++ uralkal test only

infrastructure-secrets.yaml

@@ -5009,7 +5009,39 @@ environments:
                 create_app_policies: false
                 create_app_roles: false
             applications: {}
-        secrets: []
+        secrets:
+            - name: uralkal-test-postgres
+              namespace: uralkal-test
+              type: database
+              sink: vault
+              vault_path: apps/uralkal-test/postgres
+              depends_on:
+                cluster: main
+                db: uralkal_test_db
+                user: uralkal_test
+            - name: uralkal-test-rabbitmq
+              namespace: uralkal-test
+              type: rabbitmq
+              sink: vault
+              vault_path: rabbitmq/apps/uralkal-test
+              depends_on:
+                rabbitmq_vhost: uralkal-test
+                rabbitmq_user: uralkal-test
+            - name: uralkal-test-s3
+              namespace: uralkal-test
+              type: s3
+              sink: vault
+              vault_path: minio/apps/uralkal-test
+              depends_on:
+                bucket: uralkal-test
+            - name: uralkal-test-kafka
+              namespace: uralkal-test
+              type: kafka
+              sink: vault
+              vault_path: kafka/apps/uralkal-test
+              depends_on:
+                kafka_ref: main
+                kafka_user: uralkal-test
 sops:
     kms: []
     gcp_kms: []
@@ -5034,8 +5066,8 @@ sops:
             dXRWUzlUOWVYMVdUR2tlREJveWF6SVEK/99wDif8yD2VGEqnCeTT6sunURWU+IEu
             xwlt+WPoox0GUNw4efVFL4E7gd7FDJGtur+8si6i26XufQf2Tsk3xQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-09-25T11:26:26Z"
+    lastmodified: "2026-09-25T12:40:37Z"
-    mac: ENC[AES256_GCM,data:xgLxaxtHHsBXs5CilRhTo/h8FlahLOjox42EZ0J8mQXPetW75vr3CVg9uAvftshSqrYKaezualq9eJdr/bMLA65/+V3mzVSJwbFToBtT5jIULJa3EtQcEw/OgDsVBIg326M/qwxtmX2pZu2LL1Ieyz8nZTgUZZqHRrtigwIyyRA=,iv:Rt72ULr3r03g05wweXDzaEUSGVmjbVWrdmDePE+RENU=,tag:TAArdk+qB0nuTzmp/s6c+w==,type:str]
+    mac: ENC[AES256_GCM,data:b7olTns24M/c12SIfh1sBSELfimd6ehEBckoG4JZG1CaUKwLVqVUDZ5Q7U4bzb8bV0mSpkFmqTThf9pc+en9FlbVNl1fbb1leMq1pYI7dirOdPBPBQaOsPuEJx/+0FCe98L6k9Gmu6kyFqcr9IF4s61RX1mzfPJJIWPoQNv8Tjw=,iv:o3AKaFuU/96BDgXODkv5TMR0HKCqUDATOpksLzG2sqs=,tag:vxooY80FrZDHTA6V7pi5xw==,type:str]
     pgp: []
     encrypted_regex: ^(data)$
     version: 3.12.2

infrastructure.yaml

@@ -1226,118 +1226,6 @@ environments:
       - name: uralkal-test
         manage: true
         image_pull_secret: false
-      - name: rabbitmq
-        manage: false
-        image_pull_secret: true
-      - name: kafka
-        manage: false
-        image_pull_secret: true
-      - name: camunda
-        manage: false
-        image_pull_secret: true
-      - name: zitadel
-        manage: false
-        image_pull_secret: true
-      - name: postgresql
-        manage: false
-        image_pull_secret: true
-      - name: workspaces
-        manage: false
-        image_pull_secret: true
-      - name: eav
-        manage: false
-        image_pull_secret: true
-      - name: notes
-        manage: false
-        image_pull_secret: true
-      - name: rfi
-        manage: false
-        image_pull_secret: true
-      - name: checklists
-        manage: false
-        image_pull_secret: true
-      - name: contracts
-        manage: false
-        image_pull_secret: true
-      - name: django
-        manage: false
-        image_pull_secret: true
-      - name: documentations
-        manage: false
-        image_pull_secret: true
-      - name: processing
-        manage: false
-        image_pull_secret: true
-      - name: flows
-        manage: false
-        image_pull_secret: true
-      - name: issues
-        manage: false
-        image_pull_secret: true
-      - name: bim
-        manage: false
-        image_pull_secret: true
-      - name: attachments
-        manage: false
-        image_pull_secret: false
-      - name: bi
-        manage: false
-        image_pull_secret: false
-      - name: comparisons
-        manage: false
-        image_pull_secret: false
-      - name: drawings
-        manage: false
-        image_pull_secret: false
-      - name: inspections
-        manage: false
-        image_pull_secret: false
-      - name: mapper
-        manage: false
-        image_pull_secret: false
-      - name: measurements
-        manage: false
-        image_pull_secret: false
-      - name: subscriptions
-        manage: false
-        image_pull_secret: false
-      - name: system-log
-        manage: false
-        image_pull_secret: false
-      - name: transmittal
-        manage: false
-        image_pull_secret: false
-      - name: cross-section
-        manage: false
-        image_pull_secret: false
-      - name: document-link
-        manage: false
-        image_pull_secret: false
-      - name: prescriptions
-        manage: false
-        image_pull_secret: false
-      - name: projects
-        manage: false
-        image_pull_secret: false
-      - name: stamp-verification
-        manage: false
-        image_pull_secret: false
-      - name: faas
-        manage: false
-        image_pull_secret: false
-      - name: iam
-        manage: false
-        image_pull_secret: false
-      - name: pm
-        manage: false
-        image_pull_secret: false
-      - name: message-hub
-        manage: false
-        image_pull_secret: false
-      - name: cde
-        manage: false
-        image_pull_secret: false
-
     postgresql:
       default_host: 10.133.0.249
       default_port: 5432
@@ -1353,288 +1241,6 @@ environments:
           password_special: false
           conn_limit: 20
 
