Commit Graph

Select branches

Hide Pull Requests

contour

Mono Color

• 5d8ac86460 uralkal: deliver kafka creds for issues, flows and pm from kafka-topics contour ivan 2026-10-06 22:38:02 +0500
• 70e2687459 uralkal: kafka users proc and pm, application topics; stop writing stale kafka creds ivan 2026-10-06 22:37:35 +0500
• f4994d8710 uralkal: add documentations_zitadel_account_json to django_auth ivan 2026-10-06 16:04:49 +0500
• 50d248185b uralkal: rotate django_zitadel_access_token ivan 2026-10-06 14:08:45 +0500
• 5a7d03456c uralkal: add django_zitadel_access_token to django_auth ivan 2026-10-06 12:51:59 +0500
• 9e18c1eae2 ++ retrigger pipeline Kochetkov S 2026-10-05 16:37:15 +0300
• 46306597ad ++ minio admin guard Kochetkov S 2026-10-05 16:30:21 +0300
• 2255d1c94f uralkal: minio admin is minioadmin, not tfstate ivan 2026-10-05 15:08:30 +0500
• 2cb10af8bd ++ retrigger contour pipeline (comment-only change) ivan 2026-10-05 14:42:19 +0500
• 22fd9ddfb9 ++ retrigger contour pipeline (comment-only change) ivan 2026-10-05 14:28:18 +0500
• 741f4f5e5e uralkal: write secrets/minio/admin (rootUser/rootPassword) so CI's load_admin_creds.sh can read it ivan 2026-10-05 14:07:39 +0500
• e19c99038d uralkal: match vad's django_auth credentials (username/password/token) ivan 2026-10-05 13:53:07 +0500
• b081c18933 ugmk: set processing rabbitmq creds (rabbitmq/apps/processing) to user sarex ivan 2026-09-30 18:36:35 +0300
• f205274cf3 ++ first contour pipeline Kochetkov S 2026-09-30 11:22:49 +0300
• 1e344b29d5 ++ ugmk zitadel vault sa Kochetkov S 2026-09-29 21:41:10 +0300
• 1faf40426c uralkal: drop cde-env for now — its extra_fields read rabbitmq/apps/cde and vault/common/rsa_keys, which vault-secrets hasn't created yet on a fresh apply, and secrets runs before vault-secrets alphabetically. Re-add once cde-env's real config is ready, via the STACKS=vault-secrets bootstrap run. ivan 2026-09-28 22:27:16 +0300
• 04c8946b53 uralkal: rename databases to match the reference naming (django->sarex_db, documentations->documentations_db, notes->notes_db, flows->flow_db, pm->pm_db, workspaces_db->workspaces) ivan 2026-09-28 14:55:07 +0300
• b0435647ac uralkal: order infra for the 36 business apps replicated in iac ivan 2026-09-28 14:44:49 +0300
• d9158a6b8a ++ uralkal zitadel bundled Kochetkov S 2026-09-25 17:27:14 +0300
• df13f562c0 ++ uralkal apps vault Kochetkov S 2026-09-25 16:46:07 +0300
• 3696e4d675 ++ uralkal apps infra Kochetkov S 2026-09-25 16:26:20 +0300
• b4522737fe ++ uralkal vault infra Kochetkov S 2026-09-25 16:18:39 +0300
• f62e062ba3 ++ uralkal test only Kochetkov S 2026-09-25 15:40:57 +0300
• f04ef68fdc ++ trigger uralkal Kochetkov S 2026-09-25 15:16:08 +0300
• a590a37fb0 ++ uralkal vault block Kochetkov S 2026-09-25 14:26:52 +0300
• 1a33c9ec5d ++ uralkal test entities Kochetkov S 2026-09-25 11:06:10 +0300
• c7cbf7148c ++ uralkal environment Kochetkov S 2026-09-25 11:04:36 +0300
• f416ca5441 ++ offline-uralkal Kochetkov S 2026-09-24 12:01:43 +0300
• 0752ccc54e change camunda identity secrets for vad connectors optimize tasklist zeebe Kochetkov S 2026-09-23 12:46:55 +0300
• bb61d7c5f4 ++ trash commit to trigger workflow Kochetkov S 2026-09-23 12:29:25 +0300
• d639dcd20b change camunda identity secret for vad Kochetkov S 2026-09-23 12:17:51 +0300
• 04de6df28a vad: minio credentials for notes (bucket notes, admin creds via s3-proxy) ivan 2026-09-23 13:37:17 +0500
• 4db9ed087c vad: minio credentials for rfi (bucket rfi, admin creds via s3-proxy) ivan 2026-09-23 13:36:44 +0500
• f3e59c9ca2 vad: minio credentials for contracts (bucket contracts, admin creds via s3-proxy) ivan 2026-09-21 17:30:43 +0500
• 859075837e vad: processing task credentials in vault/common/django_auth (django-auth, pdm-api-db, bim-api-v2-db, yc-s3) and read access ivan 2026-09-21 16:59:47 +0500
• bd0e968a36 vad: fixed kafka credentials - user proc (flows, issues) and pm (pm, message-hub) ivan 2026-09-21 16:15:39 +0500
• b643a4be6d vad: real zitadel service account key for documentations ivan 2026-09-21 13:51:33 +0500
• d23ce35d7b vad: real zitadel access token for django and iam ivan 2026-09-21 13:32:35 +0500
• df5c8cf0b7 vad: pm uses the django bucket instead of its own ivan 2026-09-21 13:01:40 +0500
• 690b9fb27b vad: stop generating regcred for the 20 newer namespaces ivan 2026-09-21 12:52:10 +0500
• f868b8285a vad: fix cde-env secrets entry (v2 needs id/schema, data must be base64) ivan 2026-09-21 12:38:00 +0500
• 6fd13c1290 vad: pm, message-hub, cde ivan 2026-09-18 02:37:33 +0500
• 234039f2e3 vad: kafka for flows, issues ivan 2026-09-18 02:16:19 +0500
• 766e5e6daf vad: iam, faas ivan 2026-09-17 20:06:50 +0500
• e7ebdcd174 vad: attachments, bi, comparisons, drawings, inspections, mapper, measurements, subscriptions, system-log, transmittal ivan 2026-09-17 20:00:48 +0500
• 98d0e2ceb9 vad: processing, flows, issues, bim ivan 2026-09-17 19:49:11 +0500
• 51fd8b275a vad: django + documentations ivan 2026-09-17 19:26:02 +0500
• 92216914d8 vad: fix rabbitmq secret depends_on field names ivan 2026-09-17 19:10:46 +0500
• 6d1817ee02 vad: notes, rfi, checklists, contracts postgres/rabbitmq/kafka (stage 1) ivan 2026-09-17 18:52:07 +0500
• 5c257ad1b7 vad: eav S3 credentials (stage 2 of 2) ivan 2026-09-17 18:38:21 +0500
• e657596ec6 vad: eav postgres db + role/policy (stage 1 of 2) ivan 2026-09-17 18:17:24 +0500
• d756a89697 ++ vad kafka: disable acl creation, broker has no authorizer Kochetkov S 2026-09-17 15:39:17 +0300
• 79144bed98 vad: workspaces postgres db + vault wiring ivan 2026-09-17 17:22:33 +0500
• a632f98a9a ++ add vad kafka test topic and user Kochetkov S 2026-09-17 15:12:13 +0300
• 69efede7b6 ++ offline provider mirror for contour runner Kochetkov S 2026-08-27 11:30:08 +0300
• 57ec941046 sarex-contour: fix zitadel k8s-auth role losing bound_service_account_namespaces ivan 2026-09-17 15:15:09 +0500
• 60d5fe3fce sarex-contour: bim, comparisons, drawings, inspections, mapper, measurements, notes, rfi, subscriptions, system-log ivan 2026-09-17 15:10:28 +0500
• 97fef103a3 sarex-contour: django_auth -> hagen013/zealot096 (реальный суперюзер django) ivan 2026-09-16 15:14:17 +0500
• 9f35b79310 sarex-contour: django_auth.token = base64(username:password) ivan 2026-09-16 15:01:31 +0500
• 51cff0eb7c sarex-contour: documentations_zitadel_account_json — валидный RSA PEM вместо заглушки ivan 2026-09-16 14:55:55 +0500
• ffd36826f3 sarex-contour: documentations db extension (timescaledb) — установлен на сервере ivan 2026-09-16 14:49:43 +0500
• b5df31a4f5 sarex-contour: revert timescaledb (extension not installed on postgres server) ivan 2026-09-16 14:44:07 +0500
• 2a2a61038e sarex-contour: documentations db extension (timescaledb) ivan 2026-09-16 14:42:23 +0500
• ad599b180e sarex-contour: documentations db extensions (ltree, uuid-ossp, pg_stat_statements) ivan 2026-09-16 14:37:49 +0500
• ce4ef30621 sarex-contour: attachments + documentations vault (minio, rabbitmq/cde, django_auth extras) ivan 2026-09-16 14:32:40 +0500
• 2b8f5449a7 sarex-contour: databases (attachments) + buckets (attachments, documentations) ivan 2026-09-16 14:26:04 +0500
