-stage-kafka-bootstrap.kafka.svc.cluster.local:9093"
+          - name: OUTBOX_RELAY_KAFKA__SECURITY_PROTOCOL
+            value:
+              _default: "SSL"
+          - name: OUTBOX_RELAY_KAFKA__INSECURE_SKIP_VERIFY
+            value:
+              _default: "true"
+        secretEnvs:
+          - name: OUTBOX_RELAY_PG__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: OUTBOX_RELAY_PG__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"

apps/documentations/brusnika-stage/tasks-execution-config.yaml

@@ -0,0 +1,180 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tasks-execution-config-documentation-v2
+  namespace: documentations
+data:
+  tasks-execution-config-documentation-v2.json: |
+    {
+        "bim_api_metadata_inserter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v4": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_differ": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_updater": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "convert_to_potree": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "docx_to_pdf": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "dwg_to_geojson": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_limits": "4",
+                "cpu_requests": "100m",
+                "memory_limits": "40Gi",
+                "memory_requests": "64Mi"
+            }
+        },
+        "e57_to_las": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "ifc_converter_job": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "las_merge": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "parsing_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_converter_to_tiles": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_create_colored_surface_from_geotiff": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "rendering_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document_legacy": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "update_orthomosaic_data": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "web_hook_caller": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "xml_to_glb": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "document_converter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "sparkjs_converter_wrapper": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        }
+    }

