mirror of
https://gitlab.sarex.io/infra/terraform-contour-mirror.git
synced 2026-08-05 18:31:00 +03:00
523 lines
13 KiB
YAML
523 lines
13 KiB
YAML
environments:
|
|
prod:
|
|
kafka_cluster_refs:
|
|
prod:
|
|
cluster_id: c9qks74g084g1419cpts
|
|
default_partitions: 3
|
|
default_replication_factor: 1
|
|
max_replication_factor: 1
|
|
default_topic_config:
|
|
cleanup.policy: delete
|
|
retention.ms: "604800000"
|
|
min.insync.replicas: "2"
|
|
|
|
kafka_policy:
|
|
allow_create: true
|
|
allow_delete: false
|
|
allow_partition_increase: true
|
|
allow_partition_decrease: false
|
|
|
|
kafka:
|
|
topics:
|
|
- name: sarex.prod.kafka-topics-test.events.v1
|
|
owner: kafka-topics-test
|
|
clusterRef: prod
|
|
partitions: 1
|
|
replicationFactor: 1
|
|
config:
|
|
cleanup.policy: delete
|
|
retention.ms: "604800000"
|
|
min.insync.replicas: "1"
|
|
deletionPolicy: orphan
|
|
|
|
namespaces:
|
|
- name: pulse
|
|
labels:
|
|
environment: stage
|
|
project: pulse
|
|
istio-injection: enabled
|
|
annotations:
|
|
managed-by: terraform
|
|
- name: proc
|
|
labels:
|
|
team: proc
|
|
istio-injection: enabled
|
|
annotations:
|
|
managed-by: terraform
|
|
- name: iam
|
|
labels:
|
|
team: platform
|
|
istio-injection: enabled
|
|
annotations:
|
|
managed-by: terraform
|
|
- name: ai
|
|
labels:
|
|
istio-injection: enabled
|
|
annotations:
|
|
managed-by: terraform
|
|
|
|
secrets:
|
|
- name: dockerhub
|
|
namespace: pulse
|
|
type: dockerconfigjson
|
|
registry_url: cr.yandex
|
|
|
|
- name: sarex-agents-valkey-secret
|
|
namespace: ai
|
|
type: valkey
|
|
dependencies:
|
|
valkey_cluster: "c9qb9l18fvb0vg2nrcq4"
|
|
valkey_user: sarex-agents
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: ai-agents-s3-secret
|
|
namespace: ai
|
|
type: s3
|
|
dependencies:
|
|
bucket: ai-agents
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: postgresql-secret
|
|
namespace: ai
|
|
type: database_url
|
|
dependencies:
|
|
cluster: "c9quu72dj2ibu8dk54q5"
|
|
db: document-understanding
|
|
user: document-understanding
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: gemini-api-key
|
|
namespace: ai
|
|
type: opaque
|
|
random_keys:
|
|
gemini_api_key:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: mvp-agents-secrets
|
|
namespace: ai
|
|
type: opaque
|
|
random_keys:
|
|
GEMINI_API_KEY:
|
|
length: 32
|
|
special: false
|
|
LANGSMITH_API_KEY:
|
|
length: 32
|
|
special: false
|
|
POSTGRES_URI:
|
|
length: 32
|
|
special: false
|
|
REDIS_URI:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: openai-api-key
|
|
namespace: ai
|
|
type: opaque
|
|
random_keys:
|
|
openai_api_key:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: sarex-agents-secrets
|
|
namespace: ai
|
|
type: opaque
|
|
random_keys:
|
|
GEMINI_API_KEY:
|
|
length: 32
|
|
special: false
|
|
LANGSMITH_API_KEY:
|
|
length: 32
|
|
special: false
|
|
OPENAI_API_KEY:
|
|
length: 32
|
|
special: false
|
|
POSTGRES_URI:
|
|
length: 32
|
|
special: false
|
|
REDIS_URI:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: pulse-s3-secret
|
|
namespace: pulse
|
|
type: s3
|
|
dependencies:
|
|
bucket: pulse-prod
|
|
lifecycle:
|
|
ignore_changes: false
|
|
|
|
|
|
- name: pulse-postgresql-secret
|
|
namespace: pulse
|
|
type: database
|
|
dependencies:
|
|
cluster: "c9quu72dj2ibu8dk54q5"
|
|
db: pulse_db
|
|
user: pulse
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: iams-secret
