iac/apps/documentations/ugok/filestream.yaml
2026-08-29 02:41:33 +05:00

234 lines
6.2 KiB
YAML

---
# standalone HelmRelease — base vault-native, в ugok Vault не используется.
# Кастомный тег prod_dfaa58f7_ugok оставлен как есть (не как в wb).
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: documentations-filestream
namespace: documentations
spec:
interval: 10m
chart:
spec:
chart: universal-chart
version: "0.1.9"
sourceRef:
kind: HelmRepository
name: yc-oci-charts
namespace: flux-system
interval: 10m
install:
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
global:
env: _default
services:
backend:
enabled: true
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_dfaa58f7_ugok
pullPolicy:
_default: IfNotPresent
deployment:
enabled: true
name:
_default: documentations-filestream
replicaCount:
_default: 1
port:
_default: 8080
resources:
requests:
cpu:
_default: 25m
memory:
_default: 128Mi
probes:
liveness:
enabled: false
readiness:
enabled: false
service:
enabled: true
name:
_default: backend-filestream-svc
type:
_default: ClusterIP
port:
_default: 80
targetPort:
_default: 8080
portName:
_default: http
envs:
- name: POSTGRES_ADDRESS
value:
_default: postgres-service
- name: POSTGRES_PORT
value:
_default: "5432"
- name: POSTGRES_DB
value:
_default: documentations_db
- name: POSTGRES_POOL_SIZE
value:
_default: "20"
- name: API_ADDRESS
value:
_default: 0.0.0.0:8080
- name: API_ADDRESS_FILE
value:
_default: 0.0.0.0:8080
- name: ENABLE_SQL_QUERY
value:
_default: "0"
- name: ENABLE_SSL
value:
_default: "0"
- name: ENABLE_S3
value:
_default: "1"
- name: USE_ZITADEL
value:
_default: "1"
- name: CONTAINER_REGISTRY
value:
_default: cr.yandex/crp3ccidau046kdj8g9q
- name: ENVIRONMENT
value:
_default: production
- name: HOST
value:
_default: http://documentations-service.documentations.svc.cluster.local:8080
- name: FILE_STREAM_HOST
value:
_default: sarex.ugok.lan
- name: DOCUMENTATION_URL
value:
_default: http://documentations-service.documentations.svc.cluster.local:8080/
- name: WORKFLOW_URL
value:
_default: http://workflows-service.workflow.svc.cluster.local:8000/
- name: WORKSPACE_URL
value:
_default: http://backend-svc.workspaces.svc.cluster.local:8000/
- name: BIM_API_URL
value:
_default: http://bim-api-service.bim.svc.cluster.local:8080/
- name: BIM_API_V2_URL
value:
_default: http://backend-svc.bim.svc.cluster.local:8000/
- name: WORKSPACE_BUNDLE_VERSION
value:
_default: v1
- name: DJANGO_HOST
value:
_default: http://backend.django.svc.cluster.local:8000
- name: NAMESPACE
value:
_default: sarex-documentations
- name: DJANGO_ORIGINATOR
value:
_default: docs_prod
- name: WORKFLOW_IMAGES_VERSION
value:
_default: master
- name: WORKFLOWS_IMAGES_VERSION
value:
_default: master
- name: S3_SERVICE_ACCOUNT
value:
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
- name: READ_WRITE_TIMEOUT_FILE_STREAM
value:
_default: 6h
- name: CACHE_DEFAULT_EXPIRATION
value:
_default: 60s
- name: CACHE_CLEANUP_INTERVAL
value:
_default: 60s
- name: USE_CACHE_IN_FILE_STREAMER
value:
_default: "1"
- name: ZITADEL_ACCOUNT
value:
_default: /etc/sarex/zitadel/zitadel-account.json
- name: ZITADEL_DOMAIN
value:
_default: ugok-zitadel-sarex.uralmine.com
- name: ENABLE_AUTH_JWT_IN_URL
value:
_default: "false"
- name: ENABLE_SIGNATURE_IN_URL
value:
_default: "true"
- name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES
value:
_default: "5"
- name: VALKEY_ADDR
value:
_default: redis:6379
- name: VALKEY_HOST
value:
_default: redis
- name: VALKEY_PORT
value:
_default: "6379"
secretEnvs:
- name: DJANGO_BASIC_AUTH_FOR_GET_USER
secretName:
_default: django-auth
secretKey: key
- name: DOCUMENT_PUBLIC_LINK_JWT_SECRET
secretName:
_default: yc-jwt-secret
secretKey: secret
- name: POSTGRES_USER
secretName:
_default: documentations-postgresql-secret
secretKey: username
- name: POSTGRES_PASSWORD
secretName:
_default: documentations-postgresql-secret
secretKey: password
- name: DJANGO_BASIC_AUTH
secretName:
_default: django-auth
secretKey: key
- name: PUBLIC_KEY
secretName:
_default: public-key
secretKey: key
commitSha: ""
gitlabUri: ""
gitlabJobUrl: ""
owner: ""