From aff4a668a4e4e338f5bc200657e8cd457da3e731 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Tue, 5 May 2026 16:39:05 +0300
Subject: [PATCH] add ns and secrets for iams

---
 infrastructure.yaml | 40 ++++++++++++++++++++++++++++++++++++++--
 1 file changed, 38 insertions(+), 2 deletions(-)

diff --git a/infrastructure.yaml b/infrastructure.yaml
index 7f2160b..f494c2c 100644
--- a/infrastructure.yaml
+++ b/infrastructure.yaml
@@ -4,8 +4,8 @@ environments:
       prod:
         cluster_id: c9qks74g084g1419cpts
         default_partitions: 3
-        default_replication_factor: 3
-        max_replication_factor: 3
+        default_replication_factor: 1
+        max_replication_factor: 1
         default_topic_config:
           cleanup.policy: delete
           retention.ms: "604800000"
@@ -31,6 +31,12 @@ environments:
           istio-injection: enabled
         annotations:
           managed-by: terraform 
+      - name: iam
+        labels:
+          team: platform
+          istio-injection: enabled
+        annotations:
+          managed-by: terraform     
 
     secrets:
       - name: dockerhub
@@ -57,6 +63,36 @@ environments:
         lifecycle:
           ignore_changes: true
 
+      - name: iams-secret
+        namespace: iam
+        type: opaque
+        random_keys:
+          db-dsn:
+            length: 5
+            special: false
+          kafka-sasl-plain-username:
+            length: 5
+            special: false
+          kafka-sasl-plain-password:
+            length: 5
+            special: false
+        lifecycle:
+          ignore_changes: true  
+
+      - name: yc-s3-secret
+        namespace: iam
+        type: opaque
+        random_keys:
+          access_key:
+            length: 5
+            special: false
+          key_id:
+            length: 5
+            special: false
+        lifecycle:
+          ignore_changes: true         
+    
+
       - name: premises-s3-secret
         namespace: proc
         type: s3