sarex/terraform-contour-mirror
1
0
Fork 0
mirror of https://gitlab.sarex.io/infra/terraform-contour-mirror.git synced 2026-08-05 18:31:00 +03:00
Code Issues Actions Packages Projects Releases Wiki Activity
1f50e8533a
terraform-contour-mirror/infrastructure-secrets.yaml

1587 lines
83 KiB
YAML
Raw Blame History

environments:
yc-k8s-test:
# vault-platform-secrets stack input. Inert for now (enabled:false) so it does
# NOT touch existing bootstrap creds already present in the contour Vault.
# kv_mount/path_prefix are also used by the secrets stack for sink=vault.
vault:
enabled: true
kv_mount: secrets
path_prefix: vault
kubernetes_auth_backend: kubernetes
default_rsa_bits: 4096
features:
create_regcred: false
create_smtp_auth: false
create_django_auth: false
create_rsa_keys: false
create_infra_secrets: false
create_infra_policies: false
create_infra_roles: false
create_app_policies: false
create_app_roles: false
common:
regcred:
generate: false
dockerconfigjson: |-
{
"auths": {
"cr.yandex": {
"auth": "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"
}
}
}
smtp_auth:
generate: true
env_json: '{}'
django_auth:
generate: false
token: aGFnZW4wMTM6emVhbG90MDk2
username: hagen013
password: zealot096
extra:
documentations_s3_service_account_json: |-
{
"endpoint": "minio.minio.svc.cluster.local:9000",
"access_key_id": "26VjnRwyOxvLZDKeKo6U",
"secret_access_key": "D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL",
"use_ssl": false,
"verify": false
}
django-auth.json: |-
{
"token": "aGFnZW4wMTM6emVhbG90MDk2"
}
pdm-api-db-prod.json: |-
{
"db_name": "documentations_db",
"user": "documentations",
"password": "3oKgdVFnlthmunD6F7ZirVWFg80DttQM",
"url": "postgresql.documentations.svc.cluster.local:5432",
"enable_ssl": "False",
"verify": "False",
"ssl_mode": "disable"
}
yc-s3-service-account.json: |-
{
"endpoint": "minio.minio.svc.cluster.local:9000",
"bucket_name": "sarex-media-storage",
"access_key_id": "26VjnRwyOxvLZDKeKo6U",
"secret_access_key": "D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL",
"use_ssl": false,
"verify": false
}
documentations_zitadel_account_json: '{"type":"application","keyId":"363772053548978094","key":"-----BEGIN RSA PRIVATE KEY-----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\nkdebz9Wf+aYf6HDsp0+keLtshfevqo2F9GK4H2ZV2N81gmy+gFeE\n-----END RSA PRIVATE KEY-----\n","appId":"363742266793151621","clientId":"363742266793217157"}'
documentations_public_link_jwt_secret: w0B5HoIDR6gQqj1+ap3pX5oMHcFOA0mhenIXlnqbyPc=
documentations_releases_token: mock
django_zitadel_access_token: msG3wHMP22bk3T92vguZkYZGLcq7k0cIdEvjhYMpgLQn7Q6Q-Ww_VsbF_fBtbFZI6PvlZ44
rsa_keys:
generate: false
bits: 4096
public_key: |-
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----
private_key: |-
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
infrastructure:
postgresql:
enabled: true
admin:
enabled: true
generate: false
postgres_password: HhYu0T69ahMpofxARTOwnRz0fPRmxJHz
users:
enabled: true
generate: false
values:
annotations: vl+/lOf3BuI4MZDi45lQPxDv3n99SSKr
attachments: okx1odpGdG4g8fzBoF5lYCuEuYHnhOll
automation: FoTJrI28FzA2+LG8PvydZLobVpC1URCL
bi: ltxf21LoJuwnibDAxC25QYL+sMMzAR+r
bim: XxBbC/p9IxzR0IEjYH+2CpW8k6Hk39UC
camunda: hd8O7tFPS/R1AG+S++Vc8VXkT2nSFpdd
checklists: iMHpqIyJjSIjwAUnb3NWxlxPsgxwDxCw
comparator: BG6lNl/S73LxGbFNiF25tVzNAPPSf2na
comparisons: uZFzJWmF6F8l2YCtl67GqEuqRfZup8x0
contracts: AvWsVPaVKJcm26tHla507huvSXrGAccu
data-engine: v8ZgoRn0xasjwseYg8sO/u5/awXB37o5
documentations: 6GiOfbpy0sSW4bZpwEEMPynvlRs2S5gI
drawings: vblxeiMzziOF6Uz0Wk9FjZrkU31GgHyQ
eav: id6dLFaFuKQGJVDabxg5wRtmlIb/EWUA
flow: 1aWe5MYl3r1eqQC2kKe2J5KWmkTmeWFk
inspections: gWjElVIPvf/rzxxH0iKjv5hNygUROLUb
issues: TA3DfqaSnPlP3K42S6055fz33pERKsG+
mapper: ea3fb4da25cc679bf0b45db3759aafec
keycloak: aq4ksiGgXtgDTh0NtEolN8sWOmAuJauJ
mailer: /fsZGV1hE4DUHLaR+AATQOsfYsuF0qxl
notes: 1FgsVKYFfdokTuL/uexHv607BdzVqMch
pm: NrPL7oFZnSTbMkTq14W3yzr03PrqrxxV
premises: yqGrFSxRDmekenzc4GVvaAFPHsCpcxri
preprod-sarex: /QDdhNnGLhf0iD8bZIbv//+8jQWMLc0S
processing: qs8vnbmc6hOwbpbvaMT6h//rFMuTMxpl
pulse: tNZlGDuZfGxPURAbpcopEPlg0zpT03kn
remarks: UH0PbInoK0OmTsggVfunVcczPcC1t8fk
resources: bcOHGxvOd13yN70VQvLfKAX3atpqezHQ
rfi: RCzJRdru078EahEV5G9JErB62GrY0QbT
sarex: yfnDddsr49mRj6GyqupcCBVEeh5Pecgq
sarex-compute: zjuW7S3LMkcmYmr5BBJUNT6LGJlaoM5K
srx-data-engine: tttLY+7tPCWj227jzET4LlzhRhAJXMc8
subscriptions: pyIRhg8guKBVFXOURwM38927uSuqMArp
superset: u3DTgmuSioSFNgArryHYELObvp287CwB
system-log: nb0m2DaUxweboo3YFdXAWVhYYiR0Xc99
transmittal: 1suxpfECZQFSgXXtMii/iocLBa87p3Vv
workspaces: /+tUWMglzQnl4rJSKqBkjT9blPRU6ZXP
zitadel: dUNOBcN0TqtXt2l9PiMJs4Xpg3tvccbP!
