Commit Graph

331 Commits

Author SHA1 Message Date
715177b0a4 ++ add vad vault secrets stub 2026-08-25 20:03:37 +03:00
c69704e250 ++ add vad test database
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 1m2s
Terraform Terragrunt (contour) / plan (push) Successful in 1m3s
Terraform Terragrunt (contour) / apply (push) Successful in 1m3s
2026-08-25 19:37:05 +03:00
a81c1776bd ++ add empty vad environment 2026-08-25 19:20:36 +03:00
ivan
d5813ccd54 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 1m22s
Terraform Terragrunt (contour) / plan (push) Successful in 1m31s
Terraform Terragrunt (contour) / apply (push) Successful in 1m39s
2026-08-21 14:30:35 +05:00
511814cab8 ++ fix superset database grant
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 1m6s
Terraform Terragrunt (contour) / plan (push) Successful in 1m9s
Terraform Terragrunt (contour) / apply (push) Successful in 1m10s
2026-08-20 13:29:26 +03:00
280559e7c8 ++ add superset trino ugmk secrets 2026-08-20 13:08:10 +03:00
0b7545670f ++ service contract compiler, issues on brusnika-stage
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 59s
Terraform Terragrunt (contour) / plan (push) Successful in 1m5s
Terraform Terragrunt (contour) / apply (push) Successful in 1m56s
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 16:17:33 +03:00
78316216b3 ++ fall back to the rabbitmq endpoint default when the var is set but empty
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 15:50:43 +03:00
128cdf0958 ++ drop test-terraform and rabbitmq-module-test from brusnika-stage
Some checks failed
Terraform Terragrunt (contour) / plan (push) Failing after 27s
Terraform Terragrunt (contour) / validate (push) Successful in 53s
Terraform Terragrunt (contour) / apply (push) Has been skipped
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 15:44:43 +03:00
84454b41ae ++ point brusnika-stage at the shared rabbitmq
Some checks failed
Terraform Terragrunt (contour) / validate (push) Successful in 51s
Terraform Terragrunt (contour) / apply (push) Has been cancelled
Terraform Terragrunt (contour) / plan (push) Has been cancelled
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 12:24:06 +03:00
a64eee3e4f ++ fall back to provider defaults when contour vars are set but empty
Some checks failed
Terraform Terragrunt (contour) / plan (push) Has been cancelled
Terraform Terragrunt (contour) / apply (push) Has been cancelled
Terraform Terragrunt (contour) / validate (push) Has been cancelled
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 12:17:38 +03:00
0d34391acd ++ ignore task.txt
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 2s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 12:10:44 +03:00
ed3aaaed49 ++ vault creds and regcred for the shared rabbitmq on brusnika-stage
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-12 12:10:44 +03:00
ivan
962f748bf7 ++
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 4s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-12 13:14:52 +05:00
ivan
e8a0544ffc ++ wb: real postgres/rabbitmq/s3 creds, app vault roles, rsa_keys and minio infra from live cluster dump
Sourced from a kubectl dump of the wb cluster's k8s secrets, mirrored on
ugmk's vault paths where applicable. gitignore dumped-secrets/ working dir.
2026-08-12 12:50:13 +05:00
decffe42b1 ++ wire create_users flag and disable it for wb
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 2s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-11 16:37:24 +03:00
49164a6fde ++ strip trailing newline from wb regcred value 2026-08-11 16:25:46 +03:00
5b4b6084dd ++ drop wb kafka user and its secret, broker does not persist scram creds 2026-08-11 16:19:05 +03:00
fbf1f56362 ++ match wb test-queue arguments to what the broker actually set 2026-08-11 16:08:12 +03:00
e219da71ae ++ wb minio endpoint to a reachable node, nginx entrypoint is down 2026-08-11 15:57:17 +03:00
e9888d555e ++ disable kafka acls for wb, broker has no authorizer 2026-08-11 15:40:10 +03:00
d1337c38da ++ wb kafka to plaintext 9092, no tls no ca 2026-08-11 15:34:47 +03:00
26f511bd27 ++ print generated kafka provider block in ci log 2026-08-11 15:32:43 +03:00
0758eb9fc4 ++ gate kafka sasl on admin password presence instead of a sentinel value 2026-08-11 15:26:40 +03:00
ce6228d6f2 ++ trimspace kafka sasl mechanism, gitea var had trailing space 2026-08-11 15:18:38 +03:00
811c16a8b2 ++ actually forward kafka/pg vars from gitea into job env, they were never wired 2026-08-11 15:11:27 +03:00
417772abdc trigger ci in wb 2026-08-11 15:04:33 +03:00
7f6940b8ba ++ fix stale checkout skip, compare to GITHUB_SHA not just file presence 2026-08-11 14:56:52 +03:00
fcd6672ee2 ++ kafka sasl mechanism none sentinel, gitea can't store empty vars 2026-08-11 14:46:45 +03:00
736d990ad0 fix wb test-namespace regcred key collision, image_pull_secret true was triggering the legacy auto-fanout regcred on top of the explicit v2 referenced record, same key test-namespace/regcred, matches how brusnika-stage avoids this by setting image_pull_secret false
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-11 14:33:17 +03:00
42c4e35291 revert the contracts-compiler wiring in live/rabbitmq/terragrunt.hcl, it broke the wb pipeline — locals cannot reference dependency in terragrunt, and live/contracts was never pushed anyway, this experiment isn't finished yet
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-11 14:29:35 +03:00
f57f154d83 add kafka test topic/user to wb environment, wire kafka provider to work over TLS without SASL to match how production already connects to wb-prod-kafka-bootstrap:9093
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-11 14:15:57 +03:00
370ce528d1 ++ fix infrastructre.yaml
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-11 13:43:57 +03:00
867eed4052 ++ fix infrastructre.yaml 2026-08-11 13:36:04 +03:00
d5a2d639ad add wb environment, one test entity per resource type (namespace, rabbitmq vhost/user/queue, external postgres db/user, external minio bucket) plus matching v2 secret contracts
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-11 13:33:54 +03:00
ivan
d74baefa30 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 53s
Terraform Terragrunt (contour) / plan (push) Successful in 55s
Terraform Terragrunt (contour) / apply (push) Successful in 55s
2026-08-09 14:16:10 +05:00
ivan
70895158fb ++ 2026-08-09 13:40:53 +05:00
ivan
0907728217 ++ 2026-08-09 13:18:23 +05:00
ivan
d03f2efba2 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Terraform Terragrunt (contour) / plan (push) Successful in 54s
Terraform Terragrunt (contour) / apply (push) Successful in 59s
2026-08-08 16:01:03 +05:00
ivan
bb520d6980 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Terraform Terragrunt (contour) / plan (push) Successful in 53s
Terraform Terragrunt (contour) / apply (push) Successful in 54s
2026-08-08 13:14:46 +05:00
ivan
46b6c5f74e ++ 2026-08-08 12:50:10 +05:00
94c4938547 align ugmk identity_components secrets with prod convention, connectors/operate/optimize/tasklist/zeebe now use the shared identity-secret-for-components value
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Terraform Terragrunt (contour) / plan (push) Successful in 54s
Terraform Terragrunt (contour) / apply (push) Successful in 56s
2026-08-07 16:49:17 +03:00
f9fca41c0c fix cde CAMUNDA_CLIENT_SECRET to match current zeebe-secret 2026-08-07 14:53:06 +03:00
261b581508 fix camunda vault secrets: restore admin/firstuser/db passwords as explicit values, add identity-password/keycloak-password fields to camunda_postgresql secret 2026-08-07 14:38:52 +03:00
d642789448 ++ bump brusnika-stage rabbitmq module to v1.0.3
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 51s
Terraform Terragrunt (contour) / plan (push) Successful in 53s
Terraform Terragrunt (contour) / apply (push) Successful in 54s
2026-08-07 12:49:28 +03:00
d99ba1989d ++ skip whole provider.tf block for brusnika-stage rabbitmq unit
Some checks failed
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Terraform Terragrunt (contour) / plan (push) Failing after 26s
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-07 12:26:15 +03:00
1d411af014 ++ clear stale terragrunt-cache before each run
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-07 12:20:54 +03:00
044a0f7adf ++ fix duplicate required providers for brusnika-stage rabbitmq
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-07 12:13:33 +03:00
e6b02d42c5 ++ fix module token auth format username colon token
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 23s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-07 12:04:04 +03:00
f66f7839b9 ++ gitignore all md except readme
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Terraform Terragrunt (contour) / plan (push) Has been skipped
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-07 11:53:53 +03:00