Commit Graph

  • df3840e70d remove {topic: security.k8s-audit, kind: k8s_audit} master 3.9.131 emelinda 2026-11-07 20:27:40 +0300
  • 772cef5cef security-audit: fix pipelines placement in processor config — top-level key 3.9.130 emelinda 2026-11-07 20:18:47 +0300
  • d0bed7033a security-audit: enable mesh-access pipeline, audit-processor pinned by digest 3.9.129 emelinda 2026-11-07 20:12:54 +0300
  • a2da49804a security-audit: audit-processor 47297469, flush_interval 1m 3.9.128 emelinda 2026-11-07 18:46:32 +0300
  • ff931e1708 security-audit: audit-processor flush_interval 5m -> 1m Deliver audit events to MinIO within a minute for near-real-time investigation; trade-off is more small parquet files (compaction is planned in stage 3 of k8s-audit). 3.9.127 emelinda 2026-11-07 18:07:36 +0300
  • a6a176d6c5 security-audit: audit-processor af50e663, drop retention config section 3.9.126 emelinda 2026-11-07 17:24:47 +0300
  • a60b171bea security-audit: IsMap guards in transform/audit delete_key statements 3.9.125 emelinda 2026-11-07 16:23:46 +0300
  • cf2689aea0 security-audit: fix filter/audit config key — log_record (singular), filterprocessor 0.121 3.9.124 emelinda 2026-11-07 16:00:24 +0300
  • 0b8318f547 security-audit: drop flux-system read polling from apiserver audit pipeline 3.9.123 emelinda 2026-11-07 15:45:37 +0300
  • 508f18d2a5 Merge remote-tracking branch 'origin/master' 3.9.122 emelinda 2026-11-07 14:54:15 +0300
  • 1960ef495c security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet) emelinda 2026-11-07 14:54:08 +0300
  • 491c0462cd ++ proctmp only uralkal 3.9.121 Kochetkov S 2026-11-07 11:37:41 +0300
  • aa0ba4097c ++ engine low proctmp 3.9.120 Kochetkov S 2026-11-07 11:20:14 +0300
  • 05cd76129e fix: update wb pdf amqp markings task/PDM-2712_wb_markings diamondrigido 2026-11-06 18:00:15 +0200
  • 9cb62ea9f0 security-audit: nil-guards в transform/audit — удаление managedFields/annotations 3.9.119 emelinda 2026-11-06 18:03:30 +0300
  • d4bbc5fd14 security-audit: отложить события Zitadel — отключить Job idp-actions-bootstrap 3.9.118 emelinda 2026-11-06 17:34:05 +0300
  • 3162679524 security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent emelinda 2026-11-06 17:22:20 +0300
  • f0014c5d00 uralkal: подключить security-audit — аудит apiserver, журнал доступа шлюза, события Zitadel 3.9.117 emelinda 2026-11-06 16:47:32 +0300
  • 509926a108 uralkal: отключить postgres-tls-test и istio-mtls-check от кластера Оверлеи убраны из clusters/uralkal/kustomization.yaml, манифесты apps/postgres-tls-test/ и infrastructure/istio-mtls-check/ сохранены для возможного повторного подключения. emelinda 2026-11-06 15:35:36 +0300
  • 31d469a847 Merge branch 'task/PDM-2711_brusnika_Ws' into 'master' Дмитрий Лавренчук 2026-11-06 11:19:36 +0000
  • c746a0181c Merge branch 'fix/wb' into 'master' Дмитрий Лавренчук 2026-11-06 11:18:54 +0000
  • 6d388eef11 fix: documentaiton_host in brusnika diamondrigido 2026-11-06 13:18:21 +0200
  • 150f22ae59 fix: disabke cde api wb fix/wb diamondrigido 2026-11-06 09:16:51 +0200
  • 7b42b02915 ++ 3.9.116 ivan 2026-11-05 23:18:47 +0500
  • 0a740955b1 yc-k8s-test: istio ingress — запрет снаружи /api/token/user/* и /internal/* (п. 14, 15) token-endpoints-internal-only ivan 2026-11-05 20:10:23 +0500
  • c7e33b74b6 Merge branch 'task/PDM-2655_ugmk_move' into 'master' Дмитрий Лавренчук 2026-11-05 13:22:36 +0000
  • b98109047f fix: обновил образы для документации diamondrigido 2026-11-05 15:22:01 +0200
  • 2f995fe1fa fix: включил legacy flow по бимам pdm/support-cde-api diamondrigido 2026-11-05 15:18:54 +0200
  • 857bd4a675 uralkal: upload-oblako-las — креды и хост MinIO из documentations_s3_service_account_json 3.9.115 ivan 2026-11-05 17:31:39 +0500
