iac/infrastructure/istio-config/vk-prod/istio-config.yaml

2359 lines
80 KiB
YAML

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: istio-config
namespace: default
spec:
interval: 5m
timeout: 10m
dependsOn:
- name: istio-base
namespace: istio-system
- name: istiod
namespace: istio-system
- name: cert-manager
namespace: cert-manager
values:
global:
env: vk-prod
environments:
vk-prod:
certManager:
clusterIssuers:
letsencrypt-issuer-istio:
spec:
acme:
email: pavel@sarex.io
privateKeySecretRef:
name: letsencrypt-istio-account-key
server: https://acme-v02.api.letsencrypt.org/directory
solvers:
- dns01:
cloudflare:
apiTokenSecretRef:
name: cloudflare-api-token
key: api-token
selector:
dnsZones:
- sarex.space
certificates:
camunda-identity-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- camunda-identity.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
camunda-keycloak-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- camunda-keycloak.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
camunda-operate-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- camunda-operate.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
camunda-optimize-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- camunda-optimize.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
camunda-tasklist-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- camunda-tasklist.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
platform-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
api-platform-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- api.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
modules-platform-tls:
namespace: istio-system
issuerRef:
name: letsencrypt-issuer-istio
kind: ClusterIssuer
dnsNames:
- modules.platform.sarex.space
spec:
duration: 2160h
privateKey:
rotationPolicy: Always
renewBefore: 360h
istio:
gateways:
camunda:
namespace: gateway
servers:
- hosts:
- camunda-keycloak.platform.sarex.space
tls:
credentialName: camunda-keycloak-tls
httpsPortName: keycloak-https-443
httpPortName: keycloak-http-80
- hosts:
- camunda-operate.platform.sarex.space
tls:
credentialName: camunda-operate-tls
httpsPortName: operate-https-443
httpPortName: operate-http-80
- hosts:
- camunda-identity.platform.sarex.space
tls:
credentialName: camunda-identity-tls
httpsPortName: identity-https-443
httpPortName: identity-http-80
- hosts:
- camunda-tasklist.platform.sarex.space
tls:
credentialName: camunda-tasklist-tls
httpsPortName: tasklist-https-443
httpPortName: tasklist-http-80
- hosts:
- camunda-optimize.platform.sarex.space
tls:
credentialName: camunda-optimize-tls
httpsPortName: otpimize-https-443
httpPortName: optimize-http-80
api:
namespace: gateway
servers:
- hosts:
- api.platform.sarex.space
tls:
credentialName: api-platform-tls
modules:
namespace: gateway
servers:
- hosts:
- modules.platform.sarex.space
tls:
credentialName: modules-platform-tls
sarex:
namespace: gateway
servers:
- hosts:
- platform.sarex.space
tls:
credentialName: platform-tls
virtualServices:
identity-virt-service:
namespace: gateway
hosts:
- camunda-identity.platform.sarex.space
gateways:
- gateway/camunda-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.io)|(https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
omitMaxAge: true
routes:
- path:
prefix: /
service: camunda-identity.camunda-prod.svc.cluster.local
keycloak-virt-service:
namespace: gateway
hosts:
- camunda-keycloak.platform.sarex.space
gateways:
- gateway/camunda-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.io)|(https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
omitMaxAge: true
routes:
- path:
prefix: /auth/
service: camunda-keycloak.camunda-prod.svc.cluster.local
operate-virt-service:
namespace: gateway
hosts:
- camunda-operate.platform.sarex.space
gateways:
- gateway/camunda-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.io)|(https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
omitMaxAge: true
routes:
- path:
prefix: /
service: camunda-operate.camunda-prod.svc.cluster.local
optimize-virt-service:
namespace: gateway
hosts:
- camunda-optimize.platform.sarex.space
gateways:
- gateway/camunda-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.io)|(https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
omitMaxAge: true
routes:
- path:
prefix: /
service: camunda-optimize.camunda-prod.svc.cluster.local
tasklist-virt-service:
namespace: gateway
hosts:
- camunda-tasklist.platform.sarex.space
gateways:
- gateway/camunda-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.io)|(https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
omitMaxAge: true
routes:
- path:
prefix: /
service: camunda-tasklist.camunda-prod.svc.cluster.local
assistant-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
routes:
- path:
prefix: /assistant/static/
rewrite: /
service: assistant-frontend-service.ai.svc.cluster.local
port: 80
cde:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
exact: /orchestrator
rewrite: /api/
service: cde.orchestrator.svc.cluster.local
port: 8080
- path:
exact: /orchestrator/api/process
rewrite: /api/process
service: cde.orchestrator.svc.cluster.local
port: 8080
- path:
prefix: /orchestrator/api/process/
rewrite: /api/process/
service: cde.orchestrator.svc.cluster.local
port: 8080
- path:
exact: /orchestrator/api/sign
rewrite: /api/sign
service: cde.orchestrator.svc.cluster.local
port: 8080
contracts-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /cotracts/static/
rewrite: /
service: contracts-frontend.contracts-prod.svc.cluster.local
port: 80
auth-flow-frontend:
hosts:
- platform.sarex.space
gateways:
- gateway/sarex-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /auth/callback
rewrite: /
service: auth-flow-frontend-service.platform.svc.cluster.local
port: 80
sarex-resources:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /resource-management
rewrite: /resource-management
service: sarex-resources-service.resources-prod.svc.cluster.local
port: 80
projects-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /projects/static/
rewrite: /
service: projects-frontend-service.planning.svc.cluster.local
port: 80
projects-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowCredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)|(https://clouddevelopment.rt.ru)"
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /projects/api/
rewrite: /api/
service: projects-backend-service.planning.svc.cluster.local
port: 8000
asbuilt-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /asbuilt/static/
rewrite: /
service: asbuilt-frontend-service.planning.svc.cluster.local
port: 80
asbuilt-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowCredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /asbuilt/api
rewrite: /api
service: asbuilt-backend-service.planning.svc.cluster.local
port: 8000
srx-admin:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowCredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
extraAllowHeaders:
- Accept
- DNT
- Cache-Control
- Pragma
- X-Requested-With
routes:
- path:
prefix: /control-interface/
rewrite: /
service: srx-admin-svc.control-interface-prod.svc.cluster.local
port: 8080
premises-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
routes:
- path:
prefix: /premises/static/
rewrite: /
service: premises-frontend-service.proc.svc.cluster.local
port: 80
premises-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowcredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /premises/api/
rewrite: /api/
service: premises-backend-api-service.proc.svc.cluster.local
port: 80
- path:
prefix: /premises/docs/
rewrite: /docs/
service: premises-backend-api-service.proc.svc.cluster.local
port: 80
- match:
- uri:
exact: /premises/openapi.json
rewrite: /openapi.json
service: premises-backend-api-service.proc.svc.cluster.local
port: 80
- path:
prefix: /premises/openapi.json/
rewrite: /openapi.json/
service: premises-backend-api-service.proc.svc.cluster.local
port: 80
eav:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://stage-api.sarex.io)
extraAllowMethods:
- HEAD
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /eav/api/v0
rewrite: /api/v4
service: eav-service.eav-prod.svc.cluster.local
port: 80
- path:
prefix: /eav/api/v2
rewrite: /api/v5
service: eav-service.eav-prod.svc.cluster.local
port: 80
- path:
prefix: /eav/api/v3
rewrite: /api/v3
service: eav-service.eav-prod.svc.cluster.local
port: 80
- path:
prefix: /eav/api/v4
rewrite: /api/v4
service: eav-service.eav-prod.svc.cluster.local
port: 80
- path:
prefix: /eav/api/v1
rewrite: /api/v6
service: eav-service.eav-prod.svc.cluster.local