glitchtip: tpIP369TfYg2lRoSDaoNkI1a22id8Loh
openobserve: DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc
workflow: yh888OkLYkk09x629V9LQ0HvoCO7tSQM
apps:
eav:
enabled: true
generate: true
username: eav
password_key: eav
password: ""
bi:
enabled: true
generate: true
username: bi
password_key: bi
password: ""
resources:
enabled: true
generate: true
username: resources
password_key: resources
password: ""
comparisons:
enabled: true
generate: true
username: comparisons
password_key: comparisons
password: ""
rfi:
enabled: true
generate: true
username: rfi
password_key: rfi
password: ""
workspaces:
enabled: true
generate: true
username: workspaces
password_key: workspaces
password: ""
inspections:
enabled: true
generate: true
username: inspections
password_key: inspections
password: ""
flows:
enabled: true
generate: false
username: flows
password_key: flow
password: XSDYmTV7Ro3gfVbI4wPJPwSSFonJ0J2R
issues:
enabled: true
generate: false
username: issues
password_key: issues
password: FZY08pCe24kdDLovelbSacAdCdJsPkwg
contracts:
enabled: true
generate: true
username: contracts
password_key: contracts
password: ""
notes:
enabled: true
generate: true
username: notes
password_key: notes
password: ""
mapper:
enabled: true
generate: true
username: mapper
password_key: mapper
password: ""
drawings:
enabled: true
generate: false
username: drawings
password_key: drawings
password: vblxeiMzziOF6Uz0Wk9FjZrkU31GgHyQ
attachments:
enabled: true
generate: false
username: attachments
password_key: attachments
password: XFHh0Vc9nHhHSVnhihddUHt1tFtzaU21
subscriptions:
enabled: true
generate: false
username: subscriptions
password_key: subscriptions
password: xg0rIPwHf9tknoWh5H2wopS7xQFhPpvp
documentations:
enabled: true
generate: false
username: documentations
password_key: documentations
password: 3oKgdVFnlthmunD6F7ZirVWFg80DttQM
processing:
enabled: true
generate: false
username: workflow
password_key: workflow
password: yh888OkLYkk09x629V9LQ0HvoCO7tSQM
django:
enabled: true
generate: false
username: sarex
password_key: sarex
password: bIUM9ILEXnTdf3iCnHShiq3oFRj3uiHZ
bim:
enabled: true
generate: false
username: bim
password_key: bim
password: zCmNWzy646HcTGqHvPusgvn3QIyVKeNs
system-log:
enabled: true
generate: false
username: system_log
password_key: system-log
password: nb0m2DaUxweboo3YFdXAWVhYYiR0Xc99
checklists:
enabled: true
generate: false
username: checklists
password_key: checklists
password: iMHpqIyJjSIjwAUnb3NWxlxPsgxwDxCw
pm:
enabled: true
generate: false
username: pm
password_key: pm
password: CZjelb1OQPKkvhouxD8vBQrquqHa18SM
message-hub:
enabled: true
generate: false
username: message-hub
password_key: message-hub
password: CZjelb1OQPKkvhouxD8vBQrquqHa18SM
transmittal:
enabled: true
generate: true
username: transmittal
password_key: transmittal
password: ""
glitchtip:
enabled: true
generate: false
username: glitchtip
password_key: glitchtip
password: tpIP369TfYg2lRoSDaoNkI1a22id8Loh
openobserve:
enabled: true
generate: false
username: openobserve
password_key: openobserve
password: DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc
role:
enabled: true
name: postgresql
service_account_names:
- postgresql
service_account_namespaces:
- postgresql
- eav
- resources
- comparisons
- rfi
- workspaces
- inspections
- flows
- issues
- contracts
- notes
- drawings
- attachments
- subscriptions
- documentations
- processing
- django
- bim
- system-log
- checklists
- pm
- transmittal
token_ttl: 24h
s3:
enabled: true
bucket: prod-pg-dumps
endpoint: https://storage.yandexcloud.net
region: ru-central1
access_key: YCAJEKEAK9OYokZEBTbjElIZR
secret_key: YCNB1GCngb0YZtCW6U9uoi-CdaUaHDErbi5nqobZ
rabbitmq:
enabled: true
auth:
enabled: true
generate: false
username: sarex
password: YGMWmT05EbkXf2kLvqm4qAlgFiCCJWFM
apps:
example-generate:
enabled: false
generate: true
username: example-generate
password: ""
example-manual:
enabled: false
generate: false
username: example-manual
password: CHANGE_ME
bi:
enabled: true
generate: true
username: bi
password: ""
vhost: bi
permissions:
configure: .*
write: .*
read: .*
rfi:
enabled: true
generate: true
username: rfi
password: ""
vhost: rfi
permissions:
configure: .*
