From 2e6fd7bfe8f7fcdf9c294148b6fc1725322d811b Mon Sep 17 00:00:00 2001 From: ivan Date: Thu, 15 Oct 2026 20:15:28 +0500 Subject: [PATCH 1/3] ++ --- apps/transmittal/brusnika-stage/backend.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/transmittal/brusnika-stage/backend.yaml b/apps/transmittal/brusnika-stage/backend.yaml index fcddd0f..2a2214e 100644 --- a/apps/transmittal/brusnika-stage/backend.yaml +++ b/apps/transmittal/brusnika-stage/backend.yaml @@ -287,11 +287,11 @@ spec: - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT value: - _default: "minio-svc.minio.svc.cluster.local:9000" + _default: "minio.brusnika.lonsdaleites.ru" - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL value: - _default: "false" + _default: "true" - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL value: From 7f8263ede61823bb2eeb1f99bcfc2ad98d36a5ac Mon Sep 17 00:00:00 2001 From: ivan Date: Thu, 15 Oct 2026 20:18:09 +0500 Subject: [PATCH 2/3] ++ --- apps/inspections/brusnika-stage/backend.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/inspections/brusnika-stage/backend.yaml b/apps/inspections/brusnika-stage/backend.yaml index 9ad8b3f..6d4ca83 100644 --- a/apps/inspections/brusnika-stage/backend.yaml +++ b/apps/inspections/brusnika-stage/backend.yaml @@ -35,7 +35,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_1a33f6f4 + _default: cr.yandex/crp3ccidau046kdj8g9q/sarex-inspections:production_5fcce90d pullPolicy: _default: IfNotPresent From 84231c856eb283746cff0576aa40ce19dfa7b891 Mon Sep 17 00:00:00 2001 From: Kochetkov S Date: Thu, 15 Oct 2026 18:21:41 +0300 Subject: [PATCH 3/3] ++ nexus infra --- .../infrastructure/kustomization.yaml | 1 + .../istio-config/vk-infra/istio-config.yaml | 33 +++++++++++++ .../nexus/vk-infra/kustomization.yaml | 5 ++ infrastructure/nexus/vk-infra/namespace.yaml | 6 +++ infrastructure/nexus/vk-infra/nexus.yaml | 47 +++++++++++++++++++ 5 files changed, 92 insertions(+) create mode 100644 infrastructure/nexus/vk-infra/kustomization.yaml create mode 100644 infrastructure/nexus/vk-infra/namespace.yaml create mode 100644 infrastructure/nexus/vk-infra/nexus.yaml diff --git a/clusters/vk-infra/infrastructure/kustomization.yaml b/clusters/vk-infra/infrastructure/kustomization.yaml index f5c5395..f8d629b 100644 --- a/clusters/vk-infra/infrastructure/kustomization.yaml +++ b/clusters/vk-infra/infrastructure/kustomization.yaml @@ -11,3 +11,4 @@ resources: - ../../../infrastructure/vault/vk-infra - ../../../infrastructure/kb/vk-infra - ../../../infrastructure/gitlab-runner/vk-infra + - ../../../infrastructure/nexus/vk-infra diff --git a/infrastructure/istio-config/vk-infra/istio-config.yaml b/infrastructure/istio-config/vk-infra/istio-config.yaml index f96809b..c069082 100644 --- a/infrastructure/istio-config/vk-infra/istio-config.yaml +++ b/infrastructure/istio-config/vk-infra/istio-config.yaml @@ -58,6 +58,17 @@ spec: renewBefore: 360h0m0s privateKey: rotationPolicy: Always + nexus-tls: + dnsNames: + - nexus.infra.sarex.tech + issuerRef: + name: letsencrypt-issuer-istio + kind: ClusterIssuer + spec: + duration: 2160h0m0s + renewBefore: 360h0m0s + privateKey: + rotationPolicy: Always idp-tls: dnsNames: - iam.sarex.io @@ -93,6 +104,17 @@ spec: tls: credentialName: kb-tls mode: SIMPLE + nexus: + name: nexus-gateway + namespace: istio-system + selector: + istio: ingressgateway + servers: + - hosts: + - nexus.infra.sarex.tech + tls: + credentialName: nexus-tls + mode: SIMPLE idp: name: idp-gateway namespace: istio-system @@ -127,6 +149,17 @@ spec: prefix: / service: kb-service.kb.svc.cluster.local port: 80 + nexus-virt-service: + namespace: istio-system + hosts: + - nexus.infra.sarex.tech + gateways: + - istio-system/nexus-gateway + routes: + - path: + prefix: / + service: nexus.nexus.svc.cluster.local + port: 8081 idp-virt-service: namespace: istio-system hosts: diff --git a/infrastructure/nexus/vk-infra/kustomization.yaml b/infrastructure/nexus/vk-infra/kustomization.yaml new file mode 100644 index 0000000..bdcab1b --- /dev/null +++ b/infrastructure/nexus/vk-infra/kustomization.yaml @@ -0,0 +1,5 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +resources: + - namespace.yaml + - nexus.yaml diff --git a/infrastructure/nexus/vk-infra/namespace.yaml b/infrastructure/nexus/vk-infra/namespace.yaml new file mode 100644 index 0000000..5c684fc --- /dev/null +++ b/infrastructure/nexus/vk-infra/namespace.yaml @@ -0,0 +1,6 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: nexus + labels: + istio-injection: enabled diff --git a/infrastructure/nexus/vk-infra/nexus.yaml b/infrastructure/nexus/vk-infra/nexus.yaml new file mode 100644 index 0000000..4c05f71 --- /dev/null +++ b/infrastructure/nexus/vk-infra/nexus.yaml @@ -0,0 +1,47 @@ +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: nexus + namespace: nexus +spec: + interval: 10m + timeout: 15m + chart: + spec: + chart: nexus3 + version: "5.7.0" + sourceRef: + kind: HelmRepository + name: yc-oci-charts + namespace: flux-system + interval: 10m + dependsOn: + - name: istiod + namespace: istio-system + install: + remediation: + retries: 3 + upgrade: + remediation: + retries: 3 + values: + image: + repository: cr.yandex/crp3ccidau046kdj8g9q/mirror/nexus3 + bashImage: + repository: cr.yandex/crp3ccidau046kdj8g9q/mirror/bash + tag: "20261015" + imagePullSecrets: + - name: istio-registry-secret + nodeSelector: + dedicated: null + sarex.io/pool: svc + tolerations: [] + persistence: + storageClass: csi-ceph-ssd-retain + size: 50Gi + backupSyncer: + enabled: false + config: + enabled: false + gateway: null + virtualService: null