port: 80
- path:
prefix: /eav/admin/
rewrite: /eav/admin/
service: eav-service.eav-prod.svc.cluster.local
port: 80
workflows-api:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: ^.*$
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /workflows/api/
rewrite: /api/
service: workflows-service.processing-prod.svc.cluster.local
port: 80
contracts-api:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- exact: '*'
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /contracts/api/
rewrite: /api/
service: contracts-service.contracts-prod.svc.cluster.local
port: 8080
workspaces-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /workspaces-v2/
rewrite: /
service: workspaces-v2-frontend-static-service.workspaces-prod.svc.cluster.local
port: 80
resources-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
routes:
- path:
prefix: /resources/static/
rewrite: /
service: resources-frontend-service.planning.svc.cluster.local
port: 80
planning-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /pm/
rewrite: /
service: pm-frontend-service.pm-prod.svc.cluster.local
port: 80
mapper-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowcredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /mapper/api/
rewrite: /api/
service: backend-service.mapper-prod.svc.cluster.local
port: 8000
cde-api:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowcredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /cde/app/
rewrite: /app/
service: cde-api.documentations-prod.svc.cluster.local
port: 8000
- path:
prefix: /cde/external/
rewrite: /external/
service: cde-api.documentations-prod.svc.cluster.local
port: 8000
bim-mcp:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowcredentials: true
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- match:
- uri:
exact: /.well-known/oauth-protected-resource/bim-mcp
rewrite: /.well-known/oauth-protected-resource
service: bim-mcp.bim-api-prod.svc.cluster.local
port: 8080
- path:
prefix: /bim-mcp
rewrite: /
service: bim-mcp.bim-api-prod.svc.cluster.local
port: 8080
pdm-api-api:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /gateway/api/
rewrite: /api/
service: pdm-api.documentations-prod.svc.cluster.local
port: 8080
workspaces-api:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)|(https://aero-cloud.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /workspaces/api/
rewrite: /api/
service: workspaces-service.workspaces-prod.svc.cluster.local
port: 80
sarex-subscriptions:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
routes:
- path:
prefix: /subscriptions/admin/
rewrite: /subscriptions/admin/
service: sarex-subscriptions-service.subscriptions-prod.svc.cluster.local
port: 80
comparisons-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /comparisons/api/
rewrite: /api/
service: comparisons-backend-service.comparisons-prod.svc.cluster.local
port: 80
template-api:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- exact: '*'
extraAllowMethods:
- HEAD
extraAllowHeaders:
- X-Tenant-Id
routes:
- path:
prefix: /templates/api/
rewrite: /api/
service: template-api-service.documentations-prod.svc.cluster.local
port: 8000
template-frontend-static:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /templates/static/
rewrite: /
service: template-frontend-service.documentations-prod.svc.cluster.local
port: 80
comparisons-static:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)|(https://aero-cloud.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /comparisons/static/
rewrite: /
service: comparisons-static.comparisons-prod.svc.cluster.local
port: 80
documentation-frontend-static:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /documentations/static/
rewrite: /
service: documentation-frontend-static.documentations-prod.svc.cluster.local
port: 80
transmittal-frontend-static:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /transmittal/static/
rewrite: /
service: transmittal-frontend-static.transmittal-api-prod.svc.cluster.local
port: 80
proc-admin-frontend-service:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /admin-frontend/static/
rewrite: /
service: admin-frontend-service.proc.svc.cluster.local
port: 80
flows-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /flows/api/
rewrite: /api/
service: backend-service.flows-prod.svc.cluster.local
port: 8000
rfi-backend:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /rfi/admin/
rewrite: /rfi/admin/
service: rfi-backend-api-svc.rfi-prod.svc.cluster.local
port: 80
- path:
prefix: /rfi/api/
rewrite: /api/
service: rfi-backend-api-svc.rfi-prod.svc.cluster.local
port: 80
issues-backend:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
extraAllowHeaders:
- Range
- Cache-control
allowCredentials: true
extraAllowMethods:
- HEAD
allowOrigins:
- exact: '*'
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /issues/api/
rewrite: /api/
service: sarex-issues-service.issues-prod.svc.cluster.local
port: 80
- path:
prefix: /issues-management/
rewrite: /issues-management/
service: sarex-issues-service.issues-prod.svc.cluster.local
port: 80
- path:
prefix: /issues-documentation/
rewrite: /issues-documentation/
service: sarex-issues-service.issues-prod.svc.cluster.local
port: 80
issues-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /issues/static/
rewrite: /
service: frontend-service.issues-prod.svc.cluster.local
port: 80
iam:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /iam/api
rewrite: /external/api
service: iams.iam.svc.cluster.local
port: 8080
inspections-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(http://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /inspections/admin/
rewrite: /inspections/admin/
service: sarex-inspections-service.inspections-prod.svc.cluster.local
port: 80
- path:
prefix: /inspections/api/
rewrite: /api/
service: sarex-inspections-service.inspections-prod.svc.cluster.local
port: 80
- path:
prefix: /inspections/docs/
rewrite: /docs/
service: sarex-inspections-service.inspections-prod.svc.cluster.local
port: 80
- path:
prefix: /inspections/openapi.json/
rewrite: /openapi.json/
service: sarex-inspections-service.inspections-prod.svc.cluster.local
port: 80
inspections-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /inspections/static/
rewrite: /
service: frontend-service.inspections-prod.svc.cluster.local
port: 80
prescriptions-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
extraAllowHeaders:
- Identity
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /prescriptions/static/
rewrite: /
service: prescriptions-frontend-service.prescriptions-prod.svc.cluster.local
port: 80
flows-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /flows/static/
rewrite: /
service: flows-frontend-service.flows-prod.svc.cluster.local
port: 80
rfi-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
extraAllowMethods:
- HEAD
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /rfi/static/
rewrite: /
service: rfi-frontend-service.rfi-prod.svc.cluster.local
port: 80
pulse:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
routes:
- match:
- port: 80
uri:
prefix: /
redirect:
scheme: https
authority: api.platform.sarex.space
redirectCode: 301
- match:
- port: 443
uri:
prefix: /pulse/media/
rewrite: /
service: sarex-pulse-backend-s3proxy-svc.pulse.svc.cluster.local
port: 80
- match:
- port: 443
uri:
prefix: /pulse/
rewrite: /
service: sarex-pulse-backend-backend-svc.pulse.svc.cluster.local
port: 8000
measurements:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
extraAllowMethods:
- HEAD
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /measurements/
rewrite: /api/
service: measurements-svc.measurements-prod.svc.cluster.local
port: 8000
message-hub:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
routes:
- path:
prefix: /message-hub/
rewrite: /
service: message-hub.message-hub-prod.svc.cluster.local
port: 8000
pm-backend:
hosts:
- platform.sarex.space
gateways:
- gateway/sarex-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
routes:
- path:
prefix: /api/pm/
service: pm-backend-service.pm-prod.svc.cluster.local
port: 8000
planning-backend:
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
routes:
- path:
prefix: /pm/api/
rewrite: /api/
service: pm-backend-service.pm-prod.svc.cluster.local
port: 8000
- path:
prefix: /pm/external/
rewrite: /external/
service: pm-backend-service.pm-prod.svc.cluster.local
port: 8000
sarex-backend:
hosts:
- platform.sarex.space
gateways:
- gateway/sarex-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- match:
- port: 80
uri:
prefix: /
redirect:
scheme: https
authority: platform.sarex.space
redirectCode: 301
- match:
- port: 443
uri:
exact: /api/core/users/introspect
- port: 443
uri:
prefix: /api/token/
- port: 443
uri:
prefix: /api/core/users/bulk/notifications
- port: 443
uri:
prefix: /api/core/users
- port: 443
uri:
prefix: /api/core/v2/users
- port: 443
uri:
prefix: /api/core/v3/users
- port: 443
uri:
prefix: /api/core/service-accounts
- port: 443
uri:
prefix: /api/core/permissions
- port: 443
uri:
prefix: /api/client/settings
service: backend-service-cqrs.ams-sync-prod.svc.cluster.local
port: 8000
- match:
- port: 443
uri:
prefix: /api/external/
service: pm-backend-service.pm-prod.svc.cluster.local
port: 8000
- match:
- port: 443
uri:
prefix: /api/pm/
service: pm-backend-service.pm-prod.svc.cluster.local
port: 8000
- match:
- port: 443
uri:
prefix: /admin/
service: backend-service-cqrs.ams-sync-prod.svc.cluster.local
port: 8000
- match:
- port: 443
uri:
prefix: /api/
service: backend-service.sarex-prod.svc.cluster.local
port: 8000
drawings-api:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /drawings/api/
rewrite: /api/
service: drawings-api-service.drawings-prod.svc.cluster.local
port: 80
cross-section-static:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /cross-section/static/
rewrite: /
service: cross-section-static.cross-section-prod.svc.cluster.local
port: 80
documentations:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
extraAllowHeaders:
- Range
- Cache-control
allowCredentials: true
extraAllowMethods:
- HEAD
allowOrigins:
- exact: '*'
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /documentations/api/
rewrite: /api/
service: documentations-api-svc.documentations-prod.svc.cluster.local
port: 80
cors:
allowOrigins:
- exact: '*'
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowHeaders:
- Authorization
- Content-Type
- Cache-control
- Range
- Identity
allowCredentials: true
- path:
prefix: /files/api/
rewrite: /api/
service: documentations-filestream-svc.documentations-prod.svc.cluster.local
port: 80
cors:
allowOrigins:
- exact: '*'
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowHeaders:
- Authorization
- Content-Type
- Identity
- Range
- Cache-control
allowCredentials: true
data-engine:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /data-engine/api/
rewrite: /api/
service: data-engine-backend-api-svc.data-engine-prod.svc.cluster.local
port: 8000
bim-backend-v2:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowHeaders:
- Access-Control-Allow-Origin
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /bimv2/api/
rewrite: /api/
service: bim-core-api.bim-api-prod.svc.cluster.local
port: 8000
bim-api-api:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowHeaders:
- Access-Control-Allow-Origin
routes:
- path:
prefix: /bim/api/
rewrite: /api/
service: bim-api-service.bim-api-prod.svc.cluster.local
port: 80
- path:
prefix: /bim/files/
rewrite: /files/
service: bim-api-service.bim-api-prod.svc.cluster.local
port: 80
bi-backend:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
routes:
- path:
prefix: /analytics-v2/api/
rewrite: /api/
service: bi-backend-service.bi-prod.svc.cluster.local
port: 8080
remarks-static:
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /remarks/static/
rewrite: /
service: remarks-static.remarks-prod.svc.cluster.local
port: 80
bi-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /analytics-v2/static/
rewrite: /
service: bi-frontend-frontend-svc.bi-prod.svc.cluster.local
port: 80
checklists-backend:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /checklists/admin/
rewrite: /checklists/admin/
service: checklists-backend-service.checklists-prod.svc.cluster.local
- path:
prefix: /checklists/api/
rewrite: /api/
service: checklists-backend-service.checklists-prod.svc.cluster.local
- path:
prefix: /checklists/docs/
rewrite: /docs/
service: checklists-backend-service.checklists-prod.svc.cluster.local
- path:
prefix: /checklists/openapi.json/
rewrite: /openapi.json/
service: checklists-backend-service.checklists-prod.svc.cluster.local
reviews-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
routes:
- path:
prefix: /reviews/static/
rewrite: /
service: reviews-frontend-service.reviews-prod.svc.cluster.local
port: 80
reviews-frontend-virt-service:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
routes:
- path:
prefix: /reviews/static/
rewrite: /