apps/documentations/cde-api.CONFIGURATION.md

@@ -0,0 +1,255 @@
+# Конфигурация cde-api и его воркеров
+
+Документ описывает переменные окружения `cde-api` и воркеров, развёрнутых в неймспейсе `documentations`. Манифесты — `base/cde-api*.yaml` (канонический вариант) и одноимённые файлы в оверлеях контуров. Источник значений — `cde-api/.helm/values.yaml`; значения в таблицах — из `base` (контуры переопределяют URL зависимостей, см. ниже).
+
+## Процессы
+
+| HelmRelease | Deployment | Образ | Service | Назначение |
+| --- | --- | --- | --- | --- |
+| `cde-api` | `cde-api` | `cde-api` | `cde-api:8000` | HTTP-API (`CDE_API_HTTP_PORT=8000`) |
+| `cde-api-worker-s32d-create-upload` | `worker-s32d-create-upload` | `cde-api-worker-s32d-create-upload` | — | воркер S32D: создание и загрузка s3→disk |
+| `cde-api-worker-s32d-process-workflows` | `worker-s32d-process-workflows` | `cde-api-worker-s32d-process-workflows` | — | воркер S32D: запуск workflow-обработки |
+| `cde-api-worker-s32d-publish-documents` | `worker-s32d-publish-documents` | `cde-api-worker-s32d-publish-documents` | — | воркер S32D: публикация документов |
+| `cde-api-worker-s32d-handle-error` | `worker-s32d-handle-error` | `cde-api-worker-s32d-handle-error` | — | воркер S32D: обработка ошибок |
+| `cde-api-worker-copy` | `worker-copy` | `cde-api-worker-copy` | — | воркер копирования |
+| `cde-api-worker-move` | `worker-move` | `cde-api-worker-move` | — | воркер перемещения |
+
+Не развёрнуты (в `universal-chart` нет поддержки `cronjobs`): `workspace-recovery`, `resource-id-backfill`, `sizer` — остаются в `cde-api/.helm`.
+
+Назначение воркеров выведено из имён образов и переменных `CDE_API_S32D_*`; точное поведение — в коде `cde-api/cmd`.
+
+## Способ конфигурирования
+
+- Только переменные окружения с префиксом `CDE_API_`; вложенные секции задаются через `__` (`CDE_API_DATABASE__HOST`).
+- Несекретные значения — `envs` в HelmRelease. Секреты: в vault-контурах (`base`, а значит `sarex-contour`, `yc-k8s-test`, `d8-ugmk-prod`, `uralkal`, `vad`) — Vault Agent Injector (файлы в `/vault/secrets/`, которые `command: /bin/sh -ec` загружает в окружение перед `exec /opt/main` / `exec /opt/worker`, как у `documentations-api`); в остальных (`ugok`, `brusnika-*`, `wb`) — k8s `secretEnvs`.
+- Образы cde-api содержат `/bin/sh` (статический busybox): он нужен для Vault-обёртки запуска (`exec /opt/main` / `exec /opt/worker`).
+- **Postgres, Valkey и S3 — общие с documentations** (отдельных ресурсов у cde-api нет): БД и креды те же, что у `documentations-api`; Valkey — внутрикластерный `redis:6379` (ns `documentations`, без TLS и пароля, DB 5); S3 — доступ MinIO из `secrets/data/minio/apps/documentations`.
+- Файл `/etc/app/tasks_execution_config.json` (`CDE_API_WORKFLOWS_CONFIG_FILEPATH`) монтируется из ConfigMap `tasks-execution-config-documentation-v2` (`tasks-execution-config.yaml`; содержимое — `cde-api/.example.tasks_execution_config.json`, в реальных контурах заменить боевыми ресурсами задач).
+- Значения по умолчанию в `values.yaml` источника — для stage; в iac всегда `global.env=_default`, поэтому здесь взяты prod-значения, а URL зависимостей — по конвенции соответствующего контура (из его `api.yaml`).
+
+## Секреты в Vault (vault-контуры)
+
+Инжектируются Vault Agent (role `documentations`, SA `documentations-vault`); каждый путь — отдельный файл `/vault/secrets/cde-api-<имя>`.
+
+| Файл | Путь Vault | Переменные | Процессы |
+| --- | --- | --- | --- |
+| `postgres` | `secrets/data/apps/documentations/postgres` (общий с documentations) | `CDE_API_DATABASE__HOST/PORT/NAME/USER/PASSWORD` | все |
+| `s3` | `secrets/data/minio/apps/documentations` (общий) | `CDE_API_S3_ENDPOINT/ACCESS_KEY/SECRET_KEY` | все |
+| `zeebe` | `secrets/data/apps/cde-api/zeebe` (**нужно создать**: `gateway_address`, `client_id`, `client_secret`, `auth_server_url`) | `CDE_API_ZEEBE_*` | все |
+| `rabbitmq` | `secrets/data/rabbitmq/apps/cde` | `CDE_API_RABBITMQ__USER/PASSWORD/VHOST` (хост и порт — в envs) | api, copy, move |
+| `django-auth` | `secrets/data/vault/common/django_auth` (ключ `key`) | `CDE_API_USERS_AUTH_TOKEN` | api |
+| `rsa-public` | `secrets/data/vault/common/rsa_keys` (ключ `public_key`) | `CDE_API_PUBLIC_KEY` | api |
+
+Точный состав файлов у каждого процесса — в `podAnnotations` его HelmRelease.
+
+## Секреты k8s-контуров (`ugok`, `brusnika-*`, `wb`; ns `documentations`)
+
+Postgres — тот же хост/БД, что у `documentations-api` контура (литералы в envs), логин/пароль из его секрета (`postgres-secret` или `documentations-postgresql-secret`, ключи `username`/`password`); Valkey — `redis`. S3 и RabbitMQ — Secret'ы, которые в контуре уже используют hasher / pdf-markings / api; новый нужен только для Zeebe (`cde-api-zeebe-secret`).
+
+| Контур | S3 (endpoint / access / secret) | RabbitMQ |
+| --- | --- | --- |
+| `ugok` | `documentations-s3-secret`: `endpoint` / `access_key` / `secret_key` | `documentations-rabbitmq-secret`: `host, port, username, password, vhost` |
+| `brusnika-prod` | `hasher-s3-secret`: `endpoint` / `access_key` / `secret_key` | `rabbitmq`: `host, port, username, password, vhost` |
+| `brusnika-stage` | `yc-s3`: `endpoint_url` / `key_id` / `access_key` | `rabbitmq`: как выше |
+| `wb` | `yc-s3`: `endpoint_url` / `key_id` / `access_key` | как в `wb/api.yaml`: host/port/vhost (`cde`) — литералы в envs, user/password — `hasher-rabbitmq-secret` (`user`, `password`) |
+
+Таблица ниже — для справки по `wb` (остальные контуры отличаются именами Secret'ов и ключей, см. таблицу выше):
+
+| Secret | Ключи | Переменные |
+| --- | --- | --- |
+| `public-key` | `key` | `CDE_API_PUBLIC_KEY` |
+| `postgres-secret` | `username`, `password` | `CDE_API_DATABASE__USER`, `CDE_API_DATABASE__PASSWORD` |
+| `yc-s3` | `endpoint_url`, `key_id`, `access_key` | `CDE_API_S3_ENDPOINT`, `CDE_API_S3_ACCESS_KEY`, `CDE_API_S3_SECRET_KEY` |
+| `cde-api-zeebe-secret` | `gateway_address`, `client_id`, `client_secret`, `auth_server_url` | `CDE_API_ZEEBE_GATEWAY_ADDRESS`, `CDE_API_ZEEBE_CLIENT_ID`, `CDE_API_ZEEBE_CLIENT_SECRET`, `CDE_API_ZEEBE_AUTH_SERVER_URL` |
+| `django-auth` | `key` | `CDE_API_USERS_AUTH_TOKEN` |
+| `hasher-rabbitmq-secret` | `user`, `password` | `CDE_API_RABBITMQ__USER`, `CDE_API_RABBITMQ__PASSWORD` |
+
+## Переменные окружения
+
+Колонка «Процессы»: api, create-upload, process-workflows, publish-documents, handle-error, copy, move. Если значение различается между процессами, показано значение первого процесса из списка.
+
+| Переменная | Значение (base) | Процессы |
+| --- | --- | --- |
+| `CDE_API_APP_NAME` | `cde-api` *(различается)* | все |
+| `CDE_API_BIMAPI_RETRY_COUNT` | `3` | api, process-workflows, copy, move |
+| `CDE_API_BIMAPI_RETRY_WAIT_MS` | `1000` | api |
+| `CDE_API_BIMAPI_TIMEOUT_MS` | `30000` | api, process-workflows, copy, move |
+| `CDE_API_BIMAPI_TIMEOUT_V2_MS` | `300000` | api, process-workflows, copy, move |
+| `CDE_API_BIMAPI_URL` | `http://backend-svc.bim.svc.cluster.local:80` | api, process-workflows, copy, move |
+| `CDE_API_BIMAPI_V2_URL` | `http://backend-svc.bim.svc.cluster.local:80` | api, process-workflows, copy, move |
+| `CDE_API_CONTAINER_REGISTRY` | `cr.yandex/crp3ccidau046kdj8g9q` | api, process-workflows, copy, move |
+| `CDE_API_CONVERTED_PDF_TO_S3` | `true` | api, process-workflows, copy, move |
+| `CDE_API_CONVERT_DWG_TO_GEOJSON` | `true` | api, process-workflows, copy, move |
+| `CDE_API_CONVERT_DXF_TO_GEOJSON` | `true` | api, process-workflows, copy, move |
+| `CDE_API_COPY_JOB_TIMEOUT_MINUTES` | `30` | copy |
+| `CDE_API_COPY_MAX_SYNC_WAIT_MS` | `300000` | api |
+| `CDE_API_COPY_S3_PARALLELISM` | `1` | copy |
+| `CDE_API_COPY_STEP_PARALLELISM` | `1` | copy |
+| `CDE_API_COPY_WORKER_JOBS` | `""` | copy |
+| `CDE_API_DATABASE_HEALTH_CHECK_PERIOD` | `30s` | все |
+| `CDE_API_DATABASE_MAX_CONN_IDLE_TIME` | `10m` | все |
+| `CDE_API_DATABASE_MAX_CONN_LIFETIME` | `30m` | все |
+| `CDE_API_DATABASE_OBSERVABILITY_ENABLE` | `false` | api |
+| `CDE_API_DATABASE_POOL_SIZE` | `10` *(различается)* | все |
+| `CDE_API_DATABASE__INSECURE_SKIP_TLS` | `false` | все |
+| `CDE_API_DATABASE__SSLMODE` | `disable` | все |
+| `CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD` | `30s` | api |
+| `CDE_API_DISK_BUCKET_NAMESPACE` | `documentations` | api |
+| `CDE_API_DJANGO_HOST` | `http://backend-svc.django.svc.cluster.local:80` | api, process-workflows, copy, move |
+| `CDE_API_DOCUMENTATION_V2_URL` | `http://backend-api-svc.documentations.svc.cluster.local:80` | api, process-workflows, copy, move |
+| `CDE_API_EAV_HOST` | `http://backend-svc.eav.svc.cluster.local:80` | все |
+| `CDE_API_EAV_TIMEOUT_MS` | `10000` | api |
+| `CDE_API_ENVIRONMENT` | `production` | api, process-workflows, copy, move |
+| `CDE_API_FLOWS_URL` | `http://backend-svc.flows.svc.cluster.local:80` | все |
+| `CDE_API_HTTP_IDLE_TIMEOUT` | `120s` | api |
+| `CDE_API_HTTP_PORT` | `8000` | api |
+| `CDE_API_HTTP_READ_BUFFER_SIZE` | `96` | api |
+| `CDE_API_HTTP_READ_TIMEOUT` | `0s` | api |
+| `CDE_API_HTTP_WRITE_TIMEOUT` | `0s` | api |
+| `CDE_API_INTERNAL_URL` | `http://cde-api.documentations:8000` | api, process-workflows, copy, move |
+| `CDE_API_ISSUES_BASE_URL` | `http://issues-service.platform:8000` | copy |
+| `CDE_API_ISSUES_RETRY_COUNT` | `3` | copy |
+| `CDE_API_ISSUES_SYNC_ENABLED` | `false` | copy |
+| `CDE_API_ISSUES_TIMEOUT_MS` | `30000` | copy |
+| `CDE_API_LAST_MASTER_BIM` | `36311` | api, process-workflows, copy, move |
+| `CDE_API_LAST_SLAVE_1_BIM` | `94015` | api, process-workflows, copy, move |
+| `CDE_API_LAST_SLAVE_2_BIM` | `135771` | api, process-workflows, copy, move |
+| `CDE_API_LOG_LEVEL` | `debug` *(различается)* | все |
+| `CDE_API_MAILER_BASE_URL` | `http://mailer-service.mailer:8000` | все |
+| `CDE_API_MAILER_FROM_EMAIL` | `noreply@sarex.io` | все |
+| `CDE_API_MAILER_RETRY_COUNT` | `2` | api |
+| `CDE_API_MAILER_TIMEOUT_MS` | `10000` | api |
+| `CDE_API_MOVE_JOB_TIMEOUT_MINUTES` | `30` | move |
+| `CDE_API_MOVE_WORKER_JOBS` | `""` | move |
+| `CDE_API_OBSERVABILITY_ENABLE` | `false` | все |
+| `CDE_API_PUBLIC_LINK_HOST` | `https://document-link-srx.wb.ru` | api |
+| `CDE_API_RABBITMQ__HASHER_EXCHANGE` | `hash.compute` | api, copy, move |
+| `CDE_API_RABBITMQ__HASHER_ROUTING_KEY` | `hash.compute.normal` | api, copy, move |
+| `CDE_API_RABBITMQ__HOST` | `rabbitmq.rabbitmq.svc.cluster.local` | api, copy, move |
+| `CDE_API_RABBITMQ__MARKS_ROUTING_KEY` | `pdf_markings_input` | api, copy, move |
+| `CDE_API_RABBITMQ__PORT` | `5672` | api, copy, move |
+| `CDE_API_REDIS__DB` | `5` | api |
+| `CDE_API_REDIS__DEFAULT_TTL_MINUTES` | `10` | все |
+| `CDE_API_REDIS__DIAL_TIMEOUT_MS` | `5000` | все |
+| `CDE_API_REDIS__HOST` | `redis` | все |
+| `CDE_API_REDIS__MIN_IDLE_CONNS` | `2` *(различается)* | все |
+| `CDE_API_REDIS__PERMISSION_CACHE_ENABLED` | `false` | все |
+| `CDE_API_REDIS__POOL_SIZE` | `10` *(различается)* | все |
+| `CDE_API_REDIS__PORT` | `6379` | все |
+| `CDE_API_REDIS__READ_TIMEOUT_MS` | `3000` | все |
+| `CDE_API_REDIS__SSL` | `false` | все |
+| `CDE_API_REDIS__WRITE_TIMEOUT_MS` | `3000` | все |
+| `CDE_API_RESOURCES_BASE_URL` | `http://iams.iam.svc.cluster.local:8080` | api |
+| `CDE_API_RESOURCES_TIMEOUT` | `10s` | api |
+| `CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES` | `1099511627776` | api |
+| `CDE_API_S32D_MAX_FILES_COUNT` | `500` | api |
+| `CDE_API_S32D_READERAT_BLOCK_SIZE_MB` | `8` | create-upload |
+| `CDE_API_S32D_READERAT_CACHE_BLOCKS` | `8` | create-upload |
+| `CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS` | `2` | create-upload |
+| `CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN` | `240` | create-upload |
+| `CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS` | `4` | handle-error |
+| `CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN` | `10` | handle-error |
+| `CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS` | `2` | process-workflows |
+| `CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN` | `480` | process-workflows |
+| `CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS` | `2` | publish-documents |
+| `CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN` | `10` | publish-documents |
+| `CDE_API_S3_BUCKET_LOOKUP` | `auto` | все |
+| `CDE_API_S3_BUCKET_NAME` | `documentations` | все |
+| `CDE_API_S3_CHECK_BUCKET` | `false` | все |
+| `CDE_API_S3_CONNECT_TIMEOUT` | `10s` | api |
+| `CDE_API_S3_INSECURE_SKIP_TLS` | `false` | все |
+| `CDE_API_S3_MAX_PART_SIZE` | `524288000` | все |
+| `CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE` | `5368709120` | все |
+| `CDE_API_S3_TLS_HANDSHAKE_TIMEOUT` | `10s` | api |
+| `CDE_API_S3_UPLOAD_STALL_TIMEOUT` | `10m` | все |
+| `CDE_API_S3_USE_SSL` | `true` | все |
+| `CDE_API_SYSTEMLOG_BASE_URL` | `http://backend-svc.system-log.svc.cluster.local:80` | api, publish-documents, copy, move |
+| `CDE_API_SYSTEMLOG_TIMEOUT_MS` | `10000` | api, publish-documents, copy, move |
+| `CDE_API_TRANSMITTALS_URL` | `http://transmittal-service.transmittal.svc.cluster.local:80` | все |
+| `CDE_API_USERS_BASE_URL` | `http://backend-svc.django.svc.cluster.local:80` | api |
+| `CDE_API_USERS_ORIGINATOR` | `docs_prod` | api |
+| `CDE_API_USERS_TIMEOUT_MS` | `10000` | api |
+| `CDE_API_USE_BIMV1_FOR_BIMV2` | `true` | api, process-workflows, copy, move |
+| `CDE_API_USE_BIM_INSERTER` | `true` | api, process-workflows, copy, move |
+| `CDE_API_USE_LEGACY_BIM_FLOW` | `0` | api, process-workflows, copy, move |
+| `CDE_API_WORKFLOWS_CONFIG_FILEPATH` | `/etc/app/tasks_execution_config.json` | все |
+| `CDE_API_WORKFLOWS_IMAGES_VERSION` | `master` | api, process-workflows, copy, move |
+| `CDE_API_WORKFLOW_BASE_URL` | `http://backend-svc.processing.svc.cluster.local:80` | api, process-workflows, copy, move |
+| `CDE_API_WORKFLOW_RETRY_COUNT` | `3` | api, process-workflows, copy, move |
+| `CDE_API_WORKFLOW_RETRY_WAIT_MS` | `500` | api |
+| `CDE_API_WORKFLOW_TIMEOUT_MS` | `30000` | api, process-workflows, copy, move |
+| `CDE_API_WORKSPACE_BASE_URL` | `http://backend-svc.workspaces.svc.cluster.local:80` | api, publish-documents, copy, move |
+| `CDE_API_WORKSPACE_RETRY_COUNT` | `3` | api, publish-documents, copy, move |
+| `CDE_API_WORKSPACE_TIMEOUT_MS` | `10000` | api, publish-documents, copy, move |
+| `CDE_API_ZEEBE_USE_PLAINTEXT` | `true` | все |
+
+## Переменные из k8s-секретов (ugok, brusnika-*, wb)
+
+| Переменная | Secret / ключ | Процессы |
+| --- | --- | --- |
+| `CDE_API_DATABASE__PASSWORD` | `postgres-secret` / `password` | все |
+| `CDE_API_DATABASE__USER` | `postgres-secret` / `username` | все |
+| `CDE_API_PUBLIC_KEY` | `public-key` / `key` | api |
+| `CDE_API_RABBITMQ__PASSWORD` | `hasher-rabbitmq-secret` / `password` | api, copy, move |
+| `CDE_API_RABBITMQ__USER` | `hasher-rabbitmq-secret` / `user` | api, copy, move |
+| `CDE_API_S3_ACCESS_KEY` | `yc-s3` / `key_id` | все |
+| `CDE_API_S3_ENDPOINT` | `yc-s3` / `endpoint_url` | все |
+| `CDE_API_S3_SECRET_KEY` | `yc-s3` / `access_key` | все |
+| `CDE_API_USERS_AUTH_TOKEN` | `django-auth` / `key` | api |
+| `CDE_API_ZEEBE_AUTH_SERVER_URL` | `cde-api-zeebe-secret` / `auth_server_url` | все |
+| `CDE_API_ZEEBE_CLIENT_ID` | `cde-api-zeebe-secret` / `client_id` | все |
+| `CDE_API_ZEEBE_CLIENT_SECRET` | `cde-api-zeebe-secret` / `client_secret` | все |
+| `CDE_API_ZEEBE_GATEWAY_ADDRESS` | `cde-api-zeebe-secret` / `gateway_address` | все |
+
+## Различия по контурам
+
+От контура к контуру меняются URL зависимостей, внешний хост публичных ссылок и источник образов:
+
+| Контур | Тип оверлея | Что отличается |
+| --- | --- | --- |
+| `sarex-contour`, `yc-k8s-test` | наследуют `base` | ничего (значения `base`) |
+| `d8-ugmk-prod`, `uralkal`, `vad` | патчи на все 7 HelmRelease (`cde-api*.yaml`, список `envs` заменяется целиком) поверх `base` | `CDE_API_PUBLIC_LINK_HOST` (только api), TLS к S3 (см. ниже) |
+| `ugok` | полная копия HelmRelease, chart 0.1.9 | URL зависимостей (порты 8000/8080), образы из `10.4.10.187:80/library`, pull-secret `dockerhub` |
+| `brusnika-prod`, `brusnika-stage` | полная копия, chart 0.1.7 | URL зависимостей; stage — профиль stage (`CDE_API_ENVIRONMENT=stage`, bucket `documentations-stage`) |
+| `wb` | полная копия, chart 0.1.7 | URL зависимостей, `CDE_API_PUBLIC_LINK_HOST=https://document-link-srx.wb.ru` |
+
+Правка `base` на полные копии (ugok, brusnika-*, wb) не влияет.
+
+## SSL / TLS по контурам
+
+В исходном `values.yaml` cde-api все соединения с TLS (Postgres `verify-full`, Valkey SSL, S3 SSL с пропуском проверки). В iac соседние сервисы работают иначе, поэтому значения выставлены по контуру:
+
+| Соединение | Переменные | Значение в iac | Почему |
+| --- | --- | --- | --- |
+| Postgres | `CDE_API_DATABASE__SSLMODE` | `disable` везде | у `documentations-api`/pdf-markings во всех контурах `sslmode=disable`; CA-сертификат (`CERT_BASE64`) не передаётся |
+| Valkey | `CDE_API_REDIS__SSL` | `false` везде | внутрикластерный `redis:6379` без TLS |
+| RabbitMQ | `CDE_API_RABBITMQ__SSL` | не задана (по умолчанию `false`) | порт `5672`, как у marks/hasher |
+| S3 | `CDE_API_S3_USE_SSL` / `CDE_API_S3_INSECURE_SKIP_TLS` | см. таблицу ниже | повторяют флаги pdf-markings / hasher, которые ходят в тот же S3-секрет |
+| Kafka (outbox-relay) | `KAFKA__SECURITY_PROTOCOL`, `KAFKA__INSECURE_SKIP_VERIFY` | `SASL_SSL` (base) / `SSL` (Strimzi-контуры), `INSECURE_SKIP_VERIFY=true`, CA не нужен | как у pm; см. outbox-relay.CONFIGURATION.md |
+
+S3 по контурам (`USE_SSL` / `INSECURE_SKIP_TLS`):
+
+| Контур | USE_SSL | INSECURE_SKIP_TLS | Источник значения |
+| --- | --- | --- | --- |
+| `base` (`sarex-contour`, `yc-k8s-test`) | `true` | `false` | `MARKS_S3__USE_SSL=true`, `SSL_VERIFY=true` в base |
+| `d8-ugmk-prod` | `true` | `true` | pdf-markings: `USE_SSL=true`, `SSL_VERIFY=false` |
+| `uralkal`, `vad` | `false` | `false` | pdf-markings: `USE_SSL=false` |
+| `ugok` | `false` | `false` | `YANDEX_S3_USE_SSL=0` |
+| `brusnika-prod` | `true` | `false` | hasher: `USE_SSL=true`, `VERIFY=true` (тот же `hasher-s3-secret`) |
+| `brusnika-stage` | `false` | `false` | pdf-markings (тот же `yc-s3`): `USE_SSL=false`; hasher там `true` — проверить |
+| `wb` | `false` | `false` | pdf-markings: `USE_SSL=false` |
+
+Эндпоинт S3 приходит из секрета (`endpoint`); если он содержит схему `https://`/`http://`, она должна совпадать с `USE_SSL`.
+
+## Допущения и что нужно проверить
+
+- `CDE_API_DJANGO_HOST` и `CDE_API_USERS_BASE_URL` повторяют `DJANGO_HOST` из `api.yaml` контура (внутренний адрес Django, не внешний хост из исходного `values.yaml`); documentations использует один и тот же адрес и для получения пользователей.
+- `CDE_API_DISK_BUCKET_NAMESPACE=documentations` — как `NAMESPACE` у documentations-api во всех контурах (в коде cde-api это префикс бакетов компаний `<namespace>-<companyID>-<slug>`, совместимый с legacy doc-api). `CDE_API_S3_BUCKET_NAME=documentations` — только запасной бакет клиента S3 (`CHECK_BUCKET=false`), у documentations-api такой настройки нет.
+- `CDE_API_EAV_HOST`, `CDE_API_TRANSMITTALS_URL` выбраны по конвенции остальных приложений контура (`backend-svc.eav`, `eav-service.eav`, `transmittal-service.transmittal`); сверить с `inventory.yaml`.
+- **Sentry и SigNoz отключены:** переменные `CDE_API_SENTRY_*` и `CDE_API_OBSERVABILITY_{HOST,PORT,SERVICE_NAME,INSECURE}` удалены, `CDE_API_OBSERVABILITY_ENABLE=false`, `CDE_API_DATABASE_OBSERVABILITY_ENABLE=false`.
+- Реплики всех процессов (api и воркеры) — `1` (в исходном prod-конфиге cde-api у `create-upload` и `process-workflows` было `0`).
+- Порт: в источнике `deployment.port=8080` при `CDE_API_HTTP_PORT=8000` и `service.targetPort=8000`; здесь везде 8000.
+- Общая с documentations БД: cde-api применяет свои миграции в той же базе — проверить отсутствие конфликтов имён таблиц/схемы и версий миграций (отдельная схема или префикс при необходимости).
+- Общий Valkey без пароля и TLS (в источнике cde-api — управляемый Valkey с TLS и логином): подтвердить, что cde-api работает без `CDE_API_REDIS__USERNAME/PASSWORD`. DB 5 совпадает с `VALKEY_DB=5` у documentations-api (в stage так же).
+- `secrets/data/apps/cde-api/zeebe` в Vault нужно создать; в k8s-контурах нужен только Secret `cde-api-zeebe-secret`; S3 и RabbitMQ используют существующие Secret'ы hasher / pdf-markings / api (таблица выше). Если в Secret'ах S3 другие права или бакет, чем нужны cde-api, заменить на отдельный.
+- Значения секретов из Vault подставляются в окружение через `. file` без кавычек — как у `documentations-api`; пароли со спецсимволами shell ломают этот способ.

