Kochetkov S d645e43de5 ++ add declarative secrets contract v2 (schema/ownership/targets/extra_fields) ... module: optional schema/ownership/source_kind/source_ref/extra_fields fields, backward compatible - legacy secrets keep resolving exactly as before. ownership modes managed/referenced/observed/adopt_once replace ignore_changes for v2 records; referenced reads a value straight from vault via a data source; observed only verifies presence, writes nothing. terragrunt: v1/v2 detection by marker keys, targets fan-out into the existing flat secrets list (one entry per target, same resource-key scheme as today), source.kind -> type/depends_on translation for the five documented kinds. brusnika-stage: acceptance environment for the two test cases from the plan - regcred (dockerconfigjson.v1, ownership=referenced, value from vault) and a rabbitmq.v1 secret (ownership=managed) fanned out to both kubernetes and vault targets from a single declaration.		2026-08-05 12:41:55 +03:00
..
database	++ contour: entity units s3/database/kafka-topics/rabbitmq (in-cluster modules) + secrets unit (deps + sink k8s|vault, in-cluster constants); root drop rabbitmq provider (module self-configures)	2026-07-16 16:31:39 +03:00
kafka-topics	++ skip kafka acls on ugmk broker without authorizer	2026-07-21 14:49:01 +03:00
namespace	++ contour: flat live/ (INFRA_ENV), port vault-platform-secrets module + namespace/vault-secrets units; drop product live/prod	2026-07-16 16:18:00 +03:00
rabbitmq	++ contour: entity units s3/database/kafka-topics/rabbitmq (in-cluster modules) + secrets unit (deps + sink k8s|vault, in-cluster constants); root drop rabbitmq provider (module self-configures)	2026-07-16 16:31:39 +03:00
s3	++ minio host configurable in yaml, incluster runner	2026-07-17 16:05:40 +03:00
secrets	++ add declarative secrets contract v2 (schema/ownership/targets/extra_fields)	2026-08-05 12:41:55 +03:00
vault-secrets	++ strip comments	2026-08-05 10:42:31 +03:00
terragrunt.hcl	change vault deploy flags	2026-07-17 17:58:28 +03:00