Commit Graph

69 Commits

Author SHA1 Message Date
struga
0b45ecbeac
Add fraud ui (#247)
* Add fraud ui

* Cilium policies
2021-11-30 11:13:51 +03:00
vilorij
18ebb1541f
Changes (#246)
* Ch values added

* initdb-related fixes

* no optional

* vault fix for k8s 1.21

* policy add

* configurable replicas count

* typo fix

* add new env

* fix ingressclass

* return correct config

* policy refactor

* add FRONTURL for realms

* refactor papi

* add cnp

* bump deps

* delete useless cnp

* new service

* comment l7 cnp

* add needed cnp

* move vhost to ingress

* ZK label for cnp

* change create time for fixing UpdatePassword

* delete ns from cnp

* bump

* last policy

Co-authored-by: i.panteleev <i.panteleev@rbk.money>
Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-11-15 04:38:10 +03:00
vilorij
01b16b6398
Dudoser (#245)
* add dudoser

* add mail vars

* enable dudoser

* prod env vars

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-11-15 04:32:13 +03:00
Gregory
3e90c9662c
Add fraudbusters-notificator (#231)
* add fraudbusters-warehouse

* add fraudbusters-notificator

* add fraudbusters-notificator in release

* add log

* update image

* update image

* update image

* update image

* fix review

* fix

* fix
2021-10-12 16:12:49 +03:00
Dmitry Skokov
0507efd089 typo fix in indent 2021-10-11 15:55:55 +03:00
vilorij
d3d938a294
Add-flexibility-config (#239)
* bouncer ip family

* bump dark-api

* move iddqd locations to ingress

* values for future flex config of external storages

* improove anaytics

* improove anapi

* improove bender

* fix ImagePullSecret

* add binapi tolerations

* binbase tolerate

* improove capi-v2-pcidss

* improove cds

* improove deanon

* improove dominant hook container

* improove ff-magista

* improove hooker

* kafka ClusterDomain in values

* kds improove with tolerate

* improove KK

* improove machinegun

* improove magista

* improove messages

* improove org-manager

* improove payouter

* mocketbank tolerate

* improove questionary

* improove reporter

* improove shumway

* Testtransaction changeble registry

* improove wapi-pcidss

* kafka endpoint from template

* payouts limits fix

* typo fix

* add file-storage

* add registry secret to reporter and riak

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-10-07 19:07:42 +03:00
vilorij
f131656c7c
Claim-management-api (#221)
* introduce claim-management-api

* enable claim-api in helmfile

* delete vault properties

* claim-management upd

* change KK url for backend key request

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: NPospolita <nikita7asics@gmail.com>
2021-10-06 17:16:10 +03:00
Gregory
6afbcd18c6
add fraudbusters-warehouse (#230)
* add fraudbusters-warehouse

* add fraudbusters-warehouse in release
2021-09-24 11:34:05 +02:00
vilorij
9a0bbcc4bb
add org-manager (#213)
* add org-manager

* typo fix port for ingress

* fix in public key path
reenable probes
delete useless cnp

* add metrics to stand values

* enable org-manager in helmfile

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-09-20 16:23:40 +03:00
vilorij
40b938a563
Fix init domain config on first start up (#209)
* fix providerref statement
bump holmes in init container

* bump holmes with damsel

* party-management deps

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-09-16 11:09:05 +03:00
vilorij
0cd257f642
demostand-fix (#202)
* dark-api fix KK url

* Enlarge domainconfig init with providers, payouts, payment_routing

* add reporter
enable wapi-*
fix fistfull config for identities create

* add create account in settlement

* fix wallet_contract

* Service urls now requires own place in config

* fix wapi-pcidss config

* fix wapi for creation destination

* add environment for devstand

* fix wapi endpoint in fistful-magista

* darkapi bump

* bump dashboard

* bump KK version

* add roles to internal realm

* bump questionary-proxy

* reduce default_ttl

* add wapi port

* group ingress tls secrets for api and iddqd

* reduce cert number by splitting tls section in papi

* change domain inliner to use vars

* refactor ingress domain logic

* refactor trigger name

* Update erlang services (#204)