|
|
namespace: iam
|
|
type: opaque
|
|
random_keys:
|
|
db-dsn:
|
|
length: 5
|
|
special: false
|
|
kafka-sasl-plain-username:
|
|
length: 5
|
|
special: false
|
|
kafka-sasl-plain-password:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: yc-s3-secret
|
|
namespace: iam
|
|
type: opaque
|
|
random_keys:
|
|
access_key:
|
|
length: 5
|
|
special: false
|
|
key_id:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
|
|
- name: premises-s3-secret
|
|
namespace: proc
|
|
type: s3
|
|
dependencies:
|
|
bucket: premises-prod
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: premises-postgresql-secret
|
|
namespace: proc
|
|
type: database
|
|
dependencies:
|
|
cluster: "c9quu72dj2ibu8dk54q5"
|
|
db: premises_db
|
|
user: premises
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: premises-kafka-secret
|
|
namespace: proc
|
|
type: opaque
|
|
custom_keys:
|
|
host: "host:port"
|
|
random_keys:
|
|
password:
|
|
length: 5
|
|
special: false
|
|
username:
|
|
length: 5
|
|
special: false
|
|
cert:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: session-secret
|
|
namespace: pulse
|
|
type: opaque
|
|
random_keys:
|
|
key:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: valkey-secret
|
|
namespace: documentations-prod
|
|
type: opaque
|
|
custom_keys:
|
|
url: "host:port"
|
|
random_keys:
|
|
host:
|
|
length: 5
|
|
special: false
|
|
port:
|
|
length: 5
|
|
special: false
|
|
cert:
|
|
length: 5
|
|
special: false
|
|
login:
|
|
length: 5
|
|
special: false
|
|
password:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: cde-api-valkey-secret
|
|
namespace: documentations-prod
|
|
type: opaque
|
|
custom_keys:
|
|
url: "host:port"
|
|
random_keys:
|
|
host:
|
|
length: 5
|
|
special: false
|
|
port:
|
|
length: 5
|
|
special: false
|
|
cert:
|
|
length: 5
|
|
special: false
|
|
login:
|
|
length: 5
|
|
special: false
|
|
password:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: cde-api-zeebe-secret
|
|
namespace: documentations-prod
|
|
type: opaque
|
|
random_keys:
|
|
gateway_address:
|
|
length: 5
|
|
special: false
|
|
client_id:
|
|
length: 5
|
|
special: false
|
|
client_secret:
|
|
length: 5
|
|
special: false
|
|
auth_server_url:
|
|
length: 5
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: cde-api-s3-secret
|
|
namespace: documentations-prod
|
|
type: yc_sa
|
|
dependencies:
|
|
service_account: documentations-prod
|
|
yc_sa_key_names:
|
|
access_key: access_key
|
|
secret_key: secret_key
|
|
service_account_id: sa_id
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: cde-api-postgresql-secret
|
|
namespace: documentations-prod
|
|
type: database
|
|
dependencies:
|
|
cluster: "c9qt5t4ccr0k4652f963"
|
|
db: documentations
|
|
user: prod-doc_user
|
|
custom_keys:
|
|
sslmode: "verify-full"
|
|
random_keys:
|
|
full-host:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: hasher-rabbitmq-secret
|
|
namespace: documentations-prod
|
|
type: opaque
|
|
custom_keys:
|
|
host: "default-rabbit-cluster.rabbitmq.svc.cluster.local"
|
|
hostname: "default-rabbit-cluster.rabbitmq.svc.cluster.local:5672"
|
|
port: "5672"
|
|
user: "camunda"
|
|
vhost: "camunda_prod"
|
|
random_keys:
|
|
password:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: hasher-s3-secret
|
|
namespace: documentations-prod
|
|
type: yc_sa
|
|
dependencies:
|
|
service_account: documentations-prod