write: .*
read: .*
flows:
enabled: true
generate: false
username: flows
password: mock
vhost: flows
permissions:
configure: .*
write: .*
read: .*
issues:
enabled: true
generate: false
username: issues
password: mock
vhost: issues
permissions:
configure: .*
write: .*
read: .*
contracts:
enabled: true
generate: true
username: contracts
password: ""
vhost: contracts
permissions:
configure: .*
write: .*
read: .*
notes:
enabled: true
generate: true
username: notes
password: ""
vhost: notes
permissions:
configure: .*
write: .*
read: .*
mapper:
enabled: true
generate: true
username: mapper
password: ""
vhost: mapper
permissions:
configure: .*
write: .*
read: .*
django:
enabled: true
generate: true
username: django
password: ""
vhost: django
permissions:
configure: .*
write: .*
read: .*
processing:
enabled: true
generate: true
username: processing
password: ""
vhost: processing
permissions:
configure: .*
write: .*
read: .*
pm:
enabled: true
generate: false
username: pm
password: dbKEK8669kLIJG31Ic4okzsnWI9BXe18
vhost: pm_vhost
permissions:
configure: .*
write: .*
read: .*
transmittal:
enabled: true
generate: true
username: transmittal
password: ""
vhost: transmitalls
permissions:
configure: .*
write: .*
read: .*
role:
enabled: true
name: rabbitmq
service_account_names:
- rabbitmq
service_account_namespaces:
- rabbitmq
token_ttl: 24h
minio:
enabled: true
admin:
enabled: true
generate: false
root_user: 26VjnRwyOxvLZDKeKo6U
root_password: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL
apps:
eav:
enabled: true
generate: true
username: eav
password: ""
access_key: eav
secret_key: ""
policy: readwrite
buckets:
- name: eav
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
bi:
enabled: true
generate: true
username: bi
password: ""
access_key: bi
secret_key: ""
policy: readwrite
buckets:
- name: bi
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
resources:
enabled: true
generate: true
username: resources
password: ""
access_key: resources
secret_key: ""
policy: readwrite
buckets:
- name: resources
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
example-generate:
enabled: false
generate: true
username: example-generate
password: ""
example-manual:
enabled: false
generate: false
username: example-manual
password: CHANGE_ME
rfi:
enabled: true
generate: true
username: rfi
password: ""
access_key: rfi
secret_key: ""
policy: readwrite
buckets:
- name: rfi
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
issues:
enabled: true
generate: true
username: issues
password: ""
access_key: issues
secret_key: ""
policy: readwrite
buckets:
- name: rfi
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
contracts:
enabled: true
generate: true
username: contracts
password: ""
access_key: contracts
secret_key: ""
policy: readwrite
buckets:
- name: contracts
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
notes:
enabled: true
generate: true
username: notes
password: ""
access_key: notes
secret_key: ""
policy: readwrite
buckets:
- name: notes
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
mapper:
enabled: true
generate: true
username: mapper
password: ""
access_key: mapper
secret_key: ""
policy: readwrite
buckets:
- name: mapper
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
measurements:
enabled: true
generate: true
username: measurements
password: ""
access_key: measurements
secret_key: ""
policy: readwrite
buckets:
- name: measurements
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: us-east-1
subscriptions:
enabled: true
generate: true
username: subscriptions
password: ""
access_key: subscriptions
secret_key: ""
policy: readwrite
buckets:
- name: subscriptions
policy: private
client:
endpoint: https://minio.contour.infra.sarex.tech
region: ru-central1
documentations:
enabled: true
generate: true
username: documentations
password: ""
access_key: documentations
secret_key: ""
policy: readwrite
buckets:
- name: sarex-media-storage
policy: private
client:
endpoint: https://minio.contour.infra.sarex.tech
region: ru-central1
processing:
enabled: true
generate: true
username: processing
password: ""
access_key: processing
secret_key: ""
policy: readwrite
buckets:
- name: sarex-media-storage
