++

apps/message-hub/base/deployment.yaml

@@ -0,0 +1,230 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: message-hub
+  namespace: message-hub
+  labels:
+    app: message-hub
+    service: message-hub
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: message-hub
+  template:
+    metadata:
+      labels:
+        app: message-hub
+        service: message-hub
+    spec:
+      containers:
+        - name: api
+          image: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_24425472
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 8000
+              protocol: TCP
+          env:
+            - name: WORKER_TIMEOUT
+              value: "60"
+            - name: PYTHONPATH
+              value: src
+            - name: SETTINGS_MAX_RETRIES
+              value: "1"
+            - name: SETTINGS_TOPICS
+              value: '{"planning": "pm", "assets": "assets_broadcast", "project_entity":
+                "issues_broadcast"}'
+            - name: SETTINGS_PDF_CONVERTER_HOST
+              value: http://export-project-service.django.svc.cluster.local:8000
+            - name: SAREX_BASE_HOST
+              value: http://backend-service.pm.svc.cluster.local:8000
+            - name: CACHE_HOST
+              value: redis.pm.svc.cluster.local
+            - name: CACHE_PORT
+              value: "6379"
+            - name: CACHE_SSL
+              value: "0"
+            - name: KAFKA_SECURITY_PROTOCOL
+              value: SSL
+            - name: KAFKA_SASL_MECHANISM
+              value: SCRAM-SHA-512
+            - name: KAFKA_SSL_CAFILE
+              value: /usr/local/share/ca-certificates/kafka.crt
+            - name: KAFKA_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: kafka-secret
+            - name: KAFKA_PORT
+              valueFrom:
+                secretKeyRef:
+                  key: port
+                  name: kafka-secret
+            - name: KAFKA_HOST
+              valueFrom:
+                secretKeyRef:
+                  key: hostname
+                  name: kafka-secret
+            - name: KAFKA_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: kafka-secret
+            - name: DB_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: postgresql-secret
+            - name: DB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  key: hostname
+                  name: postgresql-secret
+            - name: DB_PORT
+              valueFrom:
+                secretKeyRef:
+                  key: port
+                  name: postgresql-secret
+            - name: DB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  key: database
+                  name: postgresql-secret
+            - name: DB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: postgresql-secret
+            - name: S3_LOGIN
+              valueFrom:
+                secretKeyRef:
+                  key: username
+                  name: s3-secret
+            - name: S3_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: password
+                  name: s3-secret
+            - name: S3_BUCKET
+              valueFrom:
+                secretKeyRef:
+                  key: bucket
+                  name: s3-secret
+            - name: S3_HOST
+              valueFrom:
+                secretKeyRef:
+                  key: host
+                  name: s3-secret
+
+
+#            - name: CACHE_HOST
+#              valueFrom:
+#                secretKeyRef:
+#                  name: cache-secret-pm
+#                  key: host
+#            - name: CACHE_PORT
+#              valueFrom:
+#                secretKeyRef:
+#                  name: cache-secret-pm
+#                  key: port
+#            - name: CACHE_PASSWORD
+#              valueFrom:
+#                secretKeyRef:
+#                  name: cache-secret-pm
+#                  key: password
+            - name: CACHE_SSL
+              value: "False"
+            - name: CACHE_SSL_CA_CERTS
+              value: ""
+            - name: CACHE_ENABLE
+              value: "False"
+            - name: CLICKHOUSE_ENABLE
+              value: 'False'
+            - name: KAFKA_ENABLE
+              value: 'False'
+#            - name: KAFKA_BOOTSTRAP_SERVERS
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: bootstrap_servers
+#            - name: KAFKA_SECURITY_PROTOCOL
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: security_protocol
+#            - name: KAFKA_SASL_MECHANISM
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: sasl_mechanism
+#            - name: KAFKA_SASL_PLAIN_USERNAME
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: sasl_username
+#            - name: KAFKA_SASL_PLAIN_PASSWORD
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: sasl_password
+#            - name: KAFKA_SSL_CAFILE
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: ssl_cafile
+#            - name: KAFKA_TOPICS
+#              valueFrom:
+#                secretKeyRef:
+#                  name: ya-kafka-secret-pm
+#                  key: topics
+
+            - name: CELERY_RABBITMQ_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: rabbitmq-secrets
+                  key: hostname
+            - name: CELERY_RABBITMQ_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: rabbitmq-secrets
+                  key: port
+            - name: CELERY_RABBITMQ_USER
+              valueFrom:
+                secretKeyRef:
+                  name: rabbitmq-secrets
+                  key: username
+            - name: CELERY_RABBITMQ_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: rabbitmq-secrets
+                  key: password
+            - name: CELERY_RABBITMQ_VHOST
+              valueFrom:
+                secretKeyRef:
+                  name: rabbitmq-secrets
+                  key: vhost
+
+            - name: AUTH_PUBLIC_TOKEN_URL
+              value: "https://lk.sarex.io/api/token/public/"
+            - name: SERVER_HOST
+              value: "https://lk.sarex.io"
+            - name: SERVER_API_HOST
+              value: "https://api.sarex.io"
+            - name: SERVER_DEBUG
+              value: "False"
+            - name: SERVER_ALLOWED_HOSTS
+              value: '["*"]'
+            - name: SERVER_USE_OTEL
+              value: "False"
+            - name: SERVER_VERIFY_SSL
+              value: "False"
+            - name: SERVER_LOG_LEVEL
+              value: "INFO"
+          resources:
+            requests:
+              cpu: "1"
+              memory: 1Gi
+      imagePullSecrets:
+        - name: regcred

apps/message-hub/base/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: message-hub
+resources:
+  - namespace.yaml
+  - deployment.yaml
+  - service.yaml

apps/message-hub/base/namespace.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: message-hub
+  labels:
+    istio-injection: enabled

apps/message-hub/base/service.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: message-hub-svc
+  namespace: message-hub
+spec:
+  type: ClusterIP
+  selector:
+    app: message-hub
+  ports:
+    - name: http
+      port: 80
+      targetPort: 80
+      protocol: TCP

apps/message-hub/yc-k8s-test/kustomization.yaml

@@ -0,0 +1,10 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ../base
+patches: []
+#  - path: replicas.yaml
+#    target:
+#      kind: Deployment
+#      name: frontend

apps/message-hub/yc-k8s-test/replicas.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: message-hub
+  namespace: message-hub
+spec:
+  replicas: 1

clusters/yc-k8s-test/kustomization.yaml

@@ -36,3 +36,4 @@ resources:
   - ../../apps/bim/yc-k8s-test
   - ../../apps/django/yc-k8s-test
   - ../../apps/processing/yc-k8s-test
+  - ../../apps/message-hub/yc-k8s-test