apps/documentations/cde-api.ENDPOINTS.md

@@ -0,0 +1,41 @@
+# Внешние зависимости cde-api и воркеров
+
+Документ перечисляет сервисы, к которым обращаются `cde-api` и воркеры, по их URL-переменным окружения (`apps/documentations/base/cde-api*.yaml`). Это карта зависимостей «кто кого зовёт»; конкретные пути запросов определяются клиентами в коде `cde-api` и здесь не разбираются.
+
+Значения в таблице — из `base`. В контурах с полными копиями (`ugok`, `brusnika-*`, `wb`) имена сервисов и порты другие — см. `*/cde-api.yaml` и раздел «Различия по контурам» в [cde-api.CONFIGURATION.md](cde-api.CONFIGURATION.md).
+
+## HTTP-зависимости
+
+| Переменная | Значение (base) | Сервис | Процессы |
+| --- | --- | --- | --- |
+| `CDE_API_RESOURCES_BASE_URL` | `http://iams.iam.svc.cluster.local:8080` | resources / iams | api |
+| `CDE_API_WORKFLOW_BASE_URL` | `http://backend-svc.processing.svc.cluster.local:80` | workflows (processing) | api, process-workflows, copy, move |
+| `CDE_API_BIMAPI_URL` | `http://backend-svc.bim.svc.cluster.local:80` | bim (v1) | api, process-workflows, copy, move |
+| `CDE_API_BIMAPI_V2_URL` | `http://backend-svc.bim.svc.cluster.local:80` | bim (v2) | api, process-workflows, copy, move |
+| `CDE_API_WORKSPACE_BASE_URL` | `http://backend-svc.workspaces.svc.cluster.local:80` | workspaces | api, publish-documents, copy, move |
+| `CDE_API_SYSTEMLOG_BASE_URL` | `http://backend-svc.system-log.svc.cluster.local:80` | system-log | api, publish-documents, copy, move |
+| `CDE_API_EAV_HOST` | `http://backend-svc.eav.svc.cluster.local:80` | eav | все |
+| `CDE_API_DOCUMENTATION_V2_URL` | `http://backend-api-svc.documentations.svc.cluster.local:80` | documentations-api | api, process-workflows, copy, move |
+| `CDE_API_INTERNAL_URL` | `http://cde-api.documentations:8000` | сам cde-api (service `cde-api`) | api, process-workflows, copy, move |
+| `CDE_API_FLOWS_URL` | `http://backend-svc.flows.svc.cluster.local:80` | flows | api, create-upload, process-workflows, publish-documents, handle-error, copy, move |
+| `CDE_API_TRANSMITTALS_URL` | `http://transmittal-service.transmittal.svc.cluster.local:80` | transmittal | api, create-upload, process-workflows, publish-documents, handle-error, copy, move |
+| `CDE_API_MAILER_BASE_URL` | `http://mailer-service.mailer:8000` | mailer | api, create-upload, process-workflows, publish-documents, handle-error, copy, move |
+| `CDE_API_DJANGO_HOST`, `CDE_API_USERS_BASE_URL` | `http://backend-svc.django.svc.cluster.local:80` | django (пользователи, `CDE_API_USERS_AUTH_TOKEN` из секрета `django-auth`) | api, process-workflows, copy, move; `CDE_API_USERS_BASE_URL` — только api |
+| `CDE_API_PUBLIC_LINK_HOST` | зависит от контура | внешний хост document-link (используется для формирования ссылок) | api |
+
+Точный список процессов для каждой переменной — в [cde-api.CONFIGURATION.md](cde-api.CONFIGURATION.md).
+
+## Инфраструктурные зависимости
+
+| Зависимость | Откуда конфигурируется | Для чего |
+| --- | --- | --- |
+| PostgreSQL | Vault `secrets/data/apps/documentations/postgres` (k8s-контуры: хост/БД как у documentations-api + его секрет), `sslmode=disable` | **та же БД, что у documentations-api** |
+| Valkey/Redis | `CDE_API_REDIS__HOST=redis`, `PORT=6379`, `DB=5`, без TLS и пароля | общий `redis` из ns documentations: кэш, курсоры, блокировки |
+| S3 | Vault `secrets/data/minio/apps/documentations` (k8s-контуры: существующие Secret'ы контура, см. CONFIGURATION), бакет `CDE_API_S3_BUCKET_NAME` | хранение и multipart-загрузка файлов дисков |
+| Zeebe (Camunda) | Vault `secrets/data/apps/cde-api/zeebe` (k8s-контуры: `cde-api-zeebe-secret`) | S32D-воркеры берут задачи из Zeebe |
+| RabbitMQ | Vault `secrets/data/rabbitmq/apps/cde` (k8s-контуры: существующие Secret'ы контура), хост `rabbitmq.rabbitmq.svc.cluster.local:5672`; ключи `pdf_markings_input`, `hash.compute.normal`, обмен `hash.compute` | постановка задач на штампы (pdf-markings) и хэширование (hasher) |
+| Контейнерный реестр / workflows | `CDE_API_CONTAINER_REGISTRY`, `CDE_API_WORKFLOWS_IMAGES_VERSION=master`, файл `tasks_execution_config.json` | запуск задач обработки (k8s-jobs) |
+
+## Входящий трафик
+
+Service `cde-api:8000` (ns `documentations`) используется внутри кластера (в том числе самим cde-api через `CDE_API_INTERNAL_URL`). Маршруты в `infrastructure/istio-config/*` на этот сервис **не заведены**: существующие `cde-api-virt-service` относятся к легаси-сервису cde (`cde-svc.cde`) и не затрагиваются. Входящий контракт — [cde-api.openapi.yaml](cde-api.openapi.yaml) (копия `cde-api/docs/openapi/swagger.yaml`).

apps/documentations/cde-api.env.example

@@ -0,0 +1,114 @@
+# =============================================================================
+# cde-api и воркеры (cde-api-worker-*) — пример переменных окружения
+# =============================================================================
+# Значения — из apps/documentations/base/cde-api.yaml; секреты оставлены пустыми.
+# Префикс CDE_API_, вложенность через "__". Полный список по процессам —
+# cde-api.CONFIGURATION.md.
+
+CDE_API_RESOURCES_BASE_URL=http://iams.iam.svc.cluster.local:8080
+CDE_API_RESOURCES_TIMEOUT=10s
+CDE_API_APP_NAME=cde-api
+CDE_API_LOG_LEVEL=debug
+CDE_API_HTTP_PORT=8000
+CDE_API_HTTP_READ_TIMEOUT=0s
+CDE_API_HTTP_WRITE_TIMEOUT=0s
+CDE_API_HTTP_IDLE_TIMEOUT=120s
+CDE_API_HTTP_READ_BUFFER_SIZE=96
+CDE_API_OBSERVABILITY_ENABLE=false
+CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE=5368709120
+CDE_API_S3_MAX_PART_SIZE=524288000
+CDE_API_S3_UPLOAD_STALL_TIMEOUT=10m
+CDE_API_PUBLIC_LINK_HOST=https://document-link-srx.wb.ru
+CDE_API_WORKFLOW_BASE_URL=http://backend-svc.processing.svc.cluster.local:80
+CDE_API_WORKFLOW_RETRY_COUNT=3
+CDE_API_WORKFLOW_RETRY_WAIT_MS=500
+CDE_API_WORKFLOW_TIMEOUT_MS=30000
+CDE_API_BIMAPI_URL=http://backend-svc.bim.svc.cluster.local:80
+CDE_API_BIMAPI_V2_URL=http://backend-svc.bim.svc.cluster.local:80
+CDE_API_BIMAPI_RETRY_COUNT=3
+CDE_API_BIMAPI_RETRY_WAIT_MS=1000
+CDE_API_BIMAPI_TIMEOUT_MS=30000
+CDE_API_BIMAPI_TIMEOUT_V2_MS=300000
+CDE_API_WORKSPACE_BASE_URL=http://backend-svc.workspaces.svc.cluster.local:80
+CDE_API_WORKSPACE_RETRY_COUNT=3
+CDE_API_WORKSPACE_TIMEOUT_MS=10000
+CDE_API_SYSTEMLOG_BASE_URL=http://backend-svc.system-log.svc.cluster.local:80
+CDE_API_SYSTEMLOG_TIMEOUT_MS=10000
+CDE_API_CONTAINER_REGISTRY=cr.yandex/crp3ccidau046kdj8g9q
+CDE_API_WORKFLOWS_IMAGES_VERSION=master
+CDE_API_DJANGO_HOST=http://backend-svc.django.svc.cluster.local:80
+CDE_API_ENVIRONMENT=production
+CDE_API_CONVERTED_PDF_TO_S3=true
+CDE_API_CONVERT_DXF_TO_GEOJSON=true
+CDE_API_CONVERT_DWG_TO_GEOJSON=true
+CDE_API_USE_BIMV1_FOR_BIMV2=true
+CDE_API_EAV_HOST=http://backend-svc.eav.svc.cluster.local:80
+CDE_API_EAV_TIMEOUT_MS=10000
+CDE_API_DOCUMENTATION_V2_URL=http://backend-api-svc.documentations.svc.cluster.local:80
+CDE_API_INTERNAL_URL=http://cde-api.documentations:8000
+CDE_API_COPY_MAX_SYNC_WAIT_MS=300000
+CDE_API_LAST_MASTER_BIM=36311
+CDE_API_LAST_SLAVE_1_BIM=94015
+CDE_API_LAST_SLAVE_2_BIM=135771
+CDE_API_USE_BIM_INSERTER=true
+CDE_API_USE_LEGACY_BIM_FLOW=0
+CDE_API_DATABASE_MAX_CONN_LIFETIME=30m
+CDE_API_DATABASE_MAX_CONN_IDLE_TIME=10m
+CDE_API_DATABASE_HEALTH_CHECK_PERIOD=30s
+CDE_API_DATABASE_POOL_SIZE=10
+CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD=30s
+CDE_API_DATABASE__SSLMODE=disable
+CDE_API_DATABASE__INSECURE_SKIP_TLS=false
+CDE_API_DATABASE_OBSERVABILITY_ENABLE=false
+CDE_API_REDIS__DB=5
+CDE_API_REDIS__SSL=false
+CDE_API_REDIS__POOL_SIZE=10
+CDE_API_REDIS__MIN_IDLE_CONNS=2
+CDE_API_REDIS__DIAL_TIMEOUT_MS=5000
+CDE_API_REDIS__READ_TIMEOUT_MS=3000
+CDE_API_REDIS__WRITE_TIMEOUT_MS=3000
+CDE_API_REDIS__DEFAULT_TTL_MINUTES=10
+CDE_API_REDIS__PERMISSION_CACHE_ENABLED=false
+CDE_API_S3_BUCKET_NAME=documentations
+CDE_API_S3_USE_SSL=true
+CDE_API_S3_BUCKET_LOOKUP=auto
+CDE_API_S3_INSECURE_SKIP_TLS=false
+CDE_API_S3_CHECK_BUCKET=false
+CDE_API_S3_CONNECT_TIMEOUT=10s
+CDE_API_S3_TLS_HANDSHAKE_TIMEOUT=10s
+CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES=1099511627776
+CDE_API_S32D_MAX_FILES_COUNT=500
+CDE_API_ZEEBE_USE_PLAINTEXT=true
+CDE_API_USERS_BASE_URL=http://backend-svc.django.svc.cluster.local:80
+CDE_API_DISK_BUCKET_NAMESPACE=documentations
+CDE_API_USERS_ORIGINATOR=docs_prod
+CDE_API_USERS_TIMEOUT_MS=10000
+CDE_API_MAILER_BASE_URL=http://mailer-service.mailer:8000
+CDE_API_MAILER_FROM_EMAIL=noreply@sarex.io
+CDE_API_MAILER_RETRY_COUNT=2
+CDE_API_MAILER_TIMEOUT_MS=10000
+CDE_API_FLOWS_URL=http://backend-svc.flows.svc.cluster.local:80
+CDE_API_TRANSMITTALS_URL=http://transmittal-service.transmittal.svc.cluster.local:80
+CDE_API_WORKFLOWS_CONFIG_FILEPATH=/etc/app/tasks_execution_config.json
+CDE_API_RABBITMQ__MARKS_ROUTING_KEY=pdf_markings_input
+CDE_API_RABBITMQ__HASHER_ROUTING_KEY=hash.compute.normal
+CDE_API_RABBITMQ__HASHER_EXCHANGE=hash.compute
+CDE_API_REDIS__HOST=redis
+CDE_API_REDIS__PORT=6379
+CDE_API_RABBITMQ__HOST=rabbitmq.rabbitmq.svc.cluster.local
+CDE_API_RABBITMQ__PORT=5672
+
+# --- секреты (k8s Secret) ---
+CDE_API_DATABASE__PASSWORD=
+CDE_API_DATABASE__USER=
+CDE_API_PUBLIC_KEY=
+CDE_API_RABBITMQ__PASSWORD=
+CDE_API_RABBITMQ__USER=
+CDE_API_S3_ACCESS_KEY=
+CDE_API_S3_ENDPOINT=
+CDE_API_S3_SECRET_KEY=
+CDE_API_USERS_AUTH_TOKEN=
+CDE_API_ZEEBE_AUTH_SERVER_URL=
+CDE_API_ZEEBE_CLIENT_ID=
+CDE_API_ZEEBE_CLIENT_SECRET=
+CDE_API_ZEEBE_GATEWAY_ADDRESS=

apps/documentations/d8-ugmk-prod/api.yaml

@@ -156,6 +156,3 @@ spec:
           - name: VALKEY_PORT
             value:
               _default: "6379"
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"

apps/documentations/d8-ugmk-prod/cde-api-worker-copy.yaml

@@ -0,0 +1,236 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-copy:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/d8-ugmk-prod/cde-api-worker-move.yaml

