sarex/terraform-contour-mirror
1
0
Fork 0
mirror of https://gitlab.sarex.io/infra/terraform-contour-mirror.git synced 2026-10-07 13:51:36 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity
307 Commits 1 Branch 0 Tags 24 MiB
ce6228d6f2
Commit Graph

307 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kochetkov S
ce6228d6f2 ++ trimspace kafka sasl mechanism, gitea var had trailing space 2026-08-11 15:18:38 +03:00
Kochetkov S
811c16a8b2 ++ actually forward kafka/pg vars from gitea into job env, they were never wired 2026-08-11 15:11:27 +03:00
Kochetkov S
417772abdc trigger ci in wb 2026-08-11 15:04:33 +03:00
Kochetkov S
7f6940b8ba ++ fix stale checkout skip, compare to GITHUB_SHA not just file presence 2026-08-11 14:56:52 +03:00
Kochetkov S
fcd6672ee2 ++ kafka sasl mechanism none sentinel, gitea can't store empty vars 2026-08-11 14:46:45 +03:00
Kochetkov S
736d990ad0 fix wb test-namespace regcred key collision, image_pull_secret true was triggering the legacy auto-fanout regcred on top of the explicit v2 referenced record, same key test-namespace/regcred, matches how brusnika-stage avoids this by setting image_pull_secret false 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-11 14:33:17 +03:00
Kochetkov S
42c4e35291 revert the contracts-compiler wiring in live/rabbitmq/terragrunt.hcl, it broke the wb pipeline — locals cannot reference dependency in terragrunt, and live/contracts was never pushed anyway, this experiment isn't finished yet 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-11 14:29:35 +03:00
Kochetkov S
f57f154d83 add kafka test topic/user to wb environment, wire kafka provider to work over TLS without SASL to match how production already connects to wb-prod-kafka-bootstrap:9093 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-11 14:15:57 +03:00
Kochetkov S
370ce528d1 ++ fix infrastructre.yaml
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-11 13:43:57 +03:00
Kochetkov S
867eed4052 ++ fix infrastructre.yaml 2026-08-11 13:36:04 +03:00
Kochetkov S
d5a2d639ad add wb environment, one test entity per resource type (namespace, rabbitmq vhost/user/queue, external postgres db/user, external minio bucket) plus matching v2 secret contracts 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-08-11 13:33:54 +03:00
ivan
d74baefa30 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 53s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 55s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 55s
Details
2026-08-09 14:16:10 +05:00
ivan
70895158fb ++ 2026-08-09 13:40:53 +05:00
ivan
0907728217 ++ 2026-08-09 13:18:23 +05:00
ivan
d03f2efba2 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 54s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 59s
Details
2026-08-08 16:01:03 +05:00
ivan
bb520d6980 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 53s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 54s
Details
2026-08-08 13:14:46 +05:00
ivan
46b6c5f74e ++ 2026-08-08 12:50:10 +05:00
Kochetkov S
94c4938547 align ugmk identity_components secrets with prod convention, connectors/operate/optimize/tasklist/zeebe now use the shared identity-secret-for-components value
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 54s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 56s
Details
2026-08-07 16:49:17 +03:00
Kochetkov S
f9fca41c0c fix cde CAMUNDA_CLIENT_SECRET to match current zeebe-secret 2026-08-07 14:53:06 +03:00
Kochetkov S
261b581508 fix camunda vault secrets: restore admin/firstuser/db passwords as explicit values, add identity-password/keycloak-password fields to camunda_postgresql secret 2026-08-07 14:38:52 +03:00
Kochetkov S
d642789448 ++ bump brusnika-stage rabbitmq module to v1.0.3
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 51s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 53s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 54s
Details
2026-08-07 12:49:28 +03:00
Kochetkov S
d99ba1989d ++ skip whole provider.tf block for brusnika-stage rabbitmq unit
Some checks failed
Terraform Terragrunt (contour) / validate (push) Successful in 52s
Details
Terraform Terragrunt (contour) / plan (push) Failing after 26s
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-07 12:26:15 +03:00
Kochetkov S
1d411af014 ++ clear stale terragrunt-cache before each run
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-07 12:20:54 +03:00
Kochetkov S
044a0f7adf ++ fix duplicate required providers for brusnika-stage rabbitmq
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-07 12:13:33 +03:00
Kochetkov S
e6b02d42c5 ++ fix module token auth format username colon token
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 23s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-07 12:04:04 +03:00
Kochetkov S
f66f7839b9 ++ gitignore all md except readme
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 24s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-07 11:53:53 +03:00
Kochetkov S
cd14614538 ++ pilot external rabbitmq module on brusnika-stage only 2026-08-07 11:53:53 +03:00
Kochetkov S
d46f540a79 ++ gitignore rabbitmq module pilot plan 2026-08-07 11:50:06 +03:00
Kochetkov S
c19bcac60a ++ gitignore almanac doc 2026-08-07 11:50:06 +03:00
ivan
b664a04688 ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 55s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 56s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 58s
Details
2026-08-06 12:50:45 +05:00
ivan
bbe2b02e3c ++
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 56s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 57s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 58s
Details
2026-08-06 12:27:25 +05:00
Kochetkov S
3988c83ca4 ++ enforce canonical field set for all v2 schemas, not just rabbitmq.v1
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 1m13s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 1m19s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 1m30s
Details
2026-08-05 18:26:44 +03:00
Kochetkov S
e18bf1ce28 ++ add STACKS filter bootstrap escape hatch for cross-stack read dependencies 2026-08-05 18:13:32 +03:00
Kochetkov S
573e8d04f6 ++ fall back to in-cluster kubernetes auth when KUBECONFIG file doesn't exist
All checks were successful
Terraform Terragrunt (contour) / validate (push) Successful in 1m14s
Details
Terraform Terragrunt (contour) / plan (push) Successful in 1m35s
Details
Terraform Terragrunt (contour) / apply (push) Successful in 1m19s
Details
2026-08-05 18:02:44 +03:00
ivan
74f4e11b1d ++ 2026-08-05 19:59:52 +05:00
Kochetkov S
47852a2170 ++ fix inconsistent conditional result types in v2_source_ref_string
Some checks failed
Terraform Terragrunt (contour) / validate (push) Successful in 1m7s
Details
Terraform Terragrunt (contour) / plan (push) Failing after 1m8s
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-05 17:44:38 +03:00
Kochetkov S
ee8a64eb2e ++ forward SKIP_POSTGRES_ADMIN/SKIP_KAFKA_ADMIN/RABBITMQ_ENDPOINT vars into job env
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 47s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-05 17:36:34 +03:00
ivan
8ee05e1dc6 ++
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 2s
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
2026-08-05 19:25:32 +05:00
ivan
cf347a6a1a ++ 2026-08-05 19:11:51 +05:00
ivan
6421953c73 ++ 2026-08-05 16:40:24 +05:00
Kochetkov S
964c718dc8 ++ add SKIP_POSTGRES_ADMIN/SKIP_KAFKA_ADMIN flags, mirroring SKIP_MINIO_ADMIN
Some checks failed
Terraform Terragrunt (contour) / validate (push) Failing after 2s
Details
Terraform Terragrunt (contour) / apply (push) Has been skipped
Details
Terraform Terragrunt (contour) / plan (push) Has been skipped
Details
2026-08-05 12:53:53 +03:00
Kochetkov S
7074281aba ++ add secrets-contract-probe test app for brusnika-stage acceptance test 2026-08-05 12:50:26 +03:00
Kochetkov S
9577ee8ad0 ++ add verify_secret_contract.py for v2 secret acceptance testing 2026-08-05 12:43:30 +03:00
Kochetkov S
d645e43de5 ++ add declarative secrets contract v2 (schema/ownership/targets/extra_fields) 
module: optional schema/ownership/source_kind/source_ref/extra_fields fields,
backward compatible - legacy secrets keep resolving exactly as before.
ownership modes managed/referenced/observed/adopt_once replace ignore_changes
for v2 records; referenced reads a value straight from vault via a data
source; observed only verifies presence, writes nothing.