* Update wapi-pcidss to latest

* Update wapi-v0 to latest

* Update hellgate

* Update fistful

* Remove legacy capi services

* Add party-management

* Add limiter

* Fix files for config output for limiter and party-management

* Update capi-v2 to latest

* Update dominant

* Update kds

* Update cds

* Update bender

* Convert template vars to values

* Update machinegun

* Add token-keeper

* Add token-keeper

* ED-159: shamway fix

* ED-159: Add bouncer and bouncer-policies

* Update config/bouncer-policies/values.yaml.gotmpl

Co-authored-by: vilorij <vilorij@ya.ru>

* Code review fixes

* Update bouncer*

* Add keys

* Move to new way of ingress templating

* drop doubled parameter

* typofix in dominant host

* devstand change

* typofix in bouncers

* disable LE and tls in devstand

* Fix bouncer config

* Fix binapi config

* fix papi shebang

* typofix
add probes port

* fix bouncer-policies port

* disable KK tls if disabled in Values

* Fix path to party service in mg

* capi-v1 is back for test transaction

* ingress secret typofix

* capi-v1 in helmfile

* typofix in domain address

* enable idkfa

* fix ttl

* bump deps

* Add links to provider and rulesets

Co-authored-by: r.shaidullin <ndiezel0@gmail.com>
Co-authored-by: vilorij <vilorij@ya.ru>
Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>

* Update devstand.rbk.yaml

* move prometheus to helm-infra

* fix test-transaction stateless values

* Add comment to default.values

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Sergey Yelin <elinsn@gmail.com>
Co-authored-by: ilyatrub <ilyatrub@gmail.com>
Co-authored-by: Sergey Yelin <s.elin@rbkmoney.com>
Co-authored-by: r.shaidullin <ndiezel0@gmail.com>
2021-09-09 20:44:45 +03:00
Pospolita Nikita
cee683d4df
Added xrates service (#205)
* Added xrates service

* adjust annotations and typofix

* store xrates secret in dev vault

* disable xrates deploy

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: vilorij <vilorij@ya.ru>
2021-09-03 15:35:26 +03:00
ilyatrub
49679b7aea
make test-transaction stateless (#203)
* make test-transaction stateless

* delete unused values

* delete gatewayService config as it's not used in stateless service template

* fix adding file to configMap

* change liveness and readyness probes

* delete create test shop logic

* fix nginx image and log files

* bump stateless chart version

* fix ipv4 logic and delete default nginx config

* helmfile deps

* change containerPort to port

* remove protocol
2021-08-26 17:42:07 +03:00
ilyatrub
025aaf91b6
Frolov changes (#198)
* add deps, fix versions, vault host address, minikube config

* fix back unnecessary changes

* delete outdated vaulues.yaml for keycloak realms

* return back keycloak fixed version

* remove keycloak fixed version and fix ingress path

* made helmfile deps

* delete outdated values.yaml for vault-cm

* return back keycloak fixed version

* remove keycloak fixed version and fix ingress path

* made helmfile deps
2021-08-09 17:48:46 +03:00
Anatoly Karlov
33839f51bd
remove cashier properties from claim-management chart (#194) 2021-07-09 18:47:40 +03:00
Dmitry Skokov
ae8b53f47d fix service rendering 2021-07-09 16:58:54 +03:00
vilorij
07132eea39
Improove (#193)
* add epic branch with java services

* Introduce analytics (#166)

* Introduce questionary (#175)

* Introduce questionary

* actualize questionary

* actualize questionary

* Introduce claim-management (#173)

* Introduce questionary-aggr-proxy (#176)

* management.endpoint.prometheus.enabled=true

* Change Claim database name for PG compatability

* move CH pasword from template

* Introduce magista (#169)