|
|
yc_sa_key_names:
|
|
access_key: access_key
|
|
secret_key: secret_key
|
|
service_account_id: sa_id
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
- name: bim-yc-clickhouse-secret
|
|
namespace: bim-api-prod
|
|
type: opaque
|
|
custom_keys:
|
|
CLICKHOUSE_SSL: "true"
|
|
constant_keys:
|
|
CLICKHOUSE_CERT: postgres_ca
|
|
random_keys:
|
|
CLICKHOUSE_HOST:
|
|
length: 32
|
|
special: false
|
|
CLICKHOUSE_PORT:
|
|
length: 5
|
|
special: false
|
|
CLICKHOUSE_HOSTNAME:
|
|
length: 32
|
|
special: false
|
|
CLICKHOUSE_DATABASE:
|
|
length: 32
|
|
special: false
|
|
CLICKHOUSE_USER:
|
|
length: 32
|
|
special: false
|
|
CLICKHOUSE_PASSWORD:
|
|
length: 32
|
|
special: false
|
|
lifecycle:
|
|
ignore_changes: true
|
|
|
|
# # Пример секрета для другой базы данных (test_db/test)
|
|
# - name: test-db-secret
|
|
# namespace: pulse
|
|
# type: database
|
|
# dependencies:
|
|
# cluster: "c9qa2coo5ukgcg93fldm"
|
|
# db: test_db
|
|
# user: test
|
|
# random_keys:
|
|
# session_key:
|
|
# length: 32
|
|
# special: false
|
|
# lifecycle:
|
|
# ignore_changes: false
|
|
|
|
# # Пример секрета из SA ключей
|
|
# - name: dwg-sa-secret
|
|
# namespace: pulse
|
|
# type: yc_sa
|
|
# dependencies:
|
|
# service_account: dwg-sa
|
|
# yc_sa_key_names: # как назвать ключи в секрете
|
|
# access_key: access_key
|
|
# secret_key: secret_key
|
|
# service_account_id: sa_id
|
|
# lifecycle:
|
|
# ignore_changes: false
|
|
|
|
buckets:
|
|
- name: pulse-prod
|
|
acl: private
|
|
versioning:
|
|
enabled: false
|
|
cors:
|
|
enabled: false
|
|
|
|
- name: premises-prod
|
|
acl: private
|
|
versioning:
|
|
enabled: false
|
|
cors:
|
|
enabled: false
|
|
|
|
- name: ai-agents-prod
|
|
acl: private
|
|
versioning:
|
|
enabled: false
|
|
cors:
|
|
enabled: false
|
|
|
|
# yc_service_accounts:
|
|
# - name: dwg-sa
|
|
# description: "DWG SA Uploader"
|
|
# folder_roles:
|
|
# - storage.uploader
|
|
# create_static_access_key: true
|
|
|
|
|
|
databases:
|
|
- cluster_id: "c9quu72dj2ibu8dk54q5"
|
|
database:
|
|
name: pulse_db
|
|
extensions:
|
|
- pg_stat_statements
|
|
user:
|
|
name: pulse
|
|
password_length: 32
|
|
password_special: false
|
|
conn_limit: 10
|
|
|
|
- cluster_id: "c9quu72dj2ibu8dk54q5"
|
|
database:
|
|
name: premises_db
|
|
extensions:
|
|
- uuid-ossp
|
|
user:
|
|
name: premises
|
|
password_length: 32
|
|
password_special: false
|
|
conn_limit: 10
|
|
|
|
- cluster_id: "c9quu72dj2ibu8dk54q5"
|
|
database:
|
|
name: document-understanding
|
|
host: rc1b-384bzx2drqoaxt4d.mdb.yandexcloud.net
|
|
user:
|
|
name: document-understanding
|
|
password_length: 32
|
|
password_special: false
|
|
conn_limit: 10
|
|
|
|
- cluster_id: "c9q4rg96frgpk4g2q9p8"
|
|
database:
|
|
name: sarex-agents
|
|
extensions:
|
|
- ltree
|
|
- pg_stat_statements
|
|
- uuid-ossp
|
|
- btree_gin
|
|
- btree_gist
|
|
- pgvector
|
|
user:
|
|
name: sarex-agents
|
|
password_length: 32
|
|
password_special: false
|
|
conn_limit: 100
|
|
|
|
valkey_users:
|
|
- cluster_id: "c9qb9l18fvb0vg2nrcq4"
|
|
host: rc1d-qk3kd08nre0ntdu9.mdb.yandexcloud.net
|
|
port: "6380"
|
|
user:
|
|
name: sarex-agents
|
|
password_length: 32
|
|
password_special: false
|
|
enabled: true
|
|
permissions:
|
|
patterns: allkeys
|
|
pubSubChannels: allchannels
|
|
categories: "+@read +@write"
|
|
commands: "+GET -FLUSHALL"
|
|
sanitizePayload: sanitize-payload
|
|
|