terragrunt: v1/v2 detection by marker keys, targets fan-out into the existing
flat secrets list (one entry per target, same resource-key scheme as today),
source.kind -> type/depends_on translation for the five documented kinds.

brusnika-stage: acceptance environment for the two test cases from the plan -
regcred (dockerconfigjson.v1, ownership=referenced, value from vault) and a
rabbitmq.v1 secret (ownership=managed) fanned out to both kubernetes and vault
targets from a single declaration.
 2026-08-05 12:41:55 +03:00
Kochetkov S
8b98cee0a5 ++ gitignore secrets contract plan 2026-08-05 12:02:03 +03:00
Kochetkov S
168f5d66ce ++ strip comments 2026-08-05 10:42:31 +03:00
Kochetkov S
b54fc6f29b ++ guard secrets/vault key typo at env top-level in contour terragrunt.hcl 2026-08-05 10:42:31 +03:00
ivan
631375d53f ++ 2026-08-04 23:11:12 +05:00
Kochetkov S
1c232f7516 ++ add dockerconfigjson contract check to k8s-secret module 2026-08-04 18:30:05 +03:00
Kochetkov S
9cde2dcab2 ++ fail loudly on decrypt/env-lookup failure and secret key typos instead of silently empty 2026-08-04 18:30:05 +03:00