|
|
417a2bdb77
|
++ add regcred fan-out to namespaces flagged image_pull_secret
|
2026-07-20 10:40:24 +03:00 |
|
|
|
1d069fa769
|
remove ns
|
2026-07-17 18:34:50 +03:00 |
|
|
|
a47837d039
|
remove ns
|
2026-07-17 18:15:18 +03:00 |
|
|
|
59acfe33b8
|
change vault deploy flags
|
2026-07-17 17:58:28 +03:00 |
|
|
|
bfe3f3e283
|
change vault deploy flags
|
2026-07-17 17:47:20 +03:00 |
|
|
|
cae7d2200a
|
change vault deploy flags
|
2026-07-17 17:35:21 +03:00 |
|
|
|
5989a58449
|
change vault deploy flags
|
2026-07-17 17:23:29 +03:00 |
|
gitlab-pusher
|
4271700e79
|
++ test ci
|
2026-07-17 14:04:52 +00:00 |
|
|
|
198bd24493
|
change vault deploy flags
|
2026-07-17 16:42:31 +03:00 |
|
|
|
973a9dc6a5
|
++ minio host configurable in yaml, incluster runner
|
2026-07-17 16:05:40 +03:00 |
|
|
|
461981e4eb
|
++ load admin creds: fail fast with diagnostics on empty vault reads
|
2026-07-17 15:47:13 +03:00 |
|
|
|
efcfb1e2f3
|
++ fix kafka acl dup key, pin kafka provider 0.7.1
|
2026-07-17 15:39:58 +03:00 |
|
|
|
beea0586c5
|
++ contour: drop required_providers from in-cluster modules (root provider.tf already declares them -> duplicate required_providers on init)
|
2026-07-17 15:27:05 +03:00 |
|
gitlab-pusher
|
76dca2b220
|
++ add wf dispatch and test ci
|
2026-07-17 11:14:48 +00:00 |
|
gitlab-pusher
|
cd7fe0249b
|
++ test ci
|
2026-07-17 11:10:31 +00:00 |
|
gitlab-pusher
|
50c8430733
|
++ aaahhh
|
2026-07-17 11:08:54 +00:00 |
|
gitlab-pusher
|
ae63a51323
|
++ add wf dispatch trigger
|
2026-07-17 11:08:08 +00:00 |
|
|
|
7142806524
|
++ rewrite cehckout logig
|
2026-07-17 13:59:01 +03:00 |
|
gitlab-pusher
|
668bbbf76d
|
++ test ci
|
2026-07-17 10:49:35 +00:00 |
|
gitlab-pusher
|
0b05c1f7f0
|
++ test ci
|
2026-07-17 10:42:18 +00:00 |
|
gitlab-pusher
|
b346b8e5af
|
Edit .gitignore
|
2026-07-17 10:31:36 +00:00 |
|
gitlab-pusher
|
279d23855b
|
++ fix
|
2026-07-17 10:27:39 +00:00 |
|
gitlab-pusher
|
11ae8c8d30
|
++ fix
|
2026-07-17 10:24:40 +00:00 |
|
gitlab-pusher
|
d64962f6b2
|
++ fix
|
2026-07-17 10:23:00 +00:00 |
|
gitlab-pusher
|
ff0996c926
|
++ add mirror push
|
2026-07-17 10:21:29 +00:00 |
|
gitlab-pusher
|
a6dd669ef1
|
++ add push mirror
|
2026-07-17 10:19:29 +00:00 |
|
|
|
3434187302
|
++ add existing vault secrets for yc-k8s-test
|
2026-07-17 09:39:19 +00:00 |
|
|
|
83291cee1e
|
++ contour: gitea workflow (runner contract via CI vars INFRA_ENV/RUNNER_LABEL/RUNNER_IMAGE) + load_admin_creds.sh (infra admin creds from Vault) + run_all_stacks.sh
|
2026-07-16 17:10:06 +03:00 |
|
|
|
b8b77536c3
|
++ contour: yc-k8s-test env — test bucket+user, db+extensions+user, kafka topic+user, rabbitmq exchange+user; 4 test secrets (k8s static/dynamic, vault static/dynamic); vault-platform inert
|
2026-07-16 16:35:59 +03:00 |
|
|
|
ca6ccaabed
|
++ contour: entity units s3/database/kafka-topics/rabbitmq (in-cluster modules) + secrets unit (deps + sink k8s|vault, in-cluster constants); root drop rabbitmq provider (module self-configures)
