++ adopt prod kafka topics and users with verified 1:1 permissions

2026-08-05 18:31:00 +03:00 · 2026-07-06 17:24:12 +03:00 · 2026-07-06 17:24:12 +03:00 · dbfcdad39b
commit dbfcdad39b
parent faf1720b22
1 changed files with 210 additions and 0 deletions
--- a/infrastructure.yaml
+++ b/infrastructure.yaml
@ -478,6 +478,160 @@ environments:
            min.insync.replicas: "1"
          deletionPolicy: orphan

+        - name: ams-sync
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: assets_broadcast
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: assets_broadcast_preprod
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: bru.cde.folders.prod
+          owner: platform
+          clusterRef: prod
+          partitions: 3
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: bru.cde.folders.stage
+          owner: platform
+          clusterRef: prod
+          partitions: 3
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: company_resource_permissions
+          owner: platform
+          clusterRef: prod
+          partitions: 6
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: issues_broadcast_prod
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: message-hub-prod
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: premises
+          owner: platform
+          clusterRef: prod
+          partitions: 6
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: resource_permissions
+          owner: platform
+          clusterRef: prod
+          partitions: 3
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: resources
+          owner: platform
+          clusterRef: prod
+          partitions: 1
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: sarex.prod.blackbox-exporter.probes.v1
+          owner: platform
+          clusterRef: prod
+          partitions: 3
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: system-log-prod
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
+        - name: system-log-sarex-backend-prod
+          owner: platform
+          clusterRef: prod
+          partitions: 12
+          replicationFactor: 1
+          config:
+            cleanup.policy: delete
+            retention.ms: "604800000"
+            min.insync.replicas: "1"
+          deletionPolicy: orphan
+          ownerRoles: []
      users:
        - name: inspections
          clusterRef: prod
@ -588,6 +742,62 @@ environments:
            - topic: issues.type.updated.v1
              roles: ["ACCESS_ROLE_CONSUMER"]

+        - name: message-hub-user
+          clusterRef: prod
+          adoptExisting: true
+          permissions:
+            - topic: assets_broadcast
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: message-hub-prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: issues_broadcast_prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+        - name: sarex-backend-prod
+          clusterRef: prod
+          adoptExisting: true
+          permissions:
+            - topic: message-hub-prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: system-log-prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: ams-sync
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+        - name: system_log_user
+          clusterRef: prod
+          adoptExisting: true
+          permissions:
+            - topic: system-log-prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: bru.cde.folders.prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: bru.cde.folders.stage
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+        - name: platform
+          clusterRef: prod
+          adoptExisting: true
+          permissions:
+            - topic: ams-sync
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER", "ACCESS_ROLE_TOPIC_ADMIN"]
+        - name: iam
+          clusterRef: prod
+          adoptExisting: true
+          permissions:
+            - topic: company_resource_permissions
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: resources
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: resource_permissions
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: ams-sync
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+        - name: pm
+          clusterRef: prod
+          adoptExisting: true
+          permissions:
+            - topic: message-hub-prod
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
+            - topic: assets_broadcast
+              roles: ["ACCESS_ROLE_CONSUMER", "ACCESS_ROLE_PRODUCER"]
    rabbitmq:
      management_endpoint: http://default-rabbit-cluster.rabbitmq.svc.cluster.local:15672
      amqp_host: default-rabbit-cluster.rabbitmq.svc.cluster.local