restore buisness owned postgresql from company dumps

apps/attachments/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements"
+      sharedPreloadLibraries: ""
       vault:
         enabled: true
         role: postgresql
@@ -116,6 +116,7 @@ spec:
           user: attachments
           passwordKey: attachments
           extensions: []
-          restoreFromDump: false
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/attachments/288/attachments_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/checklists/yc-k8s-test/postgresql.yaml

@@ -115,7 +115,10 @@ spec:
         - name: checklists_db
           user: checklists
           passwordKey: checklists
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - pg_stat_statements
+            - uuid-ossp
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/checklists/288/checklists_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/comparisons/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
+      sharedPreloadLibraries: ""
       vault:
         enabled: true
         role: postgresql
@@ -116,6 +116,7 @@ spec:
           user: comparisons
           passwordKey: comparisons
           extensions: []
-          restoreFromDump: false
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/comparisons/288/comparisons_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/contracts/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
+      sharedPreloadLibraries: "btree_gist,ltree,pg_stat_statements,uuid-ossp"
       vault:
         enabled: true
         role: postgresql
@@ -115,7 +115,12 @@ spec:
         - name: contracts_db
           user: contracts
           passwordKey: contracts
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - btree_gist
+            - ltree
+            - pg_stat_statements
+            - uuid-ossp
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/contracts/288/contracts_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/django/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements"
+      sharedPreloadLibraries: "ltree,pg_stat_statements"
       vault:
         enabled: true
         role: postgresql
@@ -116,7 +116,9 @@ spec:
           user: sarex
           passwordKey: sarex
           extensions:
+            - ltree
             - pg_stat_statements
-          restoreFromDump: false
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/sarex_db/288/sarex_db_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/documentations/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,ltree,timescaledb,uuid-ossp"
+      sharedPreloadLibraries: "ltree,pg_stat_statements,timescaledb,uuid-ossp"
       vault:
         enabled: true
         role: postgresql
@@ -116,10 +116,11 @@ spec:
           user: documentations
           passwordKey: documentations
           extensions:
-            - pg_stat_statements
             - ltree
+            - pg_stat_statements
             - timescaledb
             - uuid-ossp
-          restoreFromDump: false
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/documentations/288/documentations_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/drawings/yc-k8s-test/postgresql.yaml

@@ -115,7 +115,10 @@ spec:
         - name: drawings_db
           user: drawings
           passwordKey: drawings
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - pg_stat_statements
+            - uuid-ossp
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/drawings/288/drawings_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/eav/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
+      sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb,uuid-ossp"
       vault:
         enabled: true
         role: postgresql
@@ -115,7 +115,13 @@ spec:
         - name: eav_db
           user: eav
           passwordKey: eav
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - ltree
+            - pg_stat_statements
+            - postgis
+            - timescaledb
+            - uuid-ossp
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/eav/288/eav_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/flows/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
+      sharedPreloadLibraries: "pg_stat_statements"
       vault:
         enabled: true
         role: postgresql
@@ -115,7 +115,9 @@ spec:
         - name: flows_db
           user: flows
           passwordKey: flow
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - pg_stat_statements
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/restored_flow_db/288/restored_flow_db_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/inspections/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "postgis, timescaledb, pg_stat_statements"
+      sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb,uuid-ossp"
       vault:
         enabled: true
         role: postgresql
@@ -116,10 +116,12 @@ spec:
           user: inspections
           passwordKey: inspections
           extensions:
+            - ltree
+            - pg_stat_statements
             - postgis
             - timescaledb
-            - ltree
             - uuid-ossp
-          restoreFromDump: false
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/inspections/288/inspections_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/issues/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
+      sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb,uuid-ossp,pg_trgm"
       vault:
         enabled: true
         role: postgresql
@@ -118,10 +118,11 @@ spec:
           extensions:
             - ltree
             - pg_stat_statements
-            - pg_trgm
             - postgis
             - timescaledb
             - uuid-ossp
-          restoreFromDump: false
+            - pg_trgm
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/issues/288/issues_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/notes/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
+      sharedPreloadLibraries: "pg_stat_statements"
       vault:
         enabled: true
         role: postgresql
@@ -115,7 +115,9 @@ spec:
         - name: notes_db
           user: notes
           passwordKey: notes
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - pg_stat_statements
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/notes/288/notes_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/pm/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,ltree"
+      sharedPreloadLibraries: "ltree,pg_stat_statements"
       vault:
         enabled: true
         role: postgresql
@@ -115,7 +115,10 @@ spec:
         - name: pm_db
           user: pm
           passwordKey: pm
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - ltree
+            - pg_stat_statements
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/pm_db/288/pm_db_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/processing/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements"
+      sharedPreloadLibraries: "uuid-ossp"
       vault:
         enabled: true
         role: postgresql
@@ -117,6 +117,7 @@ spec:
           passwordKey: workflow
           extensions:
             - uuid-ossp
-          restoreFromDump: false
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/processing/288/processing_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/resources/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
+      sharedPreloadLibraries: "ltree,pg_stat_statements,postgis"
       vault:
         enabled: true
         role: postgresql
@@ -116,9 +116,10 @@ spec:
           user: resources
           passwordKey: resources
           extensions:
-            - postgis
             - ltree
-            - uuid-ossp
+            - pg_stat_statements
-          restoreFromDump: false
+            - postgis
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/resources/288/resources_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/rfi/yc-k8s-test/postgresql.yaml

@@ -115,7 +115,9 @@ spec:
         - name: rfi_db
           user: rfi
           passwordKey: rfi
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - pg_stat_statements
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/rfi/288/rfi_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/subscriptions/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "postgis"
+      sharedPreloadLibraries: "ltree,pg_stat_statements,postgis,timescaledb"
       vault:
         enabled: true
         role: postgresql
@@ -116,7 +116,11 @@ spec:
           user: subscriptions
           passwordKey: subscriptions
           extensions:
+            - ltree
+            - pg_stat_statements
             - postgis
-          restoreFromDump: false
+            - timescaledb
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/subscriptions/288/subscriptions_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/system-log/yc-k8s-test/postgresql.yaml

@@ -115,7 +115,11 @@ spec:
         - name: system_log_db
           user: system_log
           passwordKey: system-log
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - ltree
+            - pg_stat_statements
+            - timescaledb
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/system-log/288/system-log_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/transmittal/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp,ltree,postgis"
+      sharedPreloadLibraries: "pg_stat_statements"
       vault:
         enabled: true
         role: postgresql
@@ -116,12 +116,8 @@ spec:
           user: transmittal
           passwordKey: transmittal
           extensions:
-            - ltree
             - pg_stat_statements
-            - pg_trgm
+          restoreFromDump: true
-            - postgis
+          dumpKey: "sanitized_dumps_multi/transmittal/288/transmittal_company288_20260626T202844Z.tar.gz"
-            - timescaledb
-            - uuid-ossp
-          restoreFromDump: false
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

apps/workspaces/yc-k8s-test/postgresql.yaml

@@ -103,7 +103,7 @@ spec:
     contour:
       enabled: true
       adminUser: "postgres"
-      sharedPreloadLibraries: "pg_stat_statements,uuid-ossp"
+      sharedPreloadLibraries: "uuid-ossp"
       vault:
         enabled: true
         role: postgresql
@@ -115,7 +115,9 @@ spec:
         - name: workspaces_db
           user: workspaces
           passwordKey: workspaces
-          extensions: []
+          extensions:
-          restoreFromDump: false
+            - uuid-ossp
+          restoreFromDump: true
+          dumpKey: "sanitized_dumps_multi/workspaces/288/workspaces_company288_20260626T202844Z.tar.gz"
       s3-proxy:
         endpointUrl: "s3-proxy-service.postgresql.svc.cluster.local"

infrastructure/s3-proxy/yc-k8s-test/s3-proxy.yaml

@@ -7,10 +7,51 @@ spec:
   interval: 5m
   timeout: 10m
   values:
+    s3ProxySecret:
+      create: false
     universal-chart:
       services:
         s3proxy:
+          serviceAccount:
+            name:
+              _default: postgresql
+            podAutomountServiceAccountToken:
+              _default: true
+          deployment:
+            podAnnotations:
+              _default:
+                vault.hashicorp.com/agent-init-first: "true"
+                vault.hashicorp.com/agent-inject: "true"
+                vault.hashicorp.com/agent-pre-populate-only: "true"
+                vault.hashicorp.com/auth-path: "auth/kubernetes"
+                vault.hashicorp.com/role: "postgresql"
+                vault.hashicorp.com/agent-inject-secret-aws-credentials: "secrets/data/postgresql/s3"
+                vault.hashicorp.com/agent-inject-template-aws-credentials: |
+                  {{- with secret "secrets/data/postgresql/s3" -}}
+                  [default]
+                  aws_access_key_id={{ .Data.data.access_key }}
+                  aws_secret_access_key={{ .Data.data.secret_key }}
+                  {{- end }}
           envs:
             - name: AWS_API_ENDPOINT
               value:
-                _default: "http://minio-minio-contour.minio.svc.cluster.local:9000"
+                _default: "https://storage.yandexcloud.net"
+            - name: AWS_S3_BUCKET
+              value:
+                _default: "prod-pg-dumps"
+            - name: AWS_REGION
+              value:
+                _default: "ru-central1"
+            - name: AWS_SHARED_CREDENTIALS_FILE
+              value:
+                _default: "/vault/secrets/aws-credentials"
+            - name: AWS_EC2_METADATA_DISABLED
+              value:
+                _default: "true"
+            - name: ACCESS_LOG
+              value:
+                _default: "true"
+            - name: CORS_ALLOW_HEADERS
+              value:
+                _default: "Content-Type, Accept-Ranges, Content-Range, Content-Encoding"
+          secretEnvs: []