[INFRA-1640] add secrets per task

This commit is contained in:
kochetkov.s 2026-03-27 08:54:53 +00:00
parent 3f1379f5c1
commit 9a9a3f2b10

View File

@ -92,6 +92,25 @@ environments:
lifecycle:
ignore_changes: true
- name: cde-api-zeebe-secret
namespace: documentations-prod
type: opaque
random_keys:
gateway_address:
length: 5
special: false
client_id:
length: 5
special: false
client_secret:
length: 5
special: false
auth_server_url:
length: 5
special: false
lifecycle:
ignore_changes: true
- name: cde-api-s3-secret
namespace: documentations-prod
type: yc_sa
@ -118,7 +137,35 @@ environments:
length: 32
special: false
lifecycle:
ignore_changes: true
ignore_changes: true
- name: hasher-rabbitmq-secret
namespace: documentations-prod
type: opaque
custom_keys:
host: "default-rabbit-cluster.rabbitmq.svc.cluster.local"
hostname: "default-rabbit-cluster.rabbitmq.svc.cluster.local:5672"
port: "5672"
user: "camunda"
vhost: "camunda_prod"
random_keys:
password:
length: 32
special: false
lifecycle:
ignore_changes: true
- name: hasher-s3-secret
namespace: documentations
type: yc_sa
dependencies:
service_account: documentations-prod
yc_sa_key_names:
access_key: access_key
secret_key: secret_key
service_account_id: sa_id
lifecycle:
ignore_changes: true
# # Пример секрета для другой базы данных (test_db/test)
# - name: test-db-secret