environments:
  stage:
    namespaces:
      - name: pulse
        labels:
          environment: stage
          project: pulse
        annotations:
          managed-by: terraform

    secrets:
      - name: dockerhub
        namespace: pulse
        type: dockerconfigjson
        registry_url: cr.yandex

      - name: pulse-s3-secret
        namespace: pulse
        type: s3
        lifecycle:
          ignore_changes: false

      - name: pulse-postgresql-secret
        namespace: pulse
        type: database
        dependencies:
          cluster: "c9qa2coo5ukgcg93fldm"
          db: pulse_db
          user: pulse
        lifecycle:
          ignore_changes: false

      - name: session-secret
        namespace: pulse
        type: opaque
        random_keys:
          key:
            length: 32
            special: false
        lifecycle:
          ignore_changes: true

      # Пример секрета для другой базы данных (test_db/test)
      - name: test-db-secret
        namespace: pulse
        type: database
        dependencies:
          cluster: "c9qa2coo5ukgcg93fldm"
          db: test_db
          user: test
        random_keys:
          session_key:
            length: 32
            special: false
        lifecycle:
          ignore_changes: false

    buckets:
      - name: pulse-stage
        acl: public-read
        versioning:
          enabled: false
        cors:
          enabled: true
          allowed_headers: ["*"]
          allowed_methods: ["GET", "PUT", "POST", "DELETE", "HEAD"]
          allowed_origins: ["*"]
          expose_headers: ["ETag"]
          max_age_seconds: 3600

    databases:
      - cluster_id: "c9qa2coo5ukgcg93fldm"
        database:
          name: pulse_db
        user:
          name: pulse
          password_length: 32
          password_special: false
          conn_limit: 10