service: reviews-frontend-service.reviews-prod.svc.cluster.local
port: 80
notes-frontend:
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /notes/static/
rewrite: /
service: frontend-service.notes-prod.svc.cluster.local
port: 80
notes-backend:
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
extraAllowMethods:
- HEAD
routes:
- path:
prefix: /notes/api/
rewrite: /api/
service: backend-service.notes-prod.svc.cluster.local
port: 8000
aiohttp-server-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
routes:
- path:
prefix: /tracking/ws
rewrite: /ws
service: transmitter-service.tracking-prod.svc.cluster.local
noCors: true
- path:
prefix: /tracking/buffer/
rewrite: /buffer
service: transmitter-service.tracking-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
- path:
prefix: /tracking/events
rewrite: /events
service: transmitter-service.tracking-prod.svc.cluster.local
noCors: true
analytics-platform-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /analytics/api/
rewrite: /api/
service: analytics-platform-service.analytics-platform-prod.svc.cluster.local
automation-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowCredentials: true
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(http://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /automation/api/
rewrite: /api/
service: automation-api-service.automation-prod.svc.cluster.local
port: 8000
timeout: 600s
pm-backend-virt-service:
namespace: gateway
hosts:
- platform.sarex.space
gateways:
- gateway/sarex-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /api/pm/
service: pm-backend-service.pm-prod.svc.cluster.local
port: 8000
bim-api-gazpromcps-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Access-Control-Allow-Origin
allowMethods:
- GET
- POST
- OPTIONS
- PUT
- PATCH
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /bim-gazpromcps/api/
rewrite: /api/
service: bim-api-gazpromcps-service.bim-api-prod-gazpromcps.svc.cluster.local
- path:
prefix: /bim-gazpromcps/files/
rewrite: /files/
service: bim-api-gazpromcps-service.bim-api-prod-gazpromcps.svc.cluster.local
bim-backend-v2-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /bim2-gazpromcps/api/
rewrite: /api/
service: bim-backend-v2-service.bim-api-prod-gazpromcps.svc.cluster.local
cde-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
exact: /orchestrator
rewrite: /api/
service: cde.orchestrator.svc.cluster.local
port: 8080
- path:
regex: ^/orchestrator/api/process/(.*)$
rewriteRaw:
uriRegexRewrite:
match: ^/orchestrator/api/process/(.*)$
rewrite: /api/process/\1
service: cde.orchestrator.svc.cluster.local
port: 8080
- path:
exact: /orchestrator/api/process
rewrite: /api/process
service: cde.orchestrator.svc.cluster.local
port: 8080
- path:
exact: /orchestrator/api/sign
rewrite: /api/sign
service: cde.orchestrator.svc.cluster.local
port: 8080
comparisons-backend-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
routes:
- path:
prefix: /comparisons/api/
rewrite: /api/
service: comparisons-backend-service.comparisons-prod.svc.cluster.local
comparisons-static-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
routes:
- path:
prefix: /comparisons/static/
rewrite: /
service: comparisons-static.comparisons-prod.svc.cluster.local
contracts-frontend-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /cotracts/static/
rewrite: /
service: contracts-frontend.contracts-prod.svc.cluster.local
drf-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
omitMaxAge: true
routes:
- path:
prefix: /admin
rewrite: /admin/
service: drf-service.tracking-prod.svc.cluster.local
port: 8000
- path:
prefix: /tracking/api/
rewrite: /api/
service: drf-service.tracking-prod.svc.cluster.local
port: 8000
eav-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
headers:
response:
set:
Access-Control-Expose-Headers: Content-Length-Original
routes:
- path:
prefix: /eav/api/v0
rewrite: /api/v4
service: eav-service.eav-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://stage-api.sarex.io)
maxAge: 24h
- path:
prefix: /eav/api/v2
rewrite: /api/v5
service: eav-service.eav-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://stage-api.sarex.io)
maxAge: 24h
- path:
prefix: /eav/api/v3
rewrite: /api/v3
service: eav-service.eav-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://stage-api.sarex.io)
maxAge: 24h