@@ -0,0 +1,218 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-move:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/d8-ugmk-prod/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,125 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-create-upload:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/d8-ugmk-prod/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,119 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-handle-error:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/d8-ugmk-prod/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,188 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-process-workflows:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/d8-ugmk-prod/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,134 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-publish-documents:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/d8-ugmk-prod/cde-api.yaml

@@ -0,0 +1,287 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  values:
+    services:
+      cde-api:
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://sarex-document-link.uralmine.com"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "true"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "true"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/d8-ugmk-prod/filestream.yaml

@@ -144,6 +144,3 @@ spec:
           - name: VALKEY_PORT
             value:
               _default: "6379"
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"

apps/documentations/d8-ugmk-prod/kustomization.yaml

@@ -17,3 +17,31 @@ patches:
     target:
       kind: HelmRelease
       name: documentations-pdf-markings-amqp
+  - path: cde-api.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api
+  - path: cde-api-worker-s32d-create-upload.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-create-upload
+  - path: cde-api-worker-s32d-process-workflows.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-process-workflows
+  - path: cde-api-worker-s32d-publish-documents.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-publish-documents
+  - path: cde-api-worker-s32d-handle-error.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-handle-error
+  - path: cde-api-worker-copy.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-copy
+  - path: cde-api-worker-move.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-move

apps/documentations/outbox-relay.CONFIGURATION.md

@@ -0,0 +1,44 @@
+# Конфигурация outbox-relay
+
+`outbox-relay` (репозиторий `outbox-relay`, образ `outbox-relay`) — воркер transactional outbox для cde-api: опрашивает таблицу `outbox` в БД cde-api и публикует события в Kafka. HelmRelease `outbox-relay` в ns `documentations`, Service нет, 1 реплика. Манифест — `base/outbox-relay.yaml` и одноимённые файлы в `ugok/`, `brusnika-*/`, `wb/`.
+
+Миграции не запускает: таблицу `outbox` создаёт cde-api (`migrations/001_create_outbox.sql` из репозитория relay нужно включить в миграции cde-api). БД — **общая с documentations** (как и у cde-api), поэтому таблица `outbox` появляется в БД documentations.
+
+## Переменные окружения
+
+Префикс `OUTBOX_RELAY_`, секции через `__`.
+
+| Переменная | Значение | Комментарий |
+| --- | --- | --- |
+| `APP_NAME`, `APP_VERSION` | `cde-api-outbox-relay`, `0.1.0` | |
+| `SOURCE_SERVICE`, `SOURCE_VERSION` | `cde-api`, `0.1.0` | значения поля source в envelope событий |
+| `LOG_LEVEL` | `info` | |
+| `PG__SSLMODE` | `disable` | как у cde-api в iac (общий Postgres без TLS) |
+| `PG__POOL_MIN` / `PG__POOL_MAX` | `1` / `3` | |
+| `PG__TABLE` | `outbox` | |
+| `PG__HOST/PORT/NAME/USER/PASSWORD` | Vault `secrets/data/apps/documentations/postgres` (vault-контуры) или литералы + секрет БД контура | та же БД, что у cde-api |
+| `POLL_INTERVAL` / `BATCH_SIZE` | `500ms` / `100` | |
+| `MAX_ATTEMPTS` / `INITIAL_BACKOFF` / `MAX_BACKOFF` | `8` / `1s` / `5m` | |
+| `SHUTDOWN_TIMEOUT` | `30s` | |
+| `KAFKA__BROKERS` | см. таблицу ниже | |
+| `KAFKA__SECURITY_PROTOCOL` | `SASL_SSL` (vault-контуры) / `SSL` (остальные) | включает TLS; SASL включается, если задан `SASL_USERNAME` |
+| `KAFKA__INSECURE_SKIP_VERIFY` | `true` | сертификат брокера не проверяется, CA не нужен; клиентский сертификат (mTLS) relay не поддерживает |
+| `KAFKA__SASL_MECHANISM/USERNAME/PASSWORD` | Vault `secrets/data/kafka/apps/documentations` | только vault-контуры |
+
+В `.helm/values.yaml` репозитория relay используются `KAFKA__HOST/PORT` и секрет `cde-api-kafka-secret`; в iac вместо них — `KAFKA__BROKERS` и адреса Kafka своего контура.
+
+## Kafka по контурам
+
+| Контур | Brokers | Протокол | Проверка сертификата | Аутентификация |
+| --- | --- | --- | --- | --- |
+| `base` (`sarex-contour`, `yc-k8s-test`, `d8-ugmk-prod`, `uralkal`, `vad`) | `kafka-kafka-contour.kafka.svc.cluster.local:9092` | `SASL_SSL` | не проверяется | Vault `secrets/data/kafka/apps/documentations` |
+| `wb` | `wb-prod-kafka-bootstrap.kafka.svc.cluster.local:9093` | `SSL` | не проверяется | нет (как у pm) |
+| `ugok` | `ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093` | `SSL` | не проверяется | нет |
+| `brusnika-prod`, `brusnika-stage` | `brusnika-stage-kafka-bootstrap.kafka.svc.cluster.local:9093` | `SSL` | не проверяется | нет |
+
+## Допущения и что нужно проверить
+
+- **Vault:** путь `secrets/data/kafka/apps/documentations` (SCRAM-пользователь с правом писать в топики cde-api) нужно создать, роль `documentations` — разрешить его чтение.
+- **`brusnika-prod`:** адрес Kafka взят из brusnika-stage (так указано в `bi/brusnika-prod`, у pm в brusnika-prod Kafka не настроена).
+- **`sarex-contour`, `yc-k8s-test`:** адрес `kafka-kafka-contour` взят у остальных vault-контуров; сверить с `infrastructure/kafka/<кластер>`.
+- Топики событий (39 штук, список — `docs/cde-api-rollout.md`, раздел 5) создаёт команда инфраструктуры до запуска relay.

apps/documentations/ugok/cde-api-worker-copy.yaml

@@ -0,0 +1,373 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-copy:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-copy
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api-worker-copy:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/cde-api-worker-move.yaml

@@ -0,0 +1,355 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-move:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-move
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api-worker-move:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,243 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-create-upload:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-create-upload
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api-worker-s32d-create-upload:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,237 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-handle-error:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-handle-error
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 50m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api-worker-s32d-handle-error:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,306 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-process-workflows:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-process-workflows
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api-worker-s32d-process-workflows:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,252 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-publish-documents:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-publish-documents
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api-worker-s32d-publish-documents:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/cde-api.yaml

@@ -0,0 +1,446 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      cde-api:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: cde-api
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          port:
+            _default: 8000
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/cde-api:ugok_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: true
+          name:
+            _default: cde-api
+          type:
+            _default: ClusterIP
+          port:
+            _default: 8000
+          targetPort:
+            _default: 8000
+          portName:
+            _default: http
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://ugok-document-link-sarex.uralmine.com"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_PUBLIC_KEY
+            secretName:
+              _default: "public-key"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "endpoint"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "documentations-s3-secret"
+            secretKey:
+              _default: "secret_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_USERS_AUTH_TOKEN
+            secretName:
+              _default: "django-auth"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_RABBITMQ__HOST
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "host"
+          - name: CDE_API_RABBITMQ__PORT
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "port"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_RABBITMQ__VHOST
+            secretName:
+              _default: "documentations-rabbitmq-secret"
+            secretKey:
+              _default: "vhost"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/ugok/kustomization.yaml

@@ -13,3 +13,12 @@ resources:
   - pdf-markings-amqp.yaml
   - pdf-markings.yaml
   - frontend.yaml
+  - tasks-execution-config.yaml
+  - cde-api.yaml
+  - cde-api-worker-s32d-create-upload.yaml
+  - cde-api-worker-s32d-process-workflows.yaml
+  - cde-api-worker-s32d-publish-documents.yaml
+  - cde-api-worker-s32d-handle-error.yaml
+  - cde-api-worker-copy.yaml
+  - cde-api-worker-move.yaml
+  - outbox-relay.yaml

apps/documentations/ugok/outbox-relay.yaml

@@ -0,0 +1,130 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: outbox-relay
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.9"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      outbox-relay:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: outbox-relay
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 128Mi
+        image:
+          name:
+            _default: 10.4.10.187:80/library/outbox-relay:ugok_bee3b2a
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: OUTBOX_RELAY_APP_NAME
+            value:
+              _default: "cde-api-outbox-relay"
+          - name: OUTBOX_RELAY_APP_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: OUTBOX_RELAY_SOURCE_SERVICE
+            value:
+              _default: "cde-api"
+          - name: OUTBOX_RELAY_SOURCE_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_PG__SSLMODE
+            value:
+              _default: "disable"
+          - name: OUTBOX_RELAY_PG__POOL_MIN
+            value:
+              _default: "1"
+          - name: OUTBOX_RELAY_PG__POOL_MAX
+            value:
+              _default: "3"
+          - name: OUTBOX_RELAY_PG__TABLE
+            value:
+              _default: "outbox"
+          - name: OUTBOX_RELAY_PG__HOST
+            value:
+              _default: "postgres-service"
+          - name: OUTBOX_RELAY_PG__PORT
+            value:
+              _default: "5432"
+          - name: OUTBOX_RELAY_PG__NAME
+            value:
+              _default: "documentations_db"
+          - name: OUTBOX_RELAY_POLL_INTERVAL
+            value:
+              _default: "500ms"
+          - name: OUTBOX_RELAY_BATCH_SIZE
+            value:
+              _default: "100"
+          - name: OUTBOX_RELAY_MAX_ATTEMPTS
+            value:
+              _default: "8"
+          - name: OUTBOX_RELAY_INITIAL_BACKOFF
+            value:
+              _default: "1s"
+          - name: OUTBOX_RELAY_MAX_BACKOFF
+            value:
+              _default: "5m"
+          - name: OUTBOX_RELAY_SHUTDOWN_TIMEOUT
+            value:
+              _default: "30s"
+          - name: OUTBOX_RELAY_KAFKA__BROKERS
+            value:
+              _default: "ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"
+          - name: OUTBOX_RELAY_KAFKA__SECURITY_PROTOCOL
+            value:
+              _default: "SSL"
+          - name: OUTBOX_RELAY_KAFKA__INSECURE_SKIP_VERIFY
+            value:
+              _default: "true"
+        secretEnvs:
+          - name: OUTBOX_RELAY_PG__USER
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "username"
+          - name: OUTBOX_RELAY_PG__PASSWORD
+            secretName:
+              _default: "documentations-postgresql-secret"
+            secretKey:
+              _default: "password"

