From 9a373f670c3b6bcadf1f8170651d86c7652acdec Mon Sep 17 00:00:00 2001 From: ivan Date: Wed, 14 Oct 2026 15:27:23 +0500 Subject: [PATCH] brusnika-stage: manage orchestrator and documentations hasher/pdf-markings-amqp in git Manifests exported from the live cluster with server-side and Helm/Lens metadata stripped; selectors and pod labels kept as they are so Flux takes the objects over without restarting pods. orchestrator: cde API, its Service and ServiceAccount, the v1 workers installed by the old helm release cde and the v2 workers rolled out today. documentations: hasher and pdf-markings-amqp. Secrets (cde-secret, hasher-*, postgres-secret, rabbitmq, yc-s3, dockerhub, regcred) stay in the cluster only. The old apps/cde/brusnika-stage overlay (namespace contracts, HelmRelease cde) was never wired; its kustomization now lists only these manifests. --- .../cde/brusnika-stage/cde-flowscallback.yaml | 40 ++++++ apps/cde/brusnika-stage/cde-splitpdf.yaml | 40 ++++++ apps/cde/brusnika-stage/cde-worker-alert.yaml | 35 +++++ apps/cde/brusnika-stage/cde-worker-copy.yaml | 40 ++++++ .../cde/brusnika-stage/cde-worker-copyv2.yaml | 41 ++++++ .../brusnika-stage/cde-worker-markings.yaml | 40 ++++++ apps/cde/brusnika-stage/cde-worker-sign.yaml | 40 ++++++ .../cde-worker-update-bundles.yaml | 40 ++++++ apps/cde/brusnika-stage/cde.yaml | 55 ++++++++ .../createversionsv2-worke.yaml | 41 ++++++ apps/cde/brusnika-stage/kustomization.yaml | 17 ++- .../cde/brusnika-stage/markingsv2-worker.yaml | 41 ++++++ apps/cde/brusnika-stage/service.yaml | 19 +++ apps/cde/brusnika-stage/serviceaccount.yaml | 10 ++ apps/cde/brusnika-stage/signv2-worker.yaml | 41 ++++++ .../documentations/brusnika-stage/hasher.yaml | 95 +++++++++++++ .../brusnika-stage/kustomization.yaml | 2 + .../brusnika-stage/pdf-markings-amqp.yaml | 125 ++++++++++++++++++ clusters/brusnika-stage/kustomization.yaml | 1 + 19 files changed, 761 insertions(+), 2 deletions(-) create mode 100644 apps/cde/brusnika-stage/cde-flowscallback.yaml create mode 100644 apps/cde/brusnika-stage/cde-splitpdf.yaml create mode 100644 apps/cde/brusnika-stage/cde-worker-alert.yaml create mode 100644 apps/cde/brusnika-stage/cde-worker-copy.yaml create mode 100644 apps/cde/brusnika-stage/cde-worker-copyv2.yaml create mode 100644 apps/cde/brusnika-stage/cde-worker-markings.yaml create mode 100644 apps/cde/brusnika-stage/cde-worker-sign.yaml create mode 100644 apps/cde/brusnika-stage/cde-worker-update-bundles.yaml create mode 100644 apps/cde/brusnika-stage/cde.yaml create mode 100644 apps/cde/brusnika-stage/createversionsv2-worke.yaml create mode 100644 apps/cde/brusnika-stage/markingsv2-worker.yaml create mode 100644 apps/cde/brusnika-stage/service.yaml create mode 100644 apps/cde/brusnika-stage/serviceaccount.yaml create mode 100644 apps/cde/brusnika-stage/signv2-worker.yaml create mode 100644 apps/documentations/brusnika-stage/hasher.yaml create mode 100644 apps/documentations/brusnika-stage/pdf-markings-amqp.yaml diff --git a/apps/cde/brusnika-stage/cde-flowscallback.yaml b/apps/cde/brusnika-stage/cde-flowscallback.yaml new file mode 100644 index 0000000..28a7bfb --- /dev/null +++ b/apps/cde/brusnika-stage/cde-flowscallback.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-flowscallback + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-flowscallback + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-flowscallback + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-flowscallback + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: IS_CONTOUR + value: 'True' + - name: S3_IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/flowscallback-worker:preprod_0986a572 + imagePullPolicy: Always + name: cde-worker-flowscallback + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-splitpdf.yaml b/apps/cde/brusnika-stage/cde-splitpdf.yaml new file mode 100644 index 0000000..8509f4a --- /dev/null +++ b/apps/cde/brusnika-stage/cde-splitpdf.