++ add ugmk test app kafka postgres rabbitmq vault examples

2026-08-05 18:31:00 +03:00 · 2026-07-20 17:15:41 +03:00 · 2026-07-20 17:15:41 +03:00 · 1f50e8533a
commit 1f50e8533a
parent f1dfb90dba
2 changed files with 112 additions and 13 deletions
--- a/infrastructure-secrets.yaml
+++ b/infrastructure-secrets.yaml
@ -1452,8 +1452,8 @@ environments:
              lifecycle:
                ignore_changes: false
              data:
-                test-key: ENC[AES256_GCM,data:dk1vztX7BS9yK050MByZYA==,iv:f9PcVA5KKRagstmx+tJmpgGe4Vs3pbkn1ITwFlCddSc=,tag:Q3Sa7AbSmKxgm0Qf7JleiQ==,type:str]
-                #ENC[AES256_GCM,data:LFmldlcwWt6uFpTvoqxP3E96O6AOdIKcpq2cs8dgr+PvOj80BZky6MKY5EFnVcRho+S8GVWiFMQgHd1bZ0I/RiYrsGZIIw==,iv:B9kJcE2uXp43KUW4uD0UMc+R27OA8mMb59HoLdCBhR0=,tag:vVGgIin78ZYqq1RdOC9M7w==,type:comment]
+                test-key: ENC[AES256_GCM,data:kwM3UstXxTWeqKh0/zxLNw==,iv:qPFANLCO4XIkGu6ttWsi7MAOrB1pR8+54VP3MZ02GVM=,tag:0R0wXyiN60kzcpZzJuTYFA==,type:str]
+                #ENC[AES256_GCM,data:SHpmt65JYvl47d1SUZF6z9kcKsudj6GAcmxZk32viR7TJmDPdnn6gwZz9CGT6yGRV7P+JvbEyFtQNbMxkDOkDSmXDDtOcg==,iv:HTCqGXYzgmdTFqfNXybKA/IA9KaM15D65L5x67fOlOU=,tag:A7oiwzy/PRx1JPi9ZCeJrg==,type:comment]
            - name: test-db-k8s
              namespace: contour
              type: database
@ -1473,8 +1473,8 @@ environments:
              lifecycle:
                ignore_changes: false
              data:
-                test-key: ENC[AES256_GCM,data:MyyhJgFeO5C2JKGmTfHCbQ==,iv:dSnaqozTbBvtyhxb/KF4dCQb6+/lHjKQ3E8UBHNETXU=,tag:g1OG1nSMgi5pV9KOB686sQ==,type:str]
-                #ENC[AES256_GCM,data:bx2tWgBJth90e6koKcoDrw54AYcFlRT9xWyEv8CK2XwypoDgD13t1w4X3BghPCqqiNrnX1z4nomYzrNoNYj67BV4EFAWnVBW62QKgLCZ0ujXTZId0Q==,iv:089lZVOiwDp7fdVgW4KYPH1CCVDwyU8T6K/Z7EBerTc=,tag:MpVTtMie4jiK7jpfGf80tA==,type:comment]
+                test-key: ENC[AES256_GCM,data:IjHcOtNAR3YIfFqEocbFFQ==,iv:HXwBMozGP1giQou7OOLLzkZxl7f8VINVifuD1qey+08=,tag:yLX9ghIKLPr/tQqxJu2DLQ==,type:str]
+                #ENC[AES256_GCM,data:rSp1bAi7LnB7kE7g2yK5bCyr2P7TEHk/8N2nX8EP2YheUn/Ro+O0Wazr/ra6erm+QpcyH+NpgMOcO09Oba/TlnyIwzNXXv6XInasFztKoUCMRvP/Og==,iv:xwMZdrGWy48giWSuF3TQMkA09pfFOS+VYC657LpCdNo=,tag:1+E4xV/PVhPV1yTV5nU05Q==,type:comment]
            - name: test-bucket-vault
              namespace: contour
              type: s3
@ -1528,6 +1528,42 @@ environments:
                cluster: main
                db: attachments_db
                user: attachments
+            - name: ugmk-test-app-kafka
+              type: kafka
+              sink: vault
+              vault_path: apps/ugmk-test-app/kafka
+              depends_on:
+                kafka_ref: main
+                kafka_user: ugmk-test-app
+              lifecycle:
+                ignore_changes: false
+            - name: ugmk-test-app-postgres
+              type: database
+              sink: vault
+              vault_path: apps/ugmk-test-app/postgres
+              depends_on:
+                cluster: main
+                db: ugmk_test_db
+                user: ugmk_test_user
+              lifecycle:
+                ignore_changes: false
+            - name: ugmk-test-app-rabbitmq
+              type: rabbitmq
+              sink: vault
+              vault_path: apps/ugmk-test-app/rabbitmq
+              depends_on:
+                rabbitmq_vhost: ugmk-test-vhost
+                rabbitmq_user: ugmk-test-rmq
+              lifecycle:
+                ignore_changes: false
+            - name: ugmk-test-app-static
+              type: opaque
+              sink: vault
+              vault_path: apps/ugmk-test-app/static
+              data:
+                test-key: ENC[AES256_GCM,data:dWHgULZFMEucjwyzvdT3rkeTuX8lvr23LySCwXO2KnaqVd+JGbSqyA==,iv:DbjXxn+iI/+udw88YZV3U3zzsrmQHc4Lt+2SiFcPDns=,tag:qhsj9n1gzXrYDsrA8Zp/NQ==,type:str]
+              lifecycle:
+                ignore_changes: false
 sops:
    kms: []
    gcp_kms: []
@ -1537,14 +1573,14 @@ sops:
        - recipient: age198ea80z7gan2ruetn288ln6rl2qh7xtsqqpwrjtyn8maya3364fsvpdd63
          enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmQremFMODRGRHp1UGF3
-            Z0pmWTRJbXpRUnk4Q0V6dWVPengvdzlCZjB3ClMvbXpsQlIrNXFJelVsQThTS28z
-            UHhkR2MzeEpISm51QmcrWjg5V3k3QjgKLS0tIHhma3pFdVpXZkZJMTJRYXU5TG9Q
-            MW9DNE1MZUF5OVY5eFdFOWR0NE5iSXMKiF9pj/NiCgAqGnJuBEtg5GlDTAL9koDf
-            p3ZuKa7xultkB/M0ZdL5TYwB4FzSOqok8B4BuNeObU5mAqGwgX88xQ==
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNmhOSS9OWWNSUWtqZzR2
+            RUN3cDJyUlA3cENseDBza1NYRytEWk1qU3hBClJlejJvaW9LeDFabWdEcStxdmts
+            cnpqaFpWbDM5U2tlLzVDRmR3Wkg1WTAKLS0tICtLcFl6Nmc0WHdpQmRFSWJLKzdV
+            Yld6OHBpNVlvMmpxL0lFOE1QUkJ3ZlEKcrDWDvvDlXn/P+AKAHwwVoygs0tAQQ9C
+            JTMf7WYn0DtLZSEyT+ALOWK5/m4qL43fFK5fQkd3fUpkQS0jfQ5KQQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-07-20T13:32:05Z"
-    mac: ENC[AES256_GCM,data:hQ7odSWL6/yWoOwzUWLzmOW6JoJXbOGLYNuUtNpx/axWVR6ittmUi+B1f5YLgFsMGT1tDGezjVX16hO6GjAQagdqnRO76Nwy5Zn3j8p9QHpnBlhxUgQBuX400UoBykj+0MbKF5fAPlopF3wquZ6zt+kFHu2zWwoSj+zlDFwr600=,iv:3IRSyjPU6ChJ1uMaAI6ZAFZDIX3NPDS0jq1TTkRKpWE=,tag:5Ee1HaSJYcUvP7yUapu6Cw==,type:str]
+    lastmodified: "2026-07-20T14:15:13Z"
+    mac: ENC[AES256_GCM,data:zyi9rV/iaq2pz4aYps0GbFuMCFE5W4xJQ9jLw0XFr1QbtarbZe46E2CV8jmRFOhRHUBGMTcsMrXLvbJs1mBqtyqNdPT4WtenIY9qVNV8VqqvOQhijZnLHR/VilNfDgOWcTVg0fzGorKiGTrgLWKDYcmTzCRTkrmD1DDSJczyuv4=,iv:PmSzYkWBswkxoebCMZ+yo2mkKuBqsn1BZz7I2+RRwT8=,tag:qRSm3E8XuU+F86qHabCmyw==,type:str]
    pgp: []
    encrypted_regex: ^(data)$
    version: 3.9.0
--- a/infrastructure.yaml
+++ b/infrastructure.yaml
@ -17,6 +17,12 @@ environments:
          istio-injection: disabled
          security.deckhouse.io/pod-policy: privileged