apps/documentations/ugok/tasks-execution-config.yaml

@@ -0,0 +1,180 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tasks-execution-config-documentation-v2
+  namespace: documentations
+data:
+  tasks-execution-config-documentation-v2.json: |
+    {
+        "bim_api_metadata_inserter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v4": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_differ": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_updater": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "convert_to_potree": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "docx_to_pdf": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "dwg_to_geojson": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_limits": "4",
+                "cpu_requests": "100m",
+                "memory_limits": "40Gi",
+                "memory_requests": "64Mi"
+            }
+        },
+        "e57_to_las": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "ifc_converter_job": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "las_merge": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "parsing_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_converter_to_tiles": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_create_colored_surface_from_geotiff": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "rendering_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document_legacy": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "update_orthomosaic_data": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "web_hook_caller": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "xml_to_glb": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "document_converter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "sparkjs_converter_wrapper": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        }
+    }

apps/documentations/uralkal/cde-api-worker-copy.yaml

@@ -0,0 +1,236 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-copy:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/uralkal/cde-api-worker-move.yaml

@@ -0,0 +1,218 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-move:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/uralkal/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,125 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-create-upload:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/uralkal/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,119 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-handle-error:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/uralkal/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,188 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-process-workflows:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/uralkal/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,134 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-publish-documents:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/uralkal/cde-api.yaml

@@ -0,0 +1,287 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  values:
+    services:
+      cde-api:
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://document-link.sarex.local.uralkali.com"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/uralkal/kustomization.yaml

@@ -27,3 +27,31 @@ patches:
     target:
       kind: HelmRelease
       name: pdm-api
+  - path: cde-api.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api
+  - path: cde-api-worker-s32d-create-upload.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-create-upload
+  - path: cde-api-worker-s32d-process-workflows.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-process-workflows
+  - path: cde-api-worker-s32d-publish-documents.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-publish-documents
+  - path: cde-api-worker-s32d-handle-error.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-handle-error
+  - path: cde-api-worker-copy.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-copy
+  - path: cde-api-worker-move.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-move

apps/documentations/vad/cde-api-worker-copy.yaml

@@ -0,0 +1,236 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-copy:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/vad/cde-api-worker-move.yaml

@@ -0,0 +1,218 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-move:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/vad/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,125 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-create-upload:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/vad/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,119 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-handle-error:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/vad/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,188 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-process-workflows:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/vad/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,134 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  values:
+    services:
+      worker-s32d-publish-documents:
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"

apps/documentations/vad/cde-api.yaml

@@ -0,0 +1,287 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  values:
+    services:
+      cde-api:
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://sarex-document-link.vadroad.ru"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://backend-svc.processing.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-svc.bim.svc.cluster.local:80"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://backend-svc.workspaces.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://backend-svc.system-log.svc.cluster.local:80"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://backend-svc.eav.svc.cluster.local:80"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"

apps/documentations/vad/kustomization.yaml

@@ -15,3 +15,31 @@ patches:
     target:
       kind: HelmRelease
       name: documentations-pdf-markings-amqp
+  - path: cde-api.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api
+  - path: cde-api-worker-s32d-create-upload.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-create-upload
+  - path: cde-api-worker-s32d-process-workflows.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-process-workflows
+  - path: cde-api-worker-s32d-publish-documents.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-publish-documents
+  - path: cde-api-worker-s32d-handle-error.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-s32d-handle-error
+  - path: cde-api-worker-copy.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-copy
+  - path: cde-api-worker-move.yaml
+    target:
+      kind: HelmRelease
+      name: cde-api-worker-move

apps/documentations/wb/api.yaml

@@ -36,7 +36,7 @@ spec:
 
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_0be18f51
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_98a23ef5
           pullPolicy:
             _default: IfNotPresent
 
@@ -135,10 +135,6 @@ spec:
             value:
               _default: "20"
 
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"
-
           - name: ZITADEL_ACCOUNT
             value:
               _default: "/etc/sarex/zitadel/zitadel-account.json"

apps/documentations/wb/cde-api-worker-copy.yaml

@@ -0,0 +1,367 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-copy
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-copy:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-copy
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-copy:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-copy"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_ISSUES_SYNC_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_ISSUES_BASE_URL
+            value:
+              _default: "http://issues-service.platform:8000"
+          - name: CDE_API_ISSUES_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_ISSUES_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_COPY_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_COPY_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_COPY_STEP_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_COPY_S3_PARALLELISM
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"
+          - name: CDE_API_RABBITMQ__VHOST
+            value:
+              _default: "cde"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "hasher-rabbitmq-secret"
+            secretKey:
+              _default: "user"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "hasher-rabbitmq-secret"
+            secretKey:
+              _default: "password"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/cde-api-worker-move.yaml

@@ -0,0 +1,349 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-move
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-move:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-move
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-move:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-move"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_MOVE_WORKER_JOBS
+            value:
+              _default: ""
+          - name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
+            value:
+              _default: "30"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"
+          - name: CDE_API_RABBITMQ__VHOST
+            value:
+              _default: "cde"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "hasher-rabbitmq-secret"
+            secretKey:
+              _default: "user"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "hasher-rabbitmq-secret"
+            secretKey:
+              _default: "password"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/cde-api-worker-s32d-create-upload.yaml

@@ -0,0 +1,243 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-create-upload
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-create-upload:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-create-upload
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-create-upload:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-create-upload"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_READERAT_BLOCK_SIZE_MB
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_READERAT_CACHE_BLOCKS
+            value:
+              _default: "8"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_TIMEOUT_MIN
+            value:
+              _default: "240"
+          - name: CDE_API_S32D_WORKER_CREATE_UPLOAD_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/cde-api-worker-s32d-handle-error.yaml

@@ -0,0 +1,237 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-handle-error
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-handle-error:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-handle-error
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 50m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-handle-error:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-handle-error"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_HANDLE_ERROR_MAX_JOBS
+            value:
+              _default: "4"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/cde-api-worker-s32d-process-workflows.yaml

@@ -0,0 +1,306 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-process-workflows
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-process-workflows:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-process-workflows
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-process-workflows:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-process-workflows"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_TIMEOUT_MIN
+            value:
+              _default: "480"
+          - name: CDE_API_S32D_WORKER_PROCESS_WORKFLOWS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/cde-api-worker-s32d-publish-documents.yaml

@@ -0,0 +1,252 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api-worker-s32d-publish-documents
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      worker-s32d-publish-documents:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: worker-s32d-publish-documents
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 64Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-s32d-publish-documents:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "worker-s32d-publish-documents"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "3"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "1"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_TIMEOUT_MIN
+            value:
+              _default: "10"
+          - name: CDE_API_S32D_WORKER_PUBLISH_DOCUMENTS_MAX_JOBS
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+        secretEnvs:
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/cde-api.yaml

@@ -0,0 +1,440 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: cde-api
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      cde-api:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: cde-api
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          port:
+            _default: 8000
+          resources:
+            requests:
+              cpu:
+                _default: 200m
+              memory:
+                _default: 256Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/cde-api:prod_c9bc246
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: true
+          name:
+            _default: cde-api
+          type:
+            _default: ClusterIP
+          port:
+            _default: 8000
+          targetPort:
+            _default: 8000
+          portName:
+            _default: http
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: CDE_API_RESOURCES_BASE_URL
+            value:
+              _default: "http://iams.iam.svc.cluster.local:8080"
+          - name: CDE_API_RESOURCES_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_APP_NAME
+            value:
+              _default: "cde-api"
+          - name: CDE_API_LOG_LEVEL
+            value:
+              _default: "debug"
+          - name: CDE_API_HTTP_PORT
+            value:
+              _default: "8000"
+          - name: CDE_API_HTTP_READ_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_WRITE_TIMEOUT
+            value:
+              _default: "0s"
+          - name: CDE_API_HTTP_IDLE_TIMEOUT
+            value:
+              _default: "120s"
+          - name: CDE_API_HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "96"
+          - name: CDE_API_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
+            value:
+              _default: "5368709120"
+          - name: CDE_API_S3_MAX_PART_SIZE
+            value:
+              _default: "524288000"
+          - name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
+            value:
+              _default: "10m"
+          - name: CDE_API_PUBLIC_LINK_HOST
+            value:
+              _default: "https://document-link-srx.wb.ru"
+          - name: CDE_API_WORKFLOW_BASE_URL
+            value:
+              _default: "http://workflows-api-service.workflow.svc.cluster.local:8000"
+          - name: CDE_API_WORKFLOW_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKFLOW_RETRY_WAIT_MS
+            value:
+              _default: "500"
+          - name: CDE_API_WORKFLOW_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_V2_URL
+            value:
+              _default: "http://backend-service.bim.svc.cluster.local:8000"
+          - name: CDE_API_BIMAPI_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_BIMAPI_RETRY_WAIT_MS
+            value:
+              _default: "1000"
+          - name: CDE_API_BIMAPI_TIMEOUT_MS
+            value:
+              _default: "30000"
+          - name: CDE_API_BIMAPI_TIMEOUT_V2_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_WORKSPACE_BASE_URL
+            value:
+              _default: "http://workspaces-service.workspaces.svc.cluster.local:8000"
+          - name: CDE_API_WORKSPACE_RETRY_COUNT
+            value:
+              _default: "3"
+          - name: CDE_API_WORKSPACE_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_SYSTEMLOG_BASE_URL
+            value:
+              _default: "http://api-service.system-log.svc.cluster.local:8000"
+          - name: CDE_API_SYSTEMLOG_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_CONTAINER_REGISTRY
+            value:
+              _default: "cr.yandex/crp3ccidau046kdj8g9q"
+          - name: CDE_API_WORKFLOWS_IMAGES_VERSION
+            value:
+              _default: "master"
+          - name: CDE_API_DJANGO_HOST
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_ENVIRONMENT
+            value:
+              _default: "production"
+          - name: CDE_API_CONVERTED_PDF_TO_S3
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DXF_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_CONVERT_DWG_TO_GEOJSON
+            value:
+              _default: "true"
+          - name: CDE_API_USE_BIMV1_FOR_BIMV2
+            value:
+              _default: "true"
+          - name: CDE_API_EAV_HOST
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+          - name: CDE_API_EAV_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_DOCUMENTATION_V2_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+          - name: CDE_API_INTERNAL_URL
+            value:
+              _default: "http://cde-api.documentations:8000"
+          - name: CDE_API_COPY_MAX_SYNC_WAIT_MS
+            value:
+              _default: "300000"
+          - name: CDE_API_LAST_MASTER_BIM
+            value:
+              _default: "36311"
+          - name: CDE_API_LAST_SLAVE_1_BIM
+            value:
+              _default: "94015"
+          - name: CDE_API_LAST_SLAVE_2_BIM
+            value:
+              _default: "135771"
+          - name: CDE_API_USE_BIM_INSERTER
+            value:
+              _default: "true"
+          - name: CDE_API_USE_LEGACY_BIM_FLOW
+            value:
+              _default: "0"
+          - name: CDE_API_DATABASE_MAX_CONN_LIFETIME
+            value:
+              _default: "30m"
+          - name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
+            value:
+              _default: "10m"
+          - name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE_POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_DIAGNOSTICS_SLOW_OPERATION_THRESHOLD
+            value:
+              _default: "30s"
+          - name: CDE_API_DATABASE__SSLMODE
+            value:
+              _default: "disable"
+          - name: CDE_API_DATABASE__INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_DATABASE_OBSERVABILITY_ENABLE
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__DB
+            value:
+              _default: "5"
+          - name: CDE_API_REDIS__SSL
+            value:
+              _default: "false"
+          - name: CDE_API_REDIS__POOL_SIZE
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__MIN_IDLE_CONNS
+            value:
+              _default: "2"
+          - name: CDE_API_REDIS__DIAL_TIMEOUT_MS
+            value:
+              _default: "5000"
+          - name: CDE_API_REDIS__READ_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__WRITE_TIMEOUT_MS
+            value:
+              _default: "3000"
+          - name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
+            value:
+              _default: "10"
+          - name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_NAME
+            value:
+              _default: "documentations"
+          - name: CDE_API_S3_USE_SSL
+            value:
+              _default: "false"
+          - name: CDE_API_S3_BUCKET_LOOKUP
+            value:
+              _default: "auto"
+          - name: CDE_API_S3_INSECURE_SKIP_TLS
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CHECK_BUCKET
+            value:
+              _default: "false"
+          - name: CDE_API_S3_CONNECT_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S3_TLS_HANDSHAKE_TIMEOUT
+            value:
+              _default: "10s"
+          - name: CDE_API_S32D_MAX_ARCHIVE_SIZE_BYTES
+            value:
+              _default: "1099511627776"
+          - name: CDE_API_S32D_MAX_FILES_COUNT
+            value:
+              _default: "500"
+          - name: CDE_API_ZEEBE_USE_PLAINTEXT
+            value:
+              _default: "true"
+          - name: CDE_API_USERS_BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+          - name: CDE_API_DISK_BUCKET_NAMESPACE
+            value:
+              _default: "documentations"
+          - name: CDE_API_USERS_ORIGINATOR
+            value:
+              _default: "docs_prod"
+          - name: CDE_API_USERS_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_MAILER_BASE_URL
+            value:
+              _default: "http://mailer-service.mailer:8000"
+          - name: CDE_API_MAILER_FROM_EMAIL
+            value:
+              _default: "noreply@sarex.io"
+          - name: CDE_API_MAILER_RETRY_COUNT
+            value:
+              _default: "2"
+          - name: CDE_API_MAILER_TIMEOUT_MS
+            value:
+              _default: "10000"
+          - name: CDE_API_FLOWS_URL
+            value:
+              _default: "http://backend-service.flows.svc.cluster.local:8000"
+          - name: CDE_API_TRANSMITTALS_URL
+            value:
+              _default: "http://transmittal-service.transmittal.svc.cluster.local:80"
+          - name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
+            value:
+              _default: "/etc/app/tasks_execution_config.json"
+          - name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
+            value:
+              _default: "pdf_markings_input"
+          - name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
+            value:
+              _default: "hash.compute.normal"
+          - name: CDE_API_RABBITMQ__HASHER_EXCHANGE
+            value:
+              _default: "hash.compute"
+          - name: CDE_API_REDIS__HOST
+            value:
+              _default: "redis"
+          - name: CDE_API_REDIS__PORT
+            value:
+              _default: "6379"
+          - name: CDE_API_DATABASE__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: CDE_API_DATABASE__PORT
+            value:
+              _default: "5432"
+          - name: CDE_API_DATABASE__NAME
+            value:
+              _default: "documentations_db"
+          - name: CDE_API_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+          - name: CDE_API_RABBITMQ__PORT
+            value:
+              _default: "5672"
+          - name: CDE_API_RABBITMQ__VHOST
+            value:
+              _default: "cde"
+        secretEnvs:
+          - name: CDE_API_PUBLIC_KEY
+            secretName:
+              _default: "public-key"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: CDE_API_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"
+          - name: CDE_API_S3_ENDPOINT
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "endpoint_url"
+          - name: CDE_API_S3_ACCESS_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "key_id"
+          - name: CDE_API_S3_SECRET_KEY
+            secretName:
+              _default: "yc-s3"
+            secretKey:
+              _default: "access_key"
+          - name: CDE_API_ZEEBE_GATEWAY_ADDRESS
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "gateway_address"
+          - name: CDE_API_ZEEBE_CLIENT_ID
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_id"
+          - name: CDE_API_ZEEBE_CLIENT_SECRET
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "client_secret"
+          - name: CDE_API_ZEEBE_AUTH_SERVER_URL
+            secretName:
+              _default: "cde-api-zeebe-secret"
+            secretKey:
+              _default: "auth_server_url"
+          - name: CDE_API_USERS_AUTH_TOKEN
+            secretName:
+              _default: "django-auth"
+            secretKey:
+              _default: "key"
+          - name: CDE_API_RABBITMQ__USER
+            secretName:
+              _default: "hasher-rabbitmq-secret"
+            secretKey:
+              _default: "user"
+          - name: CDE_API_RABBITMQ__PASSWORD
+            secretName:
+              _default: "hasher-rabbitmq-secret"
+            secretKey:
+              _default: "password"
+        volumes:
+          _default:
+            - name: tasks-execution-config
+              mountPath:
+                _default: /etc/app/tasks_execution_config.json
+              subPath:
+                _default: tasks_execution_config.json
+              readOnly:
+                _default: true
+              configMap:
+                name:
+                  _default: tasks-execution-config-documentation-v2
+                items:
+                  - key: tasks-execution-config-documentation-v2.json
+                    path:
+                      _default: tasks_execution_config.json
+                defaultMode:
+                  _default: "0644"

apps/documentations/wb/filestream.yaml

@@ -138,10 +138,6 @@ spec:
             value:
               _default: "0.0.0.0:8080"
 
-          - name: CDE_API_ENABLED
-            value:
-              _default: "false"
-
           - name: API_ADDRESS_FILE
             value:
               _default: "0.0.0.0:8080"

apps/documentations/wb/kustomization.yaml

@@ -12,3 +12,12 @@ resources:
   - frontend-static.yaml
   - redis.yaml
   - stamp-verification.yaml
+  - tasks-execution-config.yaml
+  - cde-api.yaml
+  - cde-api-worker-s32d-create-upload.yaml
+  - cde-api-worker-s32d-process-workflows.yaml
+  - cde-api-worker-s32d-publish-documents.yaml
+  - cde-api-worker-s32d-handle-error.yaml
+  - cde-api-worker-copy.yaml
+  - cde-api-worker-move.yaml
+  - outbox-relay.yaml

apps/documentations/wb/outbox-relay.yaml

@@ -0,0 +1,130 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: outbox-relay
+  namespace: documentations
+spec:
+  interval: 10m
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+  install:
+    remediation:
+      retries: 3
+  upgrade:
+    remediation:
+      retries: 3
+  values:
+    global:
+      env: _default
+    services:
+      outbox-relay:
+        enabled: true
+        deployment:
+          enabled: true
+          name:
+            _default: outbox-relay
+          replicaCount:
+            _default: 1
+          revisionHistoryLimit:
+            _default: 5
+          resources:
+            requests:
+              cpu:
+                _default: 100m
+              memory:
+                _default: 128Mi
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/outbox-relay:prod_bee3b2a
+          pullPolicy:
+            _default: IfNotPresent
+        service:
+          enabled: false
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: dockerhub
+        envs:
+          - name: OUTBOX_RELAY_APP_NAME
+            value:
+              _default: "cde-api-outbox-relay"
+          - name: OUTBOX_RELAY_APP_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_LOG_LEVEL
+            value:
+              _default: "info"
+          - name: OUTBOX_RELAY_SOURCE_SERVICE
+            value:
+              _default: "cde-api"
+          - name: OUTBOX_RELAY_SOURCE_VERSION
+            value:
+              _default: "0.1.0"
+          - name: OUTBOX_RELAY_PG__SSLMODE
+            value:
+              _default: "disable"
+          - name: OUTBOX_RELAY_PG__POOL_MIN
+            value:
+              _default: "1"
+          - name: OUTBOX_RELAY_PG__POOL_MAX
+            value:
+              _default: "3"
+          - name: OUTBOX_RELAY_PG__TABLE
+            value:
+              _default: "outbox"
+          - name: OUTBOX_RELAY_PG__HOST
+            value:
+              _default: "sarex-vpsql-01.xc.wb.ru"
+          - name: OUTBOX_RELAY_PG__PORT
+            value:
+              _default: "5432"
+          - name: OUTBOX_RELAY_PG__NAME
+            value:
+              _default: "documentations_db"
+          - name: OUTBOX_RELAY_POLL_INTERVAL
+            value:
+              _default: "500ms"
+          - name: OUTBOX_RELAY_BATCH_SIZE
+            value:
+              _default: "100"
+          - name: OUTBOX_RELAY_MAX_ATTEMPTS
+            value:
+              _default: "8"
+          - name: OUTBOX_RELAY_INITIAL_BACKOFF
+            value:
+              _default: "1s"
+          - name: OUTBOX_RELAY_MAX_BACKOFF
+            value:
+              _default: "5m"
+          - name: OUTBOX_RELAY_SHUTDOWN_TIMEOUT
+            value:
+              _default: "30s"
+          - name: OUTBOX_RELAY_KAFKA__BROKERS
+            value:
+              _default: "wb-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"
+          - name: OUTBOX_RELAY_KAFKA__SECURITY_PROTOCOL
+            value:
+              _default: "SSL"
+          - name: OUTBOX_RELAY_KAFKA__INSECURE_SKIP_VERIFY
+            value:
+              _default: "true"
+        secretEnvs:
+          - name: OUTBOX_RELAY_PG__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "username"
+          - name: OUTBOX_RELAY_PG__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey:
+              _default: "password"