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-splitpdf + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-splitpdf + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-splitpdf + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-splitpdf + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: S3_IS_CONTOUR + value: 'true' + - name: IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/splitpdf-worker:prod_4.4.1 + imagePullPolicy: Always + name: cde-worker-splitpdf + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-worker-alert.yaml b/apps/cde/brusnika-stage/cde-worker-alert.yaml new file mode 100644 index 0000000..9b1fc3c --- /dev/null +++ b/apps/cde/brusnika-stage/cde-worker-alert.yaml @@ -0,0 +1,35 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-worker-alert + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-alert + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 0 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-alert + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-alert + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/orchestrator:latest + imagePullPolicy: Always + name: cde-worker-alert + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-worker-copy.yaml b/apps/cde/brusnika-stage/cde-worker-copy.yaml new file mode 100644 index 0000000..c33f041 --- /dev/null +++ b/apps/cde/brusnika-stage/cde-worker-copy.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-worker-copy + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-copy + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-copy + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-copy + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: IS_CONTOUR + value: 'True' + - name: S3_IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/copy-worker:preprod_0986a572 + imagePullPolicy: Always + name: cde-worker-copy + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-worker-copyv2.yaml b/apps/cde/brusnika-stage/cde-worker-copyv2.yaml new file mode 100644 index 0000000..cf09cdd --- /dev/null +++ b/apps/cde/brusnika-stage/cde-worker-copyv2.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-worker-copyv2 + namespace: orchestrator + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-copyv2 + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-copy + template: + metadata: + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-copy + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: S3_IS_CONTOUR + value: 'true' + - name: IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/copyv2-worker:prod_4.0.2 + imagePullPolicy: Always + name: cde-worker-copy + securityContext: {} + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-worker-markings.yaml b/apps/cde/brusnika-stage/cde-worker-markings.yaml new file mode 100644 index 0000000..564c73d --- /dev/null +++ b/apps/cde/brusnika-stage/cde-worker-markings.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-worker-markings + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-markings + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-markings + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-markings + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: IS_CONTOUR + value: 'True' + - name: S3_IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/markings-worker:preprod_eb50f30e + imagePullPolicy: Always + name: cde-worker-markings + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-worker-sign.yaml b/apps/cde/brusnika-stage/cde-worker-sign.yaml new file mode 100644 index 0000000..aa45f56 --- /dev/null +++ b/apps/cde/brusnika-stage/cde-worker-sign.