  • 1c1b866331 uralkal: upload-oblako-las — curl без проверки сертификата (TLS-инспекция в сети Уралкалия) 3.9.114 ivan 2026-11-05 17:18:42 +0500
  • 142b28be80 uralkal: django — Job upload-oblako-las скачивает Облако.las и кладёт в MinIO бакет django 3.9.113 ivan 2026-11-05 17:11:13 +0500
  • 297f4b0adf uralkal: zitadel-action — при 403 на admin API берёт организацию токена через /management/v1/orgs/me 3.9.112 ivan 2026-11-05 16:26:29 +0500
  • 59a02bc7dc uralkal: django — Job создаёт в Zitadel action createUser на External Authentication / Pre Creation 3.9.111 ivan 2026-11-05 16:15:10 +0500
  • 1fc4742931 uralkal: kc-sync-users — синхронизация из realm sarex 3.9.110 ivan 2026-11-05 15:48:45 +0500
  • 4dac264303 uralkal: camunda keycloak — debug-логи org.keycloak.storage.ldap 3.9.109 ivan 2026-11-05 15:12:24 +0500
  • b9c73a2d28 uralkal: kc-sync-users — привязка пользователей к компании id 1 (--sync-users-def-company-id 1) 3.9.108 ivan 2026-11-05 15:01:37 +0500
  • e5a0419545 uralkal: django — CronJob kc-sync-users, синхронизация пользователей из Keycloak camunda каждые 10 минут 3.9.107 ivan 2026-11-05 14:37:08 +0500
  • 0398df0901 uralkal: camunda keycloak — Secret keycloak-keytab из sarex.keytab через secretGenerator 3.9.106 ivan 2026-11-05 12:50:53 +0500
  • 6855db88b8 uralkal: camunda keycloak — доверие корневому CA BER-CA1 для LDAPS к AD 3.9.105 3.9.104 3.9.103 ivan 2026-11-05 11:39:25 +0500
  • b456e8a5da uralkal: zitadel — доверие корневому CA BER-CA1 для LDAPS к AD 3.9.102 ivan 2026-11-05 11:18:05 +0500
  • 49040e0da8 Enable plain client manifest for istio-mtls-check 3.9.101 emelinda 2026-11-05 09:01:41 +0300
  • 919253808b add istio-mtls-check deployments 3.9.100 emelinda 2026-11-05 08:50:25 +0300
  • ad28069436 Add Istio mTLS check manifests to uralkal cluster 3.9.99 emelinda 2026-11-05 03:23:43 +0300
  • 67985010ce Fix uralkal Istio EnvoyFilter patch target for HTTP routes 3.9.98 emelinda 2026-11-05 02:26:55 +0300
  • fa989aafdc Add istio-config-contour chart and enforce HTTPS/TLS/HSTS for uralkal ingress 3.9.97 emelinda 2026-11-04 23:38:14 +0300
  • e6392cbbfe uralkal: camunda keycloak — keytab из Secret keycloak-keytab и krb5.conf для LOCAL.URALKALI.COM 3.9.96 ivan 2026-11-03 17:09:50 +0500
  • 81bf9d17d1 uralkal: s3.sarex.local.uralkali.com напрямую в MinIO 10.133.0.245:9000 через ServiceEntry 3.9.95 ivan 2026-11-03 14:36:05 +0500
  • 7b6a285741 uralkal: pm — один блок deployment в патчах backend и celery 3.9.94 ivan 2026-11-02 15:31:18 +0500
  • 7cacd5a03f uralkal: kafka-scram-users — automountServiceAccountToken для Vault injector 3.9.93 ivan 2026-11-02 15:19:13 +0500
  • 654803c2af uralkal: Job заводит SCRAM-пользователей Kafka из Vault kafka/apps/{pm,issues,flows} 3.9.92 ivan 2026-11-02 15:11:03 +0500
  • b9022560f3 ++ 3.9.91 ivan 2026-11-02 14:32:11 +0500
  • 10c04ba32b uralkal: pg-tls — пробы pg_isready с -U notes (п.31, INFRA-3062) 3.9.90 ivan 2026-11-02 14:05:14 +0500
  • 32e4bc657a uralkal: pg-tls — TLS и pg_hba аргументами postgres, writable root (п.31, INFRA-3062) 3.9.89 ivan 2026-11-02 13:34:09 +0500
  • 5e5148e951 uralkal: тестовый PostgreSQL с TLS и notes-backend с verify-full (п.31, INFRA-3062) 3.9.88 ivan 2026-11-02 13:11:16 +0500
  • eb112cd4dd uralkal: образы eav и iam по digest (п.38, INFRA-3058) 3.9.87 ivan 2026-11-02 12:50:18 +0500
  • 56a75bf6a6 uralkal: образы remarks, reviews, prescriptions, projects, cross-section по digest (п.38, INFRA-3058) ivan 2026-11-02 12:46:35 +0500
  • b7e7fc1c72 uralkal: drift detection для всех HelmRelease (п.39, INFRA-3058) 3.9.86 ivan 2026-11-02 12:30:11 +0500
  • 30f1d32fc5 Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration emelinda 2026-11-02 09:22:20 +0300
  • 2aaa45bf3c Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration emelinda 2026-11-02 02:24:00 +0300
