338 lines
12 KiB
YAML
338 lines
12 KiB
YAML
---
|
|
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: cde-api-worker-move
|
|
namespace: documentations
|
|
spec:
|
|
interval: 10m
|
|
chart:
|
|
spec:
|
|
chart: universal-chart
|
|
version: "0.1.9"
|
|
sourceRef:
|
|
kind: HelmRepository
|
|
name: yc-oci-charts
|
|
namespace: flux-system
|
|
interval: 10m
|
|
install:
|
|
remediation:
|
|
retries: 3
|
|
upgrade:
|
|
remediation:
|
|
retries: 3
|
|
values:
|
|
global:
|
|
env: _default
|
|
services:
|
|
worker-move:
|
|
enabled: true
|
|
serviceAccount:
|
|
enabled:
|
|
_default: true
|
|
name:
|
|
_default: documentations-vault
|
|
deployment:
|
|
enabled: true
|
|
name:
|
|
_default: worker-move
|
|
replicaCount:
|
|
_default: 1
|
|
revisionHistoryLimit:
|
|
_default: 5
|
|
resources:
|
|
requests:
|
|
cpu:
|
|
_default: 100m
|
|
memory:
|
|
_default: 64Mi
|
|
command:
|
|
_default: ["/bin/sh", "-ec"]
|
|
args:
|
|
_default:
|
|
- |
|
|
set -a
|
|
[ -f /vault/secrets/cde-api-postgres ] && . /vault/secrets/cde-api-postgres
|
|
[ -f /vault/secrets/cde-api-s3 ] && . /vault/secrets/cde-api-s3
|
|
[ -f /vault/secrets/cde-api-zeebe ] && . /vault/secrets/cde-api-zeebe
|
|
[ -f /vault/secrets/cde-api-rabbitmq ] && . /vault/secrets/cde-api-rabbitmq
|
|
set +a
|
|
exec /opt/worker
|
|
image:
|
|
name:
|
|
_default: cr.yandex/crp3ccidau046kdj8g9q/cde-api-worker-move:prod_c9bc246
|
|
pullPolicy:
|
|
_default: IfNotPresent
|
|
service:
|
|
enabled: false
|
|
imagePullSecrets:
|
|
enabled:
|
|
_default: true
|
|
name:
|
|
_default: regcred
|
|
envs:
|
|
- name: CDE_API_EAV_HOST
|
|
value:
|
|
_default: "http://backend-svc.eav.svc.cluster.local:80"
|
|
- name: CDE_API_APP_NAME
|
|
value:
|
|
_default: "worker-move"
|
|
- name: CDE_API_LOG_LEVEL
|
|
value:
|
|
_default: "info"
|
|
- name: CDE_API_OBSERVABILITY_ENABLE
|
|
value:
|
|
_default: "false"
|
|
- name: CDE_API_S3_MAX_SINGLE_UPLOAD_SIZE
|
|
value:
|
|
_default: "5368709120"
|
|
- name: CDE_API_S3_MAX_PART_SIZE
|
|
value:
|
|
_default: "524288000"
|
|
- name: CDE_API_S3_UPLOAD_STALL_TIMEOUT
|
|
value:
|
|
_default: "10m"
|
|
- name: CDE_API_SYSTEMLOG_BASE_URL
|
|
value:
|
|
_default: "http://backend-svc.system-log.svc.cluster.local:80"
|
|
- name: CDE_API_SYSTEMLOG_TIMEOUT_MS
|
|
value:
|
|
_default: "10000"
|
|
- name: CDE_API_DATABASE__SSLMODE
|
|
value:
|
|
_default: "disable"
|
|
- name: CDE_API_DATABASE__INSECURE_SKIP_TLS
|
|
value:
|
|
_default: "false"
|
|
- name: CDE_API_DATABASE_MAX_CONN_LIFETIME
|
|
value:
|
|
_default: "30m"
|
|
- name: CDE_API_DATABASE_MAX_CONN_IDLE_TIME
|
|
value:
|
|
_default: "10m"
|
|
- name: CDE_API_DATABASE_HEALTH_CHECK_PERIOD
|
|
value:
|
|
_default: "30s"
|
|
- name: CDE_API_DATABASE_POOL_SIZE
|
|
value:
|
|
_default: "10"
|
|
- name: CDE_API_REDIS__SSL
|
|
value:
|
|
_default: "false"
|
|
- name: CDE_API_REDIS__POOL_SIZE
|
|
value:
|
|
_default: "5"
|
|
- name: CDE_API_REDIS__MIN_IDLE_CONNS
|
|
value:
|
|
_default: "1"
|
|
- name: CDE_API_REDIS__DIAL_TIMEOUT_MS
|
|
value:
|
|
_default: "5000"
|
|
- name: CDE_API_REDIS__READ_TIMEOUT_MS
|
|
value:
|
|
_default: "3000"
|
|
- name: CDE_API_REDIS__WRITE_TIMEOUT_MS
|
|
value:
|
|
_default: "3000"
|
|
- name: CDE_API_REDIS__DEFAULT_TTL_MINUTES
|
|
value:
|
|
_default: "10"
|
|
- name: CDE_API_REDIS__PERMISSION_CACHE_ENABLED
