{"id":345524,"date":"2023-02-16T15:03:19","date_gmt":"2023-02-16T15:03:19","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=345524"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=345524","title":{"rendered":"<span>\u0414\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 ArgoCD \u0438 Crossplane<\/span>"},"content":{"rendered":"<div><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w1560\/getpro\/habr\/upload_files\/941\/916\/29c\/94191629c75c11379faba92f59710d10.png\" alt=\"\u041f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430\" title=\"\u041f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430\" width=\"2090\" height=\"1316\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/941\/916\/29c\/94191629c75c11379faba92f59710d10.png\"\/><figcaption>\u041f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430<\/figcaption><\/figure>\n<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u00a0\u043f\u043e\u043c\u043e\u0449\u044c\u044e ArgoCD \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c GitOps \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043d\u0430\u00a0\u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435.<\/p>\n<p>\u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0441\u0441\u0447\u0438\u0442\u0430\u043d\u0430 \u043d\u0430\u00a0DevOps \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043e\u0432 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0443\u0436\u0435 \u0445\u043e\u0440\u043e\u0448\u043e \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u0441\u00a0\u0442\u0430\u043a\u0438\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u0430\u043a:<\/p>\n<ul>\n<li>\n<p>Kubernetes<\/p>\n<\/li>\n<li>\n<p>Helm<\/p>\n<\/li>\n<li>\n<p>Crossplane<\/p>\n<\/li>\n<li>\n<p>ArgoCD<\/p>\n<\/li>\n<li>\n<p>GitLab CI<\/p>\n<\/li>\n<\/ul>\n<p>\u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u0430. <\/p>\n<ol>\n<li>\n<p>\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0443\u0448\u0438\u0442 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443 c \u043f\u043e\u0441\u0442\u0444\u0438\u043a\u0441\u043e\u043c \u2011<em>dyn <\/em>\u0432<em> <\/em>\u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0438<em> <\/em>\u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 <code>project-backend<\/code><\/p>\n<\/li>\n<li>\n<p>\u0421\u0442\u0430\u0440\u0442\u0443\u0435\u0442 GitLabCI \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d:<\/p>\n<ul>\n<li>\n<p>\u0431\u0438\u043b\u0434\u0438\u0442 docker image, \u043f\u0443\u0448\u0438\u0442 \u0435\u0433\u043e \u0432\u00a0image registry;<\/p>\n<\/li>\n<li>\n<p>\u00ab\u0438\u0434\u0435\u0442\u00bb \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 <code>manifests<\/code>, \u043e\u0442\u0440\u0435\u0437\u0430\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443\u00a0\u2014 \u0438\u043c\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0435 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0442\u043a\u0438 \u0432\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438\u00a0\u2014 <code>project-backend<\/code>;<\/p>\n<\/li>\n<li>\n<p>\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 image tag \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432\u00a0Helm values \u0434\u043b\u044f\u00a0\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0443\u0448\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>ApplicationSet \u0432\u00a0ArgoCD \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 manifests, \u00ab\u0432\u0438\u0434\u0438\u0442\u00bb \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u0441\u00a0\u043f\u043e\u0441\u0442\u0444\u0438\u043a\u0441\u043e\u043c \u0438 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 Application \u0432\u043c\u0435\u0441\u0442\u0435 \u0441\u00a0\u0431\u0430\u0437\u043e\u0439.<\/p>\n<\/li>\n<li>\n<p>\u041f\u0440\u0438\u00a0\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0432\u0435\u0442\u043a\u0438 \u0438\u0437\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u00a0\u2014 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f App \u0438 \u0411\u0414 \u0438\u0437\u00a0\u043e\u0431\u043b\u0430\u043a\u0430.<\/p>\n<\/li>\n<\/ol>\n<p>\u0418\u0437\u00a0\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 ArgoCD \u0441\u00a0\u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c:<\/p>\n<blockquote>\n<p>Argo CD \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0441\u0445\u0435\u043c\u0435 GitOps, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Git \u0432\u00a0\u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u043b\u044f\u00a0\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.<\/p>\n<p>Argo CD \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043a\u0430\u043a\u00a0\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u0435\u0442 \u0442\u0435\u043a\u0443\u0449\u0435\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u044b\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c (\u043a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Git). \u0420\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0442\u0435\u043a\u0443\u0449\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u00a0\u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f, \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f OutOfSync. Argo CD \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f\u00a0\u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043b\u0438\u00a0\u0440\u0443\u0447\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0441\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u044b\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c. \u041b\u044e\u0431\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0435 \u0432\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u043e\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Git, \u043c\u043e\u0433\u0443\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438 \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c\u0441\u044f \u0432\u00a0\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.