vad: istio path routing for pm (/pm/api/, /pm/)

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

apps/documentations/base/api.yaml

@@ -65,7 +65,7 @@ spec:
               enabled: false
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_3f19a21d
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations:prod_179e518c
           pullPolicy:
             _default: IfNotPresent
         service:
@@ -116,6 +116,9 @@ spec:
           - name: DOCUMENT_PUBLIC_LINK_JWT_EXPIRATION_MINUTES
             value:
               _default: "5"
+          - name: PUBLIC_LINK_FOLDER_CONNECTOR_ENABLED
+            value:
+              _default: "true"
           - name: ENABLE_SQL_QUERY
             value:
               _default: "0"

apps/documentations/base/filestream.yaml

@@ -64,7 +64,7 @@ spec:
               enabled: false
         image:
           name:
-            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_a9990430
+            _default: cr.yandex/crp3ccidau046kdj8g9q/documentations-api-files:prod_179e518c
           pullPolicy:
             _default: IfNotPresent
         service:
@@ -94,6 +94,9 @@ spec:
           - name: ZITADEL_DOMAIN
             value:
               _default: zitadel-srx.wb.ru
+          - name: PUBLIC_LINK_FOLDER_CONNECTOR_ENABLED
+            value:
+              _default: "true"
           - name: USE_ZITADEL
             value:
               _default: "1"

apps/documentations/ugok/api.yaml

@@ -1,7 +1,4 @@
 ---
-# standalone HelmRelease — base vault-native, в ugok Vault не используется.
-# Кастомный тег UGOK_4bf15a64 оставлен как есть (не как в wb — см.
-# предыдущее решение по этому приложению).
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -39,7 +36,7 @@ spec:
 
         image:
           name:
-            _default: 10.4.10.187:80/library/documentations:ugok_0b17a10e
+            _default: 10.4.10.187:80/library/documentations:ugok_c33a837a
           pullPolicy:
             _default: IfNotPresent
 
@@ -153,6 +150,9 @@ spec:
           - name: CONTAINER_REGISTRY
             value:
               _default: cr.yandex/crp3ccidau046kdj8g9q
+          - name: PUBLIC_LINK_FOLDER_CONNECTOR_ENABLED
+            value:
+              _default: "true"
           - name: ENVIRONMENT
             value:
               _default: production

apps/documentations/ugok/filestream.yaml

@@ -1,6 +1,4 @@
 ---
-# standalone HelmRelease — base vault-native, в ugok Vault не используется.
-# Кастомный тег prod_dfaa58f7_ugok оставлен как есть (не как в wb).
 apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
@@ -129,6 +127,9 @@ spec:
           - name: ENABLE_SSL
             value:
               _default: "0"
+          - name: PUBLIC_LINK_FOLDER_CONNECTOR_ENABLED
+            value:
+              _default: "true"
           - name: ENABLE_S3
             value:
               _default: "1"

infrastructure/istio-config/vad/istio-config.yaml

@@ -113,6 +113,24 @@ spec:
                   rewrite: /api/
                   service: backend-svc.rfi.svc.cluster.local
                   port: 80
+            pm:
+              name: pm-virt-service
+              namespace: default
+              hosts:
+                - sarex.vadroad.ru
+              gateways:
+                - default/platform-gateway
+              routes:
+                - path:
+                    prefix: /pm/api/
+                  rewrite: /api/
+                  service: backend-svc.pm.svc.cluster.local
+                  port: 8000
+                - path:
+                    prefix: /pm/
+                  rewrite: /
+                  service: frontend-svc.pm.svc.cluster.local
+                  port: 80
             documentations-api:
               name: documentations-api-virt-service
               namespace: default