apps/documentations/wb/tasks-execution-config.yaml

@@ -0,0 +1,180 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: tasks-execution-config-documentation-v2
+  namespace: documentations
+data:
+  tasks-execution-config-documentation-v2.json: |
+    {
+        "bim_api_metadata_inserter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_api_metadata_inserter_v4": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_differ": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "bim_updater": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "convert_to_potree": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "docx_to_pdf": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "dwg_to_geojson": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_limits": "4",
+                "cpu_requests": "100m",
+                "memory_limits": "40Gi",
+                "memory_requests": "64Mi"
+            }
+        },
+        "e57_to_las": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "ifc_converter_job": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "las_merge": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "mesh_optimizer_v2": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "parsing_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_converter_to_tiles": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "processing_create_colored_surface_from_geotiff": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "rendering_template": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "split_pdf_document_legacy": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "update_orthomosaic_data": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "web_hook_caller": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "xml_to_glb": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "document_converter": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        },
+        "sparkjs_converter_wrapper": {
+            "executor": "k8s",
+            "resources": {
+                "cpu_requests": "100m",
+                "memory_requests": "64Mi"
+            }
+        }
+    }

apps/eav/uralkal/helmrelease.yaml

@@ -8,9 +8,6 @@ spec:
   values:
     services:
       backend:
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/eav:prod_0dcebba6@sha256:2630ad45e4704881ac834f48a70ea837fa46620a5339c3e462282fd16399cc9c
         deployment:
           resources:
             requests:

apps/eav/wb/django-configmap.yaml

@@ -18,7 +18,7 @@ data:
 
     # DEBUG SETTINGS START
     # ---------------------------------------------------------------------------------------------------------------------
-    DEBUG = False
+    DEBUG = True
     ALLOWED_HOSTS = ['*']
     # ---------------------------------------------------------------------------------------------------------------------
     # DEBUG SETTINGS END

apps/flows/d8-ugmk-prod/backend.yaml

@@ -9,8 +9,6 @@ spec:
     services:
       backend:
         deployment:
-          replicaCount:
-            _default: 2
           args:
             _default:
               - |

apps/iam/uralkal/backend-s3.yaml

@@ -8,9 +8,6 @@ spec:
   values:
     services:
       backend:
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/iams:contour_29754513@sha256:a12cf64b59da50cf99011ee4fc8559e61af637887265f1377a448ee321de2250
         envs:
           - name: ENVIRONMENT
             value:

apps/issues/wb/production-configmap.yaml

@@ -12,6 +12,7 @@ data:
 
     # DEBUG SETTINGS START
     # -----------------------------------------------------------------------------
+    DEBUG = True
     # -----------------------------------------------------------------------------
 
     TEST_MODE = False
@@ -39,7 +40,7 @@ data:
 
     # DEBUG SETTINGS START
     # -----------------------------------------------------------------------------
-    DEBUG = False
+    DEBUG = True
     # -----------------------------------------------------------------------------
 
     REVIEW_HOST='http://backend-service.flows.svc.cluster.local:8000'

apps/pm/uralkal/backend.yaml

@@ -1,5 +1,11 @@
 ---
-
+# Патч backend для vad.
+#
+# ВНИМАНИЕ: args — список, kustomize заменяет его ЦЕЛИКОМ (JSON merge patch),
+# поэтому здесь продублирован весь скрипт из apps/pm/base/backend.yaml.
+# При правке args в base их нужно продублировать и сюда.
+# podAnnotations — map, мержится по ключам, поэтому переопределён только
+# один ключ agent-inject-template-pm-s3; остальные vault-аннотации берутся из base.
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -56,10 +62,6 @@ spec:
             value:
               _default: "/api/v1"
 
-          - name: SETTINGS_VERIFY_SSL
-            value:
-              _default: "false"
-
           - name: TRACING_INSECURE
             value:
               _default: "False"

apps/postgres-tls-test/uralkal/kustomization.yaml

@@ -1,6 +0,0 @@
-apiVersion: kustomize.config.k8s.io/v1beta1
-kind: Kustomization
-resources:
-  - namespace.yaml
-  - postgresql.yaml
-  - notes-tls.yaml

apps/postgres-tls-test/uralkal/namespace.yaml

@@ -1,5 +0,0 @@
----
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: postgres-tls-test

apps/postgres-tls-test/uralkal/notes-tls.yaml

@@ -1,119 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: notes-tls
-  namespace: postgres-tls-test
-spec:
-  interval: 10m
-  dependsOn:
-    - name: pg-tls
-  chart:
-    spec:
-      chart: universal-chart
-      version: "0.1.9"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-  install:
-    remediation:
-      retries: 3
-  upgrade:
-    remediation:
-      retries: 3
-  values:
-    global:
-      env: _default
-    services:
-      backend:
-        enabled: true
-        deployment:
-          enabled: true
-          name:
-            _default: notes-tls
-          replicaCount:
-            _default: 1
-          port:
-            _default: 8000
-          resources:
-            requests:
-              cpu:
-                _default: 25m
-              memory:
-                _default: 128Mi
-          probes:
-            liveness:
-              enabled: false
-            readiness:
-              enabled: false
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/notes-backend:preprod_c00faf6e
-          pullPolicy:
-            _default: IfNotPresent
-        service:
-          enabled: true
-          name:
-            _default: notes-tls
-          type:
-            _default: ClusterIP
-          port:
-            _default: 8000
-          targetPort:
-            _default: 8000
-          portName:
-            _default: http
-        imagePullSecrets:
-          enabled:
-            _default: true
-          name:
-            _default: regcred
-        envs:
-          - name: PG_HOST
-            value:
-              _default: pg-tls.postgres-tls-test.svc.cluster.local
-          - name: PG_PORT
-            value:
-              _default: "5432"
-          - name: PG_DB
-            value:
-              _default: notes
-          - name: PG_LOGIN
-            value:
-              _default: notes
-          - name: PG_SSL
-            value:
-              _default: "true"
-          - name: PG_SSL_MODE
-            value:
-              _default: verify-full
-          - name: PGSSLMODE
-            value:
-              _default: verify-full
-          - name: PGSSLROOTCERT
-            value:
-              _default: /etc/pg-ca/ca.crt
-          - name: DJANGO_USE
-            value:
-              _default: "false"
-          - name: TIMEOUT
-            value:
-              _default: "120"
-        secretEnvs:
-          - name: PG_PASSWORD
-            secretName:
-              _default: pg-tls
-            secretKey:
-              _default: password
-        volumes:
-          _default:
-            - name: pg-ca
-              mountPath: /etc/pg-ca
-              readOnly: true
-              secret:
-                secretName: pg-tls-crt
-                items:
-                  - key: ca.crt
-                    path: ca.crt

apps/postgres-tls-test/uralkal/postgresql.yaml

@@ -1,88 +0,0 @@
----
-apiVersion: helm.toolkit.fluxcd.io/v2
-kind: HelmRelease
-metadata:
-  name: pg-tls
-  namespace: postgres-tls-test
-spec:
-  interval: 10m
-  timeout: 15m
-  chart:
-    spec:
-      chart: postgresql-contour
-      version: "17.0.7"
-      sourceRef:
-        kind: HelmRepository
-        name: yc-oci-charts
-        namespace: flux-system
-      interval: 10m
-  install:
-    remediation:
-      retries: 3
-  upgrade:
-    remediation:
-      retries: 3
-  values:
-    fullnameOverride: pg-tls
-    global:
-      security:
-        allowInsecureImages: true
-      defaultStorageClass: local-path
-      imagePullSecrets:
-        - regcred
-    image:
-      registry: cr.yandex/crp3ccidau046kdj8g9q
-      repository: contour/postgresql
-      tag: 17.0.7
-    auth:
-      username: notes
-      database: notes
-    metrics:
-      enabled: false
-    tls:
-      enabled: true
-      autoGenerated: true
-    primary:
-      persistence:
-        storageClass: local-path
-        size: 1Gi
-      nodeSelector:
-        dedicated: generic
-      containerSecurityContext:
-        readOnlyRootFilesystem: false
-      args:
-        - postgres
-        - -c
-        - ssl=on
-        - -c
-        - ssl_cert_file=/opt/bitnami/postgresql/certs/tls.crt
-        - -c
-        - ssl_key_file=/opt/bitnami/postgresql/certs/tls.key
-        - -c
-        - ssl_min_protocol_version=TLSv1.2
-        - -c
-        - hba_file=/bitnami/postgresql/conf/pg_hba.conf
-      customLivenessProbe:
-        exec:
-          command:
-            - /bin/sh
-            - -c
-            - exec pg_isready -U notes -d notes -h 127.0.0.1 -p 5432
-        initialDelaySeconds: 30
-        periodSeconds: 10
-        timeoutSeconds: 5
-        failureThreshold: 6
-      customReadinessProbe:
-        exec:
-          command:
-            - /bin/sh
-            - -c
-            - exec pg_isready -U notes -d notes -h 127.0.0.1 -p 5432
-        initialDelaySeconds: 5
-        periodSeconds: 10
-        timeoutSeconds: 5
-        failureThreshold: 6
-      pgHbaConfiguration: |
-        local all all scram-sha-256
-        hostssl all all 0.0.0.0/0 scram-sha-256
-        hostssl all all ::/0 scram-sha-256

apps/prescriptions/uralkal/frontend.yaml

@@ -8,9 +8,6 @@ spec:
   values:
     services:
       frontend:
-        image:
-          name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/prescriptions-frontend:production_d48699e6@sha256:1e6925d1a41d91878013eb02e4463c30efa0479c25260575ad4fd3ee5471575d
         deployment:
           resources:
             requests: