iac/apps/message-hub/base/deployment.yaml

---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: message-hub
  namespace: message-hub
  labels:
    app: message-hub
    service: message-hub
spec:
  replicas: 1
  selector:
    matchLabels:
      app: message-hub
  template:
    metadata:
      labels:
        app: message-hub
        service: message-hub
    spec:
      containers:
        - name: api
          image: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_24425472
          imagePullPolicy: IfNotPresent
          ports:
            - name: http
              containerPort: 8000
              protocol: TCP
          env:
            - name: WORKER_TIMEOUT
              value: "60"
            - name: PYTHONPATH
              value: src
            - name: SETTINGS_MAX_RETRIES
              value: "1"
            - name: SETTINGS_TOPICS
              value: '{"planning": "pm", "assets": "assets_broadcast", "project_entity":
                "issues_broadcast"}'
            - name: SETTINGS_PDF_CONVERTER_HOST
              value: http://export-project-service.django.svc.cluster.local:8000
            - name: SAREX_BASE_HOST
              value: http://backend-service.pm.svc.cluster.local:8000
            - name: CACHE_HOST
              value: redis.pm.svc.cluster.local
            - name: CACHE_PORT
              value: "6379"
            - name: KAFKA_SECURITY_PROTOCOL
              value: SSL
            - name: KAFKA_SASL_MECHANISM
              value: SCRAM-SHA-512
            - name: KAFKA_SSL_CAFILE
              value: /usr/local/share/ca-certificates/kafka.crt
            - name: KAFKA_USERNAME
              valueFrom:
                secretKeyRef:
                  key: username
                  name: kafka-secret
            - name: KAFKA_PORT
              valueFrom:
                secretKeyRef:
                  key: port
                  name: kafka-secret
            - name: KAFKA_HOST
              valueFrom:
                secretKeyRef:
                  key: hostname
                  name: kafka-secret
            - name: KAFKA_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: kafka-secret
            - name: DB_USERNAME
              valueFrom:
                secretKeyRef:
                  key: username
                  name: postgresql-secret
            - name: DB_PORT
              valueFrom:
                secretKeyRef:
                  key: port
                  name: postgresql-secret
            - name: DB_DATABASE
              valueFrom:
                secretKeyRef:
                  key: database
                  name: postgresql-secret
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: postgresql-secret
            - name: S3_LOGIN
              valueFrom:
                secretKeyRef:
                  key: username
                  name: s3-secret
            - name: S3_PASSWORD
              valueFrom:
                secretKeyRef:
                  key: password
                  name: s3-secret
            - name: S3_BUCKET
              valueFrom:
                secretKeyRef:
                  key: bucket
                  name: s3-secret
            - name: S3_HOST
              valueFrom:
                secretKeyRef:
                  key: host
                  name: s3-secret


#            - name: CACHE_HOST
#              valueFrom:
#                secretKeyRef:
#                  name: cache-secret-pm
#                  key: host
#            - name: CACHE_PORT
#              valueFrom:
#                secretKeyRef:
#                  name: cache-secret-pm
#                  key: port
#            - name: CACHE_PASSWORD
#              valueFrom:
#                secretKeyRef:
#                  name: cache-secret-pm
#                  key: password
            - name: CACHE_SSL
              value: "False"
            - name: CACHE_SSL_CA_CERTS
              value: ""
            - name: CACHE_ENABLE
              value: "False"
            - name: CLICKHOUSE_ENABLE
              value: 'False'
            - name: KAFKA_ENABLE
              value: 'False'
#            - name: KAFKA_BOOTSTRAP_SERVERS
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: bootstrap_servers
#            - name: KAFKA_SECURITY_PROTOCOL
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: security_protocol
#            - name: KAFKA_SASL_MECHANISM
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: sasl_mechanism
#            - name: KAFKA_SASL_PLAIN_USERNAME
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: sasl_username
#            - name: KAFKA_SASL_PLAIN_PASSWORD
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: sasl_password
#            - name: KAFKA_SSL_CAFILE
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: ssl_cafile
#            - name: KAFKA_TOPICS
#              valueFrom:
#                secretKeyRef:
#                  name: ya-kafka-secret-pm
#                  key: topics

            - name: CELERY_RABBITMQ_HOST
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: hostname
            - name: CELERY_RABBITMQ_PORT
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: port
            - name: CELERY_RABBITMQ_USER
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: username
            - name: CELERY_RABBITMQ_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: password
            - name: CELERY_RABBITMQ_VHOST
              valueFrom:
                secretKeyRef:
                  name: rabbitmq-secrets
                  key: vhost

            - name: AUTH_PUBLIC_TOKEN_URL
              value: "https://lk.sarex.io/api/token/public/"
            - name: SERVER_HOST
              value: "https://lk.sarex.io"
            - name: SERVER_API_HOST
              value: "https://api.sarex.io"
            - name: SERVER_DEBUG
              value: "False"
            - name: SERVER_ALLOWED_HOSTS
              value: '["*"]'
            - name: SERVER_USE_OTEL
              value: "False"
            - name: SERVER_VERIFY_SSL
              value: "False"
            - name: SERVER_LOG_LEVEL
              value: "INFO"
          resources:
            requests:
              cpu: "1"
              memory: 1Gi
      imagePullSecrets:
        - name: regcred