++

apps/message-hub/brusnika-prod/backend.yaml

@@ -0,0 +1,208 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: message-hub
+  namespace: message-hub
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      backend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/message-hub:production_d11aa910
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: message-hub
+
+          replicaCount:
+            _default: 1
+            stage: 1
+            preprod: 3
+            production: 3
+
+          port:
+            _default: 8000
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: message-hub
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 8000
+
+          targetPort:
+            _default: 8000
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+        labels:
+          monitoring: prometheus
+
+        envs:
+          - name: WORKER_TIMEOUT
+            value:
+              _default: "60"
+
+          - name: PYTHONPATH
+            value:
+              _default: "src"
+
+          - name: SETTINGS_MAX_RETRIES
+            value:
+              _default: "1"
+
+          - name: SETTINGS_TOPICS
+            value:
+              _default: >
+                {"planning": "message-hub-prod",
+                "assets":"assets_broadcast",
+                "issues": "issues_broadcast_prod"}
+
+          - name: PDF_CONVERTER_HOST
+            value:
+              _default: "http://export-project-service.django.svc.cluster.local:8000"
+
+          - name: SAREX_BASE_HOST
+            value:
+              _default: "http://backend-service.pm.svc.cluster.local:8000"
+
+          - name: PM_HOST
+            value:
+              _default: "http://backend-service.pm.svc.cluster.local:8000"
+
+          - name: DB_HOST
+            value:
+              _default: "postgres-service.pm.svc.cluster.local"
+
+          - name: DB_PORT
+            value:
+              _default: "5432"
+
+          - name: DB_DATABASE
+            value:
+              _default: "pm"
+
+          - name: CACHE_HOST
+            value:
+              _default: "redis.pm.svc.cluster.local"
+
+          - name: CACHE_PORT
+            value:
+              _default: "6379"
+
+          - name: CACHE_SSL
+            value:
+              _default: "0"
+
+          - name: KAFKA_HOST
+            value:
+              _default: "donstroi-kafka-bootstrap.kafka.svc.cluster.local"
+
+          - name: KAFKA_PORT
+            value:
+              _default: "9093"
+
+          - name: KAFKA_SECURITY_PROTOCOL
+            value:
+              _default: "SSL"
+
+          - name: KAFKA_SASL_MECHANISM
+            value:
+              _default: "PLAIN"
+
+          - name: KAFKA_SSL_CAFILE
+            value:
+              _default: "/usr/local/share/ca-certificates/kafka.crt"
+        secretEnvs:
+          - name: KAFKA_USERNAME
+            secretName:
+              _default: "kafka-secret"
+            secretKey: "username"
+
+          - name: KAFKA_PASSWORD
+            secretName:
+              _default: "kafka-secret"
+            secretKey: "password"
+
+          - name: DB_USERNAME
+            secretName:
+              _default: "postgres-pm-secret"
+            secretKey: "username"
+
+          - name: DB_PASSWORD
+            secretName:
+              _default: "postgres-pm-secret"
+            secretKey: "password"
+
+          - name: S3_LOGIN
+            secretName:
+              _default: "s3-secret"
+            secretKey: "username"
+
+          - name: S3_PASSWORD
+            secretName:
+              _default: "s3-secret"
+            secretKey: "password"
+
+          - name: S3_BUCKET
+            secretName:
+              _default: "s3-secret"
+            secretKey: "bucket"
+
+          - name: S3_HOST
+            secretName:
+              _default: "s3-secret"
+            secretKey: "host"
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

apps/message-hub/brusnika-prod/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: message-hub
+resources:
+  - backend.yaml

apps/rfi/brusnika-prod/backend.yaml

@@ -0,0 +1,198 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: rfi-backend-api
+  namespace: rfi
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      backend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-backend:dev4
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: rfi-backend-api
+
+          replicaCount:
+            _default: 1
+            stage: 1
+            preprod: 3
+            production: 3
+
+          port:
+            _default: 8000
+
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: rfi-backend-api-svc
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 80
+
+          targetPort:
+            _default: 8000
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+        labels:
+          monitoring: prometheus
+        envs:
+          - name: JWT_AUTH_ENABLE
+            value:
+              _default: "True"
+
+          - name: NOTIFICATIONS_ENABLE
+            value:
+              _default: "false"
+
+          - name: NOTIFICATIONS_EMAIL_FROM
+            value:
+              _default: "hello@sarex.io"
+
+          - name: NOTIFICATIONS_SERVICE_URL
+            value:
+              _default: "https://cde.brusnika.ru/rfi"
+
+          - name: SAREX_BACKEND_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+
+          - name: EAV_URL
+            value:
+              _default: "http://eav-service.eav.svc.cluster.local:8000"
+
+          - name: GATEWAY_URL
+            value:
+              _default: "http://pdm-api.documentations.svc.cluster.local:8080"
+
+          - name: RABBITMQ_PORT
+            value:
+              _default: "5672"
+
+          - name: RABBITMQ_HOST
+            value:
+              _default: "rabbitmq.rabbitmq.svc.cluster.local"
+
+          - name: DB_HOST
+            value:
+              _default: "postgres-service"
+
+          - name: DB_PORT
+            value:
+              _default: "5432"
+        secretEnvs:
+          - name: DJANGO_SECRET_KEY
+            secretName:
+              _default: "django-secret"
+            secretKey: "django_secret_key"
+
+          - name: DB_NAME
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "dbname"
+
+          - name: DB_USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "user"
+
+          - name: DB_PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "password"
+
+          - name: SAREX_BACKEND_AUTH
+            secretName:
+              _default: "django-secret"
+            secretKey: "token"
+
+          - name: YC_S3_ACCESS_KEY_ID
+            secretName:
+              _default: "s3-secret"
+            secretKey: "key_id"
+
+          - name: YC_S3_SECRET_ACCESS_KEY
+            secretName:
+              _default: "s3-secret"
+            secretKey: "access_key"
+
+          - name: YC_S3_BUCKET_NAME
+            secretName:
+              _default: "s3-secret"
+            secretKey: "storage_bucket_name"
+
+          - name: YC_S3_ENDPOINT_URL
+            secretName:
+              _default: "s3-secret"
+            secretKey: "endpoint_url"
+
+          - name: RABBITMQ_VHOST
+            secretName:
+              _default: "rabbitmq-secret"
+            secretKey: "vhost"
+
+          - name: RABBITMQ_USERNAME
+            secretName:
+              _default: "rabbitmq-secret"
+            secretKey: "username"
+
+          - name: RABBITMQ_PASSWORD
+            secretName:
+              _default: "rabbitmq-secret"
+            secretKey: "password"
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

apps/rfi/brusnika-prod/frontend.yaml

@@ -0,0 +1,94 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: rfi-frontend
+  namespace: rfi
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      frontend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/rfi-frontend:wb_b81d2efd
+
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: rfi-frontend
+
+          replicaCount:
+            _default: 1
+            stage: 1
+            preprod: 3
+            production: 3
+
+          port:
+            _default: 80
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: rfi-frontend-service
+
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 80
+
+          targetPort:
+            _default: 80
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

apps/rfi/brusnika-prod/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: rfi
+resources:
+  - frontend.yaml
+  - backend.yaml

apps/transmittal/brusnika-prod/backend.yaml

@@ -0,0 +1,379 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: transmittal
+  namespace: transmittal
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      backend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_d94cce67
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: transmittal
+
+          replicaCount:
+            _default: 1
+            stage: 1
+            preprod: 3
+            production: 3
+
+          port:
+            _default: 8000
+
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: transmittal-service
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 80
+
+          targetPort:
+            _default: 8000
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+        labels:
+          monitoring: prometheus
+        envs:
+          - name: TRANSMITTAL_SERVICE_APP__NAME
+            value:
+              _default: "Transmittal Service"
+
+          - name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL
+            value:
+              _default: "ERROR"
+
+          - name: TRANSMITTAL_SERVICE_APP__HOST
+            value:
+              _default: "https://test.sarex.brusnika.tech/transmittal"
+
+          - name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT
+            value:
+              _default: "prod"
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__HOST
+            value:
+              _default: "0.0.0.0"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__PORT
+            value:
+              _default: "8000"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__ENABLE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__HOST
+            value:
+              _default: "http://signoz-otel-collector-external.signoz.svc.cluster.local:4317"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME
+            value:
+              _default: "backend.transmittals-prod"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__INSECURE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE
+            value:
+              _default: "verify-full"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH
+            value:
+              _default: "/opt/.postgresql/root.crt"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL
+            value:
+              _default: "info"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS
+            value:
+              _default: "2"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH
+            value:
+              _default: ""
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__PORT
+            value:
+              _default: "5432"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__NAME
+            value:
+              _default: "transmittal_db"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__VHOST
+            value:
+              _default: "api"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq-service"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__PORT
+            value:
+              _default: "5672"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL
+            value:
+              _default: "http://resources-service.resources.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME
+            value:
+              _default: "ru-central1"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET
+            value:
+              _default: "transmittal-storage"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT
+            value:
+              _default: "minio-service.minio.svc.cluster.local:9000"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL
+            value:
+              _default: "http://export-project-service.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL
+            value:
+              _default: "http://marks-service.documentations.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL
+            value:
+              _default: "https://api.mailgun.net/v3/mg.sarex.io"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
+            value:
+              _default: "hello@wb.io"
+        secretEnvs:
+          - name: TRANSMITTAL_SERVICE_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "username"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "password"
+
+          - name: TRANSMITTAL_SERVICE_AUTH__PUBLIC_KEY
+            secretName:
+              _default: "public-key"
+            secretKey: "key"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASIC_AUTH_ENCODED
+            secretName:
+              _default: "django-auth"
+            secretKey: "key"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY
+            secretName:
+              _default: "s3-secret"
+            secretKey: "access_key"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY
+            secretName:
+              _default: "s3-secret"
+            secretKey: "secret_key"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq-cred"
+            secretKey: "username"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq-cred"
+            secretKey: "password"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__API_KEY
+            secretName:
+              _default: "mailgun-cred"
+            secretKey: "api_key"
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

apps/transmittal/brusnika-prod/frontend.yaml

@@ -0,0 +1,94 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: transmittal-frontend-static
+  namespace: transmittal
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      frontend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-frontend:wb_e6600344
+
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: transmittal-frontend-static
+
+          replicaCount:
+            _default: 1
+            stage: 1
+            preprod: 3
+            production: 3
+
+          port:
+            _default: 80
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: transmittal-frontend-static
+
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 80
+
+          targetPort:
+            _default: 80
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

apps/transmittal/brusnika-prod/kustomization.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: transmittal
+resources:
+ - frontend.yaml
+ - backend.yaml
+ - worker.yaml

apps/transmittal/brusnika-prod/worker.yaml

@@ -0,0 +1,387 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: worker
+  namespace: transmittal
+
+spec:
+  interval: 10m
+
+  chart:
+    spec:
+      chart: universal-chart
+      version: "0.1.7"
+      sourceRef:
+        kind: HelmRepository
+        name: yc-oci-charts
+        namespace: flux-system
+      interval: 10m
+
+  install:
+    remediation:
+      retries: 3
+
+  upgrade:
+    remediation:
+      retries: 3
+
+  values:
+    global:
+      env: _default
+
+    services:
+      backend:
+        enabled: true
+
+        image:
+          name:
+            _default: cr.yandex/crp3ccidau046kdj8g9q/transmittal-api:prod_d94cce67
+          pullPolicy:
+            _default: IfNotPresent
+
+        deployment:
+          enabled: true
+
+          name:
+            _default: worker
+
+          replicaCount:
+            _default: 1
+            stage: 1
+            preprod: 3
+            production: 3
+
+          port:
+            _default: 8000
+          command:
+            _default:
+            - taskiq
+            - worker
+            - '--no-parse'
+            - transmittal_service.tasks.broker:broker
+            - transmittal_service.tasks.transmittal.tasks
+            - transmittal_service.tasks.email.tasks
+
+
+          probes:
+            liveness:
+              enabled: false
+            readiness:
+              enabled: false
+
+        service:
+          enabled: true
+
+          name:
+            _default: worker
+
+          type:
+            _default: ClusterIP
+
+          port:
+            _default: 80
+
+          targetPort:
+            _default: 8000
+
+          portName:
+            _default: http
+
+        imagePullSecrets:
+          enabled:
+            _default: true
+          name:
+            _default: regcred
+
+        labels:
+          monitoring: prometheus
+        envs:
+          - name: TRANSMITTAL_SERVICE_APP__NAME
+            value:
+              _default: "Transmittal Service"
+
+          - name: TRANSMITTAL_SERVICE_APP__LOG_LEVEL
+            value:
+              _default: "ERROR"
+
+          - name: TRANSMITTAL_SERVICE_APP__HOST
+            value:
+              _default: "https://test.sarex.brusnika.tech/transmittal"
+
+          - name: TRANSMITTAL_SERVICE_APP__ENVIRONMENT
+            value:
+              _default: "prod"
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_ORIGINS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_METHODS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_HEADERS
+            value:
+              _default: '["*"]'
+
+          - name: TRANSMITTAL_SERVICE_CORS__ALLOW_CREDENTIALS
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__HOST
+            value:
+              _default: "0.0.0.0"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__PORT
+            value:
+              _default: "8000"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ENABLE_AUTO_RELOAD
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__ENABLE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__HOST
+            value:
+              _default: "http://signoz-otel-collector-external.signoz.svc.cluster.local:4317"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__SERVICE_NAME
+            value:
+              _default: "backend.transmittals-prod"
+
+          - name: TRANSMITTAL_SERVICE_OTEL__INSECURE
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_MODE
+            value:
+              _default: "verify-full"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__SSL_ROOT_CERT_PATH
+            value:
+              _default: "/opt/.postgresql/root.crt"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__LOG_LEVEL
+            value:
+              _default: "info"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__NUM_WORKERS
+            value:
+              _default: "2"
+
+          - name: TRANSMITTAL_SERVICE_UVICORN__ROOT_PATH
+            value:
+              _default: ""
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__HOST
