12e406acad
++ fail secrets plan on incomplete depends_on instead of writing empty data
2026-08-04 13:19:54 +03:00
b2cdaab66e
++ skip kafka acls on ugmk broker without authorizer
2026-07-21 14:49:01 +03:00
26f474bae0
++ isolate random secret dependencies
2026-07-20 14:13:45 +03:00
38ad66d383
++ fix random password dependency
2026-07-20 13:38:44 +03:00
e445c6689b
add regcred namespace propagation
2026-07-20 12:03:50 +03:00
417a2bdb77
++ add regcred fan-out to namespaces flagged image_pull_secret
2026-07-20 10:40:24 +03:00
973a9dc6a5
++ minio host configurable in yaml, incluster runner
2026-07-17 16:05:40 +03:00
efcfb1e2f3
++ fix kafka acl dup key, pin kafka provider 0.7.1
2026-07-17 15:39:58 +03:00
beea0586c5
++ contour: drop required_providers from in-cluster modules (root provider.tf already declares them -> duplicate required_providers on init)
2026-07-17 15:27:05 +03:00
f6786a199f
++ contour: k8s-secret sink k8s|vault — same resolved data routes to kubernetes_secret or vault_kv_secret_v2 (path <prefix>/<name>)
2026-07-16 16:24:57 +03:00
b299ba21be
++ contour: in-cluster entity modules pg-incluster (cyrilgdn/pg) + minio-buckets (aminueza/minio) + kafka-topics-incluster (Mongey), contracts 1:1 with yc variants
2026-07-16 16:22:20 +03:00
98d9a29a6e
++ contour: flat live/ (INFRA_ENV), port vault-platform-secrets module + namespace/vault-secrets units; drop product live/prod
2026-07-16 16:18:00 +03:00
ceed71665e
++ fix kafka dynamic secret: resolve depends_on key via coalesce (was try-chain -> empty key ':' -> null map -> empty secret); restore flows-prod dynamic form
2026-07-15 15:24:28 +03:00
15dc79196c
fix user import vs create mechanic
2026-07-10 12:36:37 +03:00
e075bc12ac
++ declarative single-file secrets, drop resource_key, sync kafka with cloud
2026-07-09 09:21:02 +03:00
8d12527af4
++ adopt prod
2026-07-07 17:10:06 +03:00
faf1720b22
++ port sops secret-values adopt mechanism to prod
2026-07-06 17:10:46 +03:00
Тимур Якубов
d8bc3af4e0
Feature/eav topics prod
2026-07-03 13:06:15 +00:00
98901c6840
add rmq module
2026-06-29 15:33:52 +03:00
cf2e527da8
add rmq module
2026-06-29 15:19:47 +03:00
fad9234ae4
add sarex-agents infra prod
2026-06-10 11:47:30 +03:00
69c93d2ed9
Add BIM ClickHouse secret to prod
2026-05-25 11:44:48 +03:00
594926c48c
Add prod kafka test topic
2026-05-20 14:10:13 +03:00
48ff34fad3
Move kafka topics to infrastructure config
2026-05-20 14:05:06 +03:00
8540c3907e
add prod kafka topics flow
2026-05-05 16:22:04 +03:00
12e1526228
add custom endpoint field
2026-02-19 14:43:53 +03:00
3286b26777
add SA creation logic
2026-02-19 12:12:40 +03:00
Work
99fcdf5717
fix(yc-s3): use iam_binding instead of bucket_policy
...
Replace yandex_storage_bucket_policy with yandex_storage_bucket_iam_binding
for proper Yandex Cloud access bindings on bucket level
2026-02-03 13:57:14 +03:00
Work
fb3b9894d4
feat(yc-s3): use bucket policy instead of folder-level IAM roles
...
- Remove yandex_resourcemanager_folder_iam_member with storage.editor
- Add yandex_storage_bucket_policy for bucket-level access control
- SA now has access only to its own bucket via bucket policy
- Add role variable (storage.uploader, storage.viewer, storage.editor)
- Add README.md with module documentation
- Remove comments from module files
2026-02-03 13:57:14 +03:00
Work
54e27e3840
test terragrunt ci
2026-01-28 15:25:49 +03:00
Work
d6300bfa80
test terragrunt ci
2026-01-28 15:05:41 +03:00
Work
bf5f3baf69
final fix mb?
2026-01-28 14:48:24 +03:00
Work
ad267d9c73
final fix mb?
2026-01-28 14:46:13 +03:00
Work
995f39e29a
final fix mb?
2026-01-28 14:42:12 +03:00
Work
42b6bcedfd
fixes
2026-01-28 14:32:07 +03:00
Work
0b66c81c3f
add analyzer db, user and secrets
2026-01-28 13:19:41 +03:00
465325a679
add pulse terragrunt mvp
2026-01-23 13:53:24 +03:00
be34bc617b
refactor: Use unified infrastructure.yaml config file
...
- Add infrastructure.yaml as single source of truth (like values.yaml in Helm)
- Make all modules universal (no hardcoded entity names)
- Use existing PostgreSQL cluster instead of creating new one
- Add yc-database module for working with existing PostgreSQL
- Add k8s-secret module with lifecycle.ignore_changes support
- Update terragrunt.hcl files to read from infrastructure.yaml
- Remove scripts, use native Terragrunt functions (yamldecode)
2026-01-19 15:28:39 +03:00
1bba8d0d53
fix: Correct CORS syntax in yc-s3 module
2026-01-19 15:15:29 +03:00
cd68e73e40
feat: Add Terraform infrastructure for pulse project
...
- Add modules: yc-s3, yc-postgresql, k8s-namespace, k8s-secrets
- Add live configuration for stage environment
- Add GitLab CI with downstream pipelines
- Implement best practices from theory.md
2026-01-19 15:15:14 +03:00
