environments:
  stage:
    namespaces:
      - name: pulse
        labels:
          environment: stage
          project: pulse
        annotations:
          managed-by: terraform
      - name: block-analyzer
        labels:
          project: block-analyzer
        annotations:
          managed-by: terraform    

    secrets:
      - name: dockerhub
        namespace: pulse
        type: dockerconfigjson
        registry_url: cr.yandex

      - name: pulse-s3-secret
        namespace: pulse
        type: s3
        lifecycle:
          ignore_changes: false

      - name: pulse-postgresql-secret
        namespace: pulse
        type: database
        dependencies:
          cluster: "c9qa2coo5ukgcg93fldm"
          db: pulse_db
          user: pulse
        lifecycle:
          ignore_changes: true

      - name: analyzer-postgresql-secret
        namespace: block-analyzer
        type: database
        dependencies:
          cluster: "c9qa2coo5ukgcg93fldm"
          db: analyzer_db
          user: analyzer
        custom_keys:
          sslmode: "verify-full"
        random_keys:
          full-host:
            length: 32
            special: false
        lifecycle:
          ignore_changes: true


      - name: session-secret
        namespace: pulse
        type: opaque
        random_keys:
          key:
            length: 32
            special: false
        lifecycle:
          ignore_changes: true

      # # Пример секрета для другой базы данных (test_db/test)
      # - name: test-db-secret
      #   namespace: pulse
      #   type: database
      #   dependencies:
      #     cluster: "c9qa2coo5ukgcg93fldm"
      #     db: test_db
      #     user: test
      #   random_keys:
      #     session_key:
      #       length: 32
      #       special: false
      #   lifecycle:
      #     ignore_changes: false

    buckets:
      - name: pulse-stage
        acl: public-read
        versioning:
          enabled: false
        cors:
          enabled: true
          allowed_headers: ["*"]
          allowed_methods: ["GET", "PUT", "POST", "DELETE", "HEAD"]
          allowed_origins: ["*"]
          expose_headers: ["ETag"]
          max_age_seconds: 3600

    databases:
      - cluster_id: "c9qa2coo5ukgcg93fldm"
        database:
          name: pulse_db
        user:
          name: pulse
          password_length: 32
          password_special: false
          conn_limit: 10
      - cluster_id: "c9qa2coo5ukgcg93fldm"
        database:
          name: analyzer_db
          extensions:
            - pg_stat_statements
        user:
          name: analyzer
          password_length: 32
          password_special: false
          conn_limit: 10
          permissions:
            - pulse_db
            - attachments_db
            - automation_db
            - bi_db
            - bim_db
            - bimv2_db
            - camera_db
            - camunda_db
            - checklists_db
            - comparator_db
            - comparisons_db
            - contracts_db
            - document-understanding
            - documentations_db
            - drawings_db
            - eav_db
            - flow
            - ingrad-notifications
            - inspections_db
            - issues_db
            - keycloak
            - mailer_db
            - mcc
            - metrics
            - mvp-agents
            - notes_db
            - orchestrator
            - pm-backend
            - processing_db
            - remarks_db
            - resources_db
            - rfi_db
            - sarex-management
            - sarex-compute
            - sarex_db
            - srx-data-engine_db
            - stage-sarex
            - subscriptions_db
            - superset_db
            - system-log_db
            - test_db
            - transmittals_db
            - workspaces_db
            - zitadel
            - zitadel-new