policy: private
client:
endpoint: https://minio.contour.infra.sarex.tech
region: ru-central1
django:
enabled: true
generate: true
username: django
password: ""
access_key: django
secret_key: ""
policy: readwrite
buckets:
- name: rfi
policy: private
client:
endpoint: https://minio.contour.infra.sarex.tech
region: ru-central1
attachments:
enabled: true
generate: false
username: attachments
password: l10P6e3J0OnwMCvS5hDaohykOS7bpfHs
access_key: attachments
secret_key: l10P6e3J0OnwMCvS5hDaohykOS7bpfHs
policy: readwrite
buckets:
- name: attachments
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: ru-central
pm:
enabled: true
generate: false
username: pm_user
password: 9lpfAa4tySdWGJH74vMP9m8xVKAW5X2O
access_key: pm_user
secret_key: 9lpfAa4tySdWGJH74vMP9m8xVKAW5X2O
policy: readwrite
buckets:
- name: pm-bucket
policy: private
client:
endpoint: http://minio.minio:9000
region: ru-central
message-hub:
enabled: true
generate: false
username: 26VjnRwyOxvLZDKeKo6U
password: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL
access_key: 26VjnRwyOxvLZDKeKo6U
secret_key: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL
policy: readwrite
buckets:
- name: rfi
policy: private
client:
endpoint: https://minio.contour.infra.sarex.tech
region: ru-central1
transmittal:
enabled: true
generate: true
username: transmittal
password: ""
access_key: transmittal
secret_key: ""
policy: readwrite
buckets:
- name: transmittal-storage
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: ru-central1
openobserve:
enabled: true
generate: false
username: openobserve
password: dDFQMBQT59Zj9xz61SlbgSp8qVjXG41g
access_key: openobserve
secret_key: dDFQMBQT59Zj9xz61SlbgSp8qVjXG41g
policy: readwrite
buckets:
- name: open-observe
policy: private
client:
endpoint: http://minio.minio.svc.cluster.local:9000
region: ru-central1
role:
enabled: true
name: minio
service_account_names:
- minio-sa
service_account_namespaces:
- minio
token_ttl: 24h
kafka:
enabled: true
bootstrap:
enabled: true
generate: false
cluster_id: In7i35Cm21NIQdKrFWikoJ
controller_password: 0gb08YqABo
inter_broker_password: 6yQeW91kM5
apps:
bi:
enabled: true
generate: true
username: bi
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics:
- name: bi.events
partitions: 3
replication_factor: 1
configs:
cleanup.policy: delete
retention.ms: "604800000"
example-generate:
enabled: false
generate: true
username: example-generate
password: ""
example-manual:
enabled: false
generate: false
username: example-manual
password: CHANGE_ME
inspections:
enabled: true
generate: true
username: inspections
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics: []
contracts:
enabled: true
generate: true
username: contracts
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics:
- name: contracts.events
partitions: 3
replication_factor: 1
configs:
cleanup.policy: delete
retention.ms: "604800000"
notes:
enabled: true
generate: true
username: notes
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics:
- name: notes.events
partitions: 3
replication_factor: 1
configs:
cleanup.policy: delete
retention.ms: "604800000"
mapper:
enabled: true
generate: true
username: mapper
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics:
- name: mapper.events
partitions: 3
replication_factor: 1
configs:
cleanup.policy: delete
retention.ms: "604800000"
django:
enabled: true
generate: true
username: django
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics: []
system-log:
enabled: true
generate: true
username: system-log
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics:
- name: system-log.events
partitions: 3
replication_factor: 1
configs:
cleanup.policy: delete
retention.ms: "604800000"
message-hub:
enabled: true
generate: true
username: message-hub
password: ""
auth:
bootstrap_servers: kafka-kafka-contour-controller-headless.kafka.svc.cluster.local:9094
security_protocol: SASL_PLAINTEXT
sasl_mechanism: SCRAM-SHA-512
topics: []
role:
enabled: true
name: kafka
service_account_names:
- kafka-kafka-contour
service_account_namespaces:
- kafka
token_ttl: 24h
zitadel:
enabled: true
postgresql:
enabled: true
generate: false
password: dUNOBcN0TqtXt2l9PiMJs4Xpg3tvccbP!
role:
enabled: true
name: zitadel
service_account_names:
- zitadel-idp-contour
service_account_namespaces:
- zitadel
token_ttl: 24h
camunda:
enabled: true
identity_components:
enabled: true
generate: false
values:
connectors-secret: tacvhL3XqtPjmPcEamAEfsKHa5DEaTX9
console-secret: ko0OvfFZp6TsWpRdWUHowaYQTBPiVfKD
keycloak-secret: HJJ62y2FEb94xHPPhtShAexqFEHoxF6bk
operate-secret: kx3TElg1gsmPDzFCIpII4bpsDaFo8Hoz
optimize-secret: 71oCa8h02PyRKatj5phFMyiMMbcOEKlX
tasklist-secret: DP3AlJTxLITngf7VU9R8PbEJF4GZhaUZ
zeebe-secret: Rbabrjk61TtYcmnMbItRbyzsVIzTswlk
identity_firstuser:
enabled: true
generate: false
identity_firstuser_password: W4IZJeSKIElh4aNlR3bFaicdc8uJWdSn
keycloak_admin:
enabled: true
generate: false
admin_password: JGb1cctzjo9s6WofGunnPbIoegiALWkb
postgresql:
enabled: true
generate: false
password: Nhx7bFq1jpvssLdCNXl9yB3naB15cFLF
postgres_password: w8rNw1MVzV1I9I8CMLeh3thjeOqqMRHO
role:
enabled: true
name: camunda
service_account_names:
- camunda-connectors
- camunda-identity
- camunda-operate
- camunda-optimize
- camunda-tasklist
- camunda-postgresql
- camunda-keycloak
- camunda-identity-postgresql
service_account_namespaces:
- camunda
token_ttl: 24h
keycloak:
enabled: true
admin:
enabled: true
generate: false
password: 718b69567f60eef1d4956faaa7dbe1ce6b600183
postgresql:
enabled: true
generate: false
host: postgresql.postgresql.svc.cluster.local
port: 5432
user: keycloak
database: keycloak
applications:
eav:
enabled: true
policy_name: eav
role_name: eav
service_account_names:
- eav-vault
service_account_namespaces:
- eav
token_ttl: 24h
read_paths:
- postgresql/apps/eav
- minio/apps/eav
- vault/common/rsa_keys
resources:
enabled: true
policy_name: resources
role_name: resources
service_account_names:
- resources-vault
service_account_namespaces:
- resources
token_ttl: 24h
read_paths:
- postgresql/apps/resources
- minio/apps/resources
comparisons:
enabled: true
policy_name: comparisons
role_name: comparisons
service_account_names:
- comparisons-vault
service_account_namespaces:
- comparisons
token_ttl: 24h
read_paths:
- postgresql/apps/comparisons
- vault/common/rsa_keys
drawings:
enabled: true
policy_name: drawings
role_name: drawings
service_account_names:
- drawings-vault
service_account_namespaces:
- drawings
token_ttl: 24h
read_paths:
- postgresql/apps/drawings
measurements:
enabled: true
policy_name: measurements
role_name: measurements
service_account_names:
- measurements-vault
service_account_namespaces:
- measurements
token_ttl: 24h
read_paths:
- minio/apps/measurements
attachments:
enabled: true
policy_name: attachments
role_name: attachments
service_account_names:
- attachments-vault
service_account_namespaces:
- attachments
token_ttl: 24h
read_paths:
- postgresql/apps/attachments
- minio/apps/attachments
rfi:
enabled: true
policy_name: rfi
role_name: rfi
service_account_names:
- rfi-vault
service_account_namespaces:
- rfi
token_ttl: 24h
read_paths:
- postgresql/apps/rfi
- minio/apps/rfi
- rabbitmq/apps/rfi
- vault/common/django_auth
workspaces:
enabled: true
policy_name: workspaces
role_name: workspaces
service_account_names:
- workspaces-vault
service_account_namespaces:
- workspaces
token_ttl: 24h
read_paths:
- postgresql/apps/workspaces
- vault/common/django_auth
inspections:
enabled: true
policy_name: inspections
role_name: inspections
service_account_names:
- inspections-vault
service_account_namespaces:
- inspections
token_ttl: 24h
read_paths:
- postgresql/apps/inspections
- kafka/apps/inspections
- vault/common/django_auth
flows:
enabled: true
policy_name: flows
role_name: flows
service_account_names:
- flows-vault
service_account_namespaces:
- flows
token_ttl: 24h
read_paths:
- postgresql/apps/flows
- rabbitmq/apps/flows
- vault/common/django_auth
- vault/common/rsa_keys
issues:
enabled: true
policy_name: issues
role_name: issues
service_account_names:
- issues-vault
service_account_namespaces:
- issues
token_ttl: 24h
read_paths:
- postgresql/apps/issues
