environments: yc-k8s-test: # vault-platform-secrets stack input. Inert for now (enabled:false) so it does # NOT touch existing bootstrap creds already present in the contour Vault. # kv_mount/path_prefix are also used by the secrets stack for sink=vault. vault: enabled: true kv_mount: secrets path_prefix: vault kubernetes_auth_backend: kubernetes default_rsa_bits: 4096 features: create_regcred: false create_smtp_auth: false create_django_auth: false create_rsa_keys: false create_infra_secrets: false create_infra_policies: false create_infra_roles: false create_app_policies: false create_app_roles: false common: regcred: generate: false dockerconfigjson: |- { "auths": { "cr.yandex": { "auth": "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" } } } smtp_auth: generate: true env_json: '{}' django_auth: generate: false token: aGFnZW4wMTM6emVhbG90MDk2 username: hagen013 password: zealot096 extra: documentations_s3_service_account_json: |- { "endpoint": "minio.minio.svc.cluster.local:9000", "access_key_id": "26VjnRwyOxvLZDKeKo6U", "secret_access_key": "D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL", "use_ssl": false, "verify": false } django-auth.json: |- { "token": "aGFnZW4wMTM6emVhbG90MDk2" } pdm-api-db-prod.json: |- { "db_name": "documentations_db", "user": "documentations", "password": "3oKgdVFnlthmunD6F7ZirVWFg80DttQM", "url": "postgresql.documentations.svc.cluster.local:5432", "enable_ssl": "False", "verify": "False", "ssl_mode": "disable" } yc-s3-service-account.json: |- { "endpoint": "minio.minio.svc.cluster.local:9000", "bucket_name": "sarex-media-storage", "access_key_id": "26VjnRwyOxvLZDKeKo6U", "secret_access_key": "D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL", "use_ssl": false, "verify": false } documentations_zitadel_account_json: '{"type":"application","keyId":"363772053548978094","key":"-----BEGIN RSA PRIVATE KEY-----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\nkdebz9Wf+aYf6HDsp0+keLtshfevqo2F9GK4H2ZV2N81gmy+gFeE\n-----END RSA PRIVATE KEY-----\n","appId":"363742266793151621","clientId":"363742266793217157"}' documentations_public_link_jwt_secret: w0B5HoIDR6gQqj1+ap3pX5oMHcFOA0mhenIXlnqbyPc= documentations_releases_token: mock django_zitadel_access_token: msG3wHMP22bk3T92vguZkYZGLcq7k0cIdEvjhYMpgLQn7Q6Q-Ww_VsbF_fBtbFZI6PvlZ44 rsa_keys: generate: false bits: 4096 public_key: |- -----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAscUVLPXzba5y7FEqggn/ n8LEbjpPNxO1WIjHDw7zKwEaI9wKNQJpi2BbsdXdoWifeRnE6odk8rxubi8RxrXN TyFI/aIRaY0OEghiYgGUTLmZyeB+JUWStkbeSH9+ZG7LlaAMnQnM4hAoBAyHMpqv KwkVcWrZnmRnsoU6gby3sGV+5pjxpgKCkMnhkuh6XNX5OxQpDXb5MAYIcvi4p8GI EovKHHwUsLrG5R2MRLYvOYy2L92gMlHEefAio+1UHxikbPteuL67vkMZ0hXBsoza 14V7YkHi8JO58ROvMwKOMqmvf2OHle2Gpv1Kd2OdpTDotxjHibHu/b1vMw0dMboM 6qBKps9vnKVawC3an27wzXpHuMuis3rdho+jiZg8zYgMn7DF0uNR7GgG0zj3w9Bt 0BzfWUeTHoNRn2AYqUB8RliFam0KpaGg0hmIjHEZjEWaZqxzMA4+0JqOFL/z9L+k nIVwdM5UpSIlumQBiT7KiX+YDaXOmpsE6AGGRI9S1P3p6Yy2A907O/hQ5g4bZ3XX G20RF5kdKNi3iS9mOcIB/7tuvs4qCBGCNZRnl/O2cTFlk9sgpzT2F6DyagcGLVzW A4xgy50c6iSs5ihjS/onRx6PGatZRPsfBOIIQSKISe9fv2ya2CpaWx0VNghKZ4a6 DPxA6v2es45J40aCc5N458sCAwEAAQ== -----END PUBLIC KEY----- private_key: |- -----BEGIN PRIVATE KEY----- MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCxxRUs9fNtrnLs USqCCf+fwsRuOk83E7VYiMcPDvMrARoj3Ao1AmmLYFux1d2haJ95GcTqh2TyvG5u LxHGtc1PIUj9ohFpjQ4SCGJiAZRMuZnJ4H4lRZK2Rt5If35kbsuVoAydCcziECgE DIcymq8rCRVxatmeZGeyhTqBvLewZX7mmPGmAoKQyeGS6Hpc1fk7FCkNdvkwBghy +LinwYgSi8ocfBSwusblHYxEti85jLYv3aAyUcR58CKj7VQfGKRs+164vru+QxnS FcGyjNrXhXtiQeLwk7nxE68zAo4yqa9/Y4eV7Yam/Up3Y52lMOi3GMeJse79vW8z DR0xugzqoEqmz2+cpVrALdqfbvDNeke4y6Kzet2Gj6OJmDzNiAyfsMXS41HsaAbT OPfD0G3QHN9ZR5Meg1GfYBipQHxGWIVqbQqloaDSGYiMcRmMRZpmrHMwDj7Qmo4U v/P0v6SchXB0zlSlIiW6ZAGJPsqJf5gNpc6amwToAYZEj1LU/enpjLYD3Ts7+FDm DhtnddcbbREXmR0o2LeJL2Y5wgH/u26+zioIEYI1lGeX87ZxMWWT2yCnNPYXoPJq BwYtXNYDjGDLnRzqJKzmKGNL+idHHo8Zq1lE+x8E4ghBIohJ71+/bJrYKlpbHRU2 CEpnhroM/EDq/Z6zjknjRoJzk3jnywIDAQABAoICAAFhGpd1NxTQSDL+NDq7EiEu tTB3wlqWjA8qTIUY5Bke0pGZqPidUq1Sq5N3KdeRRL9/TDBXqZhaju7K7bPhgDzP cM4K/mCXyBaquvywr3Ji9EcFN2VZo1hHt3zPhG8KDwlTqxVi2JSedHkHkdr6KUbH tMNjBVo9xDI152zPRouXVgM7B5D2rwWpk1b898oVnO/w6ZqhpDBTs6gUtvYSQdiG /iP3cH+oi1eGwapc0YP8TAOWECKj0MbzbolgE4mEOu5fiu4bCMDiq2YeZhjZD++h KQJrqXOdadFtiiv2ppzNBUATSR+ILsXH7FZ9zuDTvtKA3jd6ynRsjlrSjLnwjB4Y mxeIU6gqB75YrKFaaObWM7HzxRM583PTuaO7VW28Cn82xRdjbvuTfWVTOEhDTDc1 mDhe2q6G6GeQLqvbGtS2WRmStBz4rlTKHFZu2sVr17fcgH6cG7OwZDkWy8dvRumq SynAjt3JGMDvxPJf+gfTWOEMxQruvatiATpvMZAeNz60iiairvU4QJVIWu0+7Eh/ PRebkFrYU0XyU6g6x60NIR6SWoVHbY6xPaDaCgIdzJE+1FaVwB9lZSFAbFr5XVBt icFe560+/aa+5uflfNhzLgQ8t81M8lKvURPTG+XtC97ntN06AkohZqtYQhDUuloI b+GNZxWhIfcr9sXS3Tm9AoIBAQDnIJo2sbgLZ/BScMTddmseBHVVt8nWR5nlsePI LQPDFzbicyuMmqDIySqJiUOGvP16Ajpwj7Ck0Dc8pH5j2SfomA9bpaDIv2Z2D+rs wrz3XecyfbhPU7coGAP4+KqEoIqVQR+M0vdgAQBErBtIYyky3hckw2Mvn63ZtgL1 02f30byJMWNxYs+O9+xCtJq2h9njKu/2NLWMEAulf/TkmnVcSh8rsm/CAZ74JPXl mVYF7pqFXt/Ps03/zFPNVGuTkZAD/JObXkpM3Ivlu8/Axizj8heTaIjBKrtmx8MQ fP3A9BTXygjOqaamsbERwxPh+WCaJCRmwoefIpdtgsCBd68PAoIBAQDE5oS1V7Lr DIywYYh8tWocj7WB/Ij4ESCuPW/1PE7x5m31L5W0rDb+qDrgdpCcA6KnLbBMCYfA VV7H9gk+dmeZDV0uP60ZrBIOIwYbxa4FazcfKQOmmKMXYfALQ6td1IYhGuusbZ6s ecq5cg2XjXxNYOfUURfPx9bjywAxCPXRzjWuQdUdQvM6YAGhAc8WpGC9tWX8CThO W1V299xuseIRhvH1/fJz1Rsd/Juthf7Sg8oQPWq3uITmnFJcIFBmsw+sjAlblcUD ach8ubXr+q77szOQfrJIvlpGwxB6ZWVhn0sj6MHUQaA6lHsutRhXYeUgdOIiv3WU PAktWm0F5buFAoIBAEj8A5aX4i0/4iS2VYQ1e7fb4o1x3vuaWp+s3+f7Rv/ZGczC X5Mj1PfyhksuHDO1BDn98CRRS4+P7JFqxDqVfUO2mMrw72fVAO7xMdcX24Illfdc udHa9rBjfQWmyHnfFEPzb5oRmGophsMosejW31CfzyEdzflg7A4eqqqj2mXoRifw f51zfWWBJosd6ukO1yAkE+hkVpvnCTZ2xIdXuw2snlE3JJFX37IuQbQCCqcO5J6P Cg/VaCEJjcD+EoZj5d1MafQa/01sK4UdHIqcSdqlPQqgbObKrqjTFebkAWFn8hj+ RG+2JNjoraiVOHcYP4gNN613ako3Kyg6rL11ZMMCggEAExS/wY8ZIJwbujAJeQRf nxryHQGrCFcokpoTknFguSJ6f2s4F8UkozMMWZpD00qq5YaQ8h1uUV40jC40oR/6 VCOuZv/2t2ksasBMJD7Y6V+FfPiNiQR7sZVlHMJXBgXFZcnlEtWgrdgzpBsAZDJq 3FjKvpGJPDKCiZqvjxDuOYHBQ/zPOUG2rm6FWeQB/JC7a0b79huyoC1Lr/a/Ht8Q KGCqbAtLBpydPx+uunckxaPN3hsFj35LKsn1VUYwZHNvzmnXsk9mQzlqG2Qn1BF8 CZpJIfSVNGV1/CuFGkdfNsGoF3fD6NzfOS4QbetQy48KFEYfb/yb2VykCwgbTpn/ vQKCAQEAsEW6tCYa5W/WQTqmlDT+JQSR0ieA8b/0mDaGfsOX6UEUN9wVPLYVD/lt 6HQr0XAAe3xk9gnEzm8RprZdbqatQJOR6qkq/wJoKPYR+x7Our9pu5t4yi/36Dwf VYsB4Yi4nFIvNSWc38AaG9Xec3FevhQaw2BqrWNEkzqd4FCDHnXoxtjDg3IHafmX bL/M4PyG+7TxE53ibItTpyq2y8iFJBNspR4P+odYeBpdGbPglP3ObfwfDqGokQsY gtj9+mcwEZjjg0BYC5xecVRa1XfO7NcPPFrL9ITcY9EOeLMDzMyMWRMm8qhD3lcs 2aUCwvJKse2bHRn7A9r4uAas7/LEgw== -----END PRIVATE KEY----- infrastructure: postgresql: enabled: true admin: enabled: true generate: false postgres_password: HhYu0T69ahMpofxARTOwnRz0fPRmxJHz users: enabled: true generate: false values: annotations: vl+/lOf3BuI4MZDi45lQPxDv3n99SSKr attachments: okx1odpGdG4g8fzBoF5lYCuEuYHnhOll automation: FoTJrI28FzA2+LG8PvydZLobVpC1URCL bi: ltxf21LoJuwnibDAxC25QYL+sMMzAR+r bim: XxBbC/p9IxzR0IEjYH+2CpW8k6Hk39UC camunda: hd8O7tFPS/R1AG+S++Vc8VXkT2nSFpdd checklists: iMHpqIyJjSIjwAUnb3NWxlxPsgxwDxCw comparator: BG6lNl/S73LxGbFNiF25tVzNAPPSf2na comparisons: uZFzJWmF6F8l2YCtl67GqEuqRfZup8x0 contracts: AvWsVPaVKJcm26tHla507huvSXrGAccu data-engine: v8ZgoRn0xasjwseYg8sO/u5/awXB37o5 documentations: 6GiOfbpy0sSW4bZpwEEMPynvlRs2S5gI drawings: vblxeiMzziOF6Uz0Wk9FjZrkU31GgHyQ eav: id6dLFaFuKQGJVDabxg5wRtmlIb/EWUA flow: 1aWe5MYl3r1eqQC2kKe2J5KWmkTmeWFk inspections: gWjElVIPvf/rzxxH0iKjv5hNygUROLUb issues: TA3DfqaSnPlP3K42S6055fz33pERKsG+ mapper: ea3fb4da25cc679bf0b45db3759aafec keycloak: aq4ksiGgXtgDTh0NtEolN8sWOmAuJauJ mailer: /fsZGV1hE4DUHLaR+AATQOsfYsuF0qxl notes: 1FgsVKYFfdokTuL/uexHv607BdzVqMch pm: NrPL7oFZnSTbMkTq14W3yzr03PrqrxxV premises: yqGrFSxRDmekenzc4GVvaAFPHsCpcxri preprod-sarex: /QDdhNnGLhf0iD8bZIbv//+8jQWMLc0S processing: qs8vnbmc6hOwbpbvaMT6h//rFMuTMxpl pulse: tNZlGDuZfGxPURAbpcopEPlg0zpT03kn remarks: UH0PbInoK0OmTsggVfunVcczPcC1t8fk resources: bcOHGxvOd13yN70VQvLfKAX3atpqezHQ rfi: RCzJRdru078EahEV5G9JErB62GrY0QbT sarex: yfnDddsr49mRj6GyqupcCBVEeh5Pecgq sarex-compute: zjuW7S3LMkcmYmr5BBJUNT6LGJlaoM5K srx-data-engine: tttLY+7tPCWj227jzET4LlzhRhAJXMc8 subscriptions: pyIRhg8guKBVFXOURwM38927uSuqMArp superset: u3DTgmuSioSFNgArryHYELObvp287CwB system-log: nb0m2DaUxweboo3YFdXAWVhYYiR0Xc99 transmittal: 1suxpfECZQFSgXXtMii/iocLBa87p3Vv workspaces: /+tUWMglzQnl4rJSKqBkjT9blPRU6ZXP zitadel: dUNOBcN0TqtXt2l9PiMJs4Xpg3tvccbP! glitchtip: tpIP369TfYg2lRoSDaoNkI1a22id8Loh openobserve: DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc workflow: yh888OkLYkk09x629V9LQ0HvoCO7tSQM apps: eav: enabled: true generate: true username: eav password_key: eav password: "" bi: enabled: true generate: true username: bi password_key: bi password: "" resources: enabled: true generate: true username: resources password_key: resources password: "" comparisons: enabled: true generate: true username: comparisons password_key: comparisons password: "" rfi: enabled: true generate: true username: rfi password_key: rfi password: "" workspaces: enabled: true generate: true username: workspaces password_key: workspaces password: "" inspections: enabled: true generate: true username: inspections password_key: inspections password: "" flows: enabled: true generate: false username: flows password_key: flow password: XSDYmTV7Ro3gfVbI4wPJPwSSFonJ0J2R issues: enabled: true generate: false username: issues password_key: issues password: FZY08pCe24kdDLovelbSacAdCdJsPkwg contracts: enabled: true generate: true username: contracts password_key: contracts password: "" notes: enabled: true generate: true username: notes password_key: notes password: "" mapper: enabled: true generate: true username: mapper password_key: mapper password: "" drawings: enabled: true generate: false username: drawings password_key: drawings password: vblxeiMzziOF6Uz0Wk9FjZrkU31GgHyQ attachments: enabled: true generate: false username: attachments password_key: attachments password: XFHh0Vc9nHhHSVnhihddUHt1tFtzaU21 subscriptions: enabled: true generate: false username: subscriptions password_key: subscriptions password: xg0rIPwHf9tknoWh5H2wopS7xQFhPpvp documentations: enabled: true generate: false username: documentations password_key: documentations password: 3oKgdVFnlthmunD6F7ZirVWFg80DttQM processing: enabled: true generate: false username: workflow password_key: workflow password: yh888OkLYkk09x629V9LQ0HvoCO7tSQM django: enabled: true generate: false username: sarex password_key: sarex password: bIUM9ILEXnTdf3iCnHShiq3oFRj3uiHZ bim: enabled: true generate: false username: bim password_key: bim password: zCmNWzy646HcTGqHvPusgvn3QIyVKeNs system-log: enabled: true generate: false username: system_log password_key: system-log password: nb0m2DaUxweboo3YFdXAWVhYYiR0Xc99 checklists: enabled: true generate: false username: checklists password_key: checklists password: iMHpqIyJjSIjwAUnb3NWxlxPsgxwDxCw pm: enabled: true generate: false username: pm password_key: pm password: CZjelb1OQPKkvhouxD8vBQrquqHa18SM message-hub: enabled: true generate: false username: message-hub password_key: message-hub password: CZjelb1OQPKkvhouxD8vBQrquqHa18SM transmittal: enabled: true generate: true username: transmittal password_key: transmittal password: "" glitchtip: enabled: true generate: false username: glitchtip password_key: glitchtip password: tpIP369TfYg2lRoSDaoNkI1a22id8Loh openobserve: enabled: true generate: false username: openobserve password_key: openobserve password: DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc role: enabled: true name: postgresql service_account_names: - postgresql service_account_namespaces: - postgresql - eav - resources - comparisons - rfi - workspaces - inspections - flows - issues - contracts - notes - drawings - attachments - subscriptions - documentations - processing - django - bim - system-log - checklists - pm - transmittal token_ttl: 24h s3: enabled: true bucket: prod-pg-dumps endpoint: https://storage.yandexcloud.net region: ru-central1 access_key: YCAJEKEAK9OYokZEBTbjElIZR secret_key: YCNB1GCngb0YZtCW6U9uoi-CdaUaHDErbi5nqobZ rabbitmq: enabled: true auth: enabled: true generate: false username: sarex password: YGMWmT05EbkXf2kLvqm4qAlgFiCCJWFM apps: example-generate: enabled: false generate: true username: example-generate password: "" example-manual: enabled: false generate: false username: example-manual password: CHANGE_ME bi: enabled: true generate: true username: bi password: "" vhost: bi permissions: configure: .* write: .* read: .* rfi: enabled: true generate: true username: rfi password: "" vhost: rfi permissions: configure: .* write: .* read: .* flows: enabled: true generate: false username: flows password: mock vhost: flows permissions: configure: .* write: .* read: .* issues: enabled: true generate: false username: issues password: mock vhost: issues permissions: configure: .* write: .* read: .* contracts: enabled: true generate: true username: contracts password: "" vhost: contracts permissions: configure: .* write: .* read: .* notes: enabled: true generate: true username: notes password: "" vhost: notes permissions: configure: .* write: .* read: .* mapper: enabled: true generate: true username: mapper password: "" vhost: mapper permissions: configure: .* write: .* read: .* django: enabled: true generate: true username: django password: "" vhost: django permissions: configure: .* write: .* read: .* processing: enabled: true generate: true username: processing password: "" vhost: processing permissions: configure: .* write: .* read: .* pm: enabled: true generate: false username: pm password: dbKEK8669kLIJG31Ic4okzsnWI9BXe18 vhost: pm_vhost permissions: configure: .* write: .* read: .* transmittal: enabled: true generate: true username: transmittal password: "" vhost: transmitalls permissions: configure: .* write: .* read: .* role: enabled: true name: rabbitmq service_account_names: - rabbitmq service_account_namespaces: - rabbitmq token_ttl: 24h minio: enabled: true admin: enabled: true generate: false root_user: 26VjnRwyOxvLZDKeKo6U root_password: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL apps: eav: enabled: true generate: true username: eav password: "" access_key: eav secret_key: "" policy: readwrite buckets: - name: eav policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 bi: enabled: true generate: true username: bi password: "" access_key: bi secret_key: "" policy: readwrite buckets: - name: bi policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 resources: enabled: true generate: true username: resources password: "" access_key: resources secret_key: "" policy: readwrite buckets: - name: resources policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 example-generate: enabled: false generate: true username: example-generate password: "" example-manual: enabled: false generate: false username: example-manual password: CHANGE_ME rfi: enabled: true generate: true username: rfi password: "" access_key: rfi secret_key: "" policy: readwrite buckets: - name: rfi policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 issues: enabled: true generate: true username: issues password: "" access_key: issues secret_key: "" policy: readwrite buckets: - name: rfi policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 contracts: enabled: true generate: true username: contracts password: "" access_key: contracts secret_key: "" policy: readwrite buckets: - name: contracts policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 notes: enabled: true generate: true username: notes password: "" access_key: notes secret_key: "" policy: readwrite buckets: - name: notes policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 mapper: enabled: true generate: true username: mapper password: "" access_key: mapper secret_key: "" policy: readwrite buckets: - name: mapper policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 measurements: enabled: true generate: true username: measurements password: "" access_key: measurements secret_key: "" policy: readwrite buckets: - name: measurements policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: us-east-1 subscriptions: enabled: true generate: true username: subscriptions password: "" access_key: subscriptions secret_key: "" policy: readwrite buckets: - name: subscriptions policy: private client: endpoint: https://minio.contour.infra.sarex.tech region: ru-central1 documentations: enabled: true generate: true username: documentations password: "" access_key: documentations secret_key: "" policy: readwrite buckets: - name: sarex-media-storage policy: private client: endpoint: https://minio.contour.infra.sarex.tech region: ru-central1 processing: enabled: true generate: true username: processing password: "" access_key: processing secret_key: "" policy: readwrite buckets: - name: sarex-media-storage policy: private client: endpoint: https://minio.contour.infra.sarex.tech region: ru-central1 django: enabled: true generate: true username: django password: "" access_key: django secret_key: "" policy: readwrite buckets: - name: rfi policy: private client: endpoint: https://minio.contour.infra.sarex.tech region: ru-central1 attachments: enabled: true generate: false username: attachments password: l10P6e3J0OnwMCvS5hDaohykOS7bpfHs access_key: attachments secret_key: l10P6e3J0OnwMCvS5hDaohykOS7bpfHs policy: readwrite buckets: - name: attachments policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: ru-central pm: enabled: true generate: false username: pm_user password: 9lpfAa4tySdWGJH74vMP9m8xVKAW5X2O access_key: pm_user secret_key: 9lpfAa4tySdWGJH74vMP9m8xVKAW5X2O policy: readwrite buckets: - name: pm-bucket policy: private client: endpoint: http://minio.minio:9000 region: ru-central message-hub: enabled: true generate: false username: 26VjnRwyOxvLZDKeKo6U password: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL access_key: 26VjnRwyOxvLZDKeKo6U secret_key: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL policy: readwrite buckets: - name: rfi policy: private client: endpoint: https://minio.contour.infra.sarex.tech