sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

brusnika-stage: bring images and env vars up to wb level

Browse Source 
Missing env vars copied from wb for ams-sync, attachments, bi/frontend,
checklists, django (celery, export-project, sarex-backend), documentations
(api, filestream, pdm), eav, flows (backend, celery, frontend), iam,
inspections, issues (backend, celery), rfi, transmittal/worker.

Image tags updated to match wb for flows (backend/celery/frontend), iam.

Known issue, not yet fixed in this commit: several of the copied env
values are wb-specific hosts (*.wb.ru, one uralmine.com) that don't apply
to brusnika-stage — ZITADEL_HOST/ZITADEL_DOMAIN (django, documentations,
iam), DATABASE_HOST/FLOWS_DB_HOST/ISSUES_DB_HOST (checklists, flows),
SUPERSET_HOST (bi), DJANGO_BASE_HOST/SAREX_BACKEND_URL (flows,
inspections), RESOURCES_INTERNAL_HOST/RESOURCE_URL (ams-sync, django,
flows, notes-related). To be corrected in a follow-up commit.

bi/backend.yaml, bim/backend.yaml and notes/backend.yaml were reverted
before this commit (image-tag updates for bi-backend/bim/notes and bi's
SUPERSET_* env additions are not included).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
ivan 2026-10-01 18:04:55 +05:00
parent e4c3294bb8
commit 6251cfed5c
20 changed files with 296 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/ams-sync/brusnika-stage/backend.yaml
View File

@ -138,6 +138,10 @@ spec:
- name: KAFKA_SASL_MECHANISM
value:
_default: "SCRAM-SHA-512"
- name: RESOURCES_INTERNAL_HOST
value:
_default: "http://iams.iam.svc.cluster.local:8080"
secretEnvs:
- name: TELEGRAM_TOKEN
secretName:

4
apps/attachments/brusnika-stage/backend.yaml
View File

@ -110,6 +110,10 @@ spec:
- name: YANDEX_S3_VERIFY
value:
_default: "false"
- name: YANDEX_S3_USE_SSL
value:
_default: "false"
secretEnvs:
- name: DATABASE_HOST
secretName:

2
apps/bi/brusnika-stage/frontend.yaml
View File

@ -37,7 +37,7 @@ spec:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/bi-frontend:production_afb137d4
_default: cr.yandex/crp3ccidau046kdj8g9q/bi-frontend:contour_9cfd1a0b
pullPolicy:
_default: IfNotPresent

12
apps/checklists/brusnika-stage/backend.yaml
View File

@ -114,6 +114,18 @@ spec:
- name: DEBUG
value:
_default: "false"
- name: DATABASE_HOST
value:
_default: "sarex-vpsql-01.xc.wb.ru"
- name: DATABASE_PORT
value:
_default: "5432"
- name: DATABASE_NAME
value:
_default: "checklists_db"
secretEnvs:
- name: DATABASE_HOST
secretName:

12
apps/django/brusnika-stage/celery.yaml
View File

@ -330,6 +330,18 @@ spec:
- name: KC_USE_REDIRECT_LOGOUT
value:
_default: "True"
- name: CACHE_HOST
value:
_default: "redis.pm.svc.cluster.local"
- name: RESOURCES_INTERNAL_HOST
value:
_default: "http://iams.iam.svc.cluster.local:8080"
- name: ZITADEL_HOST
value:
_default: "https://zitadel-srx.wb.ru"
secretEnvs:
- name: SERVER_SUPERSET_JWT_SECRET
secretName:

5
apps/django/brusnika-stage/export-project.yaml
View File

@ -88,6 +88,11 @@ spec:
labels:
monitoring: prometheus
envs:
- name: TIMEOUT
value:
_default: "180"
commitSha: ""
gitlabUri: ""
gitlabJobUrl: ""

12
apps/django/brusnika-stage/sarex-backend.yaml
View File

@ -313,6 +313,18 @@ spec:
- name: KC_USE_REDIRECT_LOGOUT
value:
_default: "True"
- name: RESOURCES_INTERNAL_HOST
value:
_default: "http://iams.iam.svc.cluster.local:8080"
- name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED
value:
_default: "True"
- name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED
value:
_default: "True"
secretEnvs:
- name: SERVER_SUPERSET_JWT_SECRET
secretName:

28
apps/documentations/brusnika-stage/api.yaml
View File

@ -255,6 +255,34 @@ spec:
- name: USE_CACHE_IN_FILE_STREAMER
value:
_default: "1"
- name: USE_LEGACY_BIM_FLOW
value:
_default: "true"
- name: USE_ZITADEL
value:
_default: "0"
- name: LAST_SLAVE_1_BIM
value:
_default: "1000000"
- name: ENABLE_SMTP
value:
_default: "True"
- name: ENABLE_MAILGUN
value:
_default: "False"
- name: ENABLE_AUTH_JWT_IN_URL
value:
_default: "false"
- name: ENABLE_SIGNATURE_IN_URL
value:
_default: "true"
secretEnvs:
- name: PUBLIC_KEY
secretName:

13
apps/documentations/brusnika-stage/filestream.yaml
View File

@ -255,6 +255,19 @@ spec:
- name: USE_CACHE_IN_FILE_STREAMER
value:
_default: "1"
- name: USE_ZITADEL
value:
_default: "0"
- name: ENABLE_AUTH_JWT_IN_URL
value:
_default: "false"
- name: ENABLE_SIGNATURE_IN_URL
value:
_default: "true"
secretEnvs:
- name: PUBLIC_KEY
secretName:

8
apps/documentations/brusnika-stage/pdm.yaml
View File

@ -308,6 +308,14 @@ spec:
- name: WORKSPACE_URL
value:
_default: "http://workspaces-service.workspaces.svc.cluster.local:8000/"
- name: BUCKET_NAME
value:
_default: "attachments-storage"
- name: PERMISSIONS_FILTER_COMPANIES
value:
_default: "[1]"
secretEnvs:
- name: RELEASES_TOKEN
secretName:

4
apps/eav/brusnika-stage/helmrelease.yaml
View File

@ -166,6 +166,10 @@ spec:
- name: YC_S3_BUCKET_NAME
value:
_default: "eav"
- name: KAFKA_ENABLED
value:
_default: "False"
secretEnvs:
- name: KAFKA_PASSWORD
secretName:

18
apps/flows/brusnika-stage/backend.yaml
View File

@ -35,7 +35,7 @@ spec:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_a7dc8216
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_e8a366a3
pullPolicy:
_default: IfNotPresent
@ -225,6 +225,22 @@ spec:
- name: DOCUMENTATION_TIMEOUT
value:
_default: "60"
- name: PLANNING_HOST
value:
_default: "http://backend-service.pm.svc.cluster.local:8000/api/pm/msp"
- name: PLANNING_USE
value:
_default: "True"
- name: PROXY_PATH_PREFIX
value:
_default: "/flows"
- name: CHECKLIST_HOST
value:
_default: "http://checklists-backend-service.checklists.svc.cluster.local:80"
secretEnvs:
- name: ADMIN_PANEL_SECRET_KEY
secretName:

30
apps/flows/brusnika-stage/celery.yaml
View File

@ -35,7 +35,7 @@ spec:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_a7dc8216
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_e8a366a3
pullPolicy:
_default: IfNotPresent
@ -223,6 +223,34 @@ spec:
- name: DOCUMENTATION_TIMEOUT
value:
_default: "60"
- name: FLOWS_HOST
value:
_default: "http://backend-service.flows.svc.cluster.local:8000"
- name: RESOURCES_HOST
value:
_default: "http://iams.iam.svc.cluster.local:8080"
- name: FLOWS_DB_HOST
value:
_default: "192.168.2.45"
- name: FLOWS_DB_PORT
value:
_default: "5432"
- name: ISSUES_DB_PORT
value:
_default: "5432"
- name: ISSUES_DB_HOST
value:
_default: "192.168.2.45"
- name: DJANGO_BASE_HOST
value:
_default: "https://test.sarex.brusnika.tech"
secretEnvs:
- name: ADMIN_PANEL_SECRET_KEY
secretName:

2
apps/flows/brusnika-stage/frontend.yaml
View File

@ -35,7 +35,7 @@ spec:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_dcc5b5e6
_default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_ed219085
pullPolicy:
_default: IfNotPresent

22
apps/iam/brusnika-stage/backend.yaml
View File

@ -35,7 +35,7 @@ spec:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/iams:production_786e19c3
_default: cr.yandex/crp3ccidau046kdj8g9q/iams:contour_dada80a8
pullPolicy:
_default: IfNotPresent
@ -158,6 +158,26 @@ spec:
- name: KAFKA_TOPIC_COMPANY_RESOURCE_PERMISSIONS
value:
_default: "company_resource_permissions"
- name: AUTH_ENABLED
value:
_default: "true"
- name: ZITADEL_ENABLED
value:
_default: "true"
- name: ZITADEL_HOST
value:
_default: "https://sarex-login.uralmine.com"
- name: ZITADEL_ORG_RULES_FILE
value:
_default: "config/zitadel/org-rules-prod.json"
- name: KAFKA_TOPIC_LEGACY_AMS_SYNC
value:
_default: "ams-sync"
secretEnvs:
- name: DB_DSN
secretName:

88
apps/inspections/brusnika-stage/backend.yaml
View File

@ -130,6 +130,94 @@ spec:
- name: API_ADDRESS
value:
_default: "8000"
- name: DEBUG
value:
_default: "false"
- name: HTTP_APP_HOST
value:
_default: "0.0.0.0"
- name: HTTP_APP_PORT
value:
_default: "8000"
- name: HTTP_APP_ROOT_PATH
value:
_default: "/inspections"
- name: HTTP_APP_WORKERS
value:
_default: "3"
- name: HTTP_APP_ADMIN_ENABLE
value:
_default: "true"
- name: KAFKA_SSL_CAFILE
value:
_default: "/usr/local/share/ca-certificates/Yandex/YandexInternalRootCA.crt"
- name: KAFKA_EAV_ASSETS_TOPIC
value:
_default: "assets_broadcast"
- name: JWT_AUTH_ENABLE
value:
_default: "true"
- name: NOTIFICATIONS_ENABLE
value:
_default: "true"
- name: NOTIFICATIONS_EMAIL_FROM
value:
_default: "hello@sarex.io"
- name: SAREX_BACKEND_URL
value:
_default: "https://test.sarex.brusnika.tech"
- name: SAREX_BACKEND_TIMEOUT
value:
_default: "30"
- name: EAV_URL
value:
_default: "http://eav-service.eav"
- name: EAV_TIMEOUT
value:
_default: "30"
- name: WORKFLOWS_TIMEOUT
value:
_default: "30"
- name: WORKFLOWS_EMAIL_DOCKER_IMAGE
value:
_default: "cr.yandex/crp3ccidau046kdj8g9q/notification:email"
- name: MOBILE_APP_CURRENT_VERSION
value:
_default: "1.0.0"
- name: MOBILE_APP_RECOMMENDED_VERSION
value:
_default: "1.0.0"
- name: MOBILE_APP_REQUIRED_VERSION
value:
_default: "1.0.0"
- name: MAILER_URL
value:
_default: "http://mailer-service.mailer:8000"
- name: MAILER_TIMEOUT
value:
_default: "30"
secretEnvs:
- name: DATABASE_USER
secretName:

4
apps/issues/brusnika-stage/backend.yaml
View File

@ -176,6 +176,10 @@ spec:
- name: API_ADDRESS
value:
_default: "8000"
- name: RABBITMQ_HOSTNAME
value:
_default: "rabbitmq.rabbitmq.svc.cluster.local:5672"
secretEnvs:
- name: YC_S3_ACCESS_KEY_ID
secretName:

12
apps/issues/brusnika-stage/celery.yaml
View File

@ -187,6 +187,18 @@ spec:
- name: API_ADDRESS
value:
_default: "8000"
- name: USE_NOTIFICATIONS
value:
_default: "True"
- name: ENABLE_MAILGUN
value:
_default: "False"
- name: RABBITMQ_HOSTNAME
value:
_default: "rabbitmq.rabbitmq.svc.cluster.local:5672"
secretEnvs:
- name: YC_S3_ACCESS_KEY_ID
secretName:

6
apps/rfi/brusnika-stage/backend.yaml
View File

@ -35,7 +35,7 @@ spec:
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:dev4
_default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:production_d1e2e80d
pullPolicy:
_default: IfNotPresent
@ -131,6 +131,10 @@ spec:
- name: DB_PORT
value:
_default: "5432"
- name: RESOURCES_API_HOST
value:
_default: "http://iams.iam.svc.cluster.local:8080"
secretEnvs:
- name: DJANGO_SECRET_KEY
secretName:

16
apps/transmittal/brusnika-stage/worker.yaml
View File

@ -335,6 +335,22 @@ spec:
- name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
value:
_default: "hello@wb.io"
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL
value:
_default: "http://backend-service.flows.svc.cluster.local:8000"
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS
value:
_default: "10"
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
value:
_default: "5"
- name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT
value:
_default: "30"
secretEnvs:
- name: TRANSMITTAL_SERVICE_DATABASE__USER
secretName: