5 Commits

Author	SHA1	Message	Date
Work	99fcdf5717	fix(yc-s3): use iam_binding instead of bucket_policy ... Replace yandex_storage_bucket_policy with yandex_storage_bucket_iam_binding for proper Yandex Cloud access bindings on bucket level	2026-02-03 13:57:14 +03:00
Work	fb3b9894d4	feat(yc-s3): use bucket policy instead of folder-level IAM roles ... - Remove yandex_resourcemanager_folder_iam_member with storage.editor - Add yandex_storage_bucket_policy for bucket-level access control - SA now has access only to its own bucket via bucket policy - Add role variable (storage.uploader, storage.viewer, storage.editor) - Add README.md with module documentation - Remove comments from module files	2026-02-03 13:57:14 +03:00
kochetkov.s	465325a679	add pulse terragrunt mvp	2026-01-23 13:53:24 +03:00
kochetkov.s	be34bc617b	refactor: Use unified infrastructure.yaml config file ... - Add infrastructure.yaml as single source of truth (like values.yaml in Helm) - Make all modules universal (no hardcoded entity names) - Use existing PostgreSQL cluster instead of creating new one - Add yc-database module for working with existing PostgreSQL - Add k8s-secret module with lifecycle.ignore_changes support - Update terragrunt.hcl files to read from infrastructure.yaml - Remove scripts, use native Terragrunt functions (yamldecode)	2026-01-19 15:28:39 +03:00
kochetkov.s	cd68e73e40	feat: Add Terraform infrastructure for pulse project ... - Add modules: yc-s3, yc-postgresql, k8s-namespace, k8s-secrets - Add live configuration for stage environment - Add GitLab CI with downstream pipelines - Implement best practices from theory.md	2026-01-19 15:15:14 +03:00