region: ru-central1 transmittal: enabled: true generate: true username: transmittal password: "" access_key: transmittal secret_key: "" policy: readwrite buckets: - name: transmittal-storage policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: ru-central1 openobserve: enabled: true generate: false username: openobserve password: dDFQMBQT59Zj9xz61SlbgSp8qVjXG41g access_key: openobserve secret_key: dDFQMBQT59Zj9xz61SlbgSp8qVjXG41g policy: readwrite buckets: - name: open-observe policy: private client: endpoint: http://minio.minio.svc.cluster.local:9000 region: ru-central1 role: enabled: true name: minio service_account_names: - minio-sa service_account_namespaces: - minio token_ttl: 24h kafka: enabled: true bootstrap: enabled: true generate: false cluster_id: In7i35Cm21NIQdKrFWikoJ controller_password: 0gb08YqABo inter_broker_password: 6yQeW91kM5 apps: bi: enabled: true generate: true username: bi password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: - name: bi.events partitions: 3 replication_factor: 1 configs: cleanup.policy: delete retention.ms: "604800000" example-generate: enabled: false generate: true username: example-generate password: "" example-manual: enabled: false generate: false username: example-manual password: CHANGE_ME inspections: enabled: true generate: true username: inspections password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: [] contracts: enabled: true generate: true username: contracts password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: - name: contracts.events partitions: 3 replication_factor: 1 configs: cleanup.policy: delete retention.ms: "604800000" notes: enabled: true generate: true username: notes password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: - name: notes.events partitions: 3 replication_factor: 1 configs: cleanup.policy: delete retention.ms: "604800000" mapper: enabled: true generate: true username: mapper password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: - name: mapper.events partitions: 3 replication_factor: 1 configs: cleanup.policy: delete retention.ms: "604800000" django: enabled: true generate: true username: django password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: [] system-log: enabled: true generate: true username: system-log password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: - name: system-log.events partitions: 3 replication_factor: 1 configs: cleanup.policy: delete retention.ms: "604800000" message-hub: enabled: true generate: true username: message-hub password: "" auth: bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094 security_protocol: SASL_PLAINTEXT sasl_mechanism: SCRAM-SHA-512 topics: [] role: enabled: true name: kafka service_account_names: - kafka-kafka-contour service_account_namespaces: - kafka token_ttl: 24h zitadel: enabled: true postgresql: enabled: true generate: false password: dUNOBcN0TqtXt2l9PiMJs4Xpg3tvccbP! role: enabled: true name: zitadel service_account_names: - zitadel-idp-contour service_account_namespaces: - zitadel token_ttl: 24h camunda: enabled: true identity_components: enabled: true generate: false values: connectors-secret: tacvhL3XqtPjmPcEamAEfsKHa5DEaTX9 console-secret: ko0OvfFZp6TsWpRdWUHowaYQTBPiVfKD keycloak-secret: HJJ62y2FEb94xHPPhtShAexqFEHoxF6bk operate-secret: kx3TElg1gsmPDzFCIpII4bpsDaFo8Hoz optimize-secret: 71oCa8h02PyRKatj5phFMyiMMbcOEKlX tasklist-secret: DP3AlJTxLITngf7VU9R8PbEJF4GZhaUZ zeebe-secret: Rbabrjk61TtYcmnMbItRbyzsVIzTswlk identity_firstuser: enabled: true generate: false identity_firstuser_password: W4IZJeSKIElh4aNlR3bFaicdc8uJWdSn keycloak_admin: enabled: true generate: false admin_password: JGb1cctzjo9s6WofGunnPbIoegiALWkb postgresql: enabled: true generate: false password: Nhx7bFq1jpvssLdCNXl9yB3naB15cFLF postgres_password: w8rNw1MVzV1I9I8CMLeh3thjeOqqMRHO role: enabled: true name: camunda service_account_names: - camunda-connectors - camunda-identity - camunda-operate - camunda-optimize - camunda-tasklist - camunda-postgresql - camunda-keycloak - camunda-identity-postgresql service_account_namespaces: - camunda token_ttl: 24h keycloak: enabled: true admin: enabled: true generate: false password: 718b69567f60eef1d4956faaa7dbe1ce6b600183 postgresql: enabled: true generate: false host: postgresql.postgresql.svc.cluster.local port: 5432 user: keycloak database: keycloak applications: eav: enabled: true policy_name: eav role_name: eav service_account_names: - eav-vault service_account_namespaces: - eav token_ttl: 24h read_paths: - postgresql/apps/eav - minio/apps/eav - vault/common/rsa_keys resources: enabled: true policy_name: resources role_name: resources service_account_names: - resources-vault service_account_namespaces: - resources token_ttl: 24h read_paths: - postgresql/apps/resources - minio/apps/resources comparisons: enabled: true policy_name: comparisons role_name: comparisons service_account_names: - comparisons-vault service_account_namespaces: - comparisons token_ttl: 24h read_paths: - postgresql/apps/comparisons - vault/common/rsa_keys drawings: enabled: true policy_name: drawings role_name: drawings service_account_names: - drawings-vault service_account_namespaces: - drawings token_ttl: 24h read_paths: - postgresql/apps/drawings measurements: enabled: true policy_name: measurements role_name: measurements service_account_names: - measurements-vault service_account_namespaces: - measurements token_ttl: 24h read_paths: - minio/apps/measurements attachments: enabled: true policy_name: attachments role_name: attachments service_account_names: - attachments-vault service_account_namespaces: - attachments token_ttl: 24h read_paths: - postgresql/apps/attachments - minio/apps/attachments rfi: enabled: true policy_name: rfi role_name: rfi service_account_names: - rfi-vault service_account_namespaces: - rfi token_ttl: 24h read_paths: - postgresql/apps/rfi - minio/apps/rfi - rabbitmq/apps/rfi - vault/common/django_auth workspaces: enabled: true policy_name: workspaces role_name: workspaces service_account_names: - workspaces-vault service_account_namespaces: - workspaces token_ttl: 24h read_paths: - postgresql/apps/workspaces - vault/common/django_auth inspections: enabled: true policy_name: inspections role_name: inspections service_account_names: - inspections-vault service_account_namespaces: - inspections token_ttl: 24h read_paths: - postgresql/apps/inspections - kafka/apps/inspections - vault/common/django_auth flows: enabled: true policy_name: flows role_name: flows service_account_names: - flows-vault service_account_namespaces: - flows token_ttl: 24h read_paths: - postgresql/apps/flows - rabbitmq/apps/flows - vault/common/django_auth - vault/common/rsa_keys issues: enabled: true policy_name: issues role_name: issues service_account_names: - issues-vault service_account_namespaces: - issues token_ttl: 24h read_paths: - postgresql/apps/issues - rabbitmq/apps/issues - minio/apps/issues - vault/common/django_auth - vault/common/rsa_keys contracts: enabled: true policy_name: contracts role_name: contracts service_account_names: - contracts-vault service_account_namespaces: - contracts token_ttl: 24h read_paths: - postgresql/apps/contracts - rabbitmq/apps/contracts - minio/apps/contracts - kafka/apps/contracts - vault/common/rsa_keys notes: enabled: true policy_name: notes role_name: notes service_account_names: - notes-vault service_account_namespaces: - notes token_ttl: 24h read_paths: - postgresql/apps/notes - rabbitmq/apps/notes - minio/apps/notes - kafka/apps/notes - vault/common/django_auth mapper: enabled: true policy_name: mapper role_name: mapper service_account_names: - mapper-vault service_account_namespaces: - mapper token_ttl: 24h read_paths: - postgresql/apps/mapper - rabbitmq/apps/mapper - minio/apps/mapper - kafka/apps/mapper - vault/common/django_auth subscriptions: enabled: true policy_name: subscriptions role_name: subscriptions service_account_names: - subscriptions-vault service_account_namespaces: - subscriptions token_ttl: 24h read_paths: - postgresql/apps/subscriptions - minio/apps/subscriptions documentations: enabled: true policy_name: documentations role_name: documentations service_account_names: - documentations-vault service_account_namespaces: - documentations token_ttl: 24h read_paths: - postgresql/apps/documentations - minio/apps/documentations - vault/common/django_auth - vault/common/rsa_keys processing: enabled: true policy_name: processing role_name: processing service_account_names: - processing-vault service_account_namespaces: - processing token_ttl: 24h read_paths: - postgresql/apps/processing - rabbitmq/apps/processing - minio/apps/processing - vault/common/rsa_keys - vault/common/smtp_auth - vault/common/django_auth django: enabled: true policy_name: django role_name: django service_account_names: - django-vault service_account_namespaces: - django token_ttl: 24h read_paths: - postgresql/apps/django - rabbitmq/apps/django - minio/apps/django - kafka/apps/django - vault/common/rsa_keys - vault/common/django_auth bim: enabled: true policy_name: bim role_name: bim service_account_names: - bim-vault service_account_namespaces: - bim token_ttl: 24h read_paths: - postgresql/apps/bim system-log: enabled: true policy_name: system-log role_name: system-log service_account_names: - system-log-vault service_account_namespaces: - system-log token_ttl: 24h read_paths: - postgresql/apps/system-log - kafka/apps/system-log - vault/common/django_auth cde: enabled: true policy_name: cde role_name: cde service_account_names: - cde-vault service_account_namespaces: - cde token_ttl: 24h secret_path: vault/apps/cde secret_data: AMQP_HOST: rabbitmq.rabbitmq.svc.cluster.local AMQP_PASSWORD: Ql0fEzMtSkjf5mZOgn6yubybqqyDWoIt AMQP_PATH_API: cde AMQP_PORT: "5672" AMQP_USER: cde AUTH_HOST: http://backend.django.svc.cluster.local:8000/api CAMUNDA_CLIENT_ID: operate CAMUNDA_CLIENT_SECRET: identity-secret-for-components CAMUNDA_KEYCLOAK_URL: http://camunda-keycloak.camunda.svc.cluster.local CAMUNDA_PROCESS_DEFINITION_ID: actionsOnApproval DATABASE_URL: postgres://pdm:9293213v@sarex-vpsql-01.xc.wb.ru:5432/documentations_db FLOWS_URL: http://backend-service.flows.svc.cluster.local:8000/api/v1 LOG_LEVEL: info OPERATE_URL: http://camunda-operate.camunda.svc.cluster.local:80 PASSWORD: zealot096 PDM_URL: http://documentations-api.documentations.svc.cluster.local:8080/api/v1 PUBLIC_KEY: |- -----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAscUVLPXzba5y7FEqggn/ n8LEbjpPNxO1WIjHDw7zKwEaI9wKNQJpi2BbsdXdoWifeRnE6odk8rxubi8RxrXN TyFI/aIRaY0OEghiYgGUTLmZyeB+JUWStkbeSH9+ZG7LlaAMnQnM4hAoBAyHMpqv KwkVcWrZnmRnsoU6gby3sGV+5pjxpgKCkMnhkuh6XNX5OxQpDXb5MAYIcvi4p8GI EovKHHwUsLrG5R2MRLYvOYy2L92gMlHEefAio+1UHxikbPteuL67vkMZ0hXBsoza 14V7YkHi8JO58ROvMwKOMqmvf2OHle2Gpv1Kd2OdpTDotxjHibHu/b1vMw0dMboM 6qBKps9vnKVawC3an27wzXpHuMuis3rdho+jiZg8zYgMn7DF0uNR7GgG0zj3w9Bt 0BzfWUeTHoNRn2AYqUB8RliFam0KpaGg0hmIjHEZjEWaZqxzMA4+0JqOFL/z9L+k nIVwdM5UpSIlumQBiT7KiX+YDaXOmpsE6AGGRI9S1P3p6Yy2A907O/hQ5g4bZ3XX G20RF5kdKNi3iS9mOcIB/7tuvs4qCBGCNZRnl/O2cTFlk9sgpzT2F6DyagcGLVzW A4xgy50c6iSs5ihjS/onRx6PGatZRPsfBOIIQSKISe9fv2ya2CpaWx0VNghKZ4a6 DPxA6v2es45J40aCc5N458sCAwEAAQ== -----END PUBLIC KEY----- S3_ACCESS_KEY_ID: 26VjnRwyOxvLZDKeKo6U S3_ENDPOINT_URL: http://minio.minio.svc.cluster.local:9000 S3_SECRET_ACCESS_KEY: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL TELEGRAM_ALERT_GROUP_ID: "-4947445467" TELEGRAM_TOKEN: 7029810468:AAFAQB5_F9M_vGdgtiW9PCG5SRwHpX6JsTg USERNAME: hagen013 WORKFLOWS_HOST: http://workflows-api-service.workflow.svc.cluster.local:8000 WORKSPACES_URL: http://workspaces-service.workspaces.svc.cluster.local:8000 ZEEBE_GATEWAY: camunda-zeebe-gateway.camunda.svc.cluster.local:26500 checklists: enabled: true policy_name: checklists role_name: checklists service_account_names: - checklists-vault service_account_namespaces: - checklists token_ttl: 24h read_paths: - postgresql/apps/checklists - vault/common/rsa_keys pm: enabled: true policy_name: pm role_name: pm service_account_names: - pm-vault service_account_namespaces: - pm token_ttl: 24h read_paths: - postgresql/apps/pm - rabbitmq/apps/pm - minio/apps/pm message-hub: enabled: true policy_name: message-hub role_name: message-hub service_account_names: - message-hub-vault service_account_namespaces: - message-hub token_ttl: 24h read_paths: - postgresql/apps/message-hub - minio/apps/message-hub - kafka/apps/message-hub transmittal: enabled: true policy_name: transmittal role_name: transmittal service_account_names: - transmittal-vault service_account_namespaces: - transmittal token_ttl: 24h read_paths: - postgresql/apps/transmittal - rabbitmq/apps/transmittal - minio/apps/transmittal - vault/common/django_auth - vault/common/rsa_keys - vault/apps/transmittal secret_path: vault/apps/transmittal secret_data: TRANSMITTAL_SERVICE_MAILGUN__API_KEY: CHANGE_ME glitchtip: enabled: true policy_name: glitchtip role_name: glitchtip service_account_names: - glitchtip-vault service_account_namespaces: - glitchtip token_ttl: 24h read_paths: - vault/apps/glitchtip secret_path: vault/apps/glitchtip secret_data: DATABASE_URL: postgres://glitchtip:tpIP369TfYg2lRoSDaoNkI1a22id8Loh@postgresql.postgresql.svc.cluster.local:5432/glitchtip?sslmode=disable PGHOST: postgresql.postgresql.svc.cluster.local PGPORT: "5432" PGDATABASE: glitchtip PGUSER: glitchtip PGPASSWORD: tpIP369TfYg2lRoSDaoNkI1a22id8Loh PGSSLMODE: disable PGSSLROOTCERT: "" PG_CA_CERT: "" REDIS_URL: redis://glitchtip-redis:6379/1 SECRET_KEY: tNvzMvpLTyzCHhWxYmG3rNmAL7VJNpnnoOXwZJotQd9aJGRZpU GLITCHTIP_ADMIN_EMAIL: admin@example.local GLITCHTIP_ADMIN_PASSWORD: YKovF9riqtWInWdVU8wL6D95 EMAIL_URL: smtp:// DEFAULT_FROM_EMAIL: glitchtip@example.local openobserve: enabled: true policy_name: openobserve role_name: openobserve service_account_names: - openobserve-vault service_account_namespaces: - openobserve - opentelemetry-collector token_ttl: 24h read_paths: - vault/apps/openobserve secret_path: vault/apps/openobserve secret_data: ZO_ROOT_USER_EMAIL: admin@example.local ZO_ROOT_USER_PASSWORD: 6eB2fsS8jzgoBiYGmpXsGBsD ZO_META_POSTGRES_DSN: postgres://openobserve:DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc@postgresql.postgresql.svc.cluster.local:5432/openobserve?sslmode=disable ZO_NATS_ADDR: nats://openobserve-nats:4222 PGHOST: postgresql.postgresql.svc.cluster.local PGPORT: "5432" PGDATABASE: openobserve PGUSER: openobserve PGPASSWORD: DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc PGSSLMODE: disable PGSSLROOTCERT: "" PG_CA_CERT: "" ZO_S3_ACCESS_KEY: openobserve ZO_S3_SECRET_KEY: dDFQMBQT59Zj9xz61SlbgSp8qVjXG41g OPENOBSERVE_BASIC_AUTH: YWRtaW5AZXhhbXBsZS5sb2NhbDo2ZUIyZnNTOGp6Z29CaVlHbXBYc0dCc0Q= ZO_S3_BUCKET_NAME: open-observe ZO_S3_SERVER_URL: http://minio.minio.svc.cluster.local:9000 secrets: # 1) static secret -> k8s Secret (keys declared here, base64 as in k8s .data) - name: test-static-k8s namespace: contour type: opaque sink: k8s lifecycle: ignore_changes: false data: test-key: ENC[AES256_GCM,data:dk1vztX7BS9yK050MByZYA==,iv:f9PcVA5KKRagstmx+tJmpgGe4Vs3pbkn1ITwFlCddSc=,tag:Q3Sa7AbSmKxgm0Qf7JleiQ==,type:str] #ENC[AES256_GCM,data:LFmldlcwWt6uFpTvoqxP3E96O6AOdIKcpq2cs8dgr+PvOj80BZky6MKY5EFnVcRho+S8GVWiFMQgHd1bZ0I/RiYrsGZIIw==,iv:B9kJcE2uXp43KUW4uD0UMc+R27OA8mMb59HoLdCBhR0=,tag:vVGgIin78ZYqq1RdOC9M7w==,type:comment] - name: test-db-k8s namespace: contour type: database sink: k8s depends_on: cluster: incluster db: test_db user: test_user lifecycle: ignore_changes: false # 3) static secret -> Vault KV (secrets/vault/test/static) - name: test-static-vault namespace: contour type: opaque sink: vault vault_path: vault/test/static lifecycle: ignore_changes: false data: test-key: ENC[AES256_GCM,data:MyyhJgFeO5C2JKGmTfHCbQ==,iv:dSnaqozTbBvtyhxb/KF4dCQb6+/lHjKQ3E8UBHNETXU=,tag:g1OG1nSMgi5pV9KOB686sQ==,type:str] #ENC[AES256_GCM,data:bx2tWgBJth90e6koKcoDrw54AYcFlRT9xWyEv8CK2XwypoDgD13t1w4X3BghPCqqiNrnX1z4nomYzrNoNYj67BV4EFAWnVBW62QKgLCZ0ujXTZId0Q==,iv:089lZVOiwDp7fdVgW4KYPH1CCVDwyU8T6K/Z7EBerTc=,tag:MpVTtMie4jiK7jpfGf80tA==,type:comment] - name: test-bucket-vault namespace: contour type: s3 sink: vault vault_path: vault/test/bucket depends_on: bucket: test-bucket lifecycle: ignore_changes: false ugmk: vault: enabled: true kv_mount: secrets path_prefix: vault kubernetes_auth_backend: kubernetes default_rsa_bits: 4096 features: create_regcred: true create_smtp_auth: true create_django_auth: true create_rsa_keys: true create_infra_secrets: false create_infra_policies: true create_infra_roles: true create_app_policies: true create_app_roles: true common: regcred: generate: false dockerconfigjson: |- { "auths": { "cr.yandex": { "auth": "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" } } } django_auth: token: dGVzdC11c2VyOnRlc3QtcGFzcw== infrastructure: {} applications: attachments: read_paths: - apps/attachments/postgres secrets: - name: attachments-postgres type: database sink: vault vault_path: apps/attachments/postgres depends_on: cluster: main db: attachments_db user: attachments sops: kms: [] gcp_kms: [] azure_kv: [] hc_vault: [] age: - recipient: age198ea80z7gan2ruetn288ln6rl2qh7xtsqqpwrjtyn8maya3364fsvpdd63 enc: | -----BEGIN AGE ENCRYPTED FILE----- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzRmQremFMODRGRHp1UGF3 Z0pmWTRJbXpRUnk4Q0V6dWVPengvdzlCZjB3ClMvbXpsQlIrNXFJelVsQThTS28z UHhkR2MzeEpISm51QmcrWjg5V3k3QjgKLS0tIHhma3pFdVpXZkZJMTJRYXU5TG9Q MW9DNE1MZUF5OVY5eFdFOWR0NE5iSXMKiF9pj/NiCgAqGnJuBEtg5GlDTAL9koDf p3ZuKa7xultkB/M0ZdL5TYwB4FzSOqok8B4BuNeObU5mAqGwgX88xQ== -----END AGE ENCRYPTED FILE----- lastmodified: "2026-07-20T13:32:05Z" mac: ENC[AES256_GCM,data:hQ7odSWL6/yWoOwzUWLzmOW6JoJXbOGLYNuUtNpx/axWVR6ittmUi+B1f5YLgFsMGT1tDGezjVX16hO6GjAQagdqnRO76Nwy5Zn3j8p9QHpnBlhxUgQBuX400UoBykj+0MbKF5fAPlopF3wquZ6zt+kFHu2zWwoSj+zlDFwr600=,iv:3IRSyjPU6ChJ1uMaAI6ZAFZDIX3NPDS0jq1TTkRKpWE=,tag:5Ee1HaSJYcUvP7yUapu6Cw==,type:str] pgp: [] encrypted_regex: ^(data)$ version: 3.9.0