sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

++

Browse Source
This commit is contained in:
ivan 2026-07-31 15:12:16 +05:00
parent b14e342955
commit 7868779771
21 changed files with 136 additions and 71 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
apps/bim/base/backend.yaml
View File

@ -189,18 +189,18 @@ spec:
vault.hashicorp.com/agent-inject-secret-bim-postgresql: secrets/data/apps/bim/postgres
vault.hashicorp.com/agent-inject-template-bim-postgresql: |-
{{- with secret "secrets/data/apps/bim/postgres" -}}
POSTGRES_ADDRESS=postgresql.bim.svc.cluster.local
POSTGRES_ADDRESS_2=postgresql.bim.svc.cluster.local
POSTGRES_ADDRESS_3=postgresql.bim.svc.cluster.local
POSTGRES_ADDRESS_4=postgresql.bim.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_PORT_2=5432
POSTGRES_PORT_3=5432
POSTGRES_PORT_4=5432
POSTGRES_DB=bim_db
POSTGRES_DB_2=bim_db
POSTGRES_DB_3=bim_db
POSTGRES_DB_4=bim_db
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_ADDRESS_2={{ index .Data.data "host" }}
POSTGRES_ADDRESS_3={{ index .Data.data "host" }}
POSTGRES_ADDRESS_4={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_PORT_2={{ index .Data.data "port" }}
POSTGRES_PORT_3={{ index .Data.data "port" }}
POSTGRES_PORT_4={{ index .Data.data "port" }}
POSTGRES_DB={{ index .Data.data "database" }}
POSTGRES_DB_2={{ index .Data.data "database" }}
POSTGRES_DB_3={{ index .Data.data "database" }}
POSTGRES_DB_4={{ index .Data.data "database" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_USER_2={{ index .Data.data "username" }}
POSTGRES_USER_3={{ index .Data.data "username" }}

12
apps/comparisons/base/backend.yaml
View File

@ -247,14 +247,14 @@ spec:
vault.hashicorp.com/agent-inject-secret-comparisons-db: secrets/data/apps/comparisons/postgres
vault.hashicorp.com/agent-inject-template-comparisons-db: |-
{{- with secret "secrets/data/apps/comparisons/postgres" -}}
DATABASE_HOST=postgresql.comparisons.svc.cluster.local
DATABASE_PORT=5432
DATABASE_DB=comparisons_db
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_DB={{ index .Data.data "database" }}
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
POSTGRES_ADDRESS=postgresql.comparisons.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_DB=comparisons_db
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_DB={{ index .Data.data "database" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

4
apps/drawings/base/backend.yaml
View File

@ -122,8 +122,8 @@ spec:
vault.hashicorp.com/agent-inject-secret-drawings-db: secrets/data/apps/drawings/postgres
vault.hashicorp.com/agent-inject-template-drawings-db: |-
{{- with secret "secrets/data/apps/drawings/postgres" -}}
POSTGRES_ADDRESS=postgresql.drawings.svc.cluster.local:5432
POSTGRES_DB=drawings_db
POSTGRES_ADDRESS={{ index .Data.data "host" }}:{{ index .Data.data "port" }}
POSTGRES_DB={{ index .Data.data "database" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

6
apps/flows/base/celery.yaml
View File

@ -206,10 +206,10 @@ spec:
vault.hashicorp.com/agent-inject-secret-flows-postgresql: secrets/data/apps/flows/postgres
vault.hashicorp.com/agent-inject-template-flows-postgresql: |-
{{- with secret "secrets/data/apps/flows/postgres" -}}
PG_DB=flows_db
PG_DB={{ index .Data.data "database" }}
PG_LOGIN={{ index .Data.data "username" }}
PG_HOST=postgresql.flows.svc.cluster.local
PG_PORT=5432
PG_HOST={{ index .Data.data "host" }}
PG_PORT={{ index .Data.data "port" }}
PG_PASSWORD={{ index .Data.data "password" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-flows-documentations-db: secrets/data/apps/documentations/postgres

6
apps/inspections/base/backend.yaml
View File

@ -215,9 +215,9 @@ spec:
vault.hashicorp.com/agent-inject-secret-inspections-db: secrets/data/apps/inspections/postgres
vault.hashicorp.com/agent-inject-template-inspections-db: |-
{{- with secret "secrets/data/apps/inspections/postgres" -}}
DATABASE_HOST=postgresql.inspections.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=inspections_db
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_NAME={{ index .Data.data "database" }}
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

