From 5105eee60210b3ef3d58b7494371bdcacb95912a Mon Sep 17 00:00:00 2001
From: emelinda <emelin_d_a@mail.ru>
Date: Thu, 30 Jul 2026 11:52:50 +0300
Subject: [PATCH] =?UTF-8?q?feat(ansible):=20=D0=B4=D0=B5=D0=BF=D0=BB=D0=BE?=
 =?UTF-8?q?=D0=B9=20engine=20+=20k3s=20DNS-=D0=BC=D0=BE=D1=81=D1=82=D0=B0?=
 =?UTF-8?q?=20=D0=B2=20=D1=80=D0=BE=D0=BB=D0=B8=20sarex=5Fstack?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 aero/roles/sarex_stack/defaults/main.yml |  4 ++++
 aero/roles/sarex_stack/tasks/main.yml    | 15 +++++++++++++++
 2 files changed, 19 insertions(+)

diff --git a/aero/roles/sarex_stack/defaults/main.yml b/aero/roles/sarex_stack/defaults/main.yml
index 556afaa..3aa0fb7 100644
--- a/aero/roles/sarex_stack/defaults/main.yml
+++ b/aero/roles/sarex_stack/defaults/main.yml
@@ -49,6 +49,9 @@ compose_cmd: "docker compose"
 # Сервисы приложения, поднимаемые при sarex_compose_up (depends_on тянет
 # зависимости и порядок). k3s/gitea намеренно не поднимаем.
 sarex_services:
+  # k3s + провижининг DNS-моста (нужны engine'у до старта)
+  - k3s-server
+  - processing-k8s-init
   - postgres
   - postgres-init
   - redis
@@ -62,4 +65,5 @@ sarex_services:
   - frontend
   - processing-api
   - processing-frontend
+  - engine
   - nginx
diff --git a/aero/roles/sarex_stack/tasks/main.yml b/aero/roles/sarex_stack/tasks/main.yml
index db80b9b..a7a2f96 100644
--- a/aero/roles/sarex_stack/tasks/main.yml
+++ b/aero/roles/sarex_stack/tasks/main.yml
@@ -35,6 +35,21 @@
     mode: "0644"
   notify: Recreate backend and celery
 
+# k3s-манифесты DNS-моста (namespace processing + Service/Endpoints postgres/minio).
+# processing-k8s-init монтирует ./k3s/manifests/processing и применяет их kubectl'ом.
+- name: Скопировать k3s-манифесты (DNS-мост processing)
+  ansible.builtin.copy:
+    src: "{{ deploy_src_root }}/k3s/manifests/"
+    dest: "{{ deploy_dir }}/k3s/manifests/"
+    mode: "0644"
+
+# engine монтирует ./engine/yc-s3-service-account.json (доступ Job-подов к S3).
+- name: Скопировать конфиги engine (S3 service-account)
+  ansible.builtin.copy:
+    src: "{{ deploy_src_root }}/engine/"
+    dest: "{{ deploy_dir }}/engine/"
+    mode: "0644"
+
 # --- Секреты: генерация с персистом на control-node (идемпотентно) --------
 - name: Сгенерировать/загрузить пароли (persist в secrets_store, gitignored)
   ansible.builtin.set_fact: