From 1f50e8533af26a3fe05c4d18ab30e3892767cea4 Mon Sep 17 00:00:00 2001 From: Kochetkov S Date: Mon, 20 Jul 2026 17:15:41 +0300 Subject: [PATCH] ++ add ugmk test app kafka postgres rabbitmq vault examples --- infrastructure-secrets.yaml | 58 ++++++++++++++++++++++++++------ infrastructure.yaml | 67 +++++++++++++++++++++++++++++++++++-- 2 files changed, 112 insertions(+), 13 deletions(-) diff --git a/infrastructure-secrets.yaml b/infrastructure-secrets.yaml index aa3bb46..3d314a7 100644 --- a/infrastructure-secrets.yaml +++ b/infrastructure-secrets.yaml @@ -1452,8 +1452,8 @@ environments: lifecycle: ignore_changes: false data: - test-key: ENC[AES256_GCM,data:dk1vztX7BS9yK050MByZYA==,iv:f9PcVA5KKRagstmx+tJmpgGe4Vs3pbkn1ITwFlCddSc=,tag:Q3Sa7AbSmKxgm0Qf7JleiQ==,type:str] - #ENC[AES256_GCM,data:LFmldlcwWt6uFpTvoqxP3E96O6AOdIKcpq2cs8dgr+PvOj80BZky6MKY5EFnVcRho+S8GVWiFMQgHd1bZ0I/RiYrsGZIIw==,iv:B9kJcE2uXp43KUW4uD0UMc+R27OA8mMb59HoLdCBhR0=,tag:vVGgIin78ZYqq1RdOC9M7w==,type:comment] + test-key: ENC[AES256_GCM,data:kwM3UstXxTWeqKh0/zxLNw==,iv:qPFANLCO4XIkGu6ttWsi7MAOrB1pR8+54VP3MZ02GVM=,tag:0R0wXyiN60kzcpZzJuTYFA==,type:str] + #ENC[AES256_GCM,data:SHpmt65JYvl47d1SUZF6z9kcKsudj6GAcmxZk32viR7TJmDPdnn6gwZz9CGT6yGRV7P+JvbEyFtQNbMxkDOkDSmXDDtOcg==,iv:HTCqGXYzgmdTFqfNXybKA/IA9KaM15D65L5x67fOlOU=,tag:A7oiwzy/PRx1JPi9ZCeJrg==,type:comment] - name: test-db-k8s namespace: contour type: database @@ -1473,8 +1473,8 @@ environments: lifecycle: ignore_changes: false data: - test-key: ENC[AES256_GCM,data:MyyhJgFeO5C2JKGmTfHCbQ==,iv:dSnaqozTbBvtyhxb/KF4dCQb6+/lHjKQ3E8UBHNETXU=,tag:g1OG1nSMgi5pV9KOB686sQ==,type:str] - #ENC[AES256_GCM,data:bx2tWgBJth90e6koKcoDrw54AYcFlRT9xWyEv8CK2XwypoDgD13t1w4X3BghPCqqiNrnX1z4nomYzrNoNYj67BV4EFAWnVBW62QKgLCZ0ujXTZId0Q==,iv:089lZVOiwDp7fdVgW4KYPH1CCVDwyU8T6K/Z7EBerTc=,tag:MpVTtMie4jiK7jpfGf80tA==,type:comment] + test-key: ENC[AES256_GCM,data:IjHcOtNAR3YIfFqEocbFFQ==,iv:HXwBMozGP1giQou7OOLLzkZxl7f8VINVifuD1qey+08=,tag:yLX9ghIKLPr/tQqxJu2DLQ==,type:str] + #ENC[AES256_GCM,data:rSp1bAi7LnB7kE7g2yK5bCyr2P7TEHk/8N2nX8EP2YheUn/Ro+O0Wazr/ra6erm+QpcyH+NpgMOcO09Oba/TlnyIwzNXXv6XInasFztKoUCMRvP/Og==,iv:xwMZdrGWy48giWSuF3TQMkA09pfFOS+VYC657LpCdNo=,tag:1+E4xV/PVhPV1yTV5nU05Q==,type:comment] - name: test-bucket-vault namespace: contour type: s3 @@ -1528,6 +1528,42 @@ environments: cluster: main db: attachments_db user: attachments + - name: ugmk-test-app-kafka + type: kafka + sink: vault + vault_path: apps/ugmk-test-app/kafka + depends_on: + kafka_ref: main + kafka_user: ugmk-test-app + lifecycle: + ignore_changes: false + - name: ugmk-test-app-postgres + type: database + sink: vault + vault_path: apps/ugmk-test-app/postgres + depends_on: + cluster: main + db: ugmk_test_db + user: ugmk_test_user + lifecycle: + ignore_changes: false + - name: ugmk-test-app-rabbitmq + type: rabbitmq + sink: vault + vault_path: apps/ugmk-test-app/rabbitmq + depends_on: + rabbitmq_vhost: ugmk-test-vhost + rabbitmq_user: ugmk-test-rmq + lifecycle: + ignore_changes: false + - name: ugmk-test-app-static + type: opaque + sink: vault + vault_path: apps/ugmk-test-app/static + data: + test-key: ENC[AES256_GCM,data:dWHgULZFMEucjwyzvdT3rkeTuX8lvr23LySCwXO2KnaqVd+JGbSqyA==,iv:DbjXxn+iI/+udw88YZV3U3zzsrmQHc4Lt+2SiFcPDns=,tag:qhsj9n1gzXrYDsrA8Zp/NQ==,type:str] + lifecycle: + ignore_changes: false sops: kms: [] gcp_kms: [] @@ -1537,14 +1573,14 @@ sops: - recipient: age198ea80z7gan2ruetn288ln6rl2qh7xtsqqpwrjtyn8maya3364fsvpdd63 enc: | -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmQremFMODRGRHp1UGF3 - Z0pmWTRJbXpRUnk4Q0V6dWVPengvdzlCZjB3ClMvbXpsQlIrNXFJelVsQThTS28z - UHhkR2MzeEpISm51QmcrWjg5V3k3QjgKLS0tIHhma3pFdVpXZkZJMTJRYXU5TG9Q - MW9DNE1MZUF5OVY5eFdFOWR0NE5iSXMKiF9pj/NiCgAqGnJuBEtg5GlDTAL9koDf - p3ZuKa7xultkB/M0ZdL5TYwB4FzSOqok8B4BuNeObU5mAqGwgX88xQ== + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNmhOSS9OWWNSUWtqZzR2 + RUN3cDJyUlA3cENseDBza1NYRytEWk1qU3hBClJlejJvaW9LeDFabWdEcStxdmts + cnpqaFpWbDM5U2tlLzVDRmR3Wkg1WTAKLS0tICtLcFl6Nmc0WHdpQmRFSWJLKzdV + Yld6OHBpNVlvMmpxL0lFOE1QUkJ3ZlEKcrDWDvvDlXn/P+AKAHwwVoygs0tAQQ9C + JTMf7WYn0DtLZSEyT+ALOWK5/m4qL43fFK5fQkd3fUpkQS0jfQ5KQQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-07-20T13:32:05Z" - mac: ENC[AES256_GCM,data:hQ7odSWL6/yWoOwzUWLzmOW6JoJXbOGLYNuUtNpx/axWVR6ittmUi+B1f5YLgFsMGT1tDGezjVX16hO6GjAQagdqnRO76Nwy5Zn3j8p9QHpnBlhxUgQBuX400UoBykj+0MbKF5fAPlopF3wquZ6zt+kFHu2zWwoSj+zlDFwr600=,iv:3IRSyjPU6ChJ1uMaAI6ZAFZDIX3NPDS0jq1TTkRKpWE=,tag:5Ee1HaSJYcUvP7yUapu6Cw==,type:str] + lastmodified: "2026-07-20T14:15:13Z" + mac: ENC[AES256_GCM,data:zyi9rV/iaq2pz4aYps0GbFuMCFE5W4xJQ9jLw0XFr1QbtarbZe46E2CV8jmRFOhRHUBGMTcsMrXLvbJs1mBqtyqNdPT4WtenIY9qVNV8VqqvOQhijZnLHR/VilNfDgOWcTVg0fzGorKiGTrgLWKDYcmTzCRTkrmD1DDSJczyuv4=,iv:PmSzYkWBswkxoebCMZ+yo2mkKuBqsn1BZz7I2+RRwT8=,tag:qRSm3E8XuU+F86qHabCmyw==,type:str] pgp: [] encrypted_regex: ^(data)$ version: 3.9.0 diff --git a/infrastructure.yaml b/infrastructure.yaml index 1d7a5c4..0460280 100644 --- a/infrastructure.yaml +++ b/infrastructure.yaml @@ -17,6 +17,12 @@ environments: istio-injection: disabled security.deckhouse.io/pod-policy: privileged + - name: ugmk-test-app + manage: true + image_pull_secret: true + labels: + project: contour + postgresql: default_host: 10.222.255.162 default_port: 5432 @@ -32,10 +38,67 @@ environments: password_special: false conn_limit: 20 + - cluster_id: main + database: + name: ugmk_test_db + extensions: + - uuid-ossp + - pg_stat_statements + user: + name: ugmk_test_user + password_length: 32 + password_special: false + conn_limit: 20 + permissions: + - attachments_db + minio: {} buckets: [] - kafka: {} - rabbitmq: {} + + kafka: + kafka_cluster_refs: + main: + bootstrap_servers: kafka-kafka-contour.kafka.svc.cluster.local:9092 + sasl_mechanism: SCRAM-SHA-512 + security_protocol: SASL_PLAINTEXT + tls_enabled: false + default_partitions: 3 + default_replication_factor: 1 + max_replication_factor: 1 + topics: + - name: ugmk.test.event.v1 + owner: ugmk-test-app + clusterRef: main + partitions: 3 + replicationFactor: 1 + users: + - name: ugmk-test-app + clusterRef: main + permissions: + - topic: ugmk.test.event.v1 + roles: + - PRODUCER + + rabbitmq: + management_endpoint: http://rabbitmq.rabbitmq.svc.cluster.local:15672 + amqp_host: rabbitmq.rabbitmq.svc.cluster.local + amqp_port: 5672 + vhosts: + - name: ugmk-test-vhost + users: + - name: ugmk-test-rmq + password_length: 32 + password_special: false + permissions: + - user: ugmk-test-rmq + vhost: ugmk-test-vhost + configure: ".*" + write: ".*" + read: ".*" + queues: + - name: ugmk.test.queue + vhost: ugmk-test-vhost + durable: true yc-k8s-test: namespaces: