++

apps/documentations/base/kustomization.yaml

@@ -5,8 +5,10 @@ namespace: documentations
 resources:
   - namespace.yaml
   - api-deployment.yaml
+  - pdm-deployment.yaml
   - filestream-deployment.yaml
   - frontend-deployment.yaml
   - api-service.yaml
+  - pdm-service.yaml
   - filestream-service.yaml
   - frontend-service.yaml

apps/documentations/base/pdm-deployment.yaml

@@ -0,0 +1,198 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: pdm-api
+  namespace: documentations
+  labels:
+    app: pdm-api
+    service: pdm-api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: pdm-api
+  template:
+    metadata:
+      labels:
+        app: pdm-api
+        service: pdm-api
+    spec:
+      volumes:
+        - name: documentations-yc-s3-secret
+          secret:
+            defaultMode: 420
+            secretName: documentations-yc-s3
+        - name: zitadel-account
+          secret:
+            defaultMode: 420
+            secretName: zitadel-account
+      containers:
+        - name: pdm-api
+          image: cr.yandex/crp3ccidau046kdj8g9q/pdmv2:prod_38958427
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 8080
+              protocol: TCP
+          env:
+            - name: USE_EXPERIMENTAL
+              value: "true"
+            - name: RELEASES_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  key: key
+                  name: releases-token
+            - name: POSTGRES_USER
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: postgresql-secret
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: postgresql-secret
+            - name: POSTGRES_ADDRESS
+              valueFrom:
+                secretKeyRef:
+                  key: hostname
+                  name: postgresql-secret
+            - name: POSTGRES_DB
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: postgresql-secret
+            - name: POSTGRES_PORT
+              valueFrom:
+                secretKeyRef:
+                  key: port
+                  name: postgresql-secret
+            - name: POSTGRES_POOL_SIZE
+              value: "20"
+            - name: TRANSMITTALS_BASE_URL
+              value: mock
+            - name: DJANGO_BASIC_AUTH
+              valueFrom:
+                secretKeyRef:
+                  key: key
+                  name: django-auth
+            - name: PUBLIC_KEY
+              valueFrom:
+                secretKeyRef:
+                  key: key
+                  name: public-key
+            - name: API_ADDRESS
+              value: 0.0.0.0:8080
+            - name: API_ADDRESS_FILE
+              value: 0.0.0.0:8080
+            - name: BUCKET_NAME
+              value: attachments-storage
+            - name: API_HOST_PREFIX
+              value: /
+            - name: APP_NAME
+              value: pdm_v2
+            - name: APP_VERSION
+              value: 0.0.1
+            - name: ENABLE_PERMISSIONS_FILTER
+              value: "1"
+            - name: PERMISSIONS_FILTER_COMPANIES
+              value: '[1]'
+            - name: TRANSMITTALS_ENABLE
+              value: "false"
+            - name: DRAWINGS_INTERNAL_URL
+              value: http://drawings-api-service.drawings.svc.cluster.local:80
+            - name: ATTACHMENTS_URL
+              value: http://attachments-service.attachments.svc.cluster.local:8000
+            - name: BIM_API_V2_URL
+              value: http://backend-service.bim.svc.cluster.local:8000/
+            - name: BIM_V2_HOST
+              value: http://backend-service.bim.svc.cluster.local:8000/
+            - name: CACHE_CLEANUP_INTERVAL
+              value: 60s
+            - name: CACHE_DEFAULT_EXPIRATION
+              value: 60s
+            - name: DJANGO_HOST
+              value: http://backend.django.svc.cluster.local:8000
+            - name: DJANGO_ORIGINATOR
+              value: docs_prod
+            - name: DOCUMENTATION_URL
+              value: http://documentations-api.documentations.svc.cluster.local:8080/
+            - name: EAV_URL
+              value: http://eav-service.eav.svc.cluster.local:8000
+            - name: ENABLE_OBSERVABILITY
+              value: "false"
+            - name: ENABLE_S3
+              value: "1"
+            - name: ENABLE_SSL
+              value: "0"
+            - name: ENVIRONMENT
+              value: prod
+            - name: FLOWS_URL
+              value: http://backend-service.flows.svc.cluster.local:8000
+            - name: HEIGHT_THUMB_ATTACHMENTS
+              value: "300"
+            - name: HEIGHT_THUMB_STATES
+              value: "73"
+            - name: HTTP_PORT
+              value: "8080"
+            - name: INSPECTIONS_URL
+              value: http://inspections-service.inspections.svc.cluster.local:80
+            - name: LOG_LEVEL
+              value: INFO
+            - name: NOTES_URL
+            - name: OBSERVABILITY_COLLECTOR_ENDPOINT
+              value: temp
+            - name: READ_WRITE_TIMEOUT_FILE_STREAM
+              value: 6h
+            - name: RELEASES_URL
+              value: https://gitlab.com
+            - name: REMARKS_URL
+              value: http://remarks-static-service.remarks.svc.cluster.local:8080/remarks
+            - name: RESOURCES_URL
+              value: http://resources-service.resources.svc.cluster.local:8000
+            - name: S3_SERVICE_ACCOUNT
+              value: /etc/sarex/yc-s3-storage/yc-s3-service-account.json
+            - name: STATES_URL
+              value: http://workspaces-service.workspaces.svc.cluster.local:8000/
+            - name: SUBSCRIPTIONS_URL
+              value: http://sarex-subscriptions-service.subscriptions.svc.cluster.local:80
+            - name: SYSTEM_LOG_URL
+              value: http://api-service.system-log.svc.cluster.local:8000
+            - name: TARGET_URL
+              value: http://backend.django.svc.cluster.local:8000
+            - name: USE_CACHE_IN_FILE_STREAMER
+              value: "1"
+            - name: USE_SUBSCRIPTIONS
+              value: "false"
+            - name: WIDTH_THUMB_ATTACHMENTS
+              value: "300"
+            - name: WIDTH_THUMB_STATES
+              value: "120"
+            - name: WORKFLOWS_IMAGES_VERSION
+              value: master
+            - name: WORKFLOW_IMAGES_VERSION
+              value: master
+            - name: WORKFLOW_URL
+              value: http://workflows-api-service.workflow.svc.cluster.local:8000/
+            - name: WORKSPACE_BUNDLE_VERSION
+              value: v1
+            - name: WORKSPACE_URL
+              value: http://workspaces-service.workspaces.svc.cluster.local:8000/
+
+
+
+          resources:
+            requests:
+              cpu: "1"
+              memory: 1Gi
+          volumeMounts:
+            - mountPath: /etc/sarex/yc-s3-storage
+              name: documentations-yc-s3-secret
+              readOnly: true
+            - mountPath: /etc/sarex/zitadel
+              name: zitadel-account
+              readOnly: true
+
+      imagePullSecrets:
+        - name: regcred

apps/documentations/base/pdm-service.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: pdm-svc
+  namespace: documentations
+spec:
+  type: ClusterIP
+  selector:
+    app: pdm-api
+  ports:
+    - name: http
+      port: 80
+      targetPort: 8080
+      protocol: TCP