6
apps/issues/base/backend.yaml
View File

@ -191,11 +191,11 @@ spec:
vault.hashicorp.com/agent-inject-secret-issues-db: secrets/data/apps/issues/postgres
vault.hashicorp.com/agent-inject-template-issues-db: |-
{{- with secret "secrets/data/apps/issues/postgres" -}}
DATABASE_PORT=5432
DATABASE_HOST=postgresql.issues.svc.cluster.local
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
DATABASE_NAME=issues_db
DATABASE_NAME={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-issues-rabbitmq: secrets/data/rabbitmq/apps/issues
vault.hashicorp.com/agent-inject-template-issues-rabbitmq: |-

6
apps/issues/base/celery.yaml
View File

@ -176,11 +176,11 @@ spec:
vault.hashicorp.com/agent-inject-secret-issues-db: secrets/data/apps/issues/postgres
vault.hashicorp.com/agent-inject-template-issues-db: |-
{{- with secret "secrets/data/apps/issues/postgres" -}}
DATABASE_PORT=5432
DATABASE_HOST=postgresql.issues.svc.cluster.local
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
DATABASE_NAME=issues_db
DATABASE_NAME={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-issues-rabbitmq: secrets/data/rabbitmq/apps/issues
vault.hashicorp.com/agent-inject-template-issues-rabbitmq: |-

6
apps/mapper/base/backend.yaml
View File

@ -152,9 +152,9 @@ spec:
{{- with secret "secrets/data/apps/mapper/postgres" -}}
MAPPER_DB_USER={{ index .Data.data "username" }}
MAPPER_DB_PASSWORD={{ index .Data.data "password" }}
MAPPER_DB_HOST=postgresql.mapper.svc.cluster.local
MAPPER_DB_PORT=5432
MAPPER_DB_NAME=mapper_db
MAPPER_DB_HOST={{ index .Data.data "host" }}
MAPPER_DB_PORT={{ index .Data.data "port" }}
MAPPER_DB_NAME={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-mapper-rabbitmq: secrets/data/rabbitmq/apps/mapper
vault.hashicorp.com/agent-inject-template-mapper-rabbitmq: |-

6
apps/message-hub/base/message-hub.yaml
View File

@ -153,9 +153,9 @@ spec:
{{- with secret "secrets/data/apps/message-hub/postgres" -}}
DB_USERNAME={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }}
DB_DATABASE=pm_db
DB_HOST=postgresql.pm.svc.cluster.local
DB_PORT=5432
DB_DATABASE={{ index .Data.data "database" }}
DB_HOST={{ index .Data.data "host" }}
DB_PORT={{ index .Data.data "port" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-message-hub-s3: secrets/data/minio/apps/message-hub
vault.hashicorp.com/agent-inject-template-message-hub-s3: |-

6
apps/pm/base/backend.yaml
View File

@ -225,9 +225,9 @@ spec:
{{- with secret "secrets/data/apps/pm/postgres" -}}
DB_USERNAME={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }}
DB_DATABASE=pm_db
DB_HOST=postgresql.pm.svc.cluster.local
DB_PORT=5432
DB_DATABASE={{ index .Data.data "database" }}
DB_HOST={{ index .Data.data "host" }}
DB_PORT={{ index .Data.data "port" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-pm-rabbitmq: secrets/data/rabbitmq/apps/pm
vault.hashicorp.com/agent-inject-template-pm-rabbitmq: |-

6
apps/pm/base/celery.yaml
View File

@ -208,9 +208,9 @@ spec:
{{- with secret "secrets/data/apps/pm/postgres" -}}
DB_USERNAME={{ index .Data.data "username" }}
DB_PASSWORD={{ index .Data.data "password" }}
DB_DATABASE=pm_db
DB_HOST=postgresql.pm.svc.cluster.local
DB_PORT=5432
DB_DATABASE={{ index .Data.data "database" }}
DB_HOST={{ index .Data.data "host" }}
DB_PORT={{ index .Data.data "port" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-pm-rabbitmq: secrets/data/rabbitmq/apps/pm
vault.hashicorp.com/agent-inject-template-pm-rabbitmq: |-

6
apps/processing/base/api.yaml
View File

@ -142,11 +142,11 @@ spec:
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/apps/processing/postgres
vault.hashicorp.com/agent-inject-template-processing-postgresql: |-
{{- with secret "secrets/data/apps/processing/postgres" -}}
POSTGRES_ADDRESS=postgresql.processing.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
POSTGRES_DB=workflow_db
POSTGRES_DB={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-processing-jwt-public: secrets/data/vault/common/rsa_keys
vault.hashicorp.com/agent-inject-template-processing-jwt-public: |-

6
apps/processing/base/engine-low.yaml
View File

@ -402,11 +402,11 @@ spec:
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/apps/processing/postgres
vault.hashicorp.com/agent-inject-template-processing-postgresql: |-
{{- with secret "secrets/data/apps/processing/postgres" -}}
POSTGRES_ADDRESS=postgresql.processing.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
POSTGRES_DB=workflow_db
POSTGRES_DB={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-processing-rabbitmq: secrets/data/rabbitmq/apps/processing
vault.hashicorp.com/agent-inject-template-processing-rabbitmq: |-

6
apps/processing/base/engine.yaml
View File

@ -394,11 +394,11 @@ spec:
vault.hashicorp.com/agent-inject-secret-processing-postgresql: secrets/data/apps/processing/postgres
vault.hashicorp.com/agent-inject-template-processing-postgresql: |-
{{- with secret "secrets/data/apps/processing/postgres" -}}
POSTGRES_ADDRESS=postgresql.processing.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
POSTGRES_DB=workflow_db
POSTGRES_DB={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-processing-rabbitmq: secrets/data/rabbitmq/apps/processing
vault.hashicorp.com/agent-inject-template-processing-rabbitmq: |-

6
apps/resources/base/backend-deployment.yaml
View File

@ -24,9 +24,9 @@ spec:
vault.hashicorp.com/agent-inject-secret-resources-db: secrets/data/apps/resources/postgres
vault.hashicorp.com/agent-inject-template-resources-db: |-
{{- with secret "secrets/data/apps/resources/postgres" -}}
DATABASE_HOST=postgresql.resources.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=resources_db
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_NAME={{ index .Data.data "database" }}
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

6
apps/subscriptions/base/backend-deployment.yaml
View File

@ -25,9 +25,9 @@ spec:
vault.hashicorp.com/agent-inject-secret-subscriptions-postgresql: secrets/data/apps/subscriptions/postgres
vault.hashicorp.com/agent-inject-template-subscriptions-postgresql: |-
{{- with secret "secrets/data/apps/subscriptions/postgres" -}}
DATABASE_HOST=postgresql.subscriptions.svc.cluster.local
DATABASE_PORT=5432
DATABASE_NAME=subscriptions_db
DATABASE_HOST={{ index .Data.data "host" }}
DATABASE_PORT={{ index .Data.data "port" }}
DATABASE_NAME={{ index .Data.data "database" }}
DATABASE_USER={{ index .Data.data "username" }}
DATABASE_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

6
apps/system-log/base/api.yaml
View File

@ -182,9 +182,9 @@ spec:
vault.hashicorp.com/agent-inject-secret-system-log-postgresql: secrets/data/apps/system-log/postgres
vault.hashicorp.com/agent-inject-template-system-log-postgresql: |-
{{- with secret "secrets/data/apps/system-log/postgres" -}}
POSTGRES_ADDRESS=postgresql.system-log.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_DB=system_log_db
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_DB={{ index .Data.data "database" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

6
apps/system-log/base/worker.yaml
View File

@ -158,9 +158,9 @@ spec:
vault.hashicorp.com/agent-inject-secret-system-log-postgresql: secrets/data/apps/system-log/postgres
vault.hashicorp.com/agent-inject-template-system-log-postgresql: |-
{{- with secret "secrets/data/apps/system-log/postgres" -}}
POSTGRES_ADDRESS=postgresql.system-log.svc.cluster.local
POSTGRES_PORT=5432
POSTGRES_DB=system_log_db
POSTGRES_ADDRESS={{ index .Data.data "host" }}
POSTGRES_PORT={{ index .Data.data "port" }}
POSTGRES_DB={{ index .Data.data "database" }}
POSTGRES_USER={{ index .Data.data "username" }}
POSTGRES_PASSWORD={{ index .Data.data "password" }}
{{- end -}}