|
2026-07-16 16:31:39 +03:00 |
|
|
|
f6786a199f
|
++ contour: k8s-secret sink k8s|vault — same resolved data routes to kubernetes_secret or vault_kv_secret_v2 (path <prefix>/<name>)
|
2026-07-16 16:24:57 +03:00 |
|
|
|
b299ba21be
|
++ contour: in-cluster entity modules pg-incluster (cyrilgdn/pg) + minio-buckets (aminueza/minio) + kafka-topics-incluster (Mongey), contracts 1:1 with yc variants
|
2026-07-16 16:22:20 +03:00 |
|
|
|
98d9a29a6e
|
++ contour: flat live/ (INFRA_ENV), port vault-platform-secrets module + namespace/vault-secrets units; drop product live/prod
|
2026-07-16 16:18:00 +03:00 |
|
|
|
128b7b4451
|
++ contour: in-cluster root — minio backend + kubernetes/vault/kafka/postgresql/rabbitmq/minio providers, admin creds via env from vault
|
2026-07-16 16:09:08 +03:00 |
|
|
|
ca7332bfdc
|
fix live and repo state discrepancies
|
2026-07-16 11:08:00 +03:00 |
|
|
|
ff9fe1ce47
|
++ flows-prod yc-kafka-secret: add cert key 1:1 from live (was missing -> without_ignore reconcile would strip live tls cert)
|
2026-07-16 11:06:45 +03:00 |
|
|
|
dbfa8aa594
|
++ planning ns: projects-backend pg+s3 dynamic secrets, projects_db/planning user, projects-backend-prod bucket
|
2026-07-16 10:42:28 +03:00 |
|
|
|
99d82d409f
|
++ flows-prod kafka secret back to static data (keep coalesce module fix for dynamic-capable path)
|
2026-07-15 15:29:52 +03:00 |
|
|
|
a9993d94d5
|
fix dynamic secrets
|
2026-07-15 15:24:39 +03:00 |
|
|
|
ceed71665e
|
++ fix kafka dynamic secret: resolve depends_on key via coalesce (was try-chain -> empty key ':' -> null map -> empty secret); restore flows-prod dynamic form
|
2026-07-15 15:24:28 +03:00 |
|
|
|
fc7dc2b101
|
++ fix flows-prod yc-kafka-secret: static data (host/password/username) like sibling kafka secrets
|
2026-07-14 14:12:14 +03:00 |
|
|
|
fd462cdb56
|
++ fix flows-prod kafka secret shape: map host->hostname(:9091), username, password via credential_keys
|
2026-07-14 13:28:38 +03:00 |
|
|
|
b81e785efb
|
Merge branch 'flows-topics' into 'master'
Flows topics
See merge request infra/terraform!22
|
2026-07-14 09:37:00 +00:00 |
|
|
|
bc3490a5e6
|
++ fix ci: re-encrypt secrets to restore sops mac (flows-prod kafka secret)
|
2026-07-14 12:19:10 +03:00 |
|
Vladislav Verezhnikov
|
a09315dba8
|
+
|
2026-07-14 13:06:06 +05:00 |
|
|
|
81f3eabcdd
|
add premises storage s3 bucket + secret
|
2026-07-10 13:14:46 +03:00 |
|
|
|
15dc79196c
|
fix user import vs create mechanic
|
2026-07-10 12:36:37 +03:00 |
|
|
|
43b28d0c85
|
Merge branch 'feature/prod-adopt' into 'master'
adopt prod kafka/rmq/secrets into terraform
See merge request infra/terraform!20
|
2026-07-09 07:02:25 +00:00 |
|
|
|
78fd72c6e2
|
++ sync prod premises db user conn_limit with cloud
|
2026-07-09 09:27:00 +03:00 |
|
|
|
267f3e8d84
|
++ use v9.11 runner image with sops for prod
|
2026-07-09 09:21:02 +03:00 |
|
