From 6251cfed5c1fb4376b11ff72986bda0a5466af3c Mon Sep 17 00:00:00 2001 From: ivan Date: Thu, 1 Oct 2026 18:04:55 +0500 Subject: [PATCH] brusnika-stage: bring images and env vars up to wb level MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Missing env vars copied from wb for ams-sync, attachments, bi/frontend, checklists, django (celery, export-project, sarex-backend), documentations (api, filestream, pdm), eav, flows (backend, celery, frontend), iam, inspections, issues (backend, celery), rfi, transmittal/worker. Image tags updated to match wb for flows (backend/celery/frontend), iam. Known issue, not yet fixed in this commit: several of the copied env values are wb-specific hosts (*.wb.ru, one uralmine.com) that don't apply to brusnika-stage — ZITADEL_HOST/ZITADEL_DOMAIN (django, documentations, iam), DATABASE_HOST/FLOWS_DB_HOST/ISSUES_DB_HOST (checklists, flows), SUPERSET_HOST (bi), DJANGO_BASE_HOST/SAREX_BACKEND_URL (flows, inspections), RESOURCES_INTERNAL_HOST/RESOURCE_URL (ams-sync, django, flows, notes-related). To be corrected in a follow-up commit. bi/backend.yaml, bim/backend.yaml and notes/backend.yaml were reverted before this commit (image-tag updates for bi-backend/bim/notes and bi's SUPERSET_* env additions are not included). Co-Authored-By: Claude Sonnet 5 --- apps/ams-sync/brusnika-stage/backend.yaml | 4 + apps/attachments/brusnika-stage/backend.yaml | 4 + apps/bi/brusnika-stage/frontend.yaml | 2 +- apps/checklists/brusnika-stage/backend.yaml | 12 +++ apps/django/brusnika-stage/celery.yaml | 12 +++ .../django/brusnika-stage/export-project.yaml | 5 ++ apps/django/brusnika-stage/sarex-backend.yaml | 12 +++ apps/documentations/brusnika-stage/api.yaml | 28 ++++++ .../brusnika-stage/filestream.yaml | 13 +++ apps/documentations/brusnika-stage/pdm.yaml | 8 ++ apps/eav/brusnika-stage/helmrelease.yaml | 4 + apps/flows/brusnika-stage/backend.yaml | 18 +++- apps/flows/brusnika-stage/celery.yaml | 30 ++++++- apps/flows/brusnika-stage/frontend.yaml | 2 +- apps/iam/brusnika-stage/backend.yaml | 22 ++++- apps/inspections/brusnika-stage/backend.yaml | 88 +++++++++++++++++++ apps/issues/brusnika-stage/backend.yaml | 4 + apps/issues/brusnika-stage/celery.yaml | 12 +++ apps/rfi/brusnika-stage/backend.yaml | 6 +- apps/transmittal/brusnika-stage/worker.yaml | 16 ++++ 20 files changed, 296 insertions(+), 6 deletions(-) diff --git a/apps/ams-sync/brusnika-stage/backend.yaml b/apps/ams-sync/brusnika-stage/backend.yaml index 2ba402e..68cfd51 100644 --- a/apps/ams-sync/brusnika-stage/backend.yaml +++ b/apps/ams-sync/brusnika-stage/backend.yaml @@ -138,6 +138,10 @@ spec: - name: KAFKA_SASL_MECHANISM value: _default: "SCRAM-SHA-512" + - name: RESOURCES_INTERNAL_HOST + value: + _default: "http://iams.iam.svc.cluster.local:8080" + secretEnvs: - name: TELEGRAM_TOKEN secretName: diff --git a/apps/attachments/brusnika-stage/backend.yaml b/apps/attachments/brusnika-stage/backend.yaml index d4a1109..120f671 100644 --- a/apps/attachments/brusnika-stage/backend.yaml +++ b/apps/attachments/brusnika-stage/backend.yaml @@ -110,6 +110,10 @@ spec: - name: YANDEX_S3_VERIFY value: _default: "false" + - name: YANDEX_S3_USE_SSL + value: + _default: "false" + secretEnvs: - name: DATABASE_HOST secretName: diff --git a/apps/bi/brusnika-stage/frontend.yaml b/apps/bi/brusnika-stage/frontend.yaml index db59a7e..9d0dcba 100644 --- a/apps/bi/brusnika-stage/frontend.yaml +++ b/apps/bi/brusnika-stage/frontend.yaml @@ -37,7 +37,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/bi-frontend:production_afb137d4 + _default: cr.yandex/crp3ccidau046kdj8g9q/bi-frontend:contour_9cfd1a0b pullPolicy: _default: IfNotPresent diff --git a/apps/checklists/brusnika-stage/backend.yaml b/apps/checklists/brusnika-stage/backend.yaml index e80b155..0bacda9 100644 --- a/apps/checklists/brusnika-stage/backend.yaml +++ b/apps/checklists/brusnika-stage/backend.yaml @@ -114,6 +114,18 @@ spec: - name: DEBUG value: _default: "false" + - name: DATABASE_HOST + value: + _default: "sarex-vpsql-01.xc.wb.ru" + + - name: DATABASE_PORT + value: + _default: "5432" + + - name: DATABASE_NAME + value: + _default: "checklists_db" + secretEnvs: - name: DATABASE_HOST secretName: diff --git a/apps/django/brusnika-stage/celery.yaml b/apps/django/brusnika-stage/celery.yaml index c119094..9557045 100644 --- a/apps/django/brusnika-stage/celery.yaml +++ b/apps/django/brusnika-stage/celery.yaml @@ -330,6 +330,18 @@ spec: - name: KC_USE_REDIRECT_LOGOUT value: _default: "True" + - name: CACHE_HOST + value: + _default: "redis.pm.svc.cluster.local" + + - name: RESOURCES_INTERNAL_HOST + value: + _default: "http://iams.iam.svc.cluster.local:8080" + + - name: ZITADEL_HOST + value: + _default: "https://zitadel-srx.wb.ru" + secretEnvs: - name: SERVER_SUPERSET_JWT_SECRET secretName: diff --git a/apps/django/brusnika-stage/export-project.yaml b/apps/django/brusnika-stage/export-project.yaml index 42677de..5396010 100644 --- a/apps/django/brusnika-stage/export-project.yaml +++ b/apps/django/brusnika-stage/export-project.yaml @@ -88,6 +88,11 @@ spec: labels: monitoring: prometheus + envs: + - name: TIMEOUT + value: + _default: "180" + commitSha: "" gitlabUri: "" gitlabJobUrl: "" diff --git a/apps/django/brusnika-stage/sarex-backend.yaml b/apps/django/brusnika-stage/sarex-backend.yaml index 1136f4a..4babc57 100644 --- a/apps/django/brusnika-stage/sarex-backend.yaml +++ b/apps/django/brusnika-stage/sarex-backend.yaml @@ -313,6 +313,18 @@ spec: - name: KC_USE_REDIRECT_LOGOUT value: _default: "True" + - name: RESOURCES_INTERNAL_HOST + value: + _default: "http://iams.iam.svc.cluster.local:8080" + + - name: SERVER_EXTERNAL_FIND_BY_USERNAME_ENABLED + value: + _default: "True" + + - name: SERVER_EXTERNAL_FIND_BY_EMAIL_ENABLED + value: + _default: "True" + secretEnvs: - name: SERVER_SUPERSET_JWT_SECRET secretName: diff --git a/apps/documentations/brusnika-stage/api.yaml b/apps/documentations/brusnika-stage/api.yaml index 4a76887..b3fe87f 100644 --- a/apps/documentations/brusnika-stage/api.yaml +++ b/apps/documentations/brusnika-stage/api.yaml @@ -255,6 +255,34 @@ spec: - name: USE_CACHE_IN_FILE_STREAMER value: _default: "1" + - name: USE_LEGACY_BIM_FLOW + value: + _default: "true" + + - name: USE_ZITADEL + value: + _default: "0" + + - name: LAST_SLAVE_1_BIM + value: + _default: "1000000" + + - name: ENABLE_SMTP + value: + _default: "True" + + - name: ENABLE_MAILGUN + value: + _default: "False" + + - name: ENABLE_AUTH_JWT_IN_URL + value: + _default: "false" + + - name: ENABLE_SIGNATURE_IN_URL + value: + _default: "true" + secretEnvs: - name: PUBLIC_KEY secretName: diff --git a/apps/documentations/brusnika-stage/filestream.yaml b/apps/documentations/brusnika-stage/filestream.yaml index d549f30..a42ce56 100644 --- a/apps/documentations/brusnika-stage/filestream.yaml +++ b/apps/documentations/brusnika-stage/filestream.yaml @@ -255,6 +255,19 @@ spec: - name: USE_CACHE_IN_FILE_STREAMER value: _default: "1" + + - name: USE_ZITADEL + value: + _default: "0" + + - name: ENABLE_AUTH_JWT_IN_URL + value: + _default: "false" + + - name: ENABLE_SIGNATURE_IN_URL + value: + _default: "true" + secretEnvs: - name: PUBLIC_KEY secretName: diff --git a/apps/documentations/brusnika-stage/pdm.yaml b/apps/documentations/brusnika-stage/pdm.yaml index 8fecd62..ae345c2 100644 --- a/apps/documentations/brusnika-stage/pdm.yaml +++ b/apps/documentations/brusnika-stage/pdm.yaml @@ -308,6 +308,14 @@ spec: - name: WORKSPACE_URL value: _default: "http://workspaces-service.workspaces.svc.cluster.local:8000/" + - name: BUCKET_NAME + value: + _default: "attachments-storage" + + - name: PERMISSIONS_FILTER_COMPANIES + value: + _default: "[1]" + secretEnvs: - name: RELEASES_TOKEN secretName: diff --git a/apps/eav/brusnika-stage/helmrelease.yaml b/apps/eav/brusnika-stage/helmrelease.yaml index d6f43d7..1bfe385 100644 --- a/apps/eav/brusnika-stage/helmrelease.yaml +++ b/apps/eav/brusnika-stage/helmrelease.yaml @@ -166,6 +166,10 @@ spec: - name: YC_S3_BUCKET_NAME value: _default: "eav" + - name: KAFKA_ENABLED + value: + _default: "False" + secretEnvs: - name: KAFKA_PASSWORD secretName: diff --git a/apps/flows/brusnika-stage/backend.yaml b/apps/flows/brusnika-stage/backend.yaml index b0410d9..1f53e32 100644 --- a/apps/flows/brusnika-stage/backend.yaml +++ b/apps/flows/brusnika-stage/backend.yaml @@ -35,7 +35,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_a7dc8216 + _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend:production_e8a366a3 pullPolicy: _default: IfNotPresent @@ -225,6 +225,22 @@ spec: - name: DOCUMENTATION_TIMEOUT value: _default: "60" + - name: PLANNING_HOST + value: + _default: "http://backend-service.pm.svc.cluster.local:8000/api/pm/msp" + + - name: PLANNING_USE + value: + _default: "True" + + - name: PROXY_PATH_PREFIX + value: + _default: "/flows" + + - name: CHECKLIST_HOST + value: + _default: "http://checklists-backend-service.checklists.svc.cluster.local:80" + secretEnvs: - name: ADMIN_PANEL_SECRET_KEY secretName: diff --git a/apps/flows/brusnika-stage/celery.yaml b/apps/flows/brusnika-stage/celery.yaml index a83469a..404eaeb 100644 --- a/apps/flows/brusnika-stage/celery.yaml +++ b/apps/flows/brusnika-stage/celery.yaml @@ -35,7 +35,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_a7dc8216 + _default: cr.yandex/crp3ccidau046kdj8g9q/flows-backend_worker:production_e8a366a3 pullPolicy: _default: IfNotPresent @@ -223,6 +223,34 @@ spec: - name: DOCUMENTATION_TIMEOUT value: _default: "60" + - name: FLOWS_HOST + value: + _default: "http://backend-service.flows.svc.cluster.local:8000" + + - name: RESOURCES_HOST + value: + _default: "http://iams.iam.svc.cluster.local:8080" + + - name: FLOWS_DB_HOST + value: + _default: "192.168.2.45" + + - name: FLOWS_DB_PORT + value: + _default: "5432" + + - name: ISSUES_DB_PORT + value: + _default: "5432" + + - name: ISSUES_DB_HOST + value: + _default: "192.168.2.45" + + - name: DJANGO_BASE_HOST + value: + _default: "https://test.sarex.brusnika.tech" + secretEnvs: - name: ADMIN_PANEL_SECRET_KEY secretName: diff --git a/apps/flows/brusnika-stage/frontend.yaml b/apps/flows/brusnika-stage/frontend.yaml index 35c066d..994eb96 100644 --- a/apps/flows/brusnika-stage/frontend.yaml +++ b/apps/flows/brusnika-stage/frontend.yaml @@ -35,7 +35,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_dcc5b5e6 + _default: cr.yandex/crp3ccidau046kdj8g9q/flows-frontend:contour_ed219085 pullPolicy: _default: IfNotPresent diff --git a/apps/iam/brusnika-stage/backend.yaml b/apps/iam/brusnika-stage/backend.yaml index d60ffc4..d28ef50 100644 --- a/apps/iam/brusnika-stage/backend.yaml +++ b/apps/iam/brusnika-stage/backend.yaml @@ -35,7 +35,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/iams:production_786e19c3 + _default: cr.yandex/crp3ccidau046kdj8g9q/iams:contour_dada80a8 pullPolicy: _default: IfNotPresent @@ -158,6 +158,26 @@ spec: - name: KAFKA_TOPIC_COMPANY_RESOURCE_PERMISSIONS value: _default: "company_resource_permissions" + - name: AUTH_ENABLED + value: + _default: "true" + + - name: ZITADEL_ENABLED + value: + _default: "true" + + - name: ZITADEL_HOST + value: + _default: "https://sarex-login.uralmine.com" + + - name: ZITADEL_ORG_RULES_FILE + value: + _default: "config/zitadel/org-rules-prod.json" + + - name: KAFKA_TOPIC_LEGACY_AMS_SYNC + value: + _default: "ams-sync" + secretEnvs: - name: DB_DSN secretName: diff --git a/apps/inspections/brusnika-stage/backend.yaml b/apps/inspections/brusnika-stage/backend.yaml index 8811d6d..9ad8b3f 100644 --- a/apps/inspections/brusnika-stage/backend.yaml +++ b/apps/inspections/brusnika-stage/backend.yaml @@ -130,6 +130,94 @@ spec: - name: API_ADDRESS value: _default: "8000" + - name: DEBUG + value: + _default: "false" + + - name: HTTP_APP_HOST + value: + _default: "0.0.0.0" + + - name: HTTP_APP_PORT + value: + _default: "8000" + + - name: HTTP_APP_ROOT_PATH + value: + _default: "/inspections" + + - name: HTTP_APP_WORKERS + value: + _default: "3" + + - name: HTTP_APP_ADMIN_ENABLE + value: + _default: "true" + + - name: KAFKA_SSL_CAFILE + value: + _default: "/usr/local/share/ca-certificates/Yandex/YandexInternalRootCA.crt" + + - name: KAFKA_EAV_ASSETS_TOPIC + value: + _default: "assets_broadcast" + + - name: JWT_AUTH_ENABLE + value: + _default: "true" + + - name: NOTIFICATIONS_ENABLE + value: + _default: "true" + + - name: NOTIFICATIONS_EMAIL_FROM + value: + _default: "hello@sarex.io" + + - name: SAREX_BACKEND_URL + value: + _default: "https://test.sarex.brusnika.tech" + + - name: SAREX_BACKEND_TIMEOUT + value: + _default: "30" + + - name: EAV_URL + value: + _default: "http://eav-service.eav" + + - name: EAV_TIMEOUT + value: + _default: "30" + + - name: WORKFLOWS_TIMEOUT + value: + _default: "30" + + - name: WORKFLOWS_EMAIL_DOCKER_IMAGE + value: + _default: "cr.yandex/crp3ccidau046kdj8g9q/notification:email" + + - name: MOBILE_APP_CURRENT_VERSION + value: + _default: "1.0.0" + + - name: MOBILE_APP_RECOMMENDED_VERSION + value: + _default: "1.0.0" + + - name: MOBILE_APP_REQUIRED_VERSION + value: + _default: "1.0.0" + + - name: MAILER_URL + value: + _default: "http://mailer-service.mailer:8000" + + - name: MAILER_TIMEOUT + value: + _default: "30" + secretEnvs: - name: DATABASE_USER secretName: diff --git a/apps/issues/brusnika-stage/backend.yaml b/apps/issues/brusnika-stage/backend.yaml index c86613c..a1cf84c 100644 --- a/apps/issues/brusnika-stage/backend.yaml +++ b/apps/issues/brusnika-stage/backend.yaml @@ -176,6 +176,10 @@ spec: - name: API_ADDRESS value: _default: "8000" + - name: RABBITMQ_HOSTNAME + value: + _default: "rabbitmq.rabbitmq.svc.cluster.local:5672" + secretEnvs: - name: YC_S3_ACCESS_KEY_ID secretName: diff --git a/apps/issues/brusnika-stage/celery.yaml b/apps/issues/brusnika-stage/celery.yaml index 5ced8f3..fb8c7fe 100644 --- a/apps/issues/brusnika-stage/celery.yaml +++ b/apps/issues/brusnika-stage/celery.yaml @@ -187,6 +187,18 @@ spec: - name: API_ADDRESS value: _default: "8000" + - name: USE_NOTIFICATIONS + value: + _default: "True" + + - name: ENABLE_MAILGUN + value: + _default: "False" + + - name: RABBITMQ_HOSTNAME + value: + _default: "rabbitmq.rabbitmq.svc.cluster.local:5672" + secretEnvs: - name: YC_S3_ACCESS_KEY_ID secretName: diff --git a/apps/rfi/brusnika-stage/backend.yaml b/apps/rfi/brusnika-stage/backend.yaml index 35c3471..d9c8020 100644 --- a/apps/rfi/brusnika-stage/backend.yaml +++ b/apps/rfi/brusnika-stage/backend.yaml @@ -35,7 +35,7 @@ spec: image: name: - _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:dev4 + _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:production_d1e2e80d pullPolicy: _default: IfNotPresent @@ -131,6 +131,10 @@ spec: - name: DB_PORT value: _default: "5432" + - name: RESOURCES_API_HOST + value: + _default: "http://iams.iam.svc.cluster.local:8080" + secretEnvs: - name: DJANGO_SECRET_KEY secretName: diff --git a/apps/transmittal/brusnika-stage/worker.yaml b/apps/transmittal/brusnika-stage/worker.yaml index 15369a5..b73e5de 100644 --- a/apps/transmittal/brusnika-stage/worker.yaml +++ b/apps/transmittal/brusnika-stage/worker.yaml @@ -335,6 +335,22 @@ spec: - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL value: _default: "hello@wb.io" + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL + value: + _default: "http://backend-service.flows.svc.cluster.local:8000" + + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS + value: + _default: "10" + + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS + value: + _default: "5" + + - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT + value: + _default: "30" + secretEnvs: - name: TRANSMITTAL_SERVICE_DATABASE__USER secretName: