Merge branch 'master' of ssh://158-160-253-227.nip.io:2222/infra/iac

apps/attachments/base/deployment.yaml

@@ -0,0 +1,76 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: attachments
+  namespace: attachments
+  labels:
+    app: attachments
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: attachments
+  template:
+    metadata:
+      labels:
+        app: attachments
+    spec:
+      containers:
+        - name: attachments
+          image: cr.yandex/crp3ccidau046kdj8g9q/att9:dev
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 8000
+              protocol: TCP
+          env:
+            - name: POSTGRES_POOL_SIZE
+              value: "10"
+            - name: API_ADDRESS
+              value: 0.0.0.0:8000
+            - name: YANDEX_S3_ACCOUNT_PATH
+              value: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
+            - name: BUCKET_NAME
+              value: attachments-storage
+            - name: DATABASE_SSL_MODE
+              value: disable
+            - name: YANDEX_S3_VERIFY
+              value: "false"
+            - name: YANDEX_S3_USE_SSL
+              value: "false"
+            - name: DATABASE_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-secret
+                  key: host
+            - name: DATABASE_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-secret
+                  key: port
+            - name: DATABASE_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-secret
+                  key: database
+            - name: DATABASE_USER
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-secret
+                  key: username
+            - name: DATABASE_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: postgres-secret
+                  key: password
+          volumeMounts:
+            - mountPath: /etc/sarex/yc-s3-storage
+              name: yc-s3
+              readOnly: true
+      imagePullSecrets:
+        - name: regcred
+      volumes:
+        - name: yc-s3
+          secret:
+            secretName: yc-s3

apps/attachments/base/kustomization.yaml

@@ -0,0 +1,9 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: attachments
+resources:
+  - namespace.yaml
+  - deployment.yaml
+  - service.yaml
+

apps/attachments/base/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: attachments
+  labels:
+    istio-injection: enabled

apps/attachments/base/service.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: attachments-service
+  namespace: attachments
+spec:
+  type: ClusterIP
+  selector:
+    app: attachments
+  ports:
+    - port: 8000
+      targetPort: 8000
+      protocol: TCP

apps/attachments/yc-k8s-test/kustomization.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches:
+  - path: replicas.yaml
+    target:
+      kind: Deployment
+      name: attachments

apps/attachments/yc-k8s-test/replicas.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: attachments
+  namespace: attachments
+spec:
+  replicas: 1

clusters/yc-k8s-test/kustomization.yaml

@@ -11,3 +11,4 @@ resources:
   - ../../apps/control-interface/yc-k8s-test
   - ../../apps/cross-section/yc-k8s-test
   - ../../apps/mapper/yc-k8s-test
+  - ../../apps/attachments/yc-k8s-test