++

apps/attachments/base/helmrelease.yaml

@@ -103,7 +103,7 @@ spec:
               YANDEX_S3_ENDPOINT_URL=minio.minio:9000
               YANDEX_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
               YANDEX_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
-              YANDEX_S3_USE_SSL=false
+              YANDEX_S3_USE_SSL=true
               YANDEX_S3_REGION=ru-central
               YANDEX_S3_VERIFY=false
               BUCKET_NAME=attachments

apps/attachments/d8-ugmk-prod/patch.yaml

@@ -22,14 +22,14 @@ spec:
               DATABASE_PASSWORD={{ index .Data.data "password" }}
               DATABASE_SSL_MODE=disable
               {{- end -}}
-#            vault.hashicorp.com/agent-inject-secret-attachments-s3: secrets/data/minio/apps/attachments
+            vault.hashicorp.com/agent-inject-secret-attachments-s3: secrets/data/minio/apps/attachments
-#            vault.hashicorp.com/agent-inject-template-attachments-s3: |-
+            vault.hashicorp.com/agent-inject-template-attachments-s3: |-
-#              {{- with secret "secrets/data/minio/apps/attachments" -}}
+              {{- with secret "secrets/data/minio/apps/attachments" -}}
-#              YANDEX_S3_ENDPOINT_URL=minio.minio:9000
+              YANDEX_S3_ENDPOINT_URL=s3.uralmine.com
-#              YANDEX_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
+              YANDEX_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
-#              YANDEX_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
+              YANDEX_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
-#              YANDEX_S3_USE_SSL=false
+              YANDEX_S3_USE_SSL=true
-#              YANDEX_S3_REGION=ru-central
+              YANDEX_S3_REGION=ru-central
-#              YANDEX_S3_VERIFY=false
+              YANDEX_S3_VERIFY=false
-#              BUCKET_NAME=attachments
+              BUCKET_NAME=sarex-attachments-storage
-#              {{- end -}}
+              {{- end -}}

apps/iam/d8-ugmk-prod/backend-s3.yaml

@@ -0,0 +1,78 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: iam-backend
+  namespace: iam
+spec:
+  values:
+    services:
+      backend:
+        envs:
+          - name: ENVIRONMENT
+            value:
+              _default: "prod"
+
+          - name: LOG_LEVEL
+            value:
+              _default: "debug"
+
+          - name: AUTH_ENABLED
+            value:
+              _default: "true"
+
+          - name: HTTP_PORT
+            value:
+              _default: "8080"
+
+          - name: HTTP_READ_BUFFER_SIZE
+            value:
+              _default: "131072"
+
+          - name: DB_MIGRATIONS_PATH
+            value:
+              _default: "migrations"
+
+          - name: ZITADEL_ENABLED
+            value:
+              _default: "true"
+
+          - name: ZITADEL_HOST
+            value:
+              _default: "https://sarex-login.uralmine.com"
+
+          - name: ZITADEL_ORG_RULES_FILE
+            value:
+              _default: "config/zitadel/org-rules-prod.json"
+
+          - name: S3_ENABLED
+            value:
+              _default: "true"
+
+          - name: S3_ENDPOINT_URL
+            value:
+              _default: "https://s3.uralmine.com"
+
+          - name: S3_BUCKET_NAME
+            value:
+              _default: "sarex-media-storage"
+
+          - name: S3_REGION
+            value:
+              _default: "ru-central1"
+
+          - name: S3_PRESIGN_EXPIRES
+            value:
+              _default: "1h"
+
+          - name: KAFKA_ENABLED
+            value:
+              _default: "false"
+
+          - name: KAFKA_SSL_CAFILE
+            value:
+              _default: "/etc/ca-certificates/Yandex/ca-cert"
+
+          - name: KAFKA_TOPIC_LEGACY_AMS_SYNC
+            value:
+              _default: "ams-sync"

apps/iam/d8-ugmk-prod/kustomization.yaml

@@ -3,4 +3,9 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 namespace: iam
 resources:
-  - ../base
+  - ../base
+patches:
+  - path: backend-s3.yaml
+    target:
+      kind: HelmRelease
+      name: iam-backend

apps/issues/d8-ugmk-prod/backend-s3.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: backend
+  namespace: issues
+spec:
+  values:
+    services:
+      backend:
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-secret-issues-s3: secrets/data/minio/apps/issues
+            vault.hashicorp.com/agent-inject-template-issues-s3: |-
+              {{- with secret "secrets/data/minio/apps/issues" -}}
+              YC_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
+              YC_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
+              YC_S3_BUCKET_NAME=sarex-issues
+              YC_S3_ENDPOINT_URL=https://s3.uralmine.com
+              {{- end -}}

apps/issues/d8-ugmk-prod/celery-s3.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: celery
+  namespace: issues
+spec:
+  values:
+    services:
+      celery:
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-secret-issues-s3: secrets/data/minio/apps/issues
+            vault.hashicorp.com/agent-inject-template-issues-s3: |-
+              {{- with secret "secrets/data/minio/apps/issues" -}}
+              YC_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
+              YC_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
+              YC_S3_BUCKET_NAME=sarex-issues
+              YC_S3_ENDPOINT_URL=https://s3.uralmine.com
+              {{- end -}}

apps/issues/d8-ugmk-prod/kustomization.yaml

@@ -8,3 +8,11 @@ patches:
     target:
       kind: Namespace
       name: issues
+  - path: backend-s3.yaml
+    target:
+      kind: HelmRelease
+      name: backend
+  - path: celery-s3.yaml
+    target:
+      kind: HelmRelease
+      name: celery

apps/rfi/d8-ugmk-prod/backend-s3.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: backend
+  namespace: rfi
+spec:
+  values:
+    services:
+      backend:
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-secret-rfi-s3: secrets/data/minio/apps/rfi
+            vault.hashicorp.com/agent-inject-template-rfi-s3: |-
+              {{- with secret "secrets/data/minio/apps/rfi" -}}
+              YC_S3_ENDPOINT_URL=https://s3.uralmine.com
+              YC_S3_BUCKET_NAME=sarex-rfi
+              YC_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
+              YC_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}

apps/rfi/d8-ugmk-prod/celery-s3.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: celery
+  namespace: rfi
+spec:
+  values:
+    services:
+      celery:
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-secret-rfi-s3: secrets/data/minio/apps/rfi
+            vault.hashicorp.com/agent-inject-template-rfi-s3: |-
+              {{- with secret "secrets/data/minio/apps/rfi" -}}
+              YC_S3_ENDPOINT_URL=https://s3.uralmine.com
+              YC_S3_BUCKET_NAME=sarex-rfi
+              YC_S3_ACCESS_KEY_ID={{ index .Data.data "access_key" }}
+              YC_S3_SECRET_ACCESS_KEY={{ index .Data.data "secret_key" }}
+              {{- end -}}

apps/rfi/d8-ugmk-prod/kustomization.yaml

@@ -9,3 +9,11 @@ patches:
     target:
       kind: HelmRelease
       name: frontend
+  - path: backend-s3.yaml
+    target:
+      kind: HelmRelease
+      name: backend
+  - path: celery-s3.yaml
+    target:
+      kind: HelmRelease
+      name: celery

apps/transmittal/d8-ugmk-prod/backend-s3.yaml

@@ -0,0 +1,256 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: backend
+  namespace: transmittal
+spec:
+  values:
+    services:
+      backend:
+        envs:
+          - name: TRANSMITTAL_SERVICE_APP__NAME
+            value:
+              _default: "Transmittal Service"
+
+          - name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL
+            value:
+              _default: "ERROR"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:80"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT
+            value:
+              _default: "30"
+
+          - name: TRANSMITTAL_SERVICE_APP__HOST
+            value:
+              _default: "https://sarex.contour.infra.sarex.tech/transmittal"
+
+          - name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT
+            value:
+              _default: "prod"
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__HOST
+            value:
+              _default: "0.0.0.0"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__PORT
+            value:
+              _default: "8000"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__ENABLE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__HOST
+            value:
+              _default: "http://signoz-otel-collector-external.signoz.svc.cluster.local:4317"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME
+            value:
+              _default: "backend.transmittals-prod"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__INSECURE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE
+            value:
+              _default: "verify-full"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH
+            value:
+              _default: "/opt/.postgresql/root.crt"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL
+            value:
+              _default: "info"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS
+            value:
+              _default: "2"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH
+            value:
+              _default: ""
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__PORT
+            value:
+              _default: "5672"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend-svc.django.svc.cluster.local:80"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL
+            value:
+              _default: "http://iam-backend.iam.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME
+            value:
+              _default: "ru-central1"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT
+            value:
+              _default: "s3.uralmine.com"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL
+            value:
+              _default: "http://export-project-service.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL
+            value:
+              _default: "http://marks-service.documentations.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL
+            value:
+              _default: "https://api.mailgun.net/v3/mg.sarex.io"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
+            value:
+              _default: "hello@wb.io"
+
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-secret-transmittal-s3: secrets/data/minio/apps/transmittal
+            vault.hashicorp.com/agent-inject-template-transmittal-s3: |-
+              {{- with secret "secrets/data/minio/apps/transmittal" -}}
+              TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY={{ index .Data.data "access_key" }}
+              TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY={{ index .Data.data "secret_key" }}
+              TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET=sarex-tf-state
+              {{- end -}}

apps/transmittal/d8-ugmk-prod/kustomization.yaml

@@ -8,3 +8,11 @@ patches:
     target:
       kind: Namespace
       name: transmittal
+  - path: backend-s3.yaml
+    target:
+      kind: HelmRelease
+      name: backend
+  - path: worker-s3.yaml
+    target:
+      kind: HelmRelease
+      name: worker

apps/transmittal/d8-ugmk-prod/worker-s3.yaml

@@ -0,0 +1,256 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: worker
+  namespace: transmittal
+spec:
+  values:
+    services:
+      worker:
+        envs:
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend-svc.flows.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_FLOWS_REPOSITORY__TIMEOUT
+            value:
+              _default: "30"
+
+          - name: TRANSMITTAL_SERVICE_APP__NAME
+            value:
+              _default: "Transmittal Service"
+
+          - name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL
+            value:
+              _default: "ERROR"
+
+          - name: TRANSMITTAL_SERVICE_APP__HOST
+            value:
+              _default: "https://lk.srx.wb.ru:30443/transmittal"
+
+          - name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT
+            value:
+              _default: "prod"
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__HOST
+            value:
+              _default: "0.0.0.0"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__PORT
+            value:
+              _default: "8000"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__ENABLE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__HOST
+            value:
+              _default: "http://signoz-otel-collector-external.signoz.svc.cluster.local:4317"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME
+            value:
+              _default: "backend.transmittals-prod"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__INSECURE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE
+            value:
+              _default: "verify-full"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH
+            value:
+              _default: "/opt/.postgresql/root.crt"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL
+            value:
+              _default: "info"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS
+            value:
+              _default: "2"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH
+            value:
+              _default: ""
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__PORT
+            value:
+              _default: "5672"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL
+            value:
+              _default: "http://resources-service.resources.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend-api-svc.documentations.svc.cluster.local:80"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME
+            value:
+              _default: "ru-central1"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT
+            value:
+              _default: "s3.uralmine.com"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL
+            value:
+              _default: "http://export-project-service.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL
+            value:
+              _default: "http://marks-service.documentations.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL
+            value:
+              _default: "https://api.mailgun.net/v3/mg.sarex.io"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
+            value:
+              _default: "hello@wb.io"
+
+        podAnnotations:
+          _default:
+            vault.hashicorp.com/agent-inject-secret-transmittal-s3: secrets/data/minio/apps/transmittal
+            vault.hashicorp.com/agent-inject-template-transmittal-s3: |-
+              {{- with secret "secrets/data/minio/apps/transmittal" -}}
+              TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY={{ index .Data.data "access_key" }}
+              TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY={{ index .Data.data "secret_key" }}
+              TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET=sarex-tf-state
+              {{- end -}}