6
apps/transmittal/base/backend.yaml
View File

@ -360,9 +360,9 @@ spec:
{{- with secret "secrets/data/apps/transmittal/postgres" -}}
TRANSMITTAL_SERVICE_DATABASE__USER={{ index .Data.data "username" }}
TRANSMITTAL_SERVICE_DATABASE__PASSWORD={{ index .Data.data "password" }}
TRANSMITTAL_SERVICE_DATABASE__HOST=postgresql.transmittal.svc.cluster.local
TRANSMITTAL_SERVICE_DATABASE__PORT=5432
TRANSMITTAL_SERVICE_DATABASE__NAME=transmittal_db
TRANSMITTAL_SERVICE_DATABASE__HOST={{ index .Data.data "host" }}
TRANSMITTAL_SERVICE_DATABASE__PORT={{ index .Data.data "port" }}
TRANSMITTAL_SERVICE_DATABASE__NAME={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-transmittal-rabbitmq: secrets/data/rabbitmq/apps/transmittal
vault.hashicorp.com/agent-inject-template-transmittal-rabbitmq: |-

6
apps/transmittal/base/worker.yaml
View File

@ -345,9 +345,9 @@ spec:
{{- with secret "secrets/data/apps/transmittal/postgres" -}}
TRANSMITTAL_SERVICE_DATABASE__USER={{ index .Data.data "username" }}
TRANSMITTAL_SERVICE_DATABASE__PASSWORD={{ index .Data.data "password" }}
TRANSMITTAL_SERVICE_DATABASE__HOST=postgresql.transmittal.svc.cluster.local
TRANSMITTAL_SERVICE_DATABASE__PORT=5432
TRANSMITTAL_SERVICE_DATABASE__NAME=transmittal_db
TRANSMITTAL_SERVICE_DATABASE__HOST={{ index .Data.data "host" }}
TRANSMITTAL_SERVICE_DATABASE__PORT={{ index .Data.data "port" }}
TRANSMITTAL_SERVICE_DATABASE__NAME={{ index .Data.data "database" }}
{{- end -}}
vault.hashicorp.com/agent-inject-secret-transmittal-rabbitmq: secrets/data/rabbitmq/apps/transmittal
vault.hashicorp.com/agent-inject-template-transmittal-rabbitmq: |-

65
infrastructure/istio-config/d8-ugmk-prod/istio-config.yaml
View File

@ -158,6 +158,71 @@ spec:
rewrite: /
service: pdm-svc.documentations.svc.cluster.local
port: 80
issues-api:
name: issues-api-virt-service
namespace: default
hosts:
- sarex.uralmine.com
gateways:
- default/platform-gateway
routes:
- path:
prefix: /issues/api/
rewrite: /api/
service: backend-svc.issues.svc.cluster.local
port: 80
flows-api:
name: flows-api-virt-service
namespace: default
hosts:
- sarex.uralmine.com
gateways:
- default/platform-gateway
routes:
- path:
prefix: /flows/api/
rewrite: /api/
service: backend-svc.flows.svc.cluster.local
port: 80
issues-frontend:
name: issues-frontend-virt-service
namespace: default
hosts:
- sarex.uralmine.com
gateways:
- default/platform-gateway
routes:
- path:
prefix: /issues/static/
rewrite: /
service: frontend-svc.issues.svc.cluster.local
port: 80
flows-frontend:
name: flows-frontend-virt-service
namespace: default
hosts:
- sarex.uralmine.com
gateways:
- default/platform-gateway
routes:
- path:
prefix: /flows/static/
rewrite: /
service: frontend-svc.flows.svc.cluster.local
port: 80
reviews-frontend:
name: reviews-frontend-virt-service
namespace: default
hosts:
- sarex.uralmine.com
gateways:
- default/platform-gateway
routes:
- path:
prefix: /reviews/static/
rewrite: /
service: frontend-svc.reviews.svc.cluster.local
port: 80
eav-api:
name: eav-api-virt-service
namespace: default