* Introduce magista-kafka

* Introduce magista-kafka

* Introduce magista-kafka

* Introduce mst

* move kafka comment to the end of file

* actualize magista

* actualize magista

* actualize mgista

* management.endpoint.prometheus.enabled=true

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: vilorij <vilorij@ya.ru>

* fix url in anapi for correct rendering in logs

* Add LE certs issuer to ingress

* erl default templating
disable ServiceMonitor

* new db init

* riak fix ConfigMap

* shortener config templating

* Dashboard fix realm, 404 error and add ingress

* disable SM in hooker

* add objectselector in vault

* Shumway add schema

* add ingress tls variable into defaults.values

* Fistful templatimg erl defaults
typo fix in MG address

* add default realms

* Consuela for MG
add namespace for payouts

* helmfile deps bump

* add fistful-magista

* add payouter

* add columbus

* add columbus

* disable SM

* analitics fix
clickhouse node for analytics

* claimmgmt add

* fix iddqd appconfig mounts

* deanonimus add

* add antifraud

* kafka scale and infinity retention

* KK realms readability
fix password for manager
add roles mapping

* disable consuella for the issues in consul

* typo fix in checkout

* DB for antifraud

* add schema setting for questionary

* shortener fix with KK public key

* HG ingress for iddqd

* Dominant ingress for iddqd

* messages add
disable vault password control because of foreign keys in DB

* papi add

* idkfa add

* dark-api add

* fix hooker DB name
add DB for fraudbusters

* add new services in helmfile and bump deps

* delete useless keycloak values

Co-authored-by: karleowne <a.karlov@rbkmoney.com>
Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-07-08 04:10:39 +03:00
Sergey Yelin
c5d8e91863
Add wapi-v0 (#188)
* Add wapi-v0

* Update config/fistful/values.yaml.gotmpl

Co-authored-by: vilorij <vilorij@ya.ru>

Co-authored-by: vilorij <vilorij@ya.ru>
2021-05-14 14:50:40 +03:00
Anatoly Karlov
12e1ebc243
Hooker - fix properties, bump images (#177) 2021-03-05 23:05:19 +07:00
Anatoly Karlov
c6a7e5314f
refactor synopsis description for 'hooker' and 'shumway' (#172) 2021-03-03 23:29:31 +07:00
vilorij
cf6ac00fbd
internal_services (#167)
* add dashboard and CC to helmfile

* ServiceMonitors and CNP move in Releases namespace

* -revert vault init script sleep for devsetup
- vault-injector webhook only for Release namespace

* - dont install prom if processing namespaced
- bump chart versions in lock

* bump TT version

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2021-02-26 20:14:11 +03:00
vilorij
d24b4db65a
Refactor (#157)
* delete submodule

* stateless

* capi switch to genericchart

* default ports change

* all capi move to generic

* change api port in values of capi

* add command to chart

* ingress port in chart

* right ingress values in capis

* binbase to stateless

* hellgate move

* move holmes

* move hooker

* fix needs

* move shortener

* move payform

* move cds

* more fixes

* hook in chart

* add pvc

* fix pvc template

* move kds

* move shumway

* move machinegun

* delay for moket

* MG fix

* binbase fix resource

* capi fix volumes path

* prepare config for dominant

* hooks

* move bender

* proxy move

* payform liveness

* needs fix

* fix urls

* add env to chart

* fix machineid matcher

* last move mocket

* ingress bump from deprecation

* moket url in dominanta fix

* move wapi

* add api init to chart

* move wapi-pcidss

* log annotations refactor

* add volumes for hook

* move dominant

* typo fix in vault annotations

* use zookeeper from kafka chart

* zookeeper replicas

* move to githab charts from services folder

* bender statefull and consul label

* delete useless folder

* Apply suggestions from code review

Co-authored-by: vilorij <vilorij@ya.ru>

* fix mocket-mpi port

* metrics enable

* delete metrics from service without metrics

* fix indent in values

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* drop empty lines

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* fix comment and bump deps

* riak and bump deps chart

* Add missing services (#159)

* Add anapi

* Add bin-api

* Fix naming

* Fix oopsBody paths

* Update config/anapi/sys.config

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* Update config/anapi/sys.config

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* Update config/binapi/sys.config

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* Update config/binapi/sys.config

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* Use existing binbase for API

Co-authored-by: Andrey Fadeev <me@ciiol.net>

* grafana to refactor (#160)

* grafana to refactor

* clean values

* clean

Co-authored-by: ilya <Ilya Ivanov>

* network policies refactored (#158)