• f0af3ed8a0 sarex-contour: django_auth explicit username/password ivan 2026-09-16 12:57:19 +0500
• 442fc92816 ++ sarex-contour: flows, issues, checklists, contracts vault (+ documentations stub for flows cross-db read) ivan 2026-09-16 12:51:08 +0500
• 68cdd58196 ++ sarex-contour: databases (flows, issues, checklists, contracts, documentations) + buckets (issues, contracts) ivan 2026-09-16 12:45:18 +0500
• d9409fd6bd ++ sarex-contour: eav + bi vault (postgres, eav также minio) ivan 2026-09-16 12:26:52 +0500
• fd31350ae0 ++ sarex-contour: databases (eav, bi) + bucket (eav) ivan 2026-09-16 12:22:58 +0500
• ac534338e8 ++ sarex-contour: rabbitmq.apps.django ivan 2026-09-15 13:05:13 +0500
• eb3afef85a ++ sarex-contour: RSA keys + kafka.apps.django ivan 2026-09-15 13:01:47 +0500
• dda946f59e ++ sarex-contour: django postgres + zitadel access token ivan 2026-09-15 12:59:21 +0500
• 6686dc9d44 ++ sarex-contour: databases (django) ivan 2026-09-15 12:56:19 +0500
• 94f98b36ff ++ sarex-contour: minio.apps.django (данные из live/s3) ivan 2026-09-15 12:52:06 +0500
• b1e935b4f7 ++ sarex-contour: minio endpoint + bucket django ivan 2026-09-15 12:50:16 +0500
• 4e0ea3532d ++ sarex-contour: workspaces (postgres + django_auth stub) ivan 2026-09-15 12:32:25 +0500
• b774caedce ++ sarex-contour: databases (workspaces_db) ivan 2026-09-15 12:28:54 +0500
• 37d89a1b44 ++ sarex-contour: zitadel role.service_account_names: zitadel ivan 2026-09-11 18:19:50 +0500
• 679e79e4e1 ++ sarex-contour: zitadel.postgresql (пароль от live/database) ivan 2026-09-11 18:12:26 +0500
• 0cde523972 ++ sarex-contour: databases (zitadel) ivan 2026-09-11 18:09:36 +0500
• 9741451e97 ++ sarex-contour: rabbitmq auth.username: sarex ivan 2026-09-11 17:28:54 +0500
• 1c6c0542fc ++ sarex-contour: vault env block (kafka + rabbitmq) ivan 2026-09-11 17:08:12 +0500
• 1d85cab221 ++ ugmk: bi jwt secret (vault/apps/bi), mock value for now ivan 2026-08-31 16:31:05 +0500
• 444e372749 ++ ugmk: bi postgres database + vault role, mirroring documentations ivan 2026-08-31 15:59:21 +0500
• 6d1e4fa861 ++ add postgresql namespace to regcred rollout list Kochetkov S 2026-08-26 14:49:21 +0300
• a66155e598 ++ remove stale v1 keys left on zitadel-postgresql v2 entry Kochetkov S 2026-08-26 14:29:06 +0300
• 9006521b68 ++ generate real zitadel postgres password via in-cluster postgres users secret Kochetkov S 2026-08-26 14:22:02 +0300
• 96ff8968e9 ++ compose keycloak-password into the policy-allowed camunda/postgresql secret Kochetkov S 2026-08-26 14:17:25 +0300
• 4b487e1fa0 ++ eliminate identity-password circular vault reference Kochetkov S 2026-08-26 14:03:22 +0300
• e122f93749 ++ add missing camunda identity-components and identity-firstuser secrets Kochetkov S 2026-08-26 13:51:44 +0300
• 863c4896b0 ++ fix custom_keys misuse that overwrote real generated passwords Kochetkov S 2026-08-26 13:44:22 +0300
• d2c2698765 ++ bind zitadel vault role to real service account name Kochetkov S 2026-08-26 13:30:35 +0300
• 17aede83c0 ++ drop circular keycloak-password ref from camunda-postgresql Kochetkov S 2026-08-26 12:53:12 +0300
• d3b447e34c ++ fix camunda-postgresql secret to v2 contract shape Kochetkov S 2026-08-26 12:45:49 +0300
• b578f442a7 ++ add regcred and protect existing infra secrets Kochetkov S 2026-08-26 12:32:46 +0300
• e28206025e ++ drop s3-proxy vault application Kochetkov S 2026-08-26 12:20:56 +0300
• 24de70dfa7 ++ add s3-proxy vault application for vad Kochetkov S 2026-08-26 12:13:38 +0300
• 5d0844b4c5 ++ wire zitadel and camunda vault secrets from real postgres passwords Kochetkov S 2026-08-26 11:58:30 +0300