iac/apps/notes/uralkal/backend.yaml
ivan bbe4d60705 notes/uralkal: own env with in-cluster addresses
The overlay inherited base env copied from SaaS prod: DJANGO_HOST
https://lk.sarex.io, workspaces/workflows on api.sarex.io and PG_SSL_MODE
verify-full. From the closed contour every request to django failed with
CERTIFICATE_VERIFY_FAILED. Point django, workspaces and workflows at their
uralkal services, attachments at its real port 8000, disable postgres SSL
(the uralkal server has none). FAAS_SERVICE and RESOURCE_URL stay as in base:
neither service exists in uralkal.
2026-10-22 14:41:39 +05:00

65 lines
1.5 KiB
YAML

---
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: backend
namespace: notes
spec:
values:
services:
backend:
deployment:
resources:
requests:
cpu: null
memory: null
envs:
- name: PG_SSL_MODE
value:
_default: "disable"
- name: DJANGO_HOST
value:
_default: "http://backend-svc.django.svc.cluster.local"
- name: BASE_HOST
value:
_default: "https://sarex.local.uralkali.com/notes"
- name: TIMEOUT
value:
_default: "120"
- name: FAAS_SERVICE
value:
_default: "https://api.sarex.io/lambdas"
- name: WORKSPACE_URL
value:
_default: "http://backend-svc.workspaces.svc.cluster.local/api/v1"
- name: WORKFLOW_HOST
value:
_default: "http://backend-svc.processing.svc.cluster.local/api/v1"
- name: WORKFLOW_TAG
value:
_default: "stable"
- name: RESOURCE_URL
value:
_default: "https://api.sarex.io/resources/api/v1"
- name: SYNC_RESOURCE_ID
value:
_default: "0"
- name: ENABLE_ND
value:
_default: "0"
- name: ATTACHMENT_HOST
value:
_default: "http://attachments-service.attachments.svc.cluster.local:8000/api/v1"