From f62e062ba3b07fbde90d366836cc8dcc39357412 Mon Sep 17 00:00:00 2001 From: Kochetkov S Date: Fri, 25 Sep 2026 15:40:57 +0300 Subject: [PATCH] ++ uralkal test only --- infrastructure-secrets.yaml | 38 ++- infrastructure.yaml | 524 ------------------------------------ 2 files changed, 35 insertions(+), 527 deletions(-) diff --git a/infrastructure-secrets.yaml b/infrastructure-secrets.yaml index b87a11c..d604ac7 100644 --- a/infrastructure-secrets.yaml +++ b/infrastructure-secrets.yaml @@ -5009,7 +5009,39 @@ environments: create_app_policies: false create_app_roles: false applications: {} - secrets: [] + secrets: + - name: uralkal-test-postgres + namespace: uralkal-test + type: database + sink: vault + vault_path: apps/uralkal-test/postgres + depends_on: + cluster: main + db: uralkal_test_db + user: uralkal_test + - name: uralkal-test-rabbitmq + namespace: uralkal-test + type: rabbitmq + sink: vault + vault_path: rabbitmq/apps/uralkal-test + depends_on: + rabbitmq_vhost: uralkal-test + rabbitmq_user: uralkal-test + - name: uralkal-test-s3 + namespace: uralkal-test + type: s3 + sink: vault + vault_path: minio/apps/uralkal-test + depends_on: + bucket: uralkal-test + - name: uralkal-test-kafka + namespace: uralkal-test + type: kafka + sink: vault + vault_path: kafka/apps/uralkal-test + depends_on: + kafka_ref: main + kafka_user: uralkal-test sops: kms: [] gcp_kms: [] @@ -5034,8 +5066,8 @@ sops: dXRWUzlUOWVYMVdUR2tlREJveWF6SVEK/99wDif8yD2VGEqnCeTT6sunURWU+IEu xwlt+WPoox0GUNw4efVFL4E7gd7FDJGtur+8si6i26XufQf2Tsk3xQ== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-09-25T11:26:26Z" - mac: ENC[AES256_GCM,data:xgLxaxtHHsBXs5CilRhTo/h8FlahLOjox42EZ0J8mQXPetW75vr3CVg9uAvftshSqrYKaezualq9eJdr/bMLA65/+V3mzVSJwbFToBtT5jIULJa3EtQcEw/OgDsVBIg326M/qwxtmX2pZu2LL1Ieyz8nZTgUZZqHRrtigwIyyRA=,iv:Rt72ULr3r03g05wweXDzaEUSGVmjbVWrdmDePE+RENU=,tag:TAArdk+qB0nuTzmp/s6c+w==,type:str] + lastmodified: "2026-09-25T12:40:37Z" + mac: ENC[AES256_GCM,data:b7olTns24M/c12SIfh1sBSELfimd6ehEBckoG4JZG1CaUKwLVqVUDZ5Q7U4bzb8bV0mSpkFmqTThf9pc+en9FlbVNl1fbb1leMq1pYI7dirOdPBPBQaOsPuEJx/+0FCe98L6k9Gmu6kyFqcr9IF4s61RX1mzfPJJIWPoQNv8Tjw=,iv:o3AKaFuU/96BDgXODkv5TMR0HKCqUDATOpksLzG2sqs=,tag:vxooY80FrZDHTA6V7pi5xw==,type:str] pgp: [] encrypted_regex: ^(data)$ version: 3.12.2 diff --git a/infrastructure.yaml b/infrastructure.yaml index bc2eecc..6982e10 100644 --- a/infrastructure.yaml +++ b/infrastructure.yaml @@ -1226,118 +1226,6 @@ environments: - name: uralkal-test manage: true image_pull_secret: false - - name: rabbitmq - manage: false - image_pull_secret: true - - name: kafka - manage: false - image_pull_secret: true - - name: camunda - manage: false - image_pull_secret: true - - name: zitadel - manage: false - image_pull_secret: true - - name: postgresql - manage: false - image_pull_secret: true - - name: workspaces - manage: false - image_pull_secret: true - - name: eav - manage: false - image_pull_secret: true - - name: notes - manage: false - image_pull_secret: true - - name: rfi - manage: false - image_pull_secret: true - - name: checklists - manage: false - image_pull_secret: true - - name: contracts - manage: false - image_pull_secret: true - - name: django - manage: false - image_pull_secret: true - - name: documentations - manage: false - image_pull_secret: true - - name: processing - manage: false - image_pull_secret: true - - name: flows - manage: false - image_pull_secret: true - - name: issues - manage: false - image_pull_secret: true - - name: bim - manage: false - image_pull_secret: true - - name: attachments - manage: false - image_pull_secret: false - - name: bi - manage: false - image_pull_secret: false - - name: comparisons - manage: false - image_pull_secret: false - - name: drawings - manage: false - image_pull_secret: false - - name: inspections - manage: false - image_pull_secret: false - - name: mapper - manage: false - image_pull_secret: false - - name: measurements - manage: false - image_pull_secret: false - - name: subscriptions - manage: false - image_pull_secret: false - - name: system-log - manage: false - image_pull_secret: false - - name: transmittal - manage: false - image_pull_secret: false - - name: cross-section - manage: false - image_pull_secret: false - - name: document-link - manage: false - image_pull_secret: false - - name: prescriptions - manage: false - image_pull_secret: false - - name: projects - manage: false - image_pull_secret: false - - name: stamp-verification - manage: false - image_pull_secret: false - - name: faas - manage: false - image_pull_secret: false - - name: iam - manage: false - image_pull_secret: false - - name: pm - manage: false - image_pull_secret: false - - name: message-hub - manage: false - image_pull_secret: false - - name: cde - manage: false - image_pull_secret: false - postgresql: default_host: 10.133.0.249 default_port: 5432 @@ -1353,288 +1241,6 @@ environments: password_special: false conn_limit: 20 - - cluster_id: main - database: - name: identity - extensions: [] - user: - name: identity - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: bitnami_keycloak - extensions: [] - user: - name: bn_keycloak - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: zitadel - extensions: [] - user: - name: zitadel - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: workspaces_db - extensions: - - uuid-ossp - user: - name: workspaces - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: eav - extensions: [] - user: - name: eav - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: notes - extensions: - - uuid-ossp - - pg_stat_statements - user: - name: notes - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: rfi - extensions: - - uuid-ossp - - pg_stat_statements - user: - name: rfi - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: checklists - extensions: [] - user: - name: checklists - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: contracts_db - extensions: [] - user: - name: contracts - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: django - extensions: [] - user: - name: django - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: documentations - extensions: - - ltree - - uuid-ossp - - pg_stat_statements - - timescaledb - user: - name: documentations - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: processing - extensions: [] - user: - name: processing - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: flows - extensions: [] - user: - name: flows - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: issues - extensions: [] - user: - name: issues - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: bim - extensions: - - ltree - - uuid-ossp - - pg_stat_statements - user: - name: bim - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: attachments - extensions: [] - user: - name: attachments - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: bi - extensions: [] - user: - name: bi - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: comparisons - extensions: - - uuid-ossp - - pg_stat_statements - user: - name: comparisons - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: drawings - extensions: - - uuid-ossp - - pg_stat_statements - - ltree - user: - name: drawings - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: inspections - extensions: - - uuid-ossp - - pg_stat_statements - user: - name: inspections - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: mapper - extensions: - - uuid-ossp - - pg_stat_statements - - ltree - user: - name: mapper - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: subscriptions - extensions: - - uuid-ossp - - pg_stat_statements - - postgis - user: - name: subscriptions - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: system_log - extensions: - - uuid-ossp - - pg_stat_statements - user: - name: system_log - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: transmittal - extensions: - - uuid-ossp - - pg_stat_statements - user: - name: transmittal - password_length: 32 - password_special: false - conn_limit: 20 - - - cluster_id: main - database: - name: pm - extensions: - - uuid-ossp - - pg_stat_statements - - ltree - user: - name: pm - password_length: 32 - password_special: false - conn_limit: 20 - minio: endpoint: http://10.133.0.245:9000 @@ -1642,48 +1248,6 @@ environments: - name: uralkal-test acl: private - - name: eav - acl: private - - - name: notes - acl: private - - - name: rfi - acl: private - - - name: contracts - acl: private - - - name: django - acl: private - - - name: documentations - acl: private - - - name: issues - acl: private - - - name: message-hub - acl: private - - - name: attachments - acl: private - - - name: mapper - acl: private - - - name: measurements - acl: private - - - name: subscriptions - acl: private - - - name: transmittal - acl: private - - - name: iam - acl: private - kafka: create_acls: false kafka_cluster_refs: @@ -1714,103 +1278,15 @@ environments: amqp_port: 5672 vhosts: - name: uralkal-test - - name: notes - - name: rfi - - name: contracts - - name: django - - name: cde - - name: processing - - name: flows - - name: issues - - name: mapper - - name: transmittal - - name: pm users: - name: uralkal-test password_length: 32 - - name: notes - password_length: 32 - - name: rfi - password_length: 32 - - name: contracts - password_length: 32 - - name: django - password_length: 32 - - name: cde - password_length: 32 - - name: processing - password_length: 32 - - name: mapper - password_length: 32 - - name: transmittal - password_length: 32 - - name: flows - password_length: 32 - - name: issues - password_length: 32 - - name: pm - password_length: 32 permissions: - vhost: uralkal-test user: uralkal-test configure: ".*" write: ".*" read: ".*" - - vhost: notes - user: notes - configure: ".*" - write: ".*" - read: ".*" - - vhost: rfi - user: rfi - configure: ".*" - write: ".*" - read: ".*" - - vhost: contracts - user: contracts - configure: ".*" - write: ".*" - read: ".*" - - vhost: django - user: django - configure: ".*" - write: ".*" - read: ".*" - - vhost: cde - user: cde - configure: ".*" - write: ".*" - read: ".*" - - vhost: processing - user: processing - configure: ".*" - write: ".*" - read: ".*" - - vhost: flows - user: flows - configure: ".*" - write: ".*" - read: ".*" - - vhost: issues - user: issues - configure: ".*" - write: ".*" - read: ".*" - - vhost: mapper - user: mapper - configure: ".*" - write: ".*" - read: ".*" - - vhost: transmittal - user: transmittal - configure: ".*" - write: ".*" - read: ".*" - - vhost: pm - user: pm - configure: ".*" - write: ".*" - read: ".*" queues: - name: uralkal-test-queue vhost: uralkal-test