mirror of
https://gitlab.sarex.io/infra/terraform-contour-mirror.git
synced 2026-08-05 18:31:00 +03:00
127 lines
3.0 KiB
YAML
127 lines
3.0 KiB
YAML
environments:
|
|
prod:
|
|
namespaces:
|
|
- name: pulse
|
|
labels:
|
|
environment: stage
|
|
project: pulse
|
|
istio-injection: enabled
|
|
annotations:
|
|
managed-by: terraform
|
|
|
|
secrets:
|
|
- name: dockerhub
|
|
namespace: pulse
|
|
type: dockerconfigjson
|
|
registry_url: cr.yandex
|
|
|
|
- name: pulse-s3-secret
|
|
namespace: pulse
|
|
type: s3
|
|
dependencies:
|
|
bucket: pulse-prod
|
|
lifecycle:
|
|
ignore_changes: false
|
|
|
|
|
|
- name: pulse-postgresql-secret
|
|
namespace: pulse
|
|
type: database
|
|
dependencies:
|
|
cluster: "c9quu72dj2ibu8dk54q5"
|
|
db: pulse_db
|
|
user: pulse
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: session-secret
|
|
namespace: pulse
|
|
type: opaque
|
|
random_keys:
|
|
key:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: valkey-secret
|
|
namespace: documentations-prod
|
|
type: opaque
|
|
custom_keys:
|
|
url: "host:port"
|
|
random_keys:
|
|
host:
|
|
length: 5
|
|
special: false
|
|
port:
|
|
length: 5
|
|
special: false
|
|
cert:
|
|
length: 5
|
|
special: false
|
|
login:
|
|
length: 5
|
|
special: false
|
|
password:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
# # Пример секрета для другой базы данных (test_db/test)
|
|
# - name: test-db-secret
|
|
# namespace: pulse
|
|
# type: database
|
|
# dependencies:
|
|
# cluster: "c9qa2coo5ukgcg93fldm"
|
|
# db: test_db
|
|
# user: test
|
|
# random_keys:
|
|
# session_key:
|
|
# length: 32
|
|
# special: false
|
|
# lifecycle:
|
|
# ignore_changes: false
|
|
|
|
# # Пример секрета из SA ключей
|
|
# - name: dwg-sa-secret
|
|
# namespace: pulse
|
|
# type: yc_sa
|
|
# dependencies:
|
|
# service_account: dwg-sa
|
|
# yc_sa_key_names: # как назвать ключи в секрете
|
|
# access_key: access_key
|
|
# secret_key: secret_key
|
|
# service_account_id: sa_id
|
|
# lifecycle:
|
|
# ignore_changes: false
|
|
|
|
buckets:
|
|
- name: pulse-prod
|
|
acl: private
|
|
versioning:
|
|
enabled: false
|
|
cors:
|
|
enabled: false
|
|
|
|
# yc_service_accounts:
|
|
# - name: dwg-sa
|
|
# description: "DWG SA Uploader"
|
|
# folder_roles:
|
|
# - storage.uploader
|
|
# create_static_access_key: true
|
|
|
|
|
|
databases:
|
|
- cluster_id: "c9quu72dj2ibu8dk54q5"
|
|
database:
|
|
name: pulse_db
|
|
extensions:
|
|
- pg_stat_statements
|
|
user:
|
|
name: pulse
|
|
password_length: 32
|
|
password_special: false
|
|
conn_limit: 10
|
|
|