++ uralkal vault infra

2026-10-07 13:51:36 +03:00 · 2026-09-25 16:18:39 +03:00 · 2026-09-25 16:18:39 +03:00 · b4522737fe
commit b4522737fe
parent f62e062ba3
1 changed files with 36 additions and 3 deletions
--- a/infrastructure-secrets.yaml
+++ b/infrastructure-secrets.yaml
@ -5003,12 +5003,45 @@ environments:
                create_smtp_auth: false
                create_django_auth: false
                create_rsa_keys: false
-                create_infra_secrets: false
+                create_infra_secrets: true
                create_infra_policies: true
                create_infra_roles: true
                create_app_policies: false
                create_app_roles: false
            applications: {}
+            data:
+                infrastructure:
+                    postgresql:
+                        enabled: ENC[AES256_GCM,data:W7hCewI=,iv:GocxRsnyea+4go4V0XFkpayjlWTMVVDEpkao3DRiUrg=,tag:YaOLMwTCM7xJKp2yhMyXlA==,type:bool]
+                    minio:
+                        enabled: ENC[AES256_GCM,data:T/vkArg=,iv:JWW7qa6QWzHBKpiHA+ms0rE299tEdTg1dY9gu+DXdP4=,tag:huC+MyryiIEOf8Q2M7p8IA==,type:bool]
+                    rabbitmq:
+                        auth:
+                            enabled: ENC[AES256_GCM,data:xeDKKnk=,iv:gsId3TYgG4zWoVXLC5uyhp0b/JtMemvu4CbsMM9bfLw=,tag:fMpDgO9e/VsLFFu3V5qe4A==,type:bool]
+                    kafka:
+                        bootstrap:
+                            enabled: ENC[AES256_GCM,data:+BSauTs=,iv:x5bPomtVs3uMdTEFRnDsAAWjAz7dfcZ/82YjAH5Vjec=,tag:0YGVVYLuqKcFo04UVkJPKQ==,type:bool]
+                    zitadel:
+                        postgresql:
+                            enabled: ENC[AES256_GCM,data:kYy+Njw=,iv:7FWn5IJzziiFDO1wQqWcHcbNhvljRQiBWRcI6t9TR6M=,tag:p90JK7biIZt7N+lN+4+p0A==,type:bool]
+                        role:
+                            service_account_names:
+                                - ENC[AES256_GCM,data:UW+mVG2RzQ==,iv:B7cZ+t1uu2Y9Soa5V3Ww0C3BcgRRCq5/4jSLeNgXK/w=,tag:epKpX+gWm9SDDXm/a0wEYg==,type:str]
+                    camunda:
+                        identity_components:
+                            generate: ENC[AES256_GCM,data:IlmBLA==,iv:iYm3M+lXhSWmIN0rJUl12X8iD77SfsE7lK/bdSQU2J8=,tag:xKW9G9ciQ/qCBy1dqpdYIw==,type:bool]
+                            values:
+                                operate-secret: ENC[AES256_GCM,data:IE4NYAH4LlJ9sCZSZkvfjookFpHsy97IzTUQc9jr,iv:s57sxvPoXqHmUzrynqeNtQqp76KVMiUvTuiEJH46I1c=,tag:OqV3cbOoQz147OhQxzE3Ww==,type:str]
+                                connectors-secret: ENC[AES256_GCM,data:6S1Uo1JfFmzUFk0+o4q/P59G/dWSK4LU54UHvqgd,iv:dFM8yySUeiEmhneq4+iS55JBKVrOzHMCly9cTWq6n/E=,tag:w1FTWWLuEmQnAziWE2qVDw==,type:str]
+                                optimize-secret: ENC[AES256_GCM,data:Mcm2WP4sfQSn6IVR34rK38I0qnxyytV9h5v8UDec,iv:ap/RCisCjoE6fCC+OlPakKUlu7KMoZkGA/vq/ETF8HY=,tag:vviza+E79U4X/M4BXjSwUg==,type:str]
+                                tasklist-secret: ENC[AES256_GCM,data:8u6nVcAKwzLPj2ztQAAtuiRX6X308CTaJigaxcSA,iv:td0/NtLCfud/SWdsOvHVqIq3YwHmZw9g6oiyMW+BVKU=,tag:PGTbblup4XBE9xYSss6okQ==,type:str]
+                                zeebe-secret: ENC[AES256_GCM,data:ixljtoULcB8OEe/X9tDmenDlBAEd4EyzqEmk5z7/,iv:dJ/7iJAHxjVFxNkeXLuOQdKHyKL/+NK2ZrHH2vq8EoY=,tag:1cHDY4Q5WqMGPMHN3QRHgQ==,type:str]
+                        identity_firstuser:
+                            generate: ENC[AES256_GCM,data:dLlQrQ==,iv:fhWQqYQ4RdiqGZ87ujRKSoj7qqzhISJDt7eW9egGSMI=,tag:nnLaKPUC2uhcg353FrJX6Q==,type:bool]
+                        keycloak_admin:
+                            generate: ENC[AES256_GCM,data:RiGk8Q==,iv:bJkHALu/TIzSGBzBbyDA6AtENnqhkMwFaZBkY5cjchc=,tag:3CmLaSTFhGEa/+/z4UZRRA==,type:bool]
+                        postgresql:
+                            generate: ENC[AES256_GCM,data:gQ2bEA==,iv:HkREXF/4S+hMNej3wI4YCwe9OkfKqphkPjNIUuUiiHc=,tag:DUVyElfGWffQHM3Fdapgag==,type:bool]
        secrets:
            - name: uralkal-test-postgres
              namespace: uralkal-test
@ -5066,8 +5099,8 @@ sops:
            dXRWUzlUOWVYMVdUR2tlREJveWF6SVEK/99wDif8yD2VGEqnCeTT6sunURWU+IEu
            xwlt+WPoox0GUNw4efVFL4E7gd7FDJGtur+8si6i26XufQf2Tsk3xQ==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-09-25T12:40:37Z"
-    mac: ENC[AES256_GCM,data:b7olTns24M/c12SIfh1sBSELfimd6ehEBckoG4JZG1CaUKwLVqVUDZ5Q7U4bzb8bV0mSpkFmqTThf9pc+en9FlbVNl1fbb1leMq1pYI7dirOdPBPBQaOsPuEJx/+0FCe98L6k9Gmu6kyFqcr9IF4s61RX1mzfPJJIWPoQNv8Tjw=,iv:o3AKaFuU/96BDgXODkv5TMR0HKCqUDATOpksLzG2sqs=,tag:vxooY80FrZDHTA6V7pi5xw==,type:str]
+    lastmodified: "2026-09-25T13:17:59Z"
+    mac: ENC[AES256_GCM,data:abyMt9m8hQNw+cpXKySi60taCffq4YBp+RK+bczi7GlnLefhiKqFLtRriajTC80Kxul+n5ER6AGDTCt9A1Ydp84/4Mn5JaA/TFe1CTj+ro0fsjsoLtkymmLkIkSKkKCndTGqzKu2KlEwqzwwPzZWas4v76e/53abjyUWfVWzRrM=,iv:7WViTbi3GoIOy2+5ZTq1bN9FS8NV6QSDkVe2W5/YZ9s=,tag:39EWEU4tlPJe4yvA/UzEFA==,type:str]
    pgp: []
    encrypted_regex: ^(data)$
    version: 3.12.2