From 3696e4d675fa1d98f69df58e4421108f0e3e313a Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Fri, 25 Sep 2026 16:26:20 +0300
Subject: [PATCH] ++ uralkal apps infra

---
 infrastructure-secrets.yaml | 56 +++++++++++++++++++++++++++++++++++--
 infrastructure.yaml         | 44 +++++++++++++++++++++++++++++
 2 files changed, 98 insertions(+), 2 deletions(-)

diff --git a/infrastructure-secrets.yaml b/infrastructure-secrets.yaml
index 0fe25bf..6fade24 100644
--- a/infrastructure-secrets.yaml
+++ b/infrastructure-secrets.yaml
@@ -5075,6 +5075,58 @@ environments:
               depends_on:
                 kafka_ref: main
                 kafka_user: uralkal-test
+            - name: zitadel-postgresql
+              namespace: zitadel
+              type: database
+              sink: vault
+              vault_path: zitadel/postgresql
+              depends_on:
+                cluster: main
+                db: zitadel
+                user: zitadel
+              random_keys:
+                humanPassword:
+                    length: 32
+                    special: true
+            - name: superset-postgres
+              namespace: superset
+              type: database
+              sink: vault
+              vault_path: apps/superset/postgres
+              depends_on:
+                cluster: main
+                db: superset
+                user: superset
+            - name: superset-app
+              namespace: superset
+              type: opaque
+              sink: vault
+              vault_path: vault/apps/superset
+              random_keys:
+                SUPERSET_SECRET_KEY:
+                    length: 42
+                    special: false
+                JWT_SECRET:
+                    length: 32
+                    special: false
+            - name: trino-postgres
+              namespace: trino
+              type: database
+              sink: vault
+              vault_path: apps/trino/postgres
+              depends_on:
+                cluster: main
+                db: trino
+                user: trino
+            - name: trino-app
+              namespace: trino
+              type: opaque
+              sink: vault
+              vault_path: vault/apps/trino
+              random_keys:
+                TRINO_INTERNAL_SHARED_SECRET:
+                    length: 32
+                    special: false
 sops:
     kms: []
     gcp_kms: []
@@ -5099,8 +5151,8 @@ sops:
             dXRWUzlUOWVYMVdUR2tlREJveWF6SVEK/99wDif8yD2VGEqnCeTT6sunURWU+IEu
             xwlt+WPoox0GUNw4efVFL4E7gd7FDJGtur+8si6i26XufQf2Tsk3xQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-09-25T13:17:59Z"
-    mac: ENC[AES256_GCM,data:abyMt9m8hQNw+cpXKySi60taCffq4YBp+RK+bczi7GlnLefhiKqFLtRriajTC80Kxul+n5ER6AGDTCt9A1Ydp84/4Mn5JaA/TFe1CTj+ro0fsjsoLtkymmLkIkSKkKCndTGqzKu2KlEwqzwwPzZWas4v76e/53abjyUWfVWzRrM=,iv:7WViTbi3GoIOy2+5ZTq1bN9FS8NV6QSDkVe2W5/YZ9s=,tag:39EWEU4tlPJe4yvA/UzEFA==,type:str]
+    lastmodified: "2026-09-25T13:25:39Z"
+    mac: ENC[AES256_GCM,data:p9gHSOe3qwn/Od2AUjBnSex7yFmjMvv5lzlFr2tIe6DQiDUisYkGxQIVjpp86cUR3PIa51zTAS3zJuCmjJeIv3Yrf+nsDow+ev1Wkcjo8pu3eXH7KbhUuKbBUzCJhNQGt2t0tJrwIut2ZnGht6/QmVhD5HqDtE7PgQzuayaDZJ4=,iv:6fOxCJBdYqan7RvPs5q3JD2Tj9+HyXXMS9XlK35kjVU=,tag:JGjqQbF1WYEzf659hAQ9NQ==,type:str]
     pgp: []
     encrypted_regex: ^(data)$
     version: 3.12.2
diff --git a/infrastructure.yaml b/infrastructure.yaml
index 6982e10..726f175 100644
--- a/infrastructure.yaml
+++ b/infrastructure.yaml
@@ -1226,6 +1226,18 @@ environments:
       - name: uralkal-test
         manage: true
         image_pull_secret: false
+      - name: zitadel
+        manage: true
+        image_pull_secret: false
+      - name: camunda
+        manage: true
+        image_pull_secret: false
+      - name: superset
+        manage: true
+        image_pull_secret: false
+      - name: trino
+        manage: true
+        image_pull_secret: false
     postgresql:
       default_host: 10.133.0.249
       default_port: 5432
@@ -1241,6 +1253,38 @@ environments:
           password_special: false
           conn_limit: 20
 
+      - cluster_id: main
+        database:
+          name: zitadel
+          extensions: []
+        user:
+          name: zitadel
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+
+      - cluster_id: main
+        database:
+          name: superset
+          extensions:
+            - uuid-ossp
+            - pg_stat_statements
+        user:
+          name: superset
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+
+      - cluster_id: main
+        database:
+          name: trino
+          extensions: []
+        user:
+          name: trino
+          password_length: 32
+          password_special: false
+          conn_limit: 20
+
     minio:
       endpoint: http://10.133.0.245:9000