iac/apps/documentations/ugok/pdf-markings.yaml
ivan 98f5d6c0ae ugok: fix 11 images that regressed to cr.yandex during vault rebuild
The standalone rebuild in the previous commit reconstructed several
services from base/wb reference values and missed re-applying the
cr.yandex -> 10.4.10.187 registry swap for: checklists, issues/frontend,
contracts, drawings, flows (backend/celery/frontend),
documentations/pdf-markings, django/s3-proxy, django/srx-admin,
inspections. All 32 previously wb-synced images now verified back on
10.4.10.187:80/library.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-29 01:41:52 +05:00

204 lines
5.1 KiB
YAML

---
# Скопировано из apps/documentations/wb/pdf-markings.yaml (в base для этого
# сервиса нет HelmRelease), env/secretEnvs — из дампа кластера ugok.
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: pdf-markings
namespace: documentations
spec:
interval: 10m
chart:
spec:
chart: universal-chart
version: "0.1.7"
sourceRef:
kind: HelmRepository
name: yc-oci-charts
namespace: flux-system
interval: 10m
install:
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
global:
env: _default
services:
pdf-markings:
enabled: true
image:
name:
_default: 10.4.10.187:80/library/pdf-markings:prod_7d892636
pullPolicy:
_default: IfNotPresent
deployment:
enabled: true
name:
_default: pdf-markings
replicaCount:
_default: 1
port:
_default: 8000
probes:
liveness:
enabled: false
readiness:
enabled: false
service:
enabled: true
name:
_default: marks-service
type:
_default: ClusterIP
port:
_default: 8000
targetPort:
_default: 8000
portName:
_default: http
imagePullSecrets:
enabled:
_default: true
name:
_default: dockerhub
volumes:
_default:
- name: yc-s3
mountPath:
_default: /etc/sarex/yc-s3-storage
readOnly:
_default: true
secret:
secretName:
_default: documentations-yc-s3
envs:
- name: APP_NAME
value:
_default: pdm_v2
- name: VERIFY
value:
_default: "False"
- name: APP_VERSION
value:
_default: 0.0.1
- name: LOG_LEVEL
value:
_default: INFO
- name: HTTP_PORT
value:
_default: "8000"
- name: DOC_POSTGRES_HOST
value:
_default: postgres-service
- name: DOC_POSTGRES_PORT
value:
_default: "5432"
- name: DOC_POSTGRES_DB
value:
_default: documentations_db
- name: DOC_POSTGRES_POOL_SIZE
value:
_default: "10"
- name: DOC_POSTGRES_SSL_MODE
value:
_default: disable
- name: API_ADDRESS
value:
_default: 0.0.0.0:8000
- name: DATABASE_SSL_MODE
value:
_default: disable
- name: YANDEX_S3_USE_SSL
value:
_default: "0"
- name: ENVIRONMENT
value:
_default: production
- name: YANDEX_S3_ACCOUNT_PATH
value:
_default: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
- name: REDIRECT_URL_QR
value:
_default: https://stamp-verification.sarex.ugok.lan/
- name: BASE_DOCUMENT_URL
value:
_default: https://sarex.ugok.lan
- name: SENTRY_DSN
value:
_default: ""
secretEnvs:
- name: DOC_POSTGRES_USER
secretName:
_default: documentations-postgresql-secret
secretKey: username
- name: DOC_POSTGRES_PASSWORD
secretName:
_default: documentations-postgresql-secret
secretKey: password
- name: YANDEX_S3_ENDPOINT_URL
secretName:
_default: documentations-s3-secret
secretKey: endpoint
- name: YANDEX_S3_SECRET_ACCESS_KEY
secretName:
_default: documentations-s3-secret
secretKey: secret_key
- name: YANDEX_S3_ACCESS_KEY_ID
secretName:
_default: documentations-s3-secret
secretKey: access_key
- name: RABBITMQ_HOST
secretName:
_default: documentations-rabbitmq-secret
secretKey: host
- name: RABBITMQ_PORT
secretName:
_default: documentations-rabbitmq-secret
secretKey: port
- name: RABBITMQ_USERNAME
secretName:
_default: documentations-rabbitmq-secret
secretKey: username
- name: RABBITMQ_PASSWORD
secretName:
_default: documentations-rabbitmq-secret
secretKey: password
- name: RABBITMQ_VHOST
secretName:
_default: documentations-rabbitmq-secret
secretKey: vhost
- name: RABBITMQ_HEARTBEAT
secretName:
_default: documentations-rabbitmq-secret
secretKey: heartbeat
commitSha: ""
gitlabUri: ""
gitlabJobUrl: ""
owner: ""