diff --git a/infrastructure-secrets.yaml b/infrastructure-secrets.yaml index 7c5d6ca..05292d5 100644 --- a/infrastructure-secrets.yaml +++ b/infrastructure-secrets.yaml @@ -2595,57 +2595,6 @@ environments: enabled: ENC[AES256_GCM,data:Zdxzygo=,iv:vbvCB3WtIOuWha5hwjg9mWaM8/6MHcX87C7s1aShz0k=,tag:b3O/6pa9yzl7a0YvdFv+Pg==,type:bool] keycloak: enabled: ENC[AES256_GCM,data:xJrmzls=,iv:ri9N1PJwul7e3BLxe3/1mEYoJToqi58rKsKb2Bi+U68=,tag:yjkmJkNXVrTt5nL2RdTwqw==,type:bool] - secrets: - - id: regcred - schema: dockerconfigjson.v1 - namespace: test-terraform - ownership: referenced - source: - kind: secret_ref - ref: vault://vault/common/regcred#.dockerconfigjson - targets: - - kind: kubernetes - namespace: test-terraform - name: regcred - - id: test-terraform-rabbitmq - schema: rabbitmq.v1 - namespace: test-terraform - ownership: managed - source: - kind: rabbitmq_user - ref: - vhost: test-terraform - user: test-terraform - targets: - - kind: kubernetes - namespace: test-terraform - name: rabbitmq - - kind: vault - path: apps/test-terraform/rabbitmq - - id: rabbitmq-module-test-regcred - schema: dockerconfigjson.v1 - namespace: rabbitmq-module-test - ownership: referenced - source: - kind: secret_ref - ref: vault://vault/common/regcred#.dockerconfigjson - targets: - - kind: kubernetes - namespace: rabbitmq-module-test - name: regcred - - id: rabbitmq-module-test-rabbitmq - schema: rabbitmq.v1 - namespace: rabbitmq-module-test - ownership: managed - source: - kind: rabbitmq_user - ref: - vhost: rabbitmq-module-test - user: rabbitmq-module-test - targets: - - kind: kubernetes - namespace: rabbitmq-module-test - name: rabbitmq wb: vault: enabled: true @@ -3351,8 +3300,8 @@ sops: MVF2aHBzODJ3V1Bzc2NNYUZES2tDREkKFxrOxUd3m5E2cu71SFj4vfQlZnHhDBA6 qGdq1XZoX0EYazSiRzYk3pcxHnpqMD6t8pX/NZUEkmo54G2nRKnH5Q== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-08-12T09:10:24Z" - mac: ENC[AES256_GCM,data:s5iSgBRSyatg6jFucmMelUSGaLtVSFTh+AzG8S5FzFkXr8wG9rpw0k2/qVNM+JmKq2xcjG61ebl19Tv3Ssq1YK1Af2XpTpsZpOc04ZnZb6XT0YTpclEM5AUQHA/WJpl287I0dwcV7gO/VDzyAVRvMcZzjJ9j9q+TkBtCN+V5JLc=,iv:NaEk7KTQnGvgG9nVpuvxJk/Z7r1lGgyElLvXm2OfqUc=,tag:jZSprepfBe0gThjbHubiiQ==,type:str] + lastmodified: "2026-08-12T12:44:30Z" + mac: ENC[AES256_GCM,data:sprOtmY+1vLac+i5fA9Cimv01EIibpigRjdZRk/JErUz1yq4ulu97CSwBCEQGWoXh4EnJxijARLHhCFSbFcJ+UKsDQfSxDrHF+g8Y3bV7+fFTXAKObQAXFip8EJxVB2gXSpLBv3qM77pBXeR3vevAtNH7fHNWk6jEL1NRXBmjHE=,iv:2F4bkNXX9uXEorXscvx1r99d9KiYCGQ/GUAjQveppTE=,tag:AmGDtV2NeWJ4pSnVLZ8Wkg==,type:str] pgp: [] encrypted_regex: ^(data)$ version: 3.12.2 diff --git a/infrastructure.yaml b/infrastructure.yaml index 579a411..0ddffb5 100644 --- a/infrastructure.yaml +++ b/infrastructure.yaml @@ -595,75 +595,12 @@ environments: brusnika-stage: namespaces: - - name: test-terraform - manage: true - image_pull_secret: false - - name: rabbitmq-module-test - manage: true - image_pull_secret: false # namespace создаёт flux (infrastructure/rabbitmq/base), terraform только # раскатывает в него regcred - образы чарта тянутся из приватного cr.yandex - name: rabbitmq manage: false image_pull_secret: true - rabbitmq: amqp_host: rabbitmq.rabbitmq.svc.cluster.local amqp_port: 5672 - vhosts: - - name: test-terraform - - name: rabbitmq-module-test - users: - - name: test-terraform - password_length: 32 - password_special: false - - name: rabbitmq-module-test - password_length: 32 - password_special: false - permissions: - - user: test-terraform - vhost: test-terraform - configure: ".*" - write: ".*" - read: ".*" - - user: rabbitmq-module-test - vhost: rabbitmq-module-test - configure: ".*" - write: ".*" - read: ".*" - - topic_permissions: - - vhost: rabbitmq-module-test - user: rabbitmq-module-test - permissions: - - exchange: rabbitmq-module-test.topic - write: "^allowed\\..*" - read: "^allowed\\..*" - exchanges: - - name: rabbitmq-module-test.direct - vhost: rabbitmq-module-test - type: direct - - name: rabbitmq-module-test.topic - vhost: rabbitmq-module-test - type: topic - queues: - - name: test-terraform-probe - vhost: test-terraform - durable: true - - name: rabbitmq-module-test-probe - vhost: rabbitmq-module-test - durable: true - bindings: - - vhost: rabbitmq-module-test - source: rabbitmq-module-test.direct - destination: rabbitmq-module-test-probe - destination_type: queue - routing_key: rabbitmq-module-test.routing - policies: - - name: rabbitmq-module-test-ttl - vhost: rabbitmq-module-test - pattern: "^rabbitmq-module-test" - apply_to: queues - definition: - message-ttl: "60000"