- path:
prefix: /eav/api/v4
rewrite: /api/v4
service: eav-service.eav-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://stage-api.sarex.io)
maxAge: 24h
- path:
prefix: /eav/api/v1
rewrite: /api/v6
service: eav-service.eav-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://stage-api.sarex.io)
maxAge: 24h
- path:
prefix: /eav/admin/
rewrite: /eav/admin/
service: eav-service.eav-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://platform.sarex.space)|(https://api.platform.sarex.space)|(https://zitadel.dev.stage.sarex.io)|(https://stage-api.sarex.io)
maxAge: 24h
olap-api-service-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /olap/api/
rewrite: /api/
service: olap-api-service.olap-prod.svc.cluster.local
projects-frontend-static-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
routes:
- path:
prefix: /projects/static/
rewrite: /
service: projects-frontend-service.planning.svc.cluster.local
remarks-api-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /remarks/api/
rewrite: /api/
service: remarks-service.remarks-prod.svc.cluster.local
srx-compute-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- exact: '*'
maxAge: 24h
routes:
- path:
prefix: /gateway/compute/api/
rewrite: /api/
service: srx-compute-service.compute-prod.svc.cluster.local
port: 8000
transmittal-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
- OPTIONS
allowOrigins:
- exact: '*'
maxAge: 24h
routes:
- path:
prefix: /transmittals/api/
rewrite: /api/
service: transmittal-service.transmittal-api-prod.svc.cluster.local
workflows-frontend-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /workflows/
rewrite: /
service: workflows-frontend-service.processing-prod.svc.cluster.local
workspaces-v2-frontend-static-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
routes:
- path:
prefix: /workspaces-v2/
rewrite: /
service: workspaces-v2-frontend-static-service.workspaces-prod.svc.cluster.local
sarex-frontend:
namespace: gateway
hosts:
- platform.sarex.space
gateways:
- gateway/sarex-gateway
noCors: true
routes:
- match:
- port: 443
uri:
prefix: /
service: frontend-service.sarex-prod.svc.cluster.local
faas-ingress-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /lambdas/
rewrite: /
service: faas-ingress-service.faas-prod.svc.cluster.local
engineering-checks-backend:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- OPTIONS
- PUT
- DELETE
- PATCH
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
routes:
- path:
prefix: /engineering-checks/
rewrite: /
service: backend-service.engineering-checks.svc.cluster.local
port: 8000
remarks-static-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- OPTIONS
- PUT
- DELETE
- PATCH
- HEAD
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)
maxAge: 24h
routes:
- path:
prefix: /remarks/static/
rewrite: /
service: remarks-static.remarks-prod.svc.cluster.local
orchestrator-api-virt-service:
namespace: gateway
hosts:
- api.platform.sarex.space
gateways:
- gateway/api-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- POST
- GET
- PATCH
- DELETE
- HEAD
- PUT
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /orchestrator/
rewrite: /api/
service: cde.orchestrator.svc.cluster.local
port: 8080
sarex-virt-service:
namespace: gateway
hosts:
- platform.sarex.space
gateways:
- gateway/sarex-gateway
routes:
- path:
prefix: /media/
rewrite: /
service: s3-proxy-service.sarex-prod.svc.cluster.local
cors:
allowHeaders:
- Authorization
- Content-Type
- Accept-Ranges
- Content-Range
- Content-Length
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
raw: true
headers:
request:
add:
Accept-Ranges: bytes
- path:
prefix: /eav/api
service: backend-service.sarex-prod.svc.cluster.local
port: 8000
cors:
allowHeaders:
- Authorization
- Content-Type
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
workspaces-frontend-static-virt-service:
namespace: gateway
hosts:
- modules.platform.sarex.space
gateways:
- gateway/modules-gateway
cors:
allowHeaders:
- Authorization
- Content-Type
- Identity
allowMethods:
- GET
- POST
- PUT
- PATCH
- HEAD
- DELETE
allowOrigins:
- regex: (https://.*\.sarex\.space)|(https://localhost:.*)|(https://clouddevelopment.rt.ru)
maxAge: 24h
routes:
- path:
prefix: /workspaces/
rewrite: /
service: workspaces-frontend-static-service.workspaces-prod.svc.cluster.local