9ec172c0f4
apps/<app>/uralkal mirrors apps/<app>/vad for all 36 apps from clusters/vad/kustomization.yaml, with domains remapped (not a suffix swap — vad's sarex-login.vadroad.ru etc. use a different host scheme than uralkal's login.sarex.local.uralkali.com). Two things are left as explicit placeholders pending real infra: the Zitadel client_id/org_id (TBD_URALKAL_ZITADEL_CLIENT_ID, since uralkal's Zitadel has no application registered yet) and the Kafka CA cert in pm/issues/message-hub/flows (copied from vad, will need swapping once uralkal's Kafka actually generates its own CA, same as vad's history). infrastructure/s3-proxy/uralkal: new component, nginx upstream points at the single uralkal minio endpoint (10.133.0.245:9000) from terraform, unlike vad's 4-node list. clusters/uralkal/kustomization.yaml: wires in s3-proxy + all 36 apps. infrastructure/istio-config/uralkal/istio-config.yaml: adds the 28 path-routed virtualServices under sarex.local.uralkali.com (mirroring vad's sarex.vadroad.ru routing, incl. the documentations-api CORS policy) plus stamp-verification/document-link/s3 on their already-declared hosts. Pre-existing zitadel/superset/camunda-operate blocks are untouched. apps/django/vad/backend.yaml: drop a stale explanatory comment (also removed from the uralkal copy before this commit). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
510 lines
17 KiB
YAML
510 lines
17 KiB
YAML
apiVersion: helm.toolkit.fluxcd.io/v2
|
|
kind: HelmRelease
|
|
metadata:
|
|
name: istio-config
|
|
namespace: default
|
|
spec:
|
|
dependsOn: []
|
|
interval: 5m
|
|
timeout: 10m
|
|
values:
|
|
global:
|
|
env: uralkal
|
|
environments:
|
|
uralkal:
|
|
istio:
|
|
gateways:
|
|
platform:
|
|
name: platform-gateway
|
|
namespace: default
|
|
selector:
|
|
istio: ingressgateway
|
|
servers:
|
|
- hosts:
|
|
- sarex.local.uralkali.com
|
|
- login.sarex.local.uralkali.com
|
|
- bi.sarex.local.uralkali.com
|
|
- sarex-stamp-verification.sarex.local.uralkali.com
|
|
- s3.sarex.local.uralkali.com
|
|
- document-link.sarex.local.uralkali.com
|
|
tls:
|
|
credentialName: uralkal-sarex-tls
|
|
- hosts:
|
|
- camunda-operate.sarex.local.uralkali.com
|
|
tls:
|
|
credentialName: uralkal-camunda-operate-tls
|
|
virtualServices:
|
|
platform:
|
|
name: sarex-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: frontend-svc.django.svc.cluster.local
|
|
port: 80
|
|
filestream-api:
|
|
name: documentations-filestream-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /files/api/
|
|
rewrite: /api/
|
|
service: backend-filestream-svc.documentations.svc.cluster.local
|
|
port: 80
|
|
iam-api:
|
|
name: iam-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /iam/api/
|
|
rewrite: /external/api/
|
|
service: iam-backend.iam.svc.cluster.local
|
|
port: 8000
|
|
documentations-frontend:
|
|
name: documentations-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /documentations/static/
|
|
rewrite: /
|
|
service: frontend-svc.documentations.svc.cluster.local
|
|
port: 80
|
|
rfi-frontend:
|
|
name: rfi-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /rfi/static/
|
|
rewrite: /
|
|
service: frontend-svc.rfi.svc.cluster.local
|
|
port: 80
|
|
rfi-api:
|
|
name: rfi-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /rfi/api/
|
|
rewrite: /api/
|
|
service: backend-svc.rfi.svc.cluster.local
|
|
port: 80
|
|
pm:
|
|
name: pm-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /pm/api/
|
|
rewrite: /api/
|
|
service: backend-svc.pm.svc.cluster.local
|
|
port: 8000
|
|
- path:
|
|
prefix: /pm/
|
|
rewrite: /
|
|
service: frontend-svc.pm.svc.cluster.local
|
|
port: 80
|
|
documentations-api:
|
|
name: documentations-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
cors:
|
|
allowOrigins:
|
|
- exact: "*"
|
|
extraAllowMethods:
|
|
- HEAD
|
|
extraAllowHeaders:
|
|
- Range
|
|
- Cache-control
|
|
allowCredentials: true
|
|
routes:
|
|
- path:
|
|
prefix: /documentations/api/
|
|
rewrite: /api/
|
|
service: backend-api-svc.documentations.svc.cluster.local
|
|
port: 80
|
|
workspaces-api:
|
|
name: workspaces-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /workspaces/api/
|
|
rewrite: /api/
|
|
service: backend-svc.workspaces.svc.cluster.local
|
|
port: 80
|
|
gateway-platform:
|
|
name: pdm-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /gateway/
|
|
rewrite: /
|
|
service: pdm-svc.documentations.svc.cluster.local
|
|
port: 80
|
|
issues-api:
|
|
name: issues-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /issues/api/
|
|
rewrite: /api/
|
|
service: backend-svc.issues.svc.cluster.local
|
|
port: 80
|
|
checklists-api:
|
|
name: checklists-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /checklists/api/
|
|
rewrite: /api/
|
|
service: backend-svc.checklists.svc.cluster.local
|
|
port: 80
|
|
bim-api:
|
|
name: bim-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /bimv2/api/
