Commit Graph

168 Commits

Author SHA1 Message Date
gitlab-pusher
50c8430733 ++ aaahhh 2026-07-17 11:08:54 +00:00
gitlab-pusher
ae63a51323 ++ add wf dispatch trigger 2026-07-17 11:08:08 +00:00
7142806524 ++ rewrite cehckout logig 2026-07-17 13:59:01 +03:00
gitlab-pusher
668bbbf76d ++ test ci 2026-07-17 10:49:35 +00:00
gitlab-pusher
0b05c1f7f0 ++ test ci 2026-07-17 10:42:18 +00:00
gitlab-pusher
b346b8e5af Edit .gitignore 2026-07-17 10:31:36 +00:00
gitlab-pusher
279d23855b ++ fix 2026-07-17 10:27:39 +00:00
gitlab-pusher
11ae8c8d30 ++ fix 2026-07-17 10:24:40 +00:00
gitlab-pusher
d64962f6b2 ++ fix 2026-07-17 10:23:00 +00:00
gitlab-pusher
ff0996c926 ++ add mirror push 2026-07-17 10:21:29 +00:00
gitlab-pusher
a6dd669ef1 ++ add push mirror 2026-07-17 10:19:29 +00:00
3434187302 ++ add existing vault secrets for yc-k8s-test 2026-07-17 09:39:19 +00:00
83291cee1e ++ contour: gitea workflow (runner contract via CI vars INFRA_ENV/RUNNER_LABEL/RUNNER_IMAGE) + load_admin_creds.sh (infra admin creds from Vault) + run_all_stacks.sh 2026-07-16 17:10:06 +03:00
b8b77536c3 ++ contour: yc-k8s-test env — test bucket+user, db+extensions+user, kafka topic+user, rabbitmq exchange+user; 4 test secrets (k8s static/dynamic, vault static/dynamic); vault-platform inert 2026-07-16 16:35:59 +03:00
ca6ccaabed ++ contour: entity units s3/database/kafka-topics/rabbitmq (in-cluster modules) + secrets unit (deps + sink k8s|vault, in-cluster constants); root drop rabbitmq provider (module self-configures) 2026-07-16 16:31:39 +03:00
f6786a199f ++ contour: k8s-secret sink k8s|vault — same resolved data routes to kubernetes_secret or vault_kv_secret_v2 (path <prefix>/<name>) 2026-07-16 16:24:57 +03:00
b299ba21be ++ contour: in-cluster entity modules pg-incluster (cyrilgdn/pg) + minio-buckets (aminueza/minio) + kafka-topics-incluster (Mongey), contracts 1:1 with yc variants 2026-07-16 16:22:20 +03:00
98d9a29a6e ++ contour: flat live/ (INFRA_ENV), port vault-platform-secrets module + namespace/vault-secrets units; drop product live/prod 2026-07-16 16:18:00 +03:00
128b7b4451 ++ contour: in-cluster root — minio backend + kubernetes/vault/kafka/postgresql/rabbitmq/minio providers, admin creds via env from vault 2026-07-16 16:09:08 +03:00
ca7332bfdc fix live and repo state discrepancies 2026-07-16 11:08:00 +03:00
ff9fe1ce47 ++ flows-prod yc-kafka-secret: add cert key 1:1 from live (was missing -> without_ignore reconcile would strip live tls cert) 2026-07-16 11:06:45 +03:00
dbfa8aa594 ++ planning ns: projects-backend pg+s3 dynamic secrets, projects_db/planning user, projects-backend-prod bucket 2026-07-16 10:42:28 +03:00
99d82d409f ++ flows-prod kafka secret back to static data (keep coalesce module fix for dynamic-capable path) 2026-07-15 15:29:52 +03:00
a9993d94d5 fix dynamic secrets 2026-07-15 15:24:39 +03:00
ceed71665e ++ fix kafka dynamic secret: resolve depends_on key via coalesce (was try-chain -> empty key ':' -> null map -> empty secret); restore flows-prod dynamic form 2026-07-15 15:24:28 +03:00
fc7dc2b101 ++ fix flows-prod yc-kafka-secret: static data (host/password/username) like sibling kafka secrets 2026-07-14 14:12:14 +03:00
fd462cdb56 ++ fix flows-prod kafka secret shape: map host->hostname(:9091), username, password via credential_keys 2026-07-14 13:28:38 +03:00
b81e785efb Merge branch 'flows-topics' into 'master'
Flows topics

See merge request infra/terraform!22
2026-07-14 09:37:00 +00:00
bc3490a5e6 ++ fix ci: re-encrypt secrets to restore sops mac (flows-prod kafka secret) 2026-07-14 12:19:10 +03:00
Vladislav Verezhnikov
a09315dba8 + 2026-07-14 13:06:06 +05:00
81f3eabcdd add premises storage s3 bucket + secret 2026-07-10 13:14:46 +03:00
15dc79196c fix user import vs create mechanic 2026-07-10 12:36:37 +03:00
43b28d0c85 Merge branch 'feature/prod-adopt' into 'master'
adopt prod kafka/rmq/secrets into terraform

See merge request infra/terraform!20
2026-07-09 07:02:25 +00:00
78fd72c6e2 ++ sync prod premises db user conn_limit with cloud 2026-07-09 09:27:00 +03:00
267f3e8d84 ++ use v9.11 runner image with sops for prod 2026-07-09 09:21:02 +03:00
e075bc12ac ++ declarative single-file secrets, drop resource_key, sync kafka with cloud 2026-07-09 09:21:02 +03:00
8d12527af4 ++ adopt prod 2026-07-07 17:10:06 +03:00
84600ee61b ++ adopt prod rabbitmq vhosts, users, permissions, policies 2026-07-06 17:30:27 +03:00
dbfcdad39b ++ adopt prod kafka topics and users with verified 1:1 permissions 2026-07-06 17:24:12 +03:00
faf1720b22 ++ port sops secret-values adopt mechanism to prod 2026-07-06 17:10:46 +03:00
a862579a85 Merge branch 'fix-eav-topic-perms' into 'master'
Пользователь srx-broadcast

See merge request infra/terraform!18
2026-07-04 10:29:46 +00:00
Sergei Davydov
2580455d5d add srx-broadcast user 2026-07-04 15:19:17 +05:00
a8ea33e420 Merge branch 'fix-issue-broadcast-topic' into 'master'
Фикс: топик issues_broadcast_prod

See merge request infra/terraform!17
2026-07-03 19:49:56 +00:00
Sergei Davydov
3630c847f6 fix topic name for prod 2026-07-04 00:44:01 +05:00
01668b0978 Merge branch 'fix-issues-inspection-users' into 'master'
add inspections and issues users

See merge request infra/terraform!16
2026-07-03 18:38:28 +00:00
Sergei Davydov
5bab1959ae add inspections and issues users 2026-07-03 23:36:13 +05:00
09b9b16466 Merge branch 'premise-topics' into 'master'
Топики сервиса объектов - прод

See merge request infra/terraform!15
2026-07-03 18:22:00 +00:00
Sergei Davydov
ed2b0ebdb7 fix: clusterRef = prod 2026-07-03 23:19:21 +05:00
Sergei Davydov
63a6dcb16d add topic configurations for prod 2026-07-03 23:12:10 +05:00
e7b39deae2 Merge branch 'feature/eav_topics_prod' into 'master'
Feature/eav topics prod

See merge request infra/terraform!14
2026-07-03 13:06:15 +00:00