diff --git a/infrastructure-secrets.yaml b/infrastructure-secrets.yaml index 7109895..0809b7a 100644 --- a/infrastructure-secrets.yaml +++ b/infrastructure-secrets.yaml @@ -179,6 +179,14 @@ environments: host: ENC[AES256_GCM,data:E0BFipzMfJPzBUihScRmFmVozkiYJmoxWHRfeKgek7Y4gQLwov4JiRjPqpui47jbDr1YMuVWBbhDLoa2EH1k5A==,iv:UI2yh9mG28bG6KAi000zQ3WKJIhyRL/SzCEQjkPhELM=,tag:pdrziO/jpnJp8vG15AcEow==,type:str] password: ENC[AES256_GCM,data:P7WnhAqwBDY8fnj3K6HuQv8okVbdkBVfSeHYJg==,iv:Lgh//pEy3pOLWsq0lSvZicSdo38AKOWewiptrf2lQzc=,tag:ejBzubEwmOY2en10iijvVQ==,type:str] username: ENC[AES256_GCM,data:xwJijx9FnlxOeOnA,iv:6fjCGrxLhLu2H6gnjvVvHsxooh5hlCqiEt6dZY7oJEk=,tag:1q+4QEmJjIUG0ClNtGKcOA==,type:str] + - name: yc-kafka-secret + namespace: flows-prod + type: kafka + depends_on: + cluster: prod + user: flows + lifecycle: + ignore_changes: false - name: session-secret namespace: pulse type: opaque diff --git a/infrastructure.yaml b/infrastructure.yaml index 7815082..dda90a2 100644 --- a/infrastructure.yaml +++ b/infrastructure.yaml @@ -89,6 +89,50 @@ environments: min.insync.replicas: "1" deletionPolicy: orphan ownerRoles: [] + - name: flows.review.created.v1 + owner: flows + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: flows.review.completed.v1 + owner: flows + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: flows.review.reviewers_changed.v1 + owner: flows + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: flows.document.status_changed.v1 + owner: flows + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] - name: inspections.inspection.created.v1 owner: inspections clusterRef: prod @@ -658,6 +702,17 @@ environments: config: {} deletionPolicy: orphan users: + - name: flows + clusterRef: prod + permissions: + - topic: flows.review.created.v1 + roles: [ACCESS_ROLE_PRODUCER] + - topic: flows.review.completed.v1 + roles: [ACCESS_ROLE_PRODUCER] + - topic: flows.review.reviewers_changed.v1 + roles: [ACCESS_ROLE_PRODUCER] + - topic: flows.document.status_changed.v1 + roles: [ACCESS_ROLE_PRODUCER] - name: iam clusterRef: prod adopt: true