sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

restore buisness owned postgresql from company dumps

Browse Source
This commit is contained in:
Kochetkov S 2026-06-29 17:53:54 +03:00
parent 1cc5f1c72e
commit 1565d9550e
21 changed files with 144 additions and 61 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apps/attachments/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements"
sharedPreloadLibraries: ""
vault:
enabled: true
role: postgresql
@ -116,6 +116,7 @@ spec:
user: attachments
passwordKey: attachments
extensions: []
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/attachments/288/attachments_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

7
apps/checklists/yc-k8s-test/postgresql.yaml
View File

@ -115,7 +115,10 @@ spec:
- name: checklists_db
user: checklists
passwordKey: checklists
extensions: []
restoreFromDump: false
extensions:
- pg_stat_statements
- uuid-ossp
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/checklists/288/checklists_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

5
apps/comparisons/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
sharedPreloadLibraries: ""
vault:
enabled: true
role: postgresql
@ -116,6 +116,7 @@ spec:
user: comparisons
passwordKey: comparisons
extensions: []
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/comparisons/288/comparisons_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

11
apps/contracts/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
sharedPreloadLibraries: "btree_gist,ltree,pg_stat_statements,uuid-ossp"
vault:
enabled: true
role: postgresql
@ -115,7 +115,12 @@ spec:
- name: contracts_db
user: contracts
passwordKey: contracts
extensions: []
restoreFromDump: false
extensions:
- btree_gist
- ltree
- pg_stat_statements
- uuid-ossp
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/contracts/288/contracts_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

6
apps/django/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements"
sharedPreloadLibraries: "ltree,pg_stat_statements"
vault:
enabled: true
role: postgresql
@ -116,7 +116,9 @@ spec:
user: sarex
passwordKey: sarex
extensions:
- ltree
- pg_stat_statements
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/sarex_db/288/sarex_db_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

9
apps/documentations/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,ltree,timescaledb,uuid-ossp"
sharedPreloadLibraries: "ltree,pg_stat_statements,timescaledb,uuid-ossp"
vault:
enabled: true
role: postgresql
@ -115,11 +115,12 @@ spec:
- name: documentations_db
user: documentations
passwordKey: documentations
extensions:
- pg_stat_statements
extensions:
- ltree
- pg_stat_statements
- timescaledb
- uuid-ossp
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/documentations/288/documentations_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

7
apps/drawings/yc-k8s-test/postgresql.yaml
View File

@ -115,7 +115,10 @@ spec:
- name: drawings_db
user: drawings
passwordKey: drawings
extensions: []
restoreFromDump: false
extensions:
- pg_stat_statements
- uuid-ossp
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/drawings/288/drawings_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

12
apps/eav/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb,uuid-ossp"
vault:
enabled: true
role: postgresql
@ -115,7 +115,13 @@ spec:
- name: eav_db
user: eav
passwordKey: eav
extensions: []
restoreFromDump: false
extensions:
- ltree
- pg_stat_statements
- postgis
- timescaledb
- uuid-ossp
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/eav/288/eav_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

8
apps/flows/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
sharedPreloadLibraries: "pg_stat_statements"
vault:
enabled: true
role: postgresql
@ -115,7 +115,9 @@ spec:
- name: flows_db
user: flows
passwordKey: flow
extensions: []
restoreFromDump: false
extensions:
- pg_stat_statements
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/restored_flow_db/288/restored_flow_db_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

10
apps/inspections/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "postgis, timescaledb, pg_stat_statements"
sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb,uuid-ossp"
vault:
enabled: true
role: postgresql
@ -115,11 +115,13 @@ spec:
- name: inspections_db
user: inspections
passwordKey: inspections
extensions:
extensions:
- ltree
- pg_stat_statements
- postgis
- timescaledb
- ltree
- uuid-ossp
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/inspections/288/inspections_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

7
apps/issues/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb,uuid-ossp,pg_trgm"
vault:
enabled: true
role: postgresql
@ -118,10 +118,11 @@ spec:
extensions:
- ltree
- pg_stat_statements
- pg_trgm
- postgis
- timescaledb
- uuid-ossp
restoreFromDump: false
- pg_trgm
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/issues/288/issues_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

8
apps/notes/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
sharedPreloadLibraries: "pg_stat_statements"
vault:
enabled: true
role: postgresql
@ -115,7 +115,9 @@ spec:
- name: notes_db
user: notes
passwordKey: notes
extensions: []
restoreFromDump: false
extensions:
- pg_stat_statements
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/notes/288/notes_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

