++

apps/attachments/base/helmrelease.yaml

@@ -49,6 +49,15 @@ spec:
                 [ -f /vault/secrets/attachments-db ] && . /vault/secrets/attachments-db
                 [ -f /vault/secrets/attachments-s3 ] && . /vault/secrets/attachments-s3
                 set +a
+                mkdir -p /etc/sarex/yc-s3-storage
+                cat > /etc/sarex/yc-s3-storage/yc-s3-service-account.json <<EOF
+                {
+                  "endpoint": "${YANDEX_S3_ENDPOINT_URL}",
+                  "access_key_id": "${YANDEX_S3_ACCESS_KEY_ID}",
+                  "secret_access_key": "${YANDEX_S3_SECRET_ACCESS_KEY}",
+                  "use_ssl": ${YANDEX_S3_USE_SSL}
+                }
+                EOF
                 exec /opt/attachments/entrypoint.sh
         image:
           name:
@@ -76,6 +85,9 @@ spec:
           - name: POSTGRES_POOL_SIZE
             value:
               _default: "10"
+          - name: YANDEX_S3_ACCOUNT_PATH
+            value:
+              _default: "/etc/sarex/yc-s3-storage/yc-s3-service-account.json"
           - name: API_ADDRESS
             value:
               _default: 0.0.0.0:8000