+      - name: ugmk-test-app
+        manage: true
+        image_pull_secret: true
+        labels:
+          project: contour
+
    postgresql:
      default_host: 10.222.255.162
      default_port: 5432
@ -32,10 +38,67 @@ environments:
          password_special: false
          conn_limit: 20

+      - cluster_id: main
+        database:
+          name: ugmk_test_db
+          extensions:
+            - uuid-ossp
+            - pg_stat_statements
+        user:
+          name: ugmk_test_user
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+          permissions:
+            - attachments_db
+
    minio: {}
    buckets: []
-    kafka: {}
-    rabbitmq: {}
+
+    kafka:
+      kafka_cluster_refs:
+        main:
+          bootstrap_servers: kafka-kafka-contour.kafka.svc.cluster.local:9092
+          sasl_mechanism: SCRAM-SHA-512
+          security_protocol: SASL_PLAINTEXT
+          tls_enabled: false
+          default_partitions: 3
+          default_replication_factor: 1
+          max_replication_factor: 1
+      topics:
+        - name: ugmk.test.event.v1
+          owner: ugmk-test-app
+          clusterRef: main
+          partitions: 3
+          replicationFactor: 1
+      users:
+        - name: ugmk-test-app
+          clusterRef: main
+          permissions:
+            - topic: ugmk.test.event.v1
+              roles:
+                - PRODUCER
+
+    rabbitmq:
+      management_endpoint: http://rabbitmq.rabbitmq.svc.cluster.local:15672
+      amqp_host: rabbitmq.rabbitmq.svc.cluster.local
+      amqp_port: 5672
+      vhosts:
+        - name: ugmk-test-vhost
+      users:
+        - name: ugmk-test-rmq
+          password_length: 32
+          password_special: false
+      permissions:
+        - user: ugmk-test-rmq
+          vhost: ugmk-test-vhost
+          configure: ".*"
+          write: ".*"
+          read: ".*"
+      queues:
+        - name: ugmk.test.queue
+          vhost: ugmk-test-vhost
+          durable: true

  yc-k8s-test:
    namespaces: