From dbfcdad39b5252013eb82d7de617ae8bfeacdcdd Mon Sep 17 00:00:00 2001 From: Kochetkov S Date: Mon, 6 Jul 2026 17:24:12 +0300 Subject: [PATCH] ++ adopt prod kafka topics and users with verified 1:1 permissions --- infrastructure.yaml | 210 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 210 insertions(+) diff --git a/infrastructure.yaml b/infrastructure.yaml index 599cc53..cf66026 100644 --- a/infrastructure.yaml +++ b/infrastructure.yaml @@ -478,6 +478,160 @@ environments: min.insync.replicas: "1" deletionPolicy: orphan + - name: ams-sync + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: assets_broadcast + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: assets_broadcast_preprod + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: bru.cde.folders.prod + owner: platform + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: bru.cde.folders.stage + owner: platform + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: company_resource_permissions + owner: platform + clusterRef: prod + partitions: 6 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: issues_broadcast_prod + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: message-hub-prod + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: premises + owner: platform + clusterRef: prod + partitions: 6 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: resource_permissions + owner: platform + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: resources + owner: platform + clusterRef: prod + partitions: 1 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: sarex.prod.blackbox-exporter.probes.v1 + owner: platform + clusterRef: prod + partitions: 3 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: system-log-prod + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] + - name: system-log-sarex-backend-prod + owner: platform + clusterRef: prod + partitions: 12 + replicationFactor: 1 + config: + cleanup.policy: delete + retention.ms: "604800000" + min.insync.replicas: "1" + deletionPolicy: orphan + ownerRoles: [] users: - name: inspections clusterRef: prod @@ -588,6 +742,62 @@ environments: - topic: issues.type.updated.v1 roles: ["ACCESS_ROLE_CONSUMER"] + - name: message-hub-user + clusterRef: prod + adoptExisting: true + permissions: + - topic: assets_broadcast + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: message-hub-prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: issues_broadcast_prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - name: sarex-backend-prod + clusterRef: prod + adoptExisting: true + permissions: + - topic: message-hub-prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: system-log-prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: ams-sync + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - name: system_log_user + clusterRef: prod + adoptExisting: true + permissions: + - topic: system-log-prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: bru.cde.folders.prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: bru.cde.folders.stage + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - name: platform + clusterRef: prod + adoptExisting: true + permissions: + - topic: ams-sync + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER", "ACCESS_ROLE_TOPIC_ADMIN"] + - name: iam + clusterRef: prod + adoptExisting: true + permissions: + - topic: company_resource_permissions + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: resources + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: resource_permissions + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: ams-sync + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - name: pm + clusterRef: prod + adoptExisting: true + permissions: + - topic: message-hub-prod + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] + - topic: assets_broadcast + roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"] rabbitmq: management_endpoint: http://default-rabbit-cluster.rabbitmq.svc.cluster.local:15672 amqp_host: default-rabbit-cluster.rabbitmq.svc.cluster.local