|
|
value:
|
|
_default: "false"
|
|
- name: CDE_API_S3_USE_SSL
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_S3_BUCKET_LOOKUP
|
|
value:
|
|
_default: "auto"
|
|
- name: CDE_API_S3_INSECURE_SKIP_TLS
|
|
value:
|
|
_default: "false"
|
|
- name: CDE_API_S3_CHECK_BUCKET
|
|
value:
|
|
_default: "false"
|
|
- name: CDE_API_S3_BUCKET_NAME
|
|
value:
|
|
_default: "documentations"
|
|
- name: CDE_API_ZEEBE_USE_PLAINTEXT
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_MAILER_BASE_URL
|
|
value:
|
|
_default: "http://mailer-service.mailer:8000"
|
|
- name: CDE_API_MAILER_FROM_EMAIL
|
|
value:
|
|
_default: "noreply@sarex.io"
|
|
- name: CDE_API_WORKFLOW_BASE_URL
|
|
value:
|
|
_default: "http://backend-svc.processing.svc.cluster.local:80"
|
|
- name: CDE_API_WORKFLOW_RETRY_COUNT
|
|
value:
|
|
_default: "3"
|
|
- name: CDE_API_WORKFLOW_TIMEOUT_MS
|
|
value:
|
|
_default: "30000"
|
|
- name: CDE_API_BIMAPI_URL
|
|
value:
|
|
_default: "http://backend-svc.bim.svc.cluster.local:80"
|
|
- name: CDE_API_BIMAPI_V2_URL
|
|
value:
|
|
_default: "http://backend-svc.bim.svc.cluster.local:80"
|
|
- name: CDE_API_BIMAPI_RETRY_COUNT
|
|
value:
|
|
_default: "3"
|
|
- name: CDE_API_BIMAPI_TIMEOUT_MS
|
|
value:
|
|
_default: "30000"
|
|
- name: CDE_API_BIMAPI_TIMEOUT_V2_MS
|
|
value:
|
|
_default: "300000"
|
|
- name: CDE_API_CONTAINER_REGISTRY
|
|
value:
|
|
_default: "cr.yandex/crp3ccidau046kdj8g9q"
|
|
- name: CDE_API_WORKFLOWS_IMAGES_VERSION
|
|
value:
|
|
_default: "master"
|
|
- name: CDE_API_DJANGO_HOST
|
|
value:
|
|
_default: "http://backend-svc.django.svc.cluster.local:80"
|
|
- name: CDE_API_ENVIRONMENT
|
|
value:
|
|
_default: "production"
|
|
- name: CDE_API_CONVERTED_PDF_TO_S3
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_CONVERT_DXF_TO_GEOJSON
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_CONVERT_DWG_TO_GEOJSON
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_USE_BIMV1_FOR_BIMV2
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_LAST_MASTER_BIM
|
|
value:
|
|
_default: "36311"
|
|
- name: CDE_API_LAST_SLAVE_1_BIM
|
|
value:
|
|
_default: "94015"
|
|
- name: CDE_API_LAST_SLAVE_2_BIM
|
|
value:
|
|
_default: "135771"
|
|
- name: CDE_API_USE_BIM_INSERTER
|
|
value:
|
|
_default: "true"
|
|
- name: CDE_API_USE_LEGACY_BIM_FLOW
|
|
value:
|
|
_default: "0"
|
|
- name: CDE_API_DOCUMENTATION_V2_URL
|
|
value:
|
|
_default: "http://backend-api-svc.documentations.svc.cluster.local:80"
|
|
- name: CDE_API_INTERNAL_URL
|
|
value:
|
|
_default: "http://cde-api.documentations:8000"
|
|
- name: CDE_API_FLOWS_URL
|
|
value:
|
|
_default: "http://backend-svc.flows.svc.cluster.local:80"
|
|
- name: CDE_API_TRANSMITTALS_URL
|
|
value:
|
|
_default: "http://transmittal-service.transmittal.svc.cluster.local:80"
|
|
- name: CDE_API_WORKFLOWS_CONFIG_FILEPATH
|
|
value:
|
|
_default: "/etc/app/tasks_execution_config.json"
|
|
- name: CDE_API_WORKSPACE_BASE_URL
|
|
value:
|
|
_default: "http://backend-svc.workspaces.svc.cluster.local:80"
|
|
- name: CDE_API_WORKSPACE_RETRY_COUNT
|
|
value:
|
|
_default: "3"
|
|
- name: CDE_API_WORKSPACE_TIMEOUT_MS
|
|
value:
|
|
_default: "10000"
|
|
- name: CDE_API_RABBITMQ__MARKS_ROUTING_KEY
|
|
value:
|
|
_default: "pdf_markings_input"
|
|
- name: CDE_API_RABBITMQ__HASHER_ROUTING_KEY