-      - cluster_id: main
-        database:
-          name: identity
-          extensions: []
-        user:
-          name: identity
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: bitnami_keycloak
-          extensions: []
-        user:
-          name: bn_keycloak
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: zitadel
-          extensions: []
-        user:
-          name: zitadel
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: workspaces_db
-          extensions:
-            - uuid-ossp
-        user:
-          name: workspaces
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: eav
-          extensions: []
-        user:
-          name: eav
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: notes
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: notes
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: rfi
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: rfi
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: checklists
-          extensions: []
-        user:
-          name: checklists
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: contracts_db
-          extensions: []
-        user:
-          name: contracts
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: django
-          extensions: []
-        user:
-          name: django
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: documentations
-          extensions:
-            - ltree
-            - uuid-ossp
-            - pg_stat_statements
-            - timescaledb
-        user:
-          name: documentations
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: processing
-          extensions: []
-        user:
-          name: processing
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: flows
-          extensions: []
-        user:
-          name: flows
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: issues
-          extensions: []
-        user:
-          name: issues
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: bim
-          extensions:
-            - ltree
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: bim
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: attachments
-          extensions: []
-        user:
-          name: attachments
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: bi
-          extensions: []
-        user:
-          name: bi
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: comparisons
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: comparisons
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: drawings
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-            - ltree
-        user:
-          name: drawings
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: inspections
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: inspections
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: mapper
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-            - ltree
-        user:
-          name: mapper
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: subscriptions
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-            - postgis
-        user:
-          name: subscriptions
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: system_log
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: system_log
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: transmittal
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-        user:
-          name: transmittal
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
-      - cluster_id: main
-        database:
-          name: pm
-          extensions:
-            - uuid-ossp
-            - pg_stat_statements
-            - ltree
-        user:
-          name: pm
-          password_length: 32
-          password_special: false
-          conn_limit: 20
-
     minio:
       endpoint: http://10.133.0.245:9000
 
@@ -1642,48 +1248,6 @@ environments:
       - name: uralkal-test
         acl: private
 
-      - name: eav
-        acl: private
-
-      - name: notes
-        acl: private
-
-      - name: rfi
-        acl: private
-
-      - name: contracts
-        acl: private
-
-      - name: django
-        acl: private
-
-      - name: documentations
-        acl: private
-
-      - name: issues
-        acl: private
-
-      - name: message-hub
-        acl: private
-
-      - name: attachments
-        acl: private
-
-      - name: mapper
-        acl: private
-
-      - name: measurements
-        acl: private
-
-      - name: subscriptions
-        acl: private
-
-      - name: transmittal
-        acl: private
-
-      - name: iam
-        acl: private
-
     kafka:
       create_acls: false
       kafka_cluster_refs:
@@ -1714,103 +1278,15 @@ environments:
       amqp_port: 5672
       vhosts:
         - name: uralkal-test
-        - name: notes
-        - name: rfi
-        - name: contracts
-        - name: django
-        - name: cde
-        - name: processing
-        - name: flows
-        - name: issues
-        - name: mapper
-        - name: transmittal
-        - name: pm
       users:
         - name: uralkal-test
           password_length: 32
-        - name: notes
-          password_length: 32
-        - name: rfi
-          password_length: 32
-        - name: contracts
-          password_length: 32
-        - name: django
-          password_length: 32
-        - name: cde
-          password_length: 32
-        - name: processing
-          password_length: 32
-        - name: mapper
-          password_length: 32
-        - name: transmittal
-          password_length: 32
-        - name: flows
-          password_length: 32
-        - name: issues
-          password_length: 32
-        - name: pm
-          password_length: 32
       permissions:
         - vhost: uralkal-test
           user: uralkal-test
           configure: ".*"
           write: ".*"
           read: ".*"
-        - vhost: notes
-          user: notes
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: rfi
-          user: rfi
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: contracts
-          user: contracts
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: django
-          user: django
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: cde
-          user: cde
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: processing
-          user: processing
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: flows
-          user: flows
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: issues
-          user: issues
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: mapper
-          user: mapper
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: transmittal
-          user: transmittal
-          configure: ".*"
-          write: ".*"
-          read: ".*"
-        - vhost: pm
-          user: pm
-          configure: ".*"
-          write: ".*"
-          read: ".*"
       queues:
         - name: uralkal-test-queue
           vhost: uralkal-test