- rabbitmq/apps/issues
- minio/apps/issues
- vault/common/django_auth
- vault/common/rsa_keys
contracts:
enabled: true
policy_name: contracts
role_name: contracts
service_account_names:
- contracts-vault
service_account_namespaces:
- contracts
token_ttl: 24h
read_paths:
- postgresql/apps/contracts
- rabbitmq/apps/contracts
- minio/apps/contracts
- kafka/apps/contracts
- vault/common/rsa_keys
notes:
enabled: true
policy_name: notes
role_name: notes
service_account_names:
- notes-vault
service_account_namespaces:
- notes
token_ttl: 24h
read_paths:
- postgresql/apps/notes
- rabbitmq/apps/notes
- minio/apps/notes
- kafka/apps/notes
- vault/common/django_auth
mapper:
enabled: true
policy_name: mapper
role_name: mapper
service_account_names:
- mapper-vault
service_account_namespaces:
- mapper
token_ttl: 24h
read_paths:
- postgresql/apps/mapper
- rabbitmq/apps/mapper
- minio/apps/mapper
- kafka/apps/mapper
- vault/common/django_auth
subscriptions:
enabled: true
policy_name: subscriptions
role_name: subscriptions
service_account_names:
- subscriptions-vault
service_account_namespaces:
- subscriptions
token_ttl: 24h
read_paths:
- postgresql/apps/subscriptions
- minio/apps/subscriptions
documentations:
enabled: true
policy_name: documentations
role_name: documentations
service_account_names:
- documentations-vault
service_account_namespaces:
- documentations
token_ttl: 24h
read_paths:
- postgresql/apps/documentations
- minio/apps/documentations
- vault/common/django_auth
- vault/common/rsa_keys
processing:
enabled: true
policy_name: processing
role_name: processing
service_account_names:
- processing-vault
service_account_namespaces:
- processing
token_ttl: 24h
read_paths:
- postgresql/apps/processing
- rabbitmq/apps/processing
- minio/apps/processing
- vault/common/rsa_keys
- vault/common/smtp_auth
- vault/common/django_auth
django:
enabled: true
policy_name: django
role_name: django
service_account_names:
- django-vault
service_account_namespaces:
- django
token_ttl: 24h
read_paths:
- postgresql/apps/django
- rabbitmq/apps/django
- minio/apps/django
- kafka/apps/django
- vault/common/rsa_keys
- vault/common/django_auth
bim:
enabled: true
policy_name: bim
role_name: bim
service_account_names:
- bim-vault
service_account_namespaces:
- bim
token_ttl: 24h
read_paths:
- postgresql/apps/bim
system-log:
enabled: true
policy_name: system-log
role_name: system-log
service_account_names:
- system-log-vault
service_account_namespaces:
- system-log
token_ttl: 24h
read_paths:
- postgresql/apps/system-log
- kafka/apps/system-log
- vault/common/django_auth
cde:
enabled: true
policy_name: cde
role_name: cde
service_account_names:
- cde-vault
service_account_namespaces:
- cde
token_ttl: 24h
secret_path: vault/apps/cde
secret_data:
AMQP_HOST: rabbitmq.rabbitmq.svc.cluster.local
AMQP_PASSWORD: Ql0fEzMtSkjf5mZOgn6yubybqqyDWoIt
AMQP_PATH_API: cde
AMQP_PORT: "5672"
AMQP_USER: cde
AUTH_HOST: http://backend.django.svc.cluster.local:8000/api
CAMUNDA_CLIENT_ID: operate
CAMUNDA_CLIENT_SECRET: identity-secret-for-components
CAMUNDA_KEYCLOAK_URL: http://camunda-keycloak.camunda.svc.cluster.local
CAMUNDA_PROCESS_DEFINITION_ID: actionsOnApproval
DATABASE_URL: postgres://pdm:9293213v@sarex-vpsql-01.xc.wb.ru:5432/documentations_db
FLOWS_URL: http://backend-service.flows.svc.cluster.local:8000/api/v1
LOG_LEVEL: info
OPERATE_URL: http://camunda-operate.camunda.svc.cluster.local:80
PASSWORD: zealot096
PDM_URL: http://documentations-api.documentations.svc.cluster.local:8080/api/v1
PUBLIC_KEY: |-
-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAscUVLPXzba5y7FEqggn/
n8LEbjpPNxO1WIjHDw7zKwEaI9wKNQJpi2BbsdXdoWifeRnE6odk8rxubi8RxrXN
TyFI/aIRaY0OEghiYgGUTLmZyeB+JUWStkbeSH9+ZG7LlaAMnQnM4hAoBAyHMpqv
KwkVcWrZnmRnsoU6gby3sGV+5pjxpgKCkMnhkuh6XNX5OxQpDXb5MAYIcvi4p8GI
EovKHHwUsLrG5R2MRLYvOYy2L92gMlHEefAio+1UHxikbPteuL67vkMZ0hXBsoza
14V7YkHi8JO58ROvMwKOMqmvf2OHle2Gpv1Kd2OdpTDotxjHibHu/b1vMw0dMboM
6qBKps9vnKVawC3an27wzXpHuMuis3rdho+jiZg8zYgMn7DF0uNR7GgG0zj3w9Bt
0BzfWUeTHoNRn2AYqUB8RliFam0KpaGg0hmIjHEZjEWaZqxzMA4+0JqOFL/z9L+k
nIVwdM5UpSIlumQBiT7KiX+YDaXOmpsE6AGGRI9S1P3p6Yy2A907O/hQ5g4bZ3XX
G20RF5kdKNi3iS9mOcIB/7tuvs4qCBGCNZRnl/O2cTFlk9sgpzT2F6DyagcGLVzW
A4xgy50c6iSs5ihjS/onRx6PGatZRPsfBOIIQSKISe9fv2ya2CpaWx0VNghKZ4a6
DPxA6v2es45J40aCc5N458sCAwEAAQ==
-----END PUBLIC KEY-----
S3_ACCESS_KEY_ID: 26VjnRwyOxvLZDKeKo6U
S3_ENDPOINT_URL: http://minio.minio.svc.cluster.local:9000
S3_SECRET_ACCESS_KEY: D71UvsmiSDlHBkHGv0vHZfWIp6qSUWij92eOOIzL
TELEGRAM_ALERT_GROUP_ID: "-4947445467"
TELEGRAM_TOKEN: 7029810468:AAFAQB5_F9M_vGdgtiW9PCG5SRwHpX6JsTg
USERNAME: hagen013
WORKFLOWS_HOST: http://workflows-api-service.workflow.svc.cluster.local:8000
WORKSPACES_URL: http://workspaces-service.workspaces.svc.cluster.local:8000
ZEEBE_GATEWAY: camunda-zeebe-gateway.camunda.svc.cluster.local:26500
checklists:
enabled: true
policy_name: checklists
role_name: checklists
service_account_names:
- checklists-vault
service_account_namespaces:
- checklists
token_ttl: 24h
read_paths:
- postgresql/apps/checklists
- vault/common/rsa_keys
pm:
enabled: true
policy_name: pm
role_name: pm
service_account_names:
- pm-vault
service_account_namespaces:
- pm
token_ttl: 24h
read_paths:
- postgresql/apps/pm
- rabbitmq/apps/pm
- minio/apps/pm
message-hub:
enabled: true
policy_name: message-hub
role_name: message-hub
service_account_names:
- message-hub-vault
service_account_namespaces:
- message-hub
token_ttl: 24h
read_paths:
- postgresql/apps/message-hub
- minio/apps/message-hub
- kafka/apps/message-hub
transmittal:
enabled: true
policy_name: transmittal
role_name: transmittal
service_account_names:
- transmittal-vault
service_account_namespaces:
- transmittal
token_ttl: 24h
read_paths:
- postgresql/apps/transmittal
- rabbitmq/apps/transmittal
- minio/apps/transmittal
- vault/common/django_auth
- vault/common/rsa_keys
- vault/apps/transmittal
secret_path: vault/apps/transmittal
secret_data:
TRANSMITTAL_SERVICE_MAILGUN__API_KEY: CHANGE_ME
glitchtip:
enabled: true
policy_name: glitchtip
role_name: glitchtip
service_account_names:
- glitchtip-vault
service_account_namespaces:
- glitchtip
token_ttl: 24h
read_paths:
- vault/apps/glitchtip
secret_path: vault/apps/glitchtip
secret_data:
DATABASE_URL: postgres://glitchtip:tpIP369TfYg2lRoSDaoNkI1a22id8Loh@postgresql.postgresql.svc.cluster.local:5432/glitchtip?sslmode=disable
PGHOST: postgresql.postgresql.svc.cluster.local
PGPORT: "5432"
PGDATABASE: glitchtip
PGUSER: glitchtip
PGPASSWORD: tpIP369TfYg2lRoSDaoNkI1a22id8Loh
PGSSLMODE: disable
PGSSLROOTCERT: ""
PG_CA_CERT: ""
REDIS_URL: redis://glitchtip-redis:6379/1
SECRET_KEY: tNvzMvpLTyzCHhWxYmG3rNmAL7VJNpnnoOXwZJotQd9aJGRZpU
GLITCHTIP_ADMIN_EMAIL: admin@example.local
GLITCHTIP_ADMIN_PASSWORD: YKovF9riqtWInWdVU8wL6D95
EMAIL_URL: smtp://
DEFAULT_FROM_EMAIL: glitchtip@example.local
openobserve:
enabled: true
policy_name: openobserve
role_name: openobserve
service_account_names:
- openobserve-vault
service_account_namespaces:
- openobserve
- opentelemetry-collector
token_ttl: 24h
read_paths:
- vault/apps/openobserve
secret_path: vault/apps/openobserve
secret_data:
ZO_ROOT_USER_EMAIL: admin@example.local
ZO_ROOT_USER_PASSWORD: 6eB2fsS8jzgoBiYGmpXsGBsD
ZO_META_POSTGRES_DSN: postgres://openobserve:DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc@postgresql.postgresql.svc.cluster.local:5432/openobserve?sslmode=disable
ZO_NATS_ADDR: nats://openobserve-nats:4222
PGHOST: postgresql.postgresql.svc.cluster.local
PGPORT: "5432"
PGDATABASE: openobserve
PGUSER: openobserve
PGPASSWORD: DgjyWM4dQNfzrxXfHEoL8Qm0ZwH7YaSc
PGSSLMODE: disable
PGSSLROOTCERT: ""
PG_CA_CERT: ""
ZO_S3_ACCESS_KEY: openobserve
ZO_S3_SECRET_KEY: dDFQMBQT59Zj9xz61SlbgSp8qVjXG41g
OPENOBSERVE_BASIC_AUTH: YWRtaW5AZXhhbXBsZS5sb2NhbDo2ZUIyZnNTOGp6Z29CaVlHbXBYc0dCc0Q=
ZO_S3_BUCKET_NAME: open-observe
ZO_S3_SERVER_URL: http://minio.minio.svc.cluster.local:9000
secrets:
# 1) static secret -> k8s Secret (keys declared here, base64 as in k8s .data)
- name: test-static-k8s
