++

apps/control-interface/uralkal/ams-sync.yaml

@@ -0,0 +1,183 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ams-sync
+  namespace: control-interface
+  labels:
+    app: ams-sync
+    service: backend
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ams-sync
+  template:
+    metadata:
+      labels:
+        app: ams-sync
+        service: backend
+    spec:
+      containers:
+        - name: backend
+          image: cr.yandex/crp3ccidau046kdj8g9q/ams-sync:ugok
+          command: ["sleep", "999999999999"]
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 8000
+              protocol: TCP
+          env:
+            - name: AMS_SYNC_TOPIC
+              value: ams-sync
+            - name: ENVIRONMENT
+              value: PRODUCTION
+            - name: HOST_ORGANIZATION_ID
+              value: '392748423989716183'
+            - name: ALERT_ENABLED
+              value: 'False'
+            - name: USER_SERVER_HOST
+              value: https://sarex.local.uralkali.com
+            - name: AUTH_HOST
+              value: https://sarex.local.uralkali.com
+            - name: VERIFY_USERS
+              value: 'True'
+            - name: KAFKA_SECURITY_PROTOCOL
+              value: SSL
+            - name: KAFKA_SASL_MECHANISM
+              value: SCRAM-SHA-512
+            - name: RESOURCES_INTERNAL_HOST
+              value: http://iams.iam.svc.cluster.local:8080
+            - name: TELEGRAM_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: telegram-secret
+                  key: telegram-token
+            - name: TELEGRAM_GROUP_ID
+              valueFrom:
+                secretKeyRef:
+                  name: telegram-secret
+                  key: telegram-group-id
+            - name: ZITADEL_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: zitadel-token-secret
+                  key: zitadel-host
+            - name: ZITADEL_SERVICE_ACCESS_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: zitadel-token-secret
+                  key: zitadel-access-token
+            - name: KAFKA_BOOTSTRAP_SERVERS
+              valueFrom:
+                secretKeyRef:
+                  name: ams-kafka-secret
+                  key: kafka-bootstrap-servers
+            - name: KAFKA_SASL_PLAIN_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: ams-kafka-secret
+                  key: kafka-username
+            - name: KAFKA_SASL_PLAIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: ams-kafka-secret
+                  key: kafka-password
+            - name: KAFKA_SSL_CAFILE
+              valueFrom:
+                secretKeyRef:
+                  name: ams-kafka-secret
+                  key: kafka-ca-file
+            - name: AUTH_ADMIN_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: auth-secret
+                  key: admin-username
+            - name: AUTH_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: auth-secret
+                  key: admin-password
+            - name: USER_DB_NAME
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-secret
+                  key: user-db-name
+            - name: USER_DB_USER
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-secret
+                  key: user-db-user
+            - name: USER_DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-secret
+                  key: user-db-password
+            - name: USER_DB_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-secret
+                  key: user-db-host
+            - name: USER_DB_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: user-db-secret
+                  key: user-db-port
+      imagePullSecrets:
+        - name: regcred
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ams-kafka-secret
+  namespace: control-interface
+type: Opaque
+data:
+  kafka-bootstrap-servers: WyJicnVzbmlrYS1zdGFnZS1rYWZrYS1ib290c3RyYXAua2Fma2Euc3ZjLmNsdXN0ZXIubG9jYWw6OTA5MyJd
+  kafka-ca-file: L2V0Yy9jYS1jZXJ0aWZpY2F0ZXMvWWFuZGV4L1lhbmRleEludGVybmFsUm9vdENBLmNydA==
+  kafka-password: bkszNnNhc3ZTZm9JdEpuWFE0cXhhdjJPVVdJUFg1WkM=
+  kafka-username: c2FyZXg=
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: auth-secret
+  namespace: control-interface
+type: Opaque
+data:
+  admin-password: emVhbG90MDk2
+  admin-username: aGFnZW4wMTM=
+  host: aHR0cHM6Ly9zYXJleC5sb2NhbC51cmFsa2FsaS5jb20=
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: telegram-secret
+  namespace: control-interface
+type: Opaque
+data:
+  telegram-group-id: LTEwMDIzNTAyNzE=
+  telegram-token: NzAyOTgxMDQ2ODpBQUZBUUI1X0Y5TV92R2RndGlXOVBDRzVTUndIcFg2SnNUZw==
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: user-db-secret
+  namespace: control-interface
+type: Opaque
+data:
+  user-db-host: MTAuMTMzLjAuMjQ5
+  user-db-name: c2FyZXhfZGI=
+  user-db-password: QXNOUkE3WUhoUVlIWnNCRXFRUVBxRUUwdEU0ZmtwTTU=
+  user-db-port: NTQzMg==
+  user-db-user: ZGphbmdv
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: zitadel-token-secret
+  namespace: control-interface
+type: Opaque
+data:
+  zitadel-access-token: OXk5V0VZR05YYm11UXFxQlRjNDFNSTV1Yjc5R3R6VkR0dFZRM2ZiSE5PMnVpQU9YNTAwRzYyN3BDeUk5TEd2Y1Q0TFlHd2w=
+  zitadel-host: aHR0cHM6Ly9sb2dpbi5zYXJleC5sb2NhbC51cmFsa2FsaS5jb20=

apps/control-interface/uralkal/kustomization.yaml

@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
   - ../base
   - namespace.yaml
+  - ams-sync.yaml