environments:
  prod:
    namespaces:
      - name: pulse
        labels:
          environment: stage
          project: pulse
          istio-injection: enabled
        annotations:
          managed-by: terraform

    secrets:
      - name: dockerhub
        namespace: pulse
        type: dockerconfigjson
        registry_url: cr.yandex

      - name: pulse-s3-secret
        namespace: pulse
        type: s3
        dependencies:
          bucket: pulse-prod
        lifecycle:
          ignore_changes: false


      - name: pulse-postgresql-secret
        namespace: pulse
        type: database
        dependencies:
          cluster: "c9quu72dj2ibu8dk54q5"
          db: pulse_db
          user: pulse
        lifecycle:
          ignore_changes: true

      - name: session-secret
        namespace: pulse
        type: opaque
        random_keys:
          key:
            length: 32
            special: false
        lifecycle:
          ignore_changes: true

      # # Пример секрета для другой базы данных (test_db/test)
      # - name: test-db-secret
      #   namespace: pulse
      #   type: database
      #   dependencies:
      #     cluster: "c9qa2coo5ukgcg93fldm"
      #     db: test_db
      #     user: test
      #   random_keys:
      #     session_key:
      #       length: 32
      #       special: false
      #   lifecycle:
      #     ignore_changes: false

    buckets:
      - name: pulse-prod
        acl: private
        versioning:
          enabled: false
        cors:
          enabled: false
  
  

    databases:
      - cluster_id: "c9quu72dj2ibu8dk54q5"
        database:
          name: pulse_db
          extensions:
            - pg_stat_statements
        user:
          name: pulse
          password_length: 32
          password_special: false
          conn_limit: 10