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-worker-sign + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-sign + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-sign + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-sign + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: IS_CONTOUR + value: 'True' + - name: S3_IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/sign-worker:preprod_0986a572 + imagePullPolicy: Always + name: cde-worker-sign + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde-worker-update-bundles.yaml b/apps/cde/brusnika-stage/cde-worker-update-bundles.yaml new file mode 100644 index 0000000..7b547c9 --- /dev/null +++ b/apps/cde/brusnika-stage/cde-worker-update-bundles.yaml @@ -0,0 +1,40 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde-worker-update-bundles + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-updatebundles + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde-worker-updatebundles + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-updatebundles + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: IS_CONTOUR + value: 'True' + - name: S3_IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/updatebundles-worker:preprod_0986a572 + imagePullPolicy: Always + name: cde-worker-update-bundles + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/cde.yaml b/apps/cde/brusnika-stage/cde.yaml new file mode 100644 index 0000000..5bcf92f --- /dev/null +++ b/apps/cde/brusnika-stage/cde.yaml @@ -0,0 +1,55 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: cde + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde + template: + metadata: + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/cde:production_e5316bd0 + imagePullPolicy: Always + livenessProbe: + failureThreshold: 3 + initialDelaySeconds: 15 + periodSeconds: 10 + successThreshold: 1 + tcpSocket: + port: 8080 + timeoutSeconds: 1 + name: cde + ports: + - containerPort: 8080 + name: http + protocol: TCP + readinessProbe: + failureThreshold: 3 + initialDelaySeconds: 15 + periodSeconds: 10 + successThreshold: 1 + tcpSocket: + port: 8080 + timeoutSeconds: 1 + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/createversionsv2-worke.yaml b/apps/cde/brusnika-stage/createversionsv2-worke.yaml new file mode 100644 index 0000000..9361046 --- /dev/null +++ b/apps/cde/brusnika-stage/createversionsv2-worke.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: createversionsv2-worke + namespace: orchestrator + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-createversions + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-createversions + template: + metadata: + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-createversions + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: S3_IS_CONTOUR + value: 'true' + - name: IS_CONTOUR + value: 'true' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/createversionsv2-worker:preprod_90202b78 + imagePullPolicy: Always + name: createversionsv2-worke + securityContext: {} + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/kustomization.yaml b/apps/cde/brusnika-stage/kustomization.yaml index 59c09a6..ce2bd14 100644 --- a/apps/cde/brusnika-stage/kustomization.yaml +++ b/apps/cde/brusnika-stage/kustomization.yaml @@ -1,6 +1,19 @@ --- apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization -namespace: contracts +namespace: orchestrator resources: - - helmrelease.yaml + - serviceaccount.yaml + - service.yaml + - cde.yaml + - cde-flowscallback.yaml + - cde-splitpdf.yaml + - cde-worker-alert.yaml + - cde-worker-copy.yaml + - cde-worker-markings.yaml + - cde-worker-sign.yaml + - cde-worker-update-bundles.yaml + - cde-worker-copyv2.yaml + - createversionsv2-worke.yaml + - markingsv2-worker.yaml + - signv2-worker.yaml diff --git a/apps/cde/brusnika-stage/markingsv2-worker.yaml b/apps/cde/brusnika-stage/markingsv2-worker.yaml new file mode 100644 index 0000000..d2b20eb --- /dev/null +++ b/apps/cde/brusnika-stage/markingsv2-worker.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: markingsv2-worker + namespace: orchestrator + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-markings + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-markings + template: + metadata: + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-markings + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: S3_IS_CONTOUR + value: 'true' + - name: IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/markingsv2-worker:prod_4.0.2 + imagePullPolicy: Always + name: cde-worker-markings + securityContext: {} + imagePullSecrets: + - name: dockerhub diff --git a/apps/cde/brusnika-stage/service.yaml b/apps/cde/brusnika-stage/service.yaml new file mode 100644 index 0000000..2cd62ab --- /dev/null +++ b/apps/cde/brusnika-stage/service.yaml @@ -0,0 +1,19 @@ +--- +apiVersion: v1 +kind: Service +metadata: + name: cde + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde +spec: + type: ClusterIP + selector: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde + ports: + - name: http + port: 8080 + protocol: TCP + targetPort: 8080 diff --git a/apps/cde/brusnika-stage/serviceaccount.yaml b/apps/cde/brusnika-stage/serviceaccount.yaml new file mode 100644 index 0000000..a0743e6 --- /dev/null +++ b/apps/cde/brusnika-stage/serviceaccount.yaml @@ -0,0 +1,10 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: cde + namespace: orchestrator + labels: + app.kubernetes.io/instance: cde + app.kubernetes.io/name: cde + app.kubernetes.io/version: 0.0.1 diff --git a/apps/cde/brusnika-stage/signv2-worker.yaml b/apps/cde/brusnika-stage/signv2-worker.yaml new file mode 100644 index 0000000..8cc07e6 --- /dev/null +++ b/apps/cde/brusnika-stage/signv2-worker.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: signv2-worker + namespace: orchestrator + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-sign + app.kubernetes.io/version: 0.0.1 +spec: + replicas: 1 + selector: + matchLabels: + app.kubernetes.io/instance: name + app.kubernetes.io/name: cde-worker-sign + template: + metadata: + labels: + app.kubernetes.io/instance: name + app.kubernetes.io/managed-by: Helm + app.kubernetes.io/name: cde-worker-sign + app.kubernetes.io/version: 0.0.1 + helm.sh/chart: cde-0.1.0 + spec: + serviceAccountName: cde + containers: + - env: + - name: S3_IS_CONTOUR + value: 'true' + - name: IS_CONTOUR + value: 'True' + envFrom: + - secretRef: + name: cde-secret + image: cr.yandex/crp3ccidau046kdj8g9q/signv2-worker:prod_4.0.2 + imagePullPolicy: Always + name: cde-worker-sign + securityContext: {} + imagePullSecrets: + - name: dockerhub diff --git a/apps/documentations/brusnika-stage/hasher.yaml b/apps/documentations/brusnika-stage/hasher.yaml new file mode 100644 index 0000000..112c628 --- /dev/null +++ b/apps/documentations/brusnika-stage/hasher.yaml @@ -0,0 +1,95 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: hasher + namespace: documentations + labels: + app: hasher + service: normal +spec: + replicas: 1 + selector: + matchLabels: + app: hasher + template: + metadata: + labels: + app: hasher + service: normal + spec: + containers: + - env: + - name: HASHER_APP__LOG_LEVEL + value: INFO + - name: HASHER_APP__NUM_WORKERS + value: '4' + - name: HASHER_AMQP__ROUTING__TASK_INPUT_QUEUE + value: hash.compute.normal.tasks + - name: HASHER_AMQP__ROUTING__TASK_INPUT_EXCHANGE + value: hash.compute + - name: HASHER_AMQP__ROUTING__TASK_INPUT_EXCHANGE_TYPE + value: direct + - name: HASHER_AMQP__ROUTING__TASK_INPUT_ROUTING_KEY + value: hash.compute.normal + - name: HASHER_S3__MAX_POOL_CONNECTIONS + value: '10' + - name: HASHER_S3__CONNECT_TIMEOUT + value: '10' + - name: HASHER_S3__READ_TIMEOUT + value: '30' + - name: HASHER_S3__REGION_NAME + value: ru-central1 + - name: HASHER_S3__USE_SSL + value: 'true' + - name: HASHER_S3__VERIFY + value: 'true' + - name: HASHER_AMQP__USERNAME + valueFrom: + secretKeyRef: + key: user + name: hasher-rabbitmq-secret + - name: HASHER_AMQP__PASSWORD + valueFrom: + secretKeyRef: + key: password + name: hasher-rabbitmq-secret + - name: HASHER_AMQP__HOST + valueFrom: + secretKeyRef: + key: host + name: hasher-rabbitmq-secret + - name: HASHER_AMQP__PORT + valueFrom: + secretKeyRef: + key: port + name: hasher-rabbitmq-secret + - name: HASHER_AMQP__VHOST + valueFrom: + secretKeyRef: + key: vhost + name: hasher-rabbitmq-secret + - name: HASHER_S3__ENDPOINT + valueFrom: + secretKeyRef: + key: endpoint + name: hasher-s3-secret + - name: HASHER_S3__ACCESS_KEY + valueFrom: + secretKeyRef: + key: access_key + name: hasher-s3-secret + - name: HASHER_S3__SECRET_KEY + valueFrom: + secretKeyRef: + key: secret_key + name: hasher-s3-secret + image: cr.yandex/crp3ccidau046kdj8g9q/hasher:production_3f853d3a + imagePullPolicy: IfNotPresent + name: normal + ports: + - containerPort: 8080 + name: http + protocol: TCP + imagePullSecrets: + - name: regcred diff --git a/apps/documentations/brusnika-stage/kustomization.yaml b/apps/documentations/brusnika-stage/kustomization.yaml index 571e91d..247514e 100644 --- a/apps/documentations/brusnika-stage/kustomization.yaml +++ b/apps/documentations/brusnika-stage/kustomization.yaml @@ -7,3 +7,5 @@ resources: - pdm.yaml - api.yaml - filestream.yaml + - hasher.yaml + - pdf-markings-amqp.yaml diff --git a/apps/documentations/brusnika-stage/pdf-markings-amqp.yaml b/apps/documentations/brusnika-stage/pdf-markings-amqp.yaml new file mode 100644 index 0000000..b227fbb --- /dev/null +++ b/apps/documentations/brusnika-stage/pdf-markings-amqp.yaml @@ -0,0 +1,125 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: pdf-markings-amqp + namespace: documentations + labels: + app: pdf-markings-amqp + service: api +spec: + replicas: 1 + selector: + matchLabels: + app: pdf-markings-amqp + strategy: + rollingUpdate: + maxSurge: 3 + maxUnavailable: 3 + type: RollingUpdate + template: + metadata: + labels: + app: pdf-markings-amqp + service: api + spec: + containers: + - env: + - name: MARKS_APP__LOG_LEVEL + value: INFO + - name: MARKS_CRYPTO__HASHING_ALGO + value: md_gost12_256 + - name: MARKS_DOCUMENTS_DB__HOST + value: 192.168.2.45 + - name: MARKS_DOCUMENTS_DB__PORT + value: '5432' + - name: MARKS_DOCUMENTS_DB__DATABASE + value: documentations + - name: MARKS_DOCUMENTS_DB__SSLMODE + value: disable + - name: MARKS_QR__REDIRECT_URL + value: https://stamp-verification.test.sarex.brusnika.tech/ + - name: MARKS_QR__BASE_DOCUMENT_URL + value: https://test.sarex.brusnika.tech + - name: MARKS_S3__USE_SSL + value: 'false' + - name: MARKS_S3__SSL_VERIFY + value: 'false' + - name: MARKS_S3__REGION + value: ru-central1 + - name: MARKS_S3__DEFAULT_BUCKET + value: documentations-stage-1-sarex-new + - name: MARKS_RABBITMQ__ROUTING__INPUT_QUEUE + value: pdf_markings_input + - name: MARKS_DOCUMENTS_DB__USERNAME + valueFrom: + secretKeyRef: + key: username + name: postgres-secret + - name: MARKS_DOCUMENTS_DB__PASSWORD + valueFrom: + secretKeyRef: + key: password + name: postgres-secret + - name: MARKS_S3__URL + valueFrom: + secretKeyRef: + key: endpoint_url + name: yc-s3 + - name: MARKS_S3__ACCESS_KEY + valueFrom: + secretKeyRef: + key: key_id + name: yc-s3 + - name: MARKS_S3__SECRET_KEY + valueFrom: + secretKeyRef: + key: access_key + name: yc-s3 + - name: MARKS_RABBITMQ__HOST + valueFrom: + secretKeyRef: + key: host + name: rabbitmq + - name: MARKS_RABBITMQ__PORT + valueFrom: + secretKeyRef: + key: port + name: rabbitmq + - name: MARKS_RABBITMQ__USERNAME + valueFrom: + secretKeyRef: + key: username + name: rabbitmq + - name: MARKS_RABBITMQ__PASSWORD + valueFrom: + secretKeyRef: + key: password + name: rabbitmq + - name: MARKS_RABBITMQ__VHOST + valueFrom: + secretKeyRef: + key: vhost + name: rabbitmq + - name: MARKS_RABBITMQ__HEARTBEAT_SECONDS + valueFrom: + secretKeyRef: + key: heartbeat + name: rabbitmq + image: cr.yandex/crp3ccidau046kdj8g9q/pdf-markings-amqp:prod_3ab263be + imagePullPolicy: IfNotPresent + name: api + ports: + - containerPort: 8000 + name: http + protocol: TCP + volumeMounts: + - mountPath: /etc/sarex/yc-s3-storage + name: yc-s3 + readOnly: true + volumes: + - name: yc-s3 + secret: + secretName: yc-s3 + imagePullSecrets: + - name: regcred diff --git a/clusters/brusnika-stage/kustomization.yaml b/clusters/brusnika-stage/kustomization.yaml index b22b4ac..26387e0 100644 --- a/clusters/brusnika-stage/kustomization.yaml +++ b/clusters/brusnika-stage/kustomization.yaml @@ -12,6 +12,7 @@ resources: - ../../apps/resources/brusnika-stage - ../../apps/workspaces/brusnika-stage - ../../apps/documentations/brusnika-stage + - ../../apps/cde/brusnika-stage - ../../apps/flows/brusnika-stage - ../../apps/processing/brusnika-stage - ../../apps/reviews/brusnika-stage