9
apps/pm/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,ltree"
sharedPreloadLibraries: "ltree,pg_stat_statements"
vault:
enabled: true
role: postgresql
@ -115,7 +115,10 @@ spec:
- name: pm_db
user: pm
passwordKey: pm
extensions: []
restoreFromDump: false
extensions:
- ltree
- pg_stat_statements
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/pm_db/288/pm_db_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

5
apps/processing/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements"
sharedPreloadLibraries: "uuid-ossp"
vault:
enabled: true
role: postgresql
@ -117,6 +117,7 @@ spec:
passwordKey: workflow
extensions:
- uuid-ossp
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/processing/288/processing_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

11
apps/resources/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
sharedPreloadLibraries: "ltree,pg_stat_statements,postgis"
vault:
enabled: true
role: postgresql
@ -115,10 +115,11 @@ spec:
- name: resources_db
user: resources
passwordKey: resources
extensions:
- postgis
extensions:
- ltree
- uuid-ossp
restoreFromDump: false
- pg_stat_statements
- postgis
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/resources/288/resources_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

6
apps/rfi/yc-k8s-test/postgresql.yaml
View File

@ -115,7 +115,9 @@ spec:
- name: rfi_db
user: rfi
passwordKey: rfi
extensions: []
restoreFromDump: false
extensions:
- pg_stat_statements
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/rfi/288/rfi_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

10
apps/subscriptions/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "postgis"
sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb"
vault:
enabled: true
role: postgresql
@ -115,8 +115,12 @@ spec:
- name: subscriptions_db
user: subscriptions
passwordKey: subscriptions
extensions:
extensions:
- ltree
- pg_stat_statements
- postgis
restoreFromDump: false
- timescaledb
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/subscriptions/288/subscriptions_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

8
apps/system-log/yc-k8s-test/postgresql.yaml
View File

@ -115,7 +115,11 @@ spec:
- name: system_log_db
user: system_log
passwordKey: system-log
extensions: []
restoreFromDump: false
extensions:
- ltree
- pg_stat_statements
- timescaledb
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/system-log/288/system-log_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

10
apps/transmittal/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
sharedPreloadLibraries: "pg_stat_statements"
vault:
enabled: true
role: postgresql
@ -116,12 +116,8 @@ spec:
user: transmittal
passwordKey: transmittal
extensions:
- ltree
- pg_stat_statements
- pg_trgm
- postgis
- timescaledb
- uuid-ossp
restoreFromDump: false
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/transmittal/288/transmittal_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

8
apps/workspaces/yc-k8s-test/postgresql.yaml
View File

@ -103,7 +103,7 @@ spec:
contour:
enabled: true
adminUser: "postgres"
sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
sharedPreloadLibraries: "uuid-ossp"
vault:
enabled: true
role: postgresql
@ -115,7 +115,9 @@ spec:
- name: workspaces_db
user: workspaces
passwordKey: workspaces
extensions: []
restoreFromDump: false
extensions:
- uuid-ossp
restoreFromDump: true
dumpKey: "sanitized_dumps_multi/workspaces/288/workspaces_company288_20260626T202844Z.tar.gz"
s3-proxy:
endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

43
infrastructure/s3-proxy/yc-k8s-test/s3-proxy.yaml
View File

@ -7,10 +7,51 @@ spec:
interval: 5m
timeout: 10m
values:
s3ProxySecret:
create: false
universal-chart:
services:
s3proxy:
serviceAccount:
name:
_default: postgresql
podAutomountServiceAccountToken:
_default: true
deployment:
podAnnotations:
_default:
vault.hashicorp.com/agent-init-first: "true"
vault.hashicorp.com/agent-inject: "true"
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/auth-path: "auth/kubernetes"
vault.hashicorp.com/role: "postgresql"
vault.hashicorp.com/agent-inject-secret-aws-credentials: "secrets/data/postgresql/s3"
vault.hashicorp.com/agent-inject-template-aws-credentials: |
{{- with secret "secrets/data/postgresql/s3" -}}
[default]
aws_access_key_id={{ .Data.data.access_key }}
aws_secret_access_key={{ .Data.data.secret_key }}
{{- end }}
envs:
- name: AWS_API_ENDPOINT
value:
_default: "http://minio-minio-contour.minio.svc.cluster.local:9000"
_default: "https://storage.yandexcloud.net"
- name: AWS_S3_BUCKET
value:
_default: "prod-pg-dumps"
- name: AWS_REGION
value:
_default: "ru-central1"
- name: AWS_SHARED_CREDENTIALS_FILE
value:
_default: "/vault/secrets/aws-credentials"
- name: AWS_EC2_METADATA_DISABLED
value:
_default: "true"
- name: ACCESS_LOG
value:
_default: "true"
- name: CORS_ALLOW_HEADERS
value:
_default: "Content-Type, Accept-Ranges, Content-Range, Content-Encoding"
secretEnvs: []