++ uralkal apps infra

infrastructure-secrets.yaml

@@ -5075,6 +5075,58 @@ environments:
               depends_on:
                 kafka_ref: main
                 kafka_user: uralkal-test
+            - name: zitadel-postgresql
+              namespace: zitadel
+              type: database
+              sink: vault
+              vault_path: zitadel/postgresql
+              depends_on:
+                cluster: main
+                db: zitadel
+                user: zitadel
+              random_keys:
+                humanPassword:
+                    length: 32
+                    special: true
+            - name: superset-postgres
+              namespace: superset
+              type: database
+              sink: vault
+              vault_path: apps/superset/postgres
+              depends_on:
+                cluster: main
+                db: superset
+                user: superset
+            - name: superset-app
+              namespace: superset
+              type: opaque
+              sink: vault
+              vault_path: vault/apps/superset
+              random_keys:
+                SUPERSET_SECRET_KEY:
+                    length: 42
+                    special: false
+                JWT_SECRET:
+                    length: 32
+                    special: false
+            - name: trino-postgres
+              namespace: trino
+              type: database
+              sink: vault
+              vault_path: apps/trino/postgres
+              depends_on:
+                cluster: main
+                db: trino
+                user: trino
+            - name: trino-app
+              namespace: trino
+              type: opaque
+              sink: vault
+              vault_path: vault/apps/trino
+              random_keys:
+                TRINO_INTERNAL_SHARED_SECRET:
+                    length: 32
+                    special: false
 sops:
     kms: []
     gcp_kms: []
@@ -5099,8 +5151,8 @@ sops:
             dXRWUzlUOWVYMVdUR2tlREJveWF6SVEK/99wDif8yD2VGEqnCeTT6sunURWU+IEu
             xwlt+WPoox0GUNw4efVFL4E7gd7FDJGtur+8si6i26XufQf2Tsk3xQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-09-25T13:17:59Z"
-    mac: ENC[AES256_GCM,data:abyMt9m8hQNw+cpXKySi60taCffq4YBp+RK+bczi7GlnLefhiKqFLtRriajTC80Kxul+n5ER6AGDTCt9A1Ydp84/4Mn5JaA/TFe1CTj+ro0fsjsoLtkymmLkIkSKkKCndTGqzKu2KlEwqzwwPzZWas4v76e/53abjyUWfVWzRrM=,iv:7WViTbi3GoIOy2+5ZTq1bN9FS8NV6QSDkVe2W5/YZ9s=,tag:39EWEU4tlPJe4yvA/UzEFA==,type:str]
+    lastmodified: "2026-09-25T13:25:39Z"
+    mac: ENC[AES256_GCM,data:p9gHSOe3qwn/Od2AUjBnSex7yFmjMvv5lzlFr2tIe6DQiDUisYkGxQIVjpp86cUR3PIa51zTAS3zJuCmjJeIv3Yrf+nsDow+ev1Wkcjo8pu3eXH7KbhUuKbBUzCJhNQGt2t0tJrwIut2ZnGht6/QmVhD5HqDtE7PgQzuayaDZJ4=,iv:6fOxCJBdYqan7RvPs5q3JD2Tj9+HyXXMS9XlK35kjVU=,tag:JGjqQbF1WYEzf659hAQ9NQ==,type:str]
     pgp: []
     encrypted_regex: ^(data)$
     version: 3.12.2

infrastructure.yaml

@@ -1226,6 +1226,18 @@ environments:
       - name: uralkal-test
         manage: true
         image_pull_secret: false
+      - name: zitadel
+        manage: true
+        image_pull_secret: false
+      - name: camunda
+        manage: true
+        image_pull_secret: false
+      - name: superset
+        manage: true
+        image_pull_secret: false
+      - name: trino
+        manage: true
+        image_pull_secret: false
     postgresql:
       default_host: 10.133.0.249
       default_port: 5432
@@ -1241,6 +1253,38 @@ environments:
           password_special: false
           conn_limit: 20
 
+      - cluster_id: main
+        database:
+          name: zitadel
+          extensions: []
+        user:
+          name: zitadel
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+
+      - cluster_id: main
+        database:
+          name: superset
+          extensions:
+            - uuid-ossp
+            - pg_stat_statements
+        user:
+          name: superset
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+
+      - cluster_id: main
+        database:
+          name: trino
+          extensions: []
+        user:
+          name: trino
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+
     minio:
       endpoint: http://10.133.0.245:9000