47852a2170
++ fix inconsistent conditional result types in v2_source_ref_string
Terraform Terragrunt (contour) / validate (push) Successful in 1m7s
Terraform Terragrunt (contour) / plan (push) Failing after 1m8s
Terraform Terragrunt (contour) / apply (push) Has been skipped
2026-08-05 17:44:38 +03:00
d645e43de5
++ add declarative secrets contract v2 (schema/ownership/targets/extra_fields)
...
module: optional schema/ownership/source_kind/source_ref/extra_fields fields,
backward compatible - legacy secrets keep resolving exactly as before.
ownership modes managed/referenced/observed/adopt_once replace ignore_changes
for v2 records; referenced reads a value straight from vault via a data
source; observed only verifies presence, writes nothing.
terragrunt: v1/v2 detection by marker keys, targets fan-out into the existing
flat secrets list (one entry per target, same resource-key scheme as today),
source.kind -> type/depends_on translation for the five documented kinds.
brusnika-stage: acceptance environment for the two test cases from the plan -
regcred (dockerconfigjson.v1, ownership=referenced, value from vault) and a
rabbitmq.v1 secret (ownership=managed) fanned out to both kubernetes and vault
targets from a single declaration.
2026-08-05 12:41:55 +03:00
168f5d66ce
++ strip comments
2026-08-05 10:42:31 +03:00
b54fc6f29b
++ guard secrets/vault key typo at env top-level in contour terragrunt.hcl
2026-08-05 10:42:31 +03:00
9cde2dcab2
++ fail loudly on decrypt/env-lookup failure and secret key typos instead of silently empty
2026-08-04 18:30:05 +03:00
d08b3e1771
++ wrap all vault secret values under data key for selective sops encryption
2026-08-04 15:20:08 +03:00
c7e04cb836
++ scope sops age key to decrypt step instead of whole ci job
2026-08-04 12:56:21 +03:00
b2cdaab66e
++ skip kafka acls on ugmk broker without authorizer
2026-07-21 14:49:01 +03:00
417a2bdb77
++ add regcred fan-out to namespaces flagged image_pull_secret
2026-07-20 10:40:24 +03:00
1d069fa769
remove ns
2026-07-17 18:34:50 +03:00
59acfe33b8
change vault deploy flags
2026-07-17 17:58:28 +03:00
bfe3f3e283
change vault deploy flags
2026-07-17 17:47:20 +03:00
cae7d2200a
change vault deploy flags
2026-07-17 17:35:21 +03:00
5989a58449
change vault deploy flags
2026-07-17 17:23:29 +03:00
973a9dc6a5
++ minio host configurable in yaml, incluster runner
2026-07-17 16:05:40 +03:00
efcfb1e2f3
++ fix kafka acl dup key, pin kafka provider 0.7.1
2026-07-17 15:39:58 +03:00
ca6ccaabed
++ contour: entity units s3/database/kafka-topics/rabbitmq (in-cluster modules) + secrets unit (deps + sink k8s|vault, in-cluster constants); root drop rabbitmq provider (module self-configures)
2026-07-16 16:31:39 +03:00
98d9a29a6e
++ contour: flat live/ (INFRA_ENV), port vault-platform-secrets module + namespace/vault-secrets units; drop product live/prod
2026-07-16 16:18:00 +03:00
128b7b4451
++ contour: in-cluster root — minio backend + kubernetes/vault/kafka/postgresql/rabbitmq/minio providers, admin creds via env from vault
2026-07-16 16:09:08 +03:00
15dc79196c
fix user import vs create mechanic
2026-07-10 12:36:37 +03:00
e075bc12ac
++ declarative single-file secrets, drop resource_key, sync kafka with cloud
2026-07-09 09:21:02 +03:00
8d12527af4
++ adopt prod
2026-07-07 17:10:06 +03:00
faf1720b22
++ port sops secret-values adopt mechanism to prod
2026-07-06 17:10:46 +03:00
Тимур Якубов
d8bc3af4e0
Feature/eav topics prod
2026-07-03 13:06:15 +00:00
98901c6840
add rmq module
2026-06-29 15:33:52 +03:00
cf2e527da8
add rmq module
2026-06-29 15:19:47 +03:00
fad9234ae4
add sarex-agents infra prod
2026-06-10 11:47:30 +03:00
69c93d2ed9
Add BIM ClickHouse secret to prod
2026-05-25 11:44:48 +03:00
48ff34fad3
Move kafka topics to infrastructure config
2026-05-20 14:05:06 +03:00
8540c3907e
add prod kafka topics flow
2026-05-05 16:22:04 +03:00
3286b26777
add SA creation logic
2026-02-19 12:12:40 +03:00
Work
6a141f8d51
add prod infra
2026-01-30 16:55:23 +03:00
Work
9cdd80fda0
add prod infra
2026-01-30 16:45:16 +03:00
Work
0cbdc5a773
add prod infra
2026-01-30 16:22:31 +03:00
Work
54e27e3840
test terragrunt ci
2026-01-28 15:25:49 +03:00
Work
d6300bfa80
test terragrunt ci
2026-01-28 15:05:41 +03:00
Work
28b26e1dad
fixes
2026-01-28 14:27:18 +03:00
Work
3f6becc4d7
fixes
2026-01-28 14:22:13 +03:00
Work
29ed3df4ae
fixes
2026-01-28 14:12:16 +03:00
Work
1212242da5
fixes
2026-01-28 13:43:35 +03:00
Work
858fc2f232
fixes
2026-01-28 13:30:50 +03:00
Work
0b66c81c3f
add analyzer db, user and secrets
2026-01-28 13:19:41 +03:00
Work
87b7f1080d
change pipeline generation + add tf dockerfile
2026-01-26 16:26:01 +03:00
Work
593ce070e6
change pipeline generation + add tf dockerfile
2026-01-26 16:03:03 +03:00
Work
d2ad630ef7
change pipeline generation + add tf dockerfile
2026-01-26 16:00:10 +03:00
Work
2fb0b416d7
change pipeline generation + add tf dockerfile
2026-01-26 15:58:04 +03:00
Work
39d61e2bac
change pipeline generation + add tf dockerfile
2026-01-26 15:13:23 +03:00
Work
6914f5803d
change pipeline generation + add tf dockerfile
2026-01-26 15:05:41 +03:00
Work
f39e040ef2
change pipeline generation + add tf dockerfile
2026-01-26 14:16:14 +03:00
Work
dd03b1e2e3
change pipeline generation + add tf dockerfile
2026-01-26 13:44:15 +03:00
