iac/apps/bi/ugok/backend.yaml

---
# standalone HelmRelease по образцу apps/bi/base + apps/eav/ugok — в ugok
# Vault не используется, поэтому не наследуем base (vault-native), а собираем
# отдельный HelmRelease с обычными secretEnvs, без serviceAccount /
# podAnnotations / vault-обёртки в command/args.
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: bi-backend
  namespace: bi

spec:
  interval: 10m

  chart:
    spec:
      chart: universal-chart
      version: "0.1.9"
      sourceRef:
        kind: HelmRepository
        name: yc-oci-charts
        namespace: flux-system
      interval: 10m

  install:
    remediation:
      retries: 3

  upgrade:
    remediation:
      retries: 3

  values:
    global:
      env: _default

    services:
      main:
        enabled: true

        image:
          name:
            _default: 10.4.10.187:80/library/bi-backend:production_37902c73
          pullPolicy:
            _default: IfNotPresent

        deployment:
          enabled: true

          name:
            _default: bi-backend

          replicaCount:
            _default: 1

          port:
            _default: 8000

          resources:
            requests:
              cpu:
                _default: 100m
              memory:
                _default: 512Mi

          probes:
            liveness:
              enabled:
                _default: true
              type:
                _default: tcpSocket
              tcpSocket:
                port:
                  _default: 8000
              initialDelaySeconds:
                _default: 20
              periodSeconds:
                _default: 30
              timeoutSeconds:
                _default: 3
              failureThreshold:
                _default: 5
            readiness:
              enabled:
                _default: true
              type:
                _default: tcpSocket
              tcpSocket:
                port:
                  _default: 8000
              initialDelaySeconds:
                _default: 10
              periodSeconds:
                _default: 10
              timeoutSeconds:
                _default: 3
              failureThreshold:
                _default: 6

        service:
          enabled: true

          name:
            _default: bi-backend-service

          type:
            _default: ClusterIP

          port:
            _default: 8000

          targetPort:
            _default: 8000

          portName:
            _default: http

        imagePullSecrets:
          enabled:
            _default: true
          name:
            _default: regcred

        envs:
          - name: SETTINGS_DEBUG
            value:
              _default: "0"
          - name: SETTINGS_VERIFY_SSL
            value:
              _default: "1"
          - name: SETTINGS_API_V1_PREFIX
            value:
              _default: "/api/v1"
          - name: AUTH_HOST
            value:
              _default: "https://sarex.ugok.lan"
          - name: WORKER_TIMEOUT
            value:
              _default: "120"
          - name: PYTHONPATH
            value:
              _default: "src"
          - name: ISSUES_SERVICE_HOST
            value:
              _default: "http://issues-service.issues.svc.cluster.local"
          - name: EAV_SERVICE_HOST
            value:
              _default: "http://eav-service.eav.svc.cluster.local:8000"
          - name: PM_SERVICE_HOST
            value:
              _default: "http://backend-service.pm.svc.cluster.local:8000"
          - name: SUPERSET_SYSTEM_WIDGETS
            value:
              _default: '{"MDR": {"id": "e7343f21-1ee0-4a87-b712-e8cfd413cc49","name": "MDR"},"SC": {"id": "d63d25e4-eab6-452f-8b31-065094bc2cb6","name": "Стройконтроль"}}'
          - name: SUPERSET_DOCUMENTATION_URL
            value:
              _default: "https://sarex.ugok.lan/documentations/"
          - name: KAFKA_BOOTSTRAP_SERVERS
            value:
              _default: '["ugok-prod-kafka-bootstrap.kafka.svc.cluster.local:9093"]'
          - name: KAFKA_TOPICS
            value:
              _default: '{"planning": "message-hub-prod"}'
          - name: KAFKA_ENABLE
            value:
              _default: "0"
          - name: DB_HOST
            value:
              _default: "postgres-service"
          - name: DB_PORT
            value:
              _default: "5432"
          - name: DB_DATABASE
            value:
              _default: "bi_db"

        secretEnvs:
          - name: DB_USERNAME
            secretName:
              _default: bi-postgresql-secret
            secretKey: username
          - name: DB_PASSWORD
            secretName:
              _default: bi-postgresql-secret
            secretKey: password
          - name: SUPERSET_JWT_SECRET
            secretName:
              _default: bi-superset-secret
            secretKey: jwt_secret

        commitSha: ""
        gitlabUri: ""
        gitlabJobUrl: ""
        owner: ""