From d46ba48d2221da870d0b3aba1c9bc5bad05cbed8 Mon Sep 17 00:00:00 2001 From: emelinda Date: Wed, 5 Aug 2026 01:05:11 +0300 Subject: [PATCH] Update `yc-ecp` Istio configuration: add `main-gateway` and TLS settings for `aero.invest.sarex.io` --- .../istio-config/yc-ecp/istio-config.yaml | 219 ++++++++++++++++++ 1 file changed, 219 insertions(+) diff --git a/infrastructure/istio-config/yc-ecp/istio-config.yaml b/infrastructure/istio-config/yc-ecp/istio-config.yaml index 96893a5..551b5c2 100644 --- a/infrastructure/istio-config/yc-ecp/istio-config.yaml +++ b/infrastructure/istio-config/yc-ecp/istio-config.yaml @@ -64,6 +64,13 @@ spec: issuerRef: name: letsencrypt-prod kind: ClusterIssuer + aero-invest-tls-secret: + namespace: istio-system + dnsNames: + - aero.invest.sarex.io + issuerRef: + name: letsencrypt-prod + kind: ClusterIssuer istio: gateways: gitea: @@ -86,6 +93,16 @@ spec: httpsPortName: https tls: credentialName: vault-tls + main: + name: main-gateway + namespace: gateway + servers: + - hosts: + - aero.invest.sarex.io + httpPortName: http + httpsPortName: https + tls: + credentialName: aero-invest-tls-secret dashboard: name: dashboard-gateway namespace: gateway @@ -138,3 +155,205 @@ spec: prefix: / service: dashboard-kong-proxy.kubernetes-dashboard.svc.cluster.local port: 80 + +# # --- aero.invest.sarex.io / main-gateway --- +# backend-service-virt-service: +# namespace: django +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - GET +# - POST +# - PUT +# - PATCH +# - HEAD +# - DELETE +# routes: +# - path: +# prefix: /admin/ +# service: backend-service +# port: 8000 +# - path: +# prefix: /api +# service: backend-service +# port: 8000 +# +# s3-proxy-virt-service: +# namespace: django +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - GET +# - POST +# - PUT +# - PATCH +# - HEAD +# - DELETE +# routes: +# - path: +# prefix: /s3/ +# rewrite: / +# service: s3-bim-service +# port: 80 +# - path: +# prefix: /media/ +# rewrite: / +# service: s3-service +# port: 80 +# +# frontend-vs: +# namespace: django +# noCors: true +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# routes: +# # без path — маршрут без match, catch-all, как в кластере; +# # он должен оставаться последним по порядку сопоставления +# - service: frontend-service.django.svc.cluster.local +# port: 80 +# +# bim-api-gazpromcps-api-virt-service: +# namespace: bim +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - GET +# - POST +# - PUT +# - PATCH +# - HEAD +# - DELETE +# routes: +# - path: +# prefix: /bim-gazpromcps/api/ +# rewrite: /api/ +# service: bim-api-gazpromcps-service +# port: 80 +# - path: +# prefix: /bim-gazpromcps/files/ +# rewrite: /files/ +# service: bim-api-gazpromcps-service +# port: 80 +# +# bim-backend-v2-api-virt-service: +# namespace: bim +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - GET +# - POST +# - PUT +# - PATCH +# - HEAD +# - DELETE +# routes: +# - path: +# prefix: /bim2-gazpromcps/api/ +# rewrite: /api/ +# service: bim-backend-v2-service +# port: 80 +# +# eav-virt-service: +# namespace: eav +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - POST +# - GET +# - PATCH +# - DELETE +# - HEAD +# - PUT +# - OPTIONS +# routes: +# - path: +# prefix: /eav/api/ +# rewrite: /api/ +# service: eav-service +# port: 8000 +# noCors: true +# - path: +# prefix: /eav/admin/ +# rewrite: /eav/admin/ +# service: eav-service +# port: 8000 +# +# api-virt-service: +# namespace: processing +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - GET +# - POST +# - PUT +# - PATCH +# - HEAD +# - DELETE +# routes: +# - path: +# prefix: /workflows/api/ +# rewrite: /api/ +# service: workflows-backend-service +# port: 80 +# +# projects-frontend-static-virt-service: +# namespace: projects +# hosts: +# - aero.invest.sarex.io +# gateways: +# - gateway/main-gateway +# cors: +# allowHeaders: +# - Authorization +# - Content-Type +# allowMethods: +# - GET +# - POST +# - PUT +# - PATCH +# - HEAD +# - DELETE +# routes: +# - path: +# prefix: /projects/static/ +# rewrite: / +# service: projects-frontend-static-service +# port: 80