iac/apps/comparisons/uralkal/backend.yaml
ivan 7a3d4740bc comparisons/uralkal: documentations external host -> internal service
comparisons-api-v2 calls GET /api/v1/bundles and /api/v1/workspaces on
DOCUMENTATIONS_EXTERNAL_HOST from inside the pod. sarex.local.uralkali.com
is signed by the customer's internal CA, which the image does not trust
(x509: unknown authority), so creating a comparison failed with 500. The
documentations service serves the same /api/v1 paths internally.
2026-10-22 00:14:15 +05:00

113 lines
2.8 KiB
YAML

---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: backend
namespace: comparisons
spec:
values:
services:
backend:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/comparisons-api-v2:contour_9a2bab4e
deployment:
port:
_default: 8080
args:
_default:
- |
set -a
[ -f /vault/secrets/comparisons-db ] && . /vault/secrets/comparisons-db
[ -f /vault/secrets/comparisons-jwt-public ] && export AUTH_PUBLIC_KEY="$(cat /vault/secrets/comparisons-jwt-public)"
set +a
cd /opt/comparisons
./migrations up
exec ./api
resources:
requests:
cpu: null
memory: null
probes:
liveness:
httpGet:
port:
_default: 8080
readiness:
httpGet:
port:
_default: 8080
service:
targetPort:
_default: 8080
envs:
- name: APP_NAME
value:
_default: "comparisons-api-v2"
- name: APP_VERSION
value:
_default: "0.0.1"
- name: LOGGER_LOG_LEVEL
value:
_default: "info"
- name: DATABASE_NAME
value:
_default: "postgres"
- name: PGSSLMODE
value:
_default: "disable"
- name: HTTP_PORT
value:
_default: "8080"
- name: DOCUMENTATIONS_INTERNAL_HOST
value:
_default: "http://backend-api-svc.documentations.svc.cluster.local"
- name: DOCUMENTATIONS_EXTERNAL_HOST
value:
_default: "http://backend-api-svc.documentations.svc.cluster.local"
- name: WORKFLOWS_HOST
value:
_default: "http://backend-svc.processing.svc.cluster.local"
- name: WORKFLOWS_IMAGE_VERSION
value:
_default: "master"
- name: WORKFLOWS_DJANGO_HOST
value:
_default: "https://sarex.local.uralkali.com"
- name: WORKFLOWS_BIMV2_INTERNAL_HOST
value:
_default: "http://backend-svc.bim.svc.cluster.local"
- name: WORKSPACES_HOST
value:
_default: "http://backend-svc.workspaces.svc.cluster.local"
- name: EAV_HOST
value:
_default: "http://backend-svc.eav.svc.cluster.local"
- name: ABAP_FIXED_CONC
value:
_default: "0"
- name: WORKFLOWS_CONFIG_FILEPATH
value:
_default: "/etc/app/tasks-execution-config.json"