sarex/iac
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

++

Browse Source
This commit is contained in:
ivan 2026-06-07 15:36:48 +05:00
parent 8466d713ef
commit 6f94400b08
6 changed files with 547 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

167
apps/subscriptions/brusnika-prod/backend.yaml Normal file
View File

@ -0,0 +1,167 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: sarex-subscriptions
namespace: subscriptions
spec:
interval: 10m
chart:
spec:
chart: universal-chart
version: "0.1.7"
sourceRef:
kind: HelmRepository
name: yc-oci-charts
namespace: flux-system
interval: 10m
install:
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
global:
env: _default
services:
backend:
enabled: true
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/subscriptions:prod_a50928e1
pullPolicy:
_default: IfNotPresent
deployment:
enabled: true
name:
_default: sarex-subscriptions
replicaCount:
_default: 1
stage: 1
preprod: 3
production: 3
port:
_default: 8000
probes:
liveness:
enabled: false
readiness:
enabled: false
service:
enabled: true
name:
_default: sarex-subscriptions-service
type:
_default: ClusterIP
port:
_default: 80
targetPort:
_default: 8000
portName:
_default: http
imagePullSecrets:
enabled:
_default: true
name:
_default: regcred
labels:
monitoring: prometheus
envs:
- name: DATABASE_HOST
value:
_default: "postgres-service"
- name: DATABASE_PORT
value:
_default: "5432"
- name: DATABASE_NAME
value:
_default: "subscriptions"
- name: API_ADDRESS
value:
_default: "8000"
- name: SYSTEM_LOG_HOST
value:
_default: "http://api-service.system-log"
- name: USER_SERVICE_HOST
value:
_default: "http://backend.django.svc.cluster.local:8000"
- name: IS_USE_TELEGRAM
value:
_default: "false"
- name: IS_MAILGUN_USE
value:
_default: "0"
- name: SMTP_EMAIL_FROM
value:
_default: "cde@brusnika.ru"
- name: SMTP_EMAIL_HOST
value:
_default: "smtp-relay.gmail.com"
- name: SMTP_EMAIL_PORT
value:
_default: "587"
secretEnvs:
- name: DATABASE_USER
secretName:
_default: "postgres-secret"
secretKey: "username"
- name: DATABASE_PASSWORD
secretName:
_default: "postgres-secret"
secretKey: "password"
- name: YC_S3_ACCESS_KEY_ID
secretName:
_default: "yc-s3-secret"
secretKey: "key_id"
- name: YC_S3_SECRET_ACCESS_KEY
secretName:
_default: "yc-s3-secret"
secretKey: "access_key"
- name: YC_S3_BUCKET_NAME
secretName:
_default: "yc-s3-secret"
secretKey: "storage_bucket_name"
- name: YC_S3_ENDPOINT_URL
secretName:
_default: "yc-s3-secret"
secretKey: "endpoint_url"
commitSha: ""
gitlabUri: ""
gitlabJobUrl: ""
owner: ""

6
apps/subscriptions/brusnika-prod/kustomization.yaml Normal file
View File

@ -0,0 +1,6 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: subscriptions
resources:
- backend.yaml

199
apps/system-log/brusnika-prod/api.yaml Normal file
View File

@ -0,0 +1,199 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: api
namespace: system-log
spec:
interval: 10m
chart:
spec:
chart: universal-chart
version: "0.1.7"
sourceRef:
kind: HelmRepository
name: yc-oci-charts
namespace: flux-system
interval: 10m
install:
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
global:
env: _default
services:
backend:
enabled: true
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/system-log:prod_6ed1b27e
pullPolicy:
_default: IfNotPresent
deployment:
enabled: true
name:
_default: api
replicaCount:
_default: 1
stage: 1
preprod: 3
production: 3
port:
_default: 8000
probes:
liveness:
enabled: false
readiness:
enabled: false
service:
enabled: true
name:
_default: api-service
type:
_default: ClusterIP
port:
_default: 80
targetPort:
_default: 8000
portName:
_default: http
imagePullSecrets:
enabled:
_default: true
name:
_default: regcred
labels:
monitoring: prometheus
envs:
- name: KAFKA_ENABLE
value:
_default: "1"
- name: KAFKA_BROKERS
value:
_default: "rc1d-s0a1ujcbj6fdk26b.mdb.yandexcloud.net:9091"
- name: KAFKA_GROUP
value:
_default: "system-log-stage"
- name: KAFKA_CLIENT_ID
value:
_default: "system-log-stage"
- name: KAFKA_USE_SSL
value:
_default: "1"
- name: KAFKA_ENABLE_LOGGING
value:
_default: "1"
- name: KAFKA_TOPIC
value:
_default: "bru.cde.folders.stage"
- name: APP_NAME
value:
_default: "system_log"
- name: APP_VERSION
value:
_default: "0.0.1"
- name: LOG_LEVEL
value:
_default: "INFO"
- name: HTTP_HOST
value:
_default: "0.0.0.0"
- name: HTTP_PORT
value:
_default: "8000"
- name: NAMESPACE
value:
_default: "system-log"
- name: POSTGRES_ADDRESS
value:
_default: "postgres-service"
- name: POSTGRES_PORT
value:
_default: "5432"
- name: POSTGRES_DB
value:
_default: "system_log"
- name: POSTGRES_POOL_SIZE
value:
_default: "3"
- name: ENABLE_SSL
value:
_default: "0"
- name: DJANGO_HOST
value:
_default: "http://backend.django.svc.cluster.local:8000"
secretEnvs:
- name: POSTGRES_USER
secretName:
_default: "postgres-secret"
secretKey: "username"
- name: POSTGRES_PASSWORD
secretName:
_default: "postgres-secret"
secretKey: "password"
- name: KAFKA_USERNAME
secretName:
_default: "ya-kafka-secret"
secretKey: "username"
- name: KAFKA_PASSWORD
secretName:
_default: "ya-kafka-secret"
secretKey: "password"
- name: KAFKA_PEM_CERT
secretName:
_default: "yc-kafka-certificate"
secretKey: "certificate"
- name: KAFKA_PEM_PATH
secretName:
_default: "yc-kafka-certificate"
secretKey: "certificate"
commitSha: ""
gitlabUri: ""
gitlabJobUrl: ""
owner: ""

7
apps/system-log/brusnika-prod/kustomization.yaml Normal file
View File

@ -0,0 +1,7 @@
---
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: system-log
resources:
- api.yaml
- worker.yaml

165
apps/system-log/brusnika-prod/worker.yaml Normal file
View File

@ -0,0 +1,165 @@
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: worker
namespace: system-log
spec:
interval: 10m
chart:
spec:
chart: universal-chart
version: "0.1.7"
sourceRef:
kind: HelmRepository
name: yc-oci-charts
namespace: flux-system
interval: 10m
install:
remediation:
retries: 3
upgrade:
remediation:
retries: 3
values:
global:
env: _default
services:
backend:
enabled: true
image:
name:
_default: cr.yandex/crp3ccidau046kdj8g9q/system_log_worker:de6a0147d285afa273e85c0f074c8b6049d03a32
pullPolicy:
_default: IfNotPresent
deployment:
enabled: true
name:
_default: worker
replicaCount:
_default: 1
stage: 1
preprod: 3
production: 3
port:
_default: 8000
probes:
liveness:
enabled: false
readiness:
enabled: false
service:
enabled: false
name:
_default: worker-service
type:
_default: ClusterIP
port:
_default: 8000
targetPort:
_default: 8000
portName:
_default: http
imagePullSecrets:
enabled:
_default: true
name:
_default: regcred
labels:
monitoring: prometheus
envs:
- name: APP_NAME
value:
_default: "system_log"
- name: APP_VERSION
value:
_default: "0.0.1"
- name: LOG_LEVEL
value:
_default: "INFO"
- name: HTTP_HOST
value:
_default: "0.0.0.0"
- name: HTTP_PORT
value:
_default: "8000"
- name: NAMESPACE
value:
_default: "sarex-system-log"
- name: DOCUMENTATIONS_URL
value:
_default: "http://documentations-api.documentations.svc.cluster.local:8080"
- name: POSTGRES_ADDRESS
value:
_default: "postgres-service"
- name: POSTGRES_PORT
value:
_default: "5432"
- name: POSTGRES_DB
value:
_default: "system_log"
- name: POSTGRES_POOL_SIZE
value:
_default: "3"
- name: ENABLE_SSL
value:
_default: "0"
- name: DJANGO_HOST
value:
_default: "http://backend.django.svc.cluster.local:8000"
secretEnvs:
- name: POSTGRES_USER
secretName:
_default: "postgres-secret"
secretKey: "username"
- name: POSTGRES_PASSWORD
secretName:
_default: "postgres-secret"
secretKey: "password"
- name: SUPER_USERNAME
secretName:
_default: "superuser"
secretKey: "username"
- name: SUPER_PASSWORD
secretName:
_default: "superuser"
secretKey: "password"
commitSha: ""
gitlabUri: ""
gitlabJobUrl: ""
owner: ""

2
clusters/brusnika-prod/kustomization.yaml
View File

@ -26,3 +26,5 @@ resources:
- ../../apps/message-hub/brusnika-prod - ../../apps/message-hub/brusnika-prod
- ../../apps/rfi/brusnika-prod - ../../apps/rfi/brusnika-prod
- ../../apps/transmittal/brusnika-prod - ../../apps/transmittal/brusnika-prod
- ../../apps/subscriptions/brusnika-prod
- ../../apps/system-log/brusnika-prod