namespace: contour
type: opaque
sink: k8s
lifecycle:
ignore_changes: false
data:
test-key: ENC[AES256_GCM,data:kwM3UstXxTWeqKh0/zxLNw==,iv:qPFANLCO4XIkGu6ttWsi7MAOrB1pR8+54VP3MZ02GVM=,tag:0R0wXyiN60kzcpZzJuTYFA==,type:str]
#ENC[AES256_GCM,data:SHpmt65JYvl47d1SUZF6z9kcKsudj6GAcmxZk32viR7TJmDPdnn6gwZz9CGT6yGRV7P+JvbEyFtQNbMxkDOkDSmXDDtOcg==,iv:HTCqGXYzgmdTFqfNXybKA/IA9KaM15D65L5x67fOlOU=,tag:A7oiwzy/PRx1JPi9ZCeJrg==,type:comment]
- name: test-db-k8s
namespace: contour
type: database
sink: k8s
depends_on:
cluster: incluster
db: test_db
user: test_user
lifecycle:
ignore_changes: false
# 3) static secret -> Vault KV (secrets/vault/test/static)
- name: test-static-vault
namespace: contour
type: opaque
sink: vault
vault_path: vault/test/static
lifecycle:
ignore_changes: false
data:
test-key: ENC[AES256_GCM,data:IjHcOtNAR3YIfFqEocbFFQ==,iv:HXwBMozGP1giQou7OOLLzkZxl7f8VINVifuD1qey+08=,tag:yLX9ghIKLPr/tQqxJu2DLQ==,type:str]
#ENC[AES256_GCM,data:rSp1bAi7LnB7kE7g2yK5bCyr2P7TEHk/8N2nX8EP2YheUn/Ro+O0Wazr/ra6erm+QpcyH+NpgMOcO09Oba/TlnyIwzNXXv6XInasFztKoUCMRvP/Og==,iv:xwMZdrGWy48giWSuF3TQMkA09pfFOS+VYC657LpCdNo=,tag:1+E4xV/PVhPV1yTV5nU05Q==,type:comment]
- name: test-bucket-vault
namespace: contour
type: s3
sink: vault
vault_path: vault/test/bucket
depends_on:
bucket: test-bucket
lifecycle:
ignore_changes: false
ugmk:
vault:
enabled: true
kv_mount: secrets
path_prefix: vault
kubernetes_auth_backend: kubernetes
default_rsa_bits: 4096
features:
create_regcred: true
create_smtp_auth: true
create_django_auth: true
create_rsa_keys: true
create_infra_secrets: false
create_infra_policies: true
create_infra_roles: true
create_app_policies: true
create_app_roles: true
common:
regcred:
generate: false
dockerconfigjson: |-
{
"auths": {
"cr.yandex": {
"auth": "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"
}
}
}
django_auth:
token: dGVzdC11c2VyOnRlc3QtcGFzcw==
infrastructure: {}
applications:
attachments:
read_paths:
- apps/attachments/postgres
secrets:
- name: attachments-postgres
type: database
sink: vault
vault_path: apps/attachments/postgres
depends_on:
cluster: main
db: attachments_db
user: attachments
- name: ugmk-test-app-kafka
type: kafka
sink: vault
vault_path: apps/ugmk-test-app/kafka
depends_on:
kafka_ref: main
kafka_user: ugmk-test-app
lifecycle:
ignore_changes: false
- name: ugmk-test-app-postgres
type: database
sink: vault
vault_path: apps/ugmk-test-app/postgres
depends_on:
cluster: main
db: ugmk_test_db
user: ugmk_test_user
lifecycle:
ignore_changes: false
- name: ugmk-test-app-rabbitmq
type: rabbitmq
sink: vault
vault_path: apps/ugmk-test-app/rabbitmq
depends_on:
rabbitmq_vhost: ugmk-test-vhost
rabbitmq_user: ugmk-test-rmq
lifecycle:
ignore_changes: false
- name: ugmk-test-app-static
type: opaque
sink: vault
vault_path: apps/ugmk-test-app/static
data:
test-key: ENC[AES256_GCM,data:dWHgULZFMEucjwyzvdT3rkeTuX8lvr23LySCwXO2KnaqVd+JGbSqyA==,iv:DbjXxn+iI/+udw88YZV3U3zzsrmQHc4Lt+2SiFcPDns=,tag:qhsj9n1gzXrYDsrA8Zp/NQ==,type:str]
lifecycle:
ignore_changes: false
sops:
kms: []
gcp_kms: []
azure_kv: []
hc_vault: []
age:
- recipient: age198ea80z7gan2ruetn288ln6rl2qh7xtsqqpwrjtyn8maya3364fsvpdd63
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBuNmhOSS9OWWNSUWtqZzR2
RUN3cDJyUlA3cENseDBza1NYRytEWk1qU3hBClJlejJvaW9LeDFabWdEcStxdmts
cnpqaFpWbDM5U2tlLzVDRmR3Wkg1WTAKLS0tICtLcFl6Nmc0WHdpQmRFSWJLKzdV
Yld6OHBpNVlvMmpxL0lFOE1QUkJ3ZlEKcrDWDvvDlXn/P+AKAHwwVoygs0tAQQ9C
JTMf7WYn0DtLZSEyT+ALOWK5/m4qL43fFK5fQkd3fUpkQS0jfQ5KQQ==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2026-07-20T14:15:13Z"
mac: ENC[AES256_GCM,data:zyi9rV/iaq2pz4aYps0GbFuMCFE5W4xJQ9jLw0XFr1QbtarbZe46E2CV8jmRFOhRHUBGMTcsMrXLvbJs1mBqtyqNdPT4WtenIY9qVNV8VqqvOQhijZnLHR/VilNfDgOWcTVg0fzGorKiGTrgLWKDYcmTzCRTkrmD1DDSJczyuv4=,iv:PmSzYkWBswkxoebCMZ+yo2mkKuBqsn1BZz7I2+RRwT8=,tag:qRSm3E8XuU+F86qHabCmyw==,type:str]
pgp: []
encrypted_regex: ^(data)$
version: 3.9.0
Reference in New Issue View Git Blame Copy Permalink