  • 2f5e37f598 **Add Zitadel events ingestion pipeline with AuthorizationPolicy and initial Job configuration for security-audit namespace** emelinda 2026-11-02 00:57:05 +0300
  • ae1a683ada **Add HelmRelease access-collector for processing ingress-gateway access logs in security-audit namespace with Kafka and Vault integration** emelinda 2026-11-02 00:33:20 +0300
  • ad7050ca7d Add audit collector HelmRelease for security-audit namespace to process and export kube-apiserver audit logs, including Kafka and Vault integration emelinda 2026-11-01 22:02:54 +0300
  • 5525cc33ff Update CLAUDE.md to reflect revised cluster configurations, updated overlay conventions, and slice generation details. Clarify application, infrastructure, and routing specifics, including new clusters and template variables. emelinda 2026-11-01 21:35:44 +0300
  • e4e5e06aec ++ camunda legacy wait 3.9.85 Kochetkov S 2026-10-31 17:45:29 +0300
  • 9f2c6932d7 ++ camunda timeout 30m 3.9.84 Kochetkov S 2026-10-31 15:18:07 +0300
  • d318ea3f16 feat: дополнительные поддержка diamondrigido 2026-10-30 16:46:21 +0200
  • cd94931c76 ++ merge feat/zitadel-setup: sarex-installer machine user 3.9.83 ivan 2026-10-30 13:53:12 +0500
  • 104bde49c4 ++ 3.9.82 ivan 2026-10-29 18:23:28 +0500
  • b61571a858 ++ ivan 2026-10-29 17:36:24 +0500
  • 13b9ca8a9f ++ stand chart repo from vars 3.9.81 Kochetkov S 2026-10-29 13:32:46 +0300
  • 31bdc74c80 ++ ivan 2026-10-29 16:11:54 +0500
  • 9f4801af68 ++ contour zitadel: sarex-installer machine user for zitadel-setup feat/zitadel-setup ivan 2026-10-29 15:32:27 +0500
  • 63b33aaafb ++ 3.9.80 ivan 2026-10-29 13:06:42 +0500
  • fb52d422ca ++ 3.9.79 ivan 2026-10-29 12:37:46 +0500
  • deb0d5f0eb ++ ivan 2026-10-28 20:05:57 +0500
  • 1613172dd6 ++ contour kafka client sasl plaintext 3.9.78 Kochetkov S 2026-10-28 15:47:31 +0300
  • b7c36a5348 ++ stand routing layer 3.9.77 Kochetkov S 2026-10-28 15:31:36 +0300
  • 0037411aae ++ stand camunda via vault 3.9.76 Kochetkov S 2026-10-28 15:18:25 +0300
  • c23b51e2a5 infra: route GoAlert through VK Istio 3.9.75 Kochetkov S 2026-10-28 14:39:19 +0300
  • 448a994fd4 Merge branch 'master' of https://gitlab.sarex.io/infra/iac Kochetkov S 2026-10-28 14:38:14 +0300
  • bfad13da2f Merge branch 'pdm/update-image-api-fix-copy' into 'master' Дмитрий Лавренчук 2026-10-28 10:36:26 +0000
  • f936f5ffb0 fix: image documentation updated pdm/update-image-api-fix-copy diamondrigido 2026-10-28 12:31:00 +0200
  • b8b365fe79 feat: cde-api diamondrigido 2026-10-28 12:30:02 +0200
  • 25b3536124 ++ ivan 2026-10-28 14:51:22 +0500
  • cdc2c34bca ++ 3.9.74 ivan 2026-10-28 14:39:15 +0500
  • 3b53a99371 ++ 3.9.73 ivan 2026-10-28 14:30:36 +0500
  • aa3365cb0d ++ 3.9.72 ivan 2026-10-28 14:27:20 +0500
  • 7cf8b13f91 ++ ivan 2026-10-28 14:00:45 +0500
  • 83bfd4e046 ++ 3.9.71 ivan 2026-10-28 13:32:41 +0500
  • 1c3525fc1b ++ stand platform layer zitadel Kochetkov S 2026-10-28 11:15:41 +0300
  • a3fa7ba4c0 ++ stand data layer 3.9.70 Kochetkov S 2026-10-28 10:37:30 +0300
  • 32e4cff59e ++ stand flux cancel stale health check Kochetkov S 2026-10-28 10:28:56 +0300
  • 4a46bb6626 ++ contour cert-manager images Kochetkov S 2026-10-28 10:26:52 +0300
  • 34cbe7c79e ++ stand mesh layer Kochetkov S 2026-10-28 10:11:19 +0300
  • ae911c7d38 ++ 3.9.69 ivan 2026-10-28 12:31:10 +0500
  • bd4b6d4ea6 ++ ivan 2026-10-28 12:02:22 +0500
  • 56ade56754 ++ ivan 2026-10-28 11:48:48 +0500
  • 8a3540ead7 Add CDE_API_ENABLED environment variable to api and filestream configurations emelinda 2026-10-28 08:32:37 +0300
  • 3dadb7a87a Merge branch 'master' of gitlab.sarex.io:infra/iac emelinda 2026-10-28 08:30:59 +0300
  • fc8ddcb511 Add CDE_API_ENABLED environment variable to filestream and api configurations in d8-ugmk-prod emelinda 2026-10-28 08:30:40 +0300