|
|
value:
|
|
_default: "hash.compute.normal"
|
|
- name: CDE_API_RABBITMQ__HASHER_EXCHANGE
|
|
value:
|
|
_default: "hash.compute"
|
|
- name: CDE_API_MOVE_WORKER_JOBS
|
|
value:
|
|
_default: ""
|
|
- name: CDE_API_MOVE_JOB_TIMEOUT_MINUTES
|
|
value:
|
|
_default: "30"
|
|
- name: CDE_API_REDIS__HOST
|
|
value:
|
|
_default: "redis"
|
|
- name: CDE_API_REDIS__PORT
|
|
value:
|
|
_default: "6379"
|
|
- name: CDE_API_RABBITMQ__HOST
|
|
value:
|
|
_default: "rabbitmq.rabbitmq.svc.cluster.local"
|
|
- name: CDE_API_RABBITMQ__PORT
|
|
value:
|
|
_default: "5672"
|
|
podAnnotations:
|
|
_default:
|
|
traffic.sidecar.istio.io/excludeOutboundPorts: "4317,4318,9411,8200"
|
|
vault.hashicorp.com/agent-init-first: "true"
|
|
vault.hashicorp.com/agent-inject: "true"
|
|
vault.hashicorp.com/agent-pre-populate-only: "true"
|
|
vault.hashicorp.com/auth-path: auth/kubernetes
|
|
vault.hashicorp.com/role: documentations
|
|
vault.hashicorp.com/agent-inject-secret-cde-api-postgres: secrets/data/apps/documentations/postgres
|
|
vault.hashicorp.com/agent-inject-template-cde-api-postgres: |-
|
|
{{- with secret "secrets/data/apps/documentations/postgres" -}}
|
|
CDE_API_DATABASE__HOST={{ index .Data.data "host" }}
|
|
CDE_API_DATABASE__PORT={{ index .Data.data "port" }}
|
|
CDE_API_DATABASE__NAME={{ index .Data.data "database" }}
|
|
CDE_API_DATABASE__USER={{ index .Data.data "username" }}
|
|
CDE_API_DATABASE__PASSWORD={{ index .Data.data "password" }}
|
|
{{- end -}}
|
|
vault.hashicorp.com/agent-inject-secret-cde-api-s3: secrets/data/minio/apps/documentations
|
|
vault.hashicorp.com/agent-inject-template-cde-api-s3: |-
|
|
{{- with secret "secrets/data/minio/apps/documentations" -}}
|
|
CDE_API_S3_ENDPOINT={{ index .Data.data.client "endpoint" }}
|
|
CDE_API_S3_ACCESS_KEY={{ index .Data.data "access_key" }}
|
|
CDE_API_S3_SECRET_KEY={{ index .Data.data "secret_key" }}
|
|
{{- end -}}
|
|
vault.hashicorp.com/agent-inject-secret-cde-api-zeebe: secrets/data/apps/cde-api/zeebe
|
|
vault.hashicorp.com/agent-inject-template-cde-api-zeebe: |-
|
|
{{- with secret "secrets/data/apps/cde-api/zeebe" -}}
|
|
CDE_API_ZEEBE_GATEWAY_ADDRESS={{ index .Data.data "gateway_address" }}
|
|
CDE_API_ZEEBE_CLIENT_ID={{ index .Data.data "client_id" }}
|
|
CDE_API_ZEEBE_CLIENT_SECRET={{ index .Data.data "client_secret" }}
|
|
CDE_API_ZEEBE_AUTH_SERVER_URL={{ index .Data.data "auth_server_url" }}
|
|
{{- end -}}
|
|
vault.hashicorp.com/agent-inject-secret-cde-api-rabbitmq: secrets/data/rabbitmq/apps/cde
|
|
vault.hashicorp.com/agent-inject-template-cde-api-rabbitmq: |-
|
|
{{- with secret "secrets/data/rabbitmq/apps/cde" -}}
|
|
CDE_API_RABBITMQ__USER={{ index .Data.data "username" }}
|
|
CDE_API_RABBITMQ__PASSWORD={{ index .Data.data "password" }}
|
|
CDE_API_RABBITMQ__VHOST={{ index .Data.data "vhost" }}
|
|
{{- end -}}
|
|
volumes:
|
|
_default:
|
|
- name: tasks-execution-config
|
|
mountPath:
|
|
_default: /etc/app/tasks_execution_config.json
|
|
subPath:
|
|
_default: tasks_execution_config.json
|
|
readOnly:
|
|
_default: true
|
|
configMap:
|
|
name:
|
|
_default: tasks-execution-config-documentation-v2
|
|
items:
|
|
- key: tasks-execution-config-documentation-v2.json
|
|
path:
|
|
_default: tasks_execution_config.json
|
|
defaultMode:
|
|
_default: "0644"
|