sarex/terraform-contour-mirror
1
0
Fork 0
mirror of https://gitlab.sarex.io/infra/terraform-contour-mirror.git synced 2026-10-16 13:11:35 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity

uralkal: order infra for the 36 business apps replicated in iac

Browse Source 
namespaces/databases/buckets/rabbitmq vhosts for all app namespaces
(mirrors the vad set: workspaces, eav, notes, rfi, checklists, contracts,
django, documentations, processing, flows, issues, bim, attachments, bi,
comparisons, drawings, inspections, mapper, measurements, subscriptions,
system-log, transmittal, iam, pm, message-hub, cde).

vault: applications/read_paths for the 26 apps that need Vault secrets,
common.django_auth/rsa_keys/smtp_auth, minio.apps (admin creds tfstate/
09Eat4eiMcg5 via s3-proxy, matching the iac s3-proxy component), kafka.apps
(random creds, kafka users still need manual SCRAM creation like vad).

cde-env carries the same structure as vad's but without DATABASE_URL
(documentations DB creds not known until this DB is actually created) and
without a real Camunda/Zitadel-issued secret — those are follow-ups.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
ivan 2026-09-28 14:44:49 +03:00
parent d9158a6b8a
commit b0435647ac
2 changed files with 3093 additions and 1744 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4352
infrastructure-secrets.yaml
View File

File diff suppressed because one or more lines are too long

485
infrastructure.yaml
View File

@ -1238,6 +1238,123 @@ environments:
- name: trino
manage: true
image_pull_secret: false
- name: rabbitmq
manage: false
image_pull_secret: true
- name: kafka
manage: false
image_pull_secret: true
- name: postgresql
manage: false
image_pull_secret: true
- name: workspaces
manage: false
image_pull_secret: true
- name: eav
manage: false
image_pull_secret: true
- name: notes
manage: false
image_pull_secret: true
- name: rfi
manage: false
image_pull_secret: true
- name: checklists
manage: false
image_pull_secret: true
- name: contracts
manage: false
image_pull_secret: true
- name: django
manage: false
image_pull_secret: true
- name: documentations
manage: false
image_pull_secret: true
- name: processing
manage: false
image_pull_secret: true
- name: flows
manage: false
image_pull_secret: true
- name: issues
manage: false
image_pull_secret: true
- name: bim
manage: false
image_pull_secret: true
- name: attachments
manage: false
image_pull_secret: false
- name: bi
manage: false
image_pull_secret: false
- name: comparisons
manage: false
image_pull_secret: false
- name: drawings
manage: false
image_pull_secret: false
- name: inspections
manage: false
image_pull_secret: false
- name: mapper
manage: false
image_pull_secret: false
- name: measurements
manage: false
image_pull_secret: false
- name: subscriptions
manage: false
image_pull_secret: false
- name: system-log
manage: false
image_pull_secret: false
- name: transmittal
manage: false
image_pull_secret: false
- name: cross-section
manage: false
image_pull_secret: false
- name: document-link
manage: false
image_pull_secret: false
- name: prescriptions
manage: false
image_pull_secret: false
- name: projects
manage: false
image_pull_secret: false
- name: stamp-verification
manage: false
image_pull_secret: false
- name: faas
manage: false
image_pull_secret: false
- name: iam
manage: false
image_pull_secret: false
- name: pm
manage: false
image_pull_secret: false
- name: message-hub
manage: false
image_pull_secret: false
- name: cde
manage: false
image_pull_secret: false
- name: reviews
manage: false
image_pull_secret: false
- name: remarks
manage: false
image_pull_secret: false
- name: auth-flow
manage: false
image_pull_secret: false
- name: control-interface
manage: false
image_pull_secret: false
postgresql:
default_host: 10.133.0.249
default_port: 5432
@ -1295,12 +1412,292 @@ environments:
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: workspaces_db
extensions:
- uuid-ossp
user:
name: workspaces
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: eav
extensions: []
user:
name: eav
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: notes
extensions:
- uuid-ossp
- pg_stat_statements
user:
name: notes
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: rfi
extensions:
- uuid-ossp
- pg_stat_statements
user:
name: rfi
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: checklists
extensions: []
user:
name: checklists
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: contracts_db
extensions: []
user:
name: contracts
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: django
extensions: []
user:
name: django
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: documentations
extensions:
- ltree
- uuid-ossp
- pg_stat_statements
- timescaledb
user:
name: documentations
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: processing
extensions: []
user:
name: processing
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: flows
extensions: []
user:
name: flows
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: issues
extensions: []
user:
name: issues
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: bim
extensions:
- ltree
- uuid-ossp
- pg_stat_statements
user:
name: bim
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: attachments
extensions: []
user:
name: attachments
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: bi
extensions: []
user:
name: bi
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: comparisons
extensions:
- uuid-ossp
- pg_stat_statements
user:
name: comparisons
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: drawings
extensions:
- uuid-ossp
- pg_stat_statements
- ltree
user:
name: drawings
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: inspections
extensions:
- uuid-ossp
- pg_stat_statements
user:
name: inspections
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: mapper
extensions:
- uuid-ossp
- pg_stat_statements
- ltree
user:
name: mapper
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: subscriptions
extensions:
- uuid-ossp
- pg_stat_statements
- postgis
user:
name: subscriptions
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: system_log
extensions:
- uuid-ossp
- pg_stat_statements
user:
name: system_log
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: transmittal
extensions:
- uuid-ossp
- pg_stat_statements
user:
name: transmittal
password_length: 32
password_special: false
conn_limit: 20
- cluster_id: main
database:
name: pm
extensions:
- uuid-ossp
- pg_stat_statements
- ltree
user:
name: pm
password_length: 32
password_special: false
conn_limit: 20
minio:
endpoint: http://10.133.0.245:9000
buckets:
- name: uralkal-test
acl: private
- name: eav
acl: private
- name: notes
acl: private
- name: rfi
acl: private
- name: contracts
acl: private
- name: django
acl: private
- name: documentations
acl: private
- name: issues
acl: private
- name: message-hub
acl: private
- name: attachments
acl: private
- name: mapper
acl: private
- name: measurements
acl: private
- name: subscriptions
acl: private
- name: transmittal
acl: private
- name: iam
acl: private
kafka:
create_acls: false
@ -1332,15 +1729,103 @@ environments:
amqp_port: 5672
vhosts:
- name: uralkal-test
- name: notes
- name: rfi
- name: contracts
- name: django
- name: cde
- name: processing
- name: flows
- name: issues
- name: mapper
- name: transmittal
- name: pm
users:
- name: uralkal-test
password_length: 32
- name: notes
password_length: 32
- name: rfi
password_length: 32
- name: contracts
password_length: 32
- name: django
password_length: 32
- name: cde
password_length: 32
- name: processing
password_length: 32
- name: flows
password_length: 32
- name: issues
password_length: 32
- name: mapper
password_length: 32
- name: transmittal
password_length: 32
- name: pm
password_length: 32
permissions:
- vhost: uralkal-test
user: uralkal-test
configure: ".*"
write: ".*"
read: ".*"
- vhost: notes
user: notes
configure: ".*"
write: ".*"
read: ".*"
- vhost: rfi
user: rfi
configure: ".*"
write: ".*"
read: ".*"
- vhost: contracts
user: contracts
configure: ".*"
write: ".*"
read: ".*"
- vhost: django
user: django
configure: ".*"
write: ".*"
read: ".*"
- vhost: cde
user: cde
configure: ".*"
write: ".*"
read: ".*"
- vhost: processing
user: processing
configure: ".*"
write: ".*"
read: ".*"
- vhost: flows
user: flows
configure: ".*"
write: ".*"
read: ".*"
- vhost: issues
user: issues
configure: ".*"
write: ".*"
read: ".*"
- vhost: mapper
user: mapper
configure: ".*"
write: ".*"
read: ".*"
- vhost: transmittal
user: transmittal
configure: ".*"
write: ".*"
read: ".*"
- vhost: pm
user: pm
configure: ".*"
write: ".*"
read: ".*"
queues:
- name: uralkal-test-queue
vhost: uralkal-test