|
|
rewrite: /api/
|
|
service: backend-svc.bim.svc.cluster.local
|
|
port: 80
|
|
flows-api:
|
|
name: flows-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /flows/api/
|
|
rewrite: /api/
|
|
service: backend-svc.flows.svc.cluster.local
|
|
port: 80
|
|
issues-frontend:
|
|
name: issues-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /issues/static/
|
|
rewrite: /
|
|
service: frontend-svc.issues.svc.cluster.local
|
|
port: 80
|
|
remarks-frontend:
|
|
name: remarks-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /remarks/static/
|
|
rewrite: /
|
|
service: frontend-service.remarks.svc.cluster.local
|
|
port: 80
|
|
auth-frontend:
|
|
name: auth-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /auth/callback
|
|
rewrite: /
|
|
service: frontend-svc.auth-flow.svc.cluster.local
|
|
port: 80
|
|
flows-frontend:
|
|
name: flows-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /flows/static/
|
|
rewrite: /
|
|
service: frontend-svc.flows.svc.cluster.local
|
|
port: 80
|
|
transmittal-frontend:
|
|
name: transmittal-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /transmittal/static/
|
|
rewrite: /
|
|
service: frontend-svc.transmittal.svc.cluster.local
|
|
port: 80
|
|
workflows-api:
|
|
name: workflows-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /workflows/api/
|
|
rewrite: /api/
|
|
service: backend-svc.processing.svc.cluster.local
|
|
port: 80
|
|
transmittals-api:
|
|
name: transmittals-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /transmittals/api/
|
|
rewrite: /api/
|
|
service: backend-svc.transmittal.svc.cluster.local
|
|
port: 80
|
|
inspections-api:
|
|
name: flows-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /inspections/api/
|
|
rewrite: /api/
|
|
service: backend-svc.inspections.svc.cluster.local
|
|
port: 80
|
|
reviews-frontend:
|
|
name: reviews-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /reviews/static/
|
|
rewrite: /
|
|
service: frontend-svc.reviews.svc.cluster.local
|
|
port: 80
|
|
eav-api:
|
|
name: eav-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /eav/api/v0
|
|
rewrite: /api/v4
|
|
service: backend-svc.eav.svc.cluster.local
|
|
port: 80
|
|
- path:
|
|
prefix: /eav/api/v2
|
|
rewrite: /api/v5
|
|
service: backend-svc.eav.svc.cluster.local
|
|
port: 80
|
|
- path:
|
|
prefix: /eav/api/v3
|
|
rewrite: /api/v3
|
|
service: backend-svc.eav.svc.cluster.local
|
|
port: 80
|
|
- path:
|
|
prefix: /eav/api/v4
|
|
rewrite: /api/v4
|
|
service: backend-svc.eav.svc.cluster.local
|
|
port: 80
|
|
- path:
|
|
prefix: /eav/api/v1
|
|
rewrite: /api/v6
|
|
service: backend-svc.eav.svc.cluster.local
|
|
port: 80
|
|
- path:
|
|
prefix: /eav/admin/
|
|
rewrite: /eav/admin/
|
|
service: backend-svc.eav.svc.cluster.local
|
|
port: 80
|
|
srx-admin-frontend:
|
|
name: srx-admin-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /control-interface/
|
|
rewrite: /
|
|
service: frontend-svc.control-interface.svc.cluster.local
|
|
port: 8080
|
|
s3-proxy-media:
|
|
name: s3-proxy-media-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /media/
|
|
rewrite: /
|
|
service: s3-proxy-svc.django.svc.cluster.local
|
|
port: 80
|
|
bi-api:
|
|
name: bi-api-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /analytics-v2/api/
|
|
rewrite: /api/
|
|
service: bi-backend-service.bi.svc.cluster.local
|
|
port: 80
|
|
bi-frontend:
|
|
name: bi-frontend-virt-service
|
|
namespace: default
|
|
hosts:
|
|
- sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /analytics-v2/static/
|
|
rewrite: /
|
|
service: bi-frontend-frontend-svc.bi.svc.cluster.local
|
|
port: 80
|
|
- path:
|
|
prefix: /analytics-v2/
|
|
rewrite: /
|
|
service: bi-frontend-frontend-svc.bi.svc.cluster.local
|
|
port: 80
|
|
zitadel:
|
|
namespace: default
|
|
hosts:
|
|
- login.sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: zitadel-idp-contour.zitadel.svc.cluster.local
|
|
port: 8080
|
|
superset:
|
|
namespace: default
|
|
hosts:
|
|
- bi.sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: superset.superset.svc.cluster.local
|
|
port: 8088
|
|
camunda-operate:
|
|
namespace: default
|
|
hosts:
|
|
- camunda-operate.sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: camunda-operate.camunda.svc.cluster.local
|
|
port: 80
|
|
stamp-verification:
|
|
namespace: default
|
|
hosts:
|
|
- sarex-stamp-verification.sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: frontend-service.stamp-verification.svc.cluster.local
|
|
port: 80
|
|
document-link:
|
|
namespace: default
|
|
hosts:
|
|
- document-link.sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: frontend-service.document-link.svc.cluster.local
|
|
port: 80
|
|
s3:
|
|
namespace: default
|
|
hosts:
|
|
- s3.sarex.local.uralkali.com
|
|
gateways:
|
|
- default/platform-gateway
|
|
routes:
|
|
- path:
|
|
prefix: /
|
|
service: s3-proxy.s3-proxy.svc.cluster.local
|
|
port: 80
|