* cilium network policies added
Co-authored-by: vilorij <vilorij@ya.ru>

* Add ability deploy to not only "default" namespace

* change kafka chart from incubator to bitnamii (#164)

* change kafka chart from incubator to bitnamii

* road to default

Co-authored-by: ilya <Ilya Ivanov>

* options for disable CNP

* riak fix

* raw chart

* bump deps

* Update config/machinegun/values.yaml.gotmpl

* delete netpolicy

* riak hacks

* bump deps

* another try

* Enable IPv6 for riak

* KK ipv6

* consul switch to native chart

* MG to new consul

* ipv6 for erlangs services

* riak adopt to ipv6

* Add inet6 to vm.args

* global value for ipv6-only cluster

* Enable ipv6 for machinegun

* add ipv6 support to keycloak

* vault config for ipv6

* disable dashboard if elk disabled

* bump deps version
add wrapper around elk enabled

* add transactions values

* typo fix in values

* payform ipv6

* typo fix transaction

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Pospolita Nikita <nikita7asics@gmail.com>
Co-authored-by: Andrey Fadeev <me@ciiol.net>
Co-authored-by: Sergey Yelin <elinsn@gmail.com>
Co-authored-by: TeadRIM <37904338+TeadRIM@users.noreply.github.com>
Co-authored-by: Ivan Panteleev <amalgamm@users.noreply.github.com>
2021-02-19 15:27:50 +03:00
Andrey Fadeev
2e40e973c0
Move files embedding from helmfile.yaml (#151)
...to service values.yaml
2020-11-17 20:27:47 +03:00
Baikov Dmitrii
c9fcc81704
BJ-1005: Add proxy-mocketbank-mpi (#101) 2020-10-29 18:32:45 +03:00
Ivan Panteleev
9d5e5b0165
Fix deprecated chart repos & reset scripts (#102)
* Fix deprecated chart repos & reset scripts

* updated .lock via helmfile deps
2020-10-28 20:10:40 +03:00
Andrey Abramov
a5eea64e9e
quick reset fix (#98)
* Add more cleanup operations

* Fix some ordering nuances

* Remove unnecessary helmfile delete
2020-10-27 22:20:09 +03:00
Alexander Romanov
05460c90fc
Improve java logging configuration (#92) 2020-10-23 17:03:47 +03:00
Andrey Abramov
a979b58a3e
Improve logging (#89)
* Fix ES index template dynamic mappings
* Add basic common logging setting
* Add stdout log configuration for shumway (with hardcode)
* Fix hellgate mapping

Co-authored-by: Sergey Yelin <elinsn@gmail.com>
2020-10-22 15:03:15 +03:00
Sergey Yelin
35ae3ab89f
Switch to docker hub (#75)
* Switch to docker hub

* Add missing

* This image not in public

* bump image tags

* Fix more urls

* Fix URL to test image

* downgrade api

* Ft/use public repo update (#78)

* Fix test-transaction labels (#73)

And remove obsolete config mount

* fix pass to default (#76)

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>

* Fix test_transaction_v2 volume mount in job (#77)

* Remove dr2reg from values

* Fix README

* Remove dedicated binbase-test from helmfile

* Completely remove dedicated binbase-test

* Wrap imagePullSecrets call in deployment's chart

* Bumb binbase-test-data

* Remove `pathType` from payform ingress spec (#80)

Only k8s >= 1.18 supports this field. And GKE doesn't support these versions of k8s

* Use standard io for logs (ex machinegun for now) (#81)

* Use standard io for logs (ex machinegun for now)

* Fix accesslog

* Unify podSecurityContext usage in riak chart (#79)

And also set fsGroup as container user id

* Use standard output for mg (#82)

* Update machinegun (#83)

* Add empty imagePullSecrets to our services' yamls

* Stabilize helmfile sync; add cold_reset.sh script

* Bump binbase-test-data

Co-authored-by: Andrey Fadeev <me@ciiol.net>
Co-authored-by: vilorij <vilorij@ya.ru>
Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Sergey Yelin <elinsn@gmail.com>

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
Co-authored-by: Andrey Abramov <a.abramov@rbkmoney.com>
Co-authored-by: Andrey Fadeev <me@ciiol.net>
Co-authored-by: vilorij <vilorij@ya.ru>
2020-10-20 13:10:02 +03:00
Boris
d98f2da0d9
add crontjob test-transaction through v1 (#71) 2020-10-09 10:37:47 +03:00
Andrey Fadeev
6f8812b5bc
Add mocket-inspector (#68) 2020-10-08 17:13:39 +03:00
Ildar Galeev
e7090eb7f2
Payform chart (#57) 2020-10-08 14:11:44 +03:00
Andrey Fadeev
b480142a0b
Add holmes (#63) 2020-10-08 12:51:32 +03:00
Andrey Fadeev
1cdb59ba5d
Fix capi-pcidss configs (#61)
Add oops bodies
Use general value keys names
Remove salt template parts from v1 configs
2020-10-07 18:39:47 +03:00
vilorij
0a92b19a56
Drop selector for infra helmfile (#58)
Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2020-10-07 12:19:53 +03:00
vilorij
f094acc454
Fix liveness probe by bumping version. (#59)
смотреть https://github.com/codecentric/helm-charts/pull/268

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2020-10-07 12:13:12 +03:00
Boris
3bff981cf2
add capi_pcidss_v1 chart (#54) 2020-10-05 13:02:28 +03:00
vilorij
be47ea6af4
ECK (#33)
* ECK without templating

* filebeat hostlog
hostpath mount for hellgate and dominanta

* loginput

* hooker deps

* templating a bit
add readme for kibana

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2020-10-05 12:27:46 +03:00
Sergey Yelin
f1a9a16b21
More fixes to Erlang services (#53) 2020-10-03 07:42:51 +03:00
Sergey Yelin
87e3c986b8
More fixes for *API (#52) 2020-10-02 18:20:18 +03:00
Andrey Fadeev
5b107831d0
Make APIs and keycloak work together (#37)
* Fix public key fetching script

Busybox image does't contain curl, replace to wget instead.
And also fix keycloak address.

* Add realm importing draft

* Upgrade keycloak realms (#50)

* Upgrade keycloak realms

* Disable quote, fix realms.json file

* Fix urls in template

* Add postgres as dep for keycloack

Co-authored-by: Pavel Popov <tolkonepiu@users.noreply.github.com>
Co-authored-by: Sergey Yelin <elinsn@gmail.com>
2020-10-02 16:20:10 +03:00
Sergey Yelin
64678f4c35
Add init hook to kds (#47)
* Add init hook for unit/unlock KDS

* Fix port for tests

* Make CDS run

* Update Notes for KDS
2020-10-01 12:37:14 +03:00
vilorij
fc102649e8
Update helmfile.yaml (#46) 2020-09-30 13:31:26 +03:00
vitaxa
2e6186e74d
add binbase-test chart (#44) 2020-09-30 13:22:11 +03:00
vitaxa
48efe80c7c
Add hooker chart (#36) 2020-09-29 17:25:34 +03:00
vilorij
d0cfa181d9
increase timeout and drop atomic from riak (#41)
* increase timeout and drop atomic from riak

* FAQ note in readme

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2020-09-29 13:26:40 +03:00
Sergey Yelin
2ebaa93791
Fix CDS configuration (#40)
* Fix CDS configuration

* Add config for cds-riak

* There can be only one riak

* Fix config

* Fix docs
2020-09-28 20:27:23 +03:00
vilorij
af484206dc
set ordering dependencies (#38)
add vault-pg sequence permissions
increase max_ttl to  10day

Co-authored-by: Dmitry Skokov <d.skokov@rbkmoney.com>
2020-09-28 15:55:52 +03:00
Andrey Fadeev
717c7ca374
Fix dominant init (#34)
* Fix dominant init

* Reorder services in helmfile
Fix service depencies for sequence install like
`helmfile sync --concurrency 1 --args --wait`
2020-09-25 13:38:04 +03:00
Boris
d4d37b1502
Add keycloak chart (#30)
Co-authored-by: Andrey Fadeev <me@ciiol.net>
2020-09-24 17:06:56 +03:00