267f3e8d84
++ use v9.11 runner image with sops for prod
2026-07-09 09:21:02 +03:00
e075bc12ac
++ declarative single-file secrets, drop resource_key, sync kafka with cloud
2026-07-09 09:21:02 +03:00
8d12527af4
++ adopt prod
2026-07-07 17:10:06 +03:00
84600ee61b
++ adopt prod rabbitmq vhosts, users, permissions, policies
2026-07-06 17:30:27 +03:00
dbfcdad39b
++ adopt prod kafka topics and users with verified 1:1 permissions
2026-07-06 17:24:12 +03:00
faf1720b22
++ port sops secret-values adopt mechanism to prod
2026-07-06 17:10:46 +03:00
a862579a85
Merge branch 'fix-eav-topic-perms' into 'master'
...
Пользователь srx-broadcast
See merge request infra/terraform!18
2026-07-04 10:29:46 +00:00
Sergei Davydov
2580455d5d
add srx-broadcast user
2026-07-04 15:19:17 +05:00
a8ea33e420
Merge branch 'fix-issue-broadcast-topic' into 'master'
...
Фикс: топик issues_broadcast_prod
See merge request infra/terraform!17
2026-07-03 19:49:56 +00:00
Sergei Davydov
3630c847f6
fix topic name for prod
2026-07-04 00:44:01 +05:00
01668b0978
Merge branch 'fix-issues-inspection-users' into 'master'
...
add inspections and issues users
See merge request infra/terraform!16
2026-07-03 18:38:28 +00:00
Sergei Davydov
5bab1959ae
add inspections and issues users
2026-07-03 23:36:13 +05:00
09b9b16466
Merge branch 'premise-topics' into 'master'
...
Топики сервиса объектов - прод
See merge request infra/terraform!15
2026-07-03 18:22:00 +00:00
Sergei Davydov
ed2b0ebdb7
fix: clusterRef = prod
2026-07-03 23:19:21 +05:00
Sergei Davydov
63a6dcb16d
add topic configurations for prod
2026-07-03 23:12:10 +05:00
e7b39deae2
Merge branch 'feature/eav_topics_prod' into 'master'
...
Feature/eav topics prod
See merge request infra/terraform!14
2026-07-03 13:06:15 +00:00
Тимур Якубов
d8bc3af4e0
Feature/eav topics prod
2026-07-03 13:06:15 +00:00
98901c6840
add rmq module
2026-06-29 15:33:52 +03:00
cf2e527da8
add rmq module
2026-06-29 15:19:47 +03:00
33dd8e5030
++ add block-analyzer secrets and db
2026-06-24 14:08:59 +00:00
385e33702f
fix bucket name mistake
2026-06-10 17:17:53 +03:00
b8c0c85801
add sarex-agents infra prod
2026-06-10 15:32:50 +03:00
e4faa9cfe0
add sarex-agents infra prod
2026-06-10 15:31:21 +03:00
8ca05feb61
add sarex-agents infra prod
2026-06-10 11:53:17 +03:00
fad9234ae4
add sarex-agents infra prod
2026-06-10 11:47:30 +03:00
42bcbb6f3a
Fix BIM ClickHouse secret namespace
2026-05-25 11:46:17 +03:00
69c93d2ed9
Add BIM ClickHouse secret to prod
2026-05-25 11:44:48 +03:00
2dca6d1c78
Remove kafka topic pre-scripts from plan apply
2026-05-20 14:20:37 +03:00
594926c48c
Add prod kafka test topic
2026-05-20 14:10:13 +03:00
48ff34fad3
Move kafka topics to infrastructure config
2026-05-20 14:05:06 +03:00
aff4a668a4
add ns and secrets for iams
2026-05-05 16:39:05 +03:00
8540c3907e
add prod kafka topics flow
2026-05-05 16:22:04 +03:00
e6c769c26a
++ remove unsupporteed extension
2026-04-06 08:20:56 +00:00
889fb45f23
++ add premises infra
2026-04-06 08:14:52 +00:00
25936cf2fc
++ add premises infra
2026-04-02 11:37:34 +00:00
97cfaeda53
[INFRA-1640] add secrets per task
2026-03-27 08:59:39 +00:00
9a9a3f2b10
[INFRA-1640] add secrets per task
2026-03-27 08:54:53 +00:00
3f1379f5c1
++ add cde-api-secret
2026-03-19 09:26:59 +00:00
12e1526228
add custom endpoint field
2026-02-19 14:43:53 +03:00
3a1e1113c8
Merge branch 'master' of gitlab.sarex.io:infra/terraform
2026-02-19 12:13:13 +03:00
3286b26777
add SA creation logic
2026-02-19 12:12:40 +03:00
7cdcf92450
++ add valkey secret
2026-02-12 12:30:16 +00:00
e990c14412
Merge branch 'feature/test-ci' into 'master'
...
++ test
See merge request infra/terraform!6
2026-02-03 11:06:49 +00:00
033cfc6a77
++ test
2026-02-03 11:03:44 +00:00
f5e216a66c
++ fix ci
2026-02-03 11:02:53 +00:00
31c3bf338a
fix(ci): add debug output to generate-pipeline job
2026-02-03 13:57:52 +03:00
0d0075e506
fix(ci): simplify workflow and add parent_pipeline source
...
- Use 'when: always' for child pipeline workflow
- Add parent_pipeline source check to job rules (GitLab 15+)
2026-02-03 13:57:52 +03:00
d2527c60aa
fix(ci): improve workflow rules for child pipeline
...
Add multiple pipeline source conditions to ensure child pipeline runs
when triggered from MR
2026-02-03 13:57:14 +03:00
Work
99fcdf5717
fix(yc-s3): use iam_binding instead of bucket_policy
...
Replace yandex_storage_bucket_policy with yandex_storage_bucket_iam_binding
for proper Yandex Cloud access bindings on bucket level
2026-02-03 13:57:14 +03:00
Work
fb3b9894d4
feat(yc-s3): use bucket policy instead of folder-level IAM roles
...
- Remove yandex_resourcemanager_folder_iam_member with storage.editor
- Add yandex_storage_bucket_policy for bucket-level access control
- SA now has access only to its own bucket via bucket policy
- Add role variable (storage.uploader, storage.viewer, storage.editor)
- Add README.md with module documentation
- Remove comments from module files
2026-02-03 13:57:14 +03:00