+            value:
+              _default: "postgres-service"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__PORT
+            value:
+              _default: "5432"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__NAME
+            value:
+              _default: "transmittal_db"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__ENABLE_SSL
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__VHOST
+            value:
+              _default: "api"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__HOST
+            value:
+              _default: "rabbitmq-service"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__PORT
+            value:
+              _default: "5672"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASE_URL
+            value:
+              _default: "http://backend.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__BASE_URL
+            value:
+              _default: "http://resources-service.resources.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_RESOURCE_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__BASE_URL
+            value:
+              _default: "http://documentations-api.documentations.svc.cluster.local:8080"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_DOCUMENTATIONS_REPOSITORY__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__MAX_POOL_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__CONNECT_TIMEOUT
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__READ_TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__REGION_NAME
+            value:
+              _default: "ru-central1"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__VERIFY
+            value:
+              _default: "true"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__DEFAULT_BUCKET
+            value:
+              _default: "transmittal-storage"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__ENDPOINT
+            value:
+              _default: "minio-service.minio.svc.cluster.local:9000"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__USE_SSL
+            value:
+              _default: "false"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__BASE_URL
+            value:
+              _default: "http://export-project-service.django.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_HTML_TO_PDF_CONVERTER__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__BASE_URL
+            value:
+              _default: "http://marks-service.documentations.svc.cluster.local:8000"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MARKINGS__TIMEOUT
+            value:
+              _default: "50"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__BASE_URL
+            value:
+              _default: "https://api.mailgun.net/v3/mg.sarex.io"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_CONNECTIONS
+            value:
+              _default: "10"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__MAX_KEEPALIVE_CONNECTIONS
+            value:
+              _default: "5"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__TIMEOUT
+            value:
+              _default: "15"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__EMAIL
+            value:
+              _default: "hello@wb.io"
+        secretEnvs:
+          - name: TRANSMITTAL_SERVICE_DATABASE__USER
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "username"
+
+          - name: TRANSMITTAL_SERVICE_DATABASE__PASSWORD
+            secretName:
+              _default: "postgres-secret"
+            secretKey: "password"
+
+          - name: TRANSMITTAL_SERVICE_AUTH__PUBLIC_KEY
+            secretName:
+              _default: "public-key"
+            secretKey: "key"
+
+          - name: TRANSMITTAL_SERVICE_SAREX_BACKEND_REPOSITORY__BASIC_AUTH_ENCODED
+            secretName:
+              _default: "django-auth"
+            secretKey: "key"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__ACCESS_KEY
+            secretName:
+              _default: "s3-secret"
+            secretKey: "access_key"
+
+          - name: TRANSMITTAL_SERVICE_S3_CLIENT__SECRET_KEY
+            secretName:
+              _default: "s3-secret"
+            secretKey: "secret_key"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__USER
+            secretName:
+              _default: "rabbitmq-cred"
+            secretKey: "username"
+
+          - name: TRANSMITTAL_SERVICE_RABBITMQ__PASSWORD
+            secretName:
+              _default: "rabbitmq-cred"
+            secretKey: "password"
+
+          - name: TRANSMITTAL_SERVICE_MAILGUN__API_KEY
+            secretName:
+              _default: "mailgun-cred"
+            secretKey: "api_key"
+
+        commitSha: ""
+        gitlabUri: ""
+        gitlabJobUrl: ""
+        owner: ""

clusters/brusnika-prod/kustomization.yaml

@@ -23,3 +23,6 @@ resources:
   - ../../apps/pm/brusnika-prod
   - ../../apps/inspections/brusnika-prod
   - ../../apps/bim/brusnika-prod
+  - ../../apps/message-hub/brusnika-prod
+  - ../../apps/rfi/brusnika-prod
+  - ../../apps/transmittal/brusnika-prod