e5c01279b7
Adds apps/<app>/ugok overlays for 31 applications, derived strictly from a live cluster dump (kubectl get deployment/service/configmap/secret), following the wb overlay pattern (standalone HelmRelease patches on universal-chart, plain k8s Secret + secretKeyRef instead of Vault Agent since the ugok cluster has zero Vault usage cluster-wide). - processing (workflow namespace) does not extend base: base is vault-native, ugok is not, so it's four standalone HelmReleases modeled on apps/processing/wb/*. - issues/redis and django/redis are raw Deployments patched via JSON6902. - documentations/pdf-markings and django/auth-flow-frontend, export-project are copied in as standalone files (base has no HelmRelease for them, and kustomize forbids cross-overlay references outside a directory's own tree). - Images and images-with-registry updated to match wb where the same build lineage applies; left as-is where the wb tag carries a distinct client/cluster name (donstroi1, brusnika_*, dev4, UGOK_*, ugok1_*) or points at a different image repository entirely. - Missing backend envs backfilled from wb where safe (internal svc.cluster.local refs, feature flags, already-established ugok domains); skipped where wb-specific (external DB/Kafka hosts, TLS CA content, features not deployed in ugok like gatekeeper/Superset). - message-hub patch was missing its entire env block from the original bootstrap; rebuilt from the raw dump (not wb, whose Kafka/DB config is incompatible) plus a handful of small env gaps found while cross-checking every ugok app's rendered envs against the raw dump. clusters/ugok/kustomization.yaml keeps the apps section commented out — not wired into the Flux Kustomization yet, pending review. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
110 lines
2.3 KiB
YAML
110 lines
2.3 KiB
YAML
---
|
||
# Скопировано из apps/django/wb/export-project.yaml — в base нет HelmRelease
|
||
# для этого сервиса (только в wb overlay), а ссылаться на файл в другом
|
||
# оверлее kustomize не даёт (вне дерева каталога). Образ/envs совпадают с
|
||
# дампом ugok уже "из коробки" (только регистр другой — правится патчем).
|
||
apiVersion: helm.toolkit.fluxcd.io/v2
|
||
kind: HelmRelease
|
||
metadata:
|
||
name: export-project
|
||
namespace: django
|
||
|
||
spec:
|
||
interval: 10m
|
||
|
||
chart:
|
||
spec:
|
||
chart: universal-chart
|
||
version: "0.1.7"
|
||
sourceRef:
|
||
kind: HelmRepository
|
||
name: yc-oci-charts
|
||
namespace: flux-system
|
||
interval: 10m
|
||
|
||
install:
|
||
remediation:
|
||
retries: 3
|
||
|
||
upgrade:
|
||
remediation:
|
||
retries: 3
|
||
|
||
values:
|
||
global:
|
||
env: _default
|
||
|
||
services:
|
||
export-project:
|
||
enabled: true
|
||
|
||
image:
|
||
name:
|
||
_default: cr.yandex/crp3ccidau046kdj8g9q/export-project:prod_ef8aa756
|
||
pullPolicy:
|
||
_default: IfNotPresent
|
||
|
||
deployment:
|
||
enabled: true
|
||
|
||
name:
|
||
_default: export-project
|
||
|
||
replicaCount:
|
||
_default: 1
|
||
|
||
port:
|
||
_default: 8000
|
||
|
||
resources:
|
||
limits:
|
||
cpu:
|
||
_default: "2"
|
||
memory:
|
||
_default: 8Gi
|
||
requests:
|
||
cpu:
|
||
_default: "1"
|
||
memory:
|
||
_default: 512Mi
|
||
|
||
probes:
|
||
liveness:
|
||
enabled: false
|
||
readiness:
|
||
enabled: false
|
||
|
||
service:
|
||
enabled: true
|
||
|
||
name:
|
||
_default: export-project-service
|
||
|
||
type:
|
||
_default: ClusterIP
|
||
|
||
port:
|
||
_default: 8000
|
||
|
||
targetPort:
|
||
_default: 8000
|
||
|
||
portName:
|
||
_default: http
|
||
|
||
imagePullSecrets:
|
||
enabled:
|
||
_default: true
|
||
name:
|
||
_default: dockerhub
|
||
|
||
envs:
|
||
- name: TIMEOUT
|
||
value:
|
||
_default: "180"
|
||
|
||
commitSha: ""
|
||
gitlabUri: ""
|
||
gitlabJobUrl: ""
|
||
owner: ""
|