<\/p>\n<\/blockquote>\n<p>Crossplane \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u00a0\u0444\u043e\u0440\u043c\u0430\u0442\u0435 k8s yaml \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u043e\u0432, \u00ab\u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u00bb \u0438\u0445 \u0432\u00a0\u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u00a0\u043e\u0431\u043b\u0430\u043a\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e.<\/p>\n<p>\u0412\u0432\u043e\u0434\u043d\u044b\u0435:<\/p>\n<ul>\n<li>\n<p>\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u00a0Yandex Cloud;<\/p>\n<\/li>\n<li>\n<p>\u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 -2\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u00a0\u2014 <code>project-frontend<\/code>, <code>project-backend<\/code>;<\/p>\n<\/li>\n<li>\n<p>\u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b (<code>docker image<\/code>) \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u00ab\u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f\u00bb \u0432\u00a0GitLab CI;<\/p>\n<\/li>\n<li>\n<p>\u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u00a0\u2014 2\u00a0docker image\u00a0\u2014 <code>project-frontend<\/code>, <code>project-backend<\/code>;<\/p>\n<\/li>\n<li>\n<p>\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u043f\u043b\u043e\u0438\u0442\u0441\u044f \u0432\u00a0Kubernetes cluster \u0447\u0435\u0440\u0435\u0437 <code>Helm<\/code> (\u0438\u043c\u0435\u0435\u0442 <code>Helm chart<\/code>);<\/p>\n<\/li>\n<li>\n<p>Git \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 <code>manifests<\/code> \u0441\u00a0Helm charts \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 crossplane \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (\u0411\u0414, DataTransfer \u0438\u00a0\u0442.\u00a0\u0434.);<\/p>\n<\/li>\n<li>\n<p>\u0434\u043b\u044f\u00a0\u0440\u0430\u0431\u043e\u0442\u044b <code>project-backend<\/code> \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430 \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445\u00a0\u2014 PostgreSQL\u00a0\u2014 \u0434\u043b\u044f\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0411\u0414 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c Yandex Cloud DataTransfer\u00a0\u2014 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439\u00a0\u2014 \u00ab\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439\u00bb \u0411\u0414 \u0432\u00a0\u043d\u043e\u0432\u0443\u044e.<\/p>\n<\/li>\n<\/ul>\n<h2>\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f manifests<\/h2>\n<pre><code class=\"yaml\">argocd:   argo-application-sets:     - project-dyn-envs-manifest-repo-scm.yaml # AppSet for project   argo-projects:     - project-dyn.yaml # ArgoCD project for dyn envs  charts: # project Helm Charts   project-backend:   project-dyn-infra   project-frontend   project-stack: # Main project chart - in deps has back, front and infra chart     ci:       dyn:         - dyn-values.yaml  custom-manifests:   crossplane-dyn-envs     external:        # external resources created not from crossplane        # used for dyn envs (DB clusters, VPS, etc) - imported to crossplane       folders       postgres       vpc   crossplane-provider-config-yc # YC provider config<\/code><\/pre>\n<p><strong>project-dyn-envs-manifest-repo-scm.yaml<\/strong><\/p>\n<pre><code class=\"yaml\">apiVersion: argoproj.io\/v1alpha1 kind: ApplicationSet metadata:   name: project-stack-dyn   namespace: argocd spec:   generators:     - scmProvider:         cloneProtocol: ssh         filters:           - branchMatch: .*PROJECT.*-dyn             repositoryMatch: manifests         gitlab:           group: \"12345678\"            allBranches: true           includeSubgroups: true           tokenRef:             secretName: gitlab-token             key: token   template:     metadata:       name: \"{{branchNormalized}}\"     spec:       source:         path: charts\/project-stack         repoURL: https:\/\/gitlab.com\/manifests.git         targetRevision: \"{{branch}}\"         helm:           valueFiles:             - ci\/dyn\/dyn-values.yaml           values: |             project-backend:               extraVolumes:                 - name: dynenv                   configMap:                      name: {{branchNormalized}}-project-backend                 - name: dynentrypointinitdta                   configMap:                      name: {{branchNormalized}}-project-backend-entrypointinitdta                     defaultMode: 0755               envConfig:                 dynenv: |                   BRANCH_NAME=\"{{branchNormalized}}\"                   TARGET_DB=\"{{branchNormalized}}-t-db\"                 FRONT_BASE_URL: {{branchNormalized}}.dyn.project.ru                 APPLICATION_REDIS_KEY_PREFIX: \"project:{{branchNormalized}}:\"                 DATASOURCE_URL: \"jdbc:postgresql:\/\/db-dyn-project.ru:6432\/{{branchNormalized}}-t-db\"                 DATASOURCE_USERNAME: \"{{branchNormalized}}-t-db-user\"                 DATASOURCE_PASSWORD: \"12345678\"             project-ingress:               hosts:                 - host: {{branchNormalized}}.dyn.project.ru               tls:                 - secretName: {{branchNormalized}}-dyn-project-ru                   hosts:                     - {{branchNormalized}}.dyn.project.ru             project-dyn-infra:               enabled: true               fullnameOverride: {{branchNormalized}}               namespace: argo-app-project-dyn               dataTransfer:                 enabled: \"true\"                 endpoints:                   target:                     dbName: db-project-dyn-{{branchNormalized}}                     dbUser: db-user-project-dyn-{{branchNormalized}}       project: project-dyn       destination:         namespace: 'argo-app-project-dyn'         server: https:\/\/XXX.XXX.XXX.XXX       syncPolicy:         automated:           selfHeal: true           prune: true           allowEmpty: true         syncOptions:           - CreateNamespace=true <\/code><\/pre>\n<p>ApplicationSet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 SCM provider geneator\u00a0\u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u00a0\u0442\u0440\u0438\u0433\u0435\u0440\u0443 (\u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 <code>manifests<\/code>\u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0438, \u0438\u043c\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043f\u043e\u00a0Regexp \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u00a0ArgoCD) AppSet \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b (helm values) \u0434\u043b\u044f\u00a0\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u00a0\u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0442\u043a\u0438. \u041c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 sha \u043a\u043e\u043c\u0438\u0442\u0430 \u0438\u043b\u0438\u00a0\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0438\u043c\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f, \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 <a href=\"https:\/\/argo-cd.readthedocs.io\/en\/stable\/operator-manual\/applicationset\/Generators-SCM-Provider\/#template\" rel=\"noopener noreferrer nofollow\">\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438<\/a> \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430.<\/p>\n<h2>project-stack Helm Chart<\/h2>\n<pre><code class=\"yaml\">apiVersion: v2 description: project stack (project) Helm chart type: application maintainers:   - name: xxx     email: xxx version: 0.1.0 appVersion: 1.0.0 kubeVersion: \">=1.23.0-0\" keywords: - project annotations:   \"finalizers\": \"resources-finalizer.argocd.argoproj.io\"   \"gitlab.com\/links\": |     - name: Chart Source       url: https:\/\/gitlab.com\/project     - name: Upstream Projects       url: https:\/\/gitlab.com\/project dependencies:   # Project   - name: project-frontend     condition: project-frontend.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-frontend\"   - name: project-backend     condition: project-backend.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-backend\"   - name: project-ingress     condition: project-ingress.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-ingress\"   - name: project-dyn-infra     condition: project-dyn-infra.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-dyn-infra\"<\/code><\/pre>\n<h2>Crossplane<\/h2>\n<p>\u0414\u043e\u043f\u0443\u0441\u0442\u0438\u043c crossplane \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0438 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u00a0\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435.<\/p>\n<p>Crossplane \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0434\u043b\u044f\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0411\u0414 \u0434\u043b\u044f <code>project-bakcned<\/code> \u0438 DataTranser. \u041f\u0440\u0438\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0411\u0414 \u0447\u0435\u0440\u0435\u0437 DataTransfer \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439\u00a0\u2014 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0411\u0414 \u0432\u00a0\u043d\u043e\u0432\u0443\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f\u00a0\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.<\/p>\n<p>\u041c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u044b Crossplane \u00ab\u0443\u043f\u0430\u043a\u043e\u0432\u0430\u043d\u044b\u00bb \u0432\u00a0Helm chart, \u043f\u0440\u0438\u0432\u0435\u0434\u0443 \u043f\u0440\u0438\u043c\u0435\u0440 <code>templates<\/code> \u0438 <code>values<\/code>\u0434\u043b\u044f\u00a0Yandex Cloud.<\/p>\n<p>\u041d\u043e\u0432\u0430\u044f \u0411\u0414 \u0434\u043b\u044f <code>project-backend<\/code> <code>db-target.yaml<\/code>.<\/p>\n<p>\u0422\u0443\u0442 \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442\u00a0\u2014 \u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 PostgreSQL \u0434\u043b\u044f\u00a0\u0432\u0441\u0435\u0445 \u0411\u0414 \u0432\u00a0\u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u00a0\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Terraform\u00a0\u2014 \u043e\u043d \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u00a0Crossplane \u043a\u0430\u043a\u00a0\u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0440\u0435\u0441\u0443\u0440\u0441. \u041d\u043e\u00a0\u043d\u0438\u043a\u0442\u043e \u043d\u0435\u00a0\u043c\u0435\u0448\u0430\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Postgres \u0438\u0437\u00a0Crosplane. <\/p>\n<pre><code class=\"yaml\">{{- if (eq .Values.dataTransfer.enabled \"true\") }} apiVersion: mdb.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: PostgresqlDatabase metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-t-db spec:   #  deletionPolicy: Orphan   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }}   forProvider:     name: {{ template \"project-dyn-infra.fullname\" . }}-t-db     clusterId: {{ toYaml .Values.targetDb.clusterId }}     owner: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user     lcCollate: en_US.UTF-8     lcType: en_US.UTF-8     extension:       - name: uuid-ossp {{- end }} <\/code><\/pre>\n<p>\u0411\u0414 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u2014 \u0432\u00a0Yandex Cloud \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 API:<\/p>\n<p><code>db-user-target.yaml<\/code><\/p>\n<pre><code class=\"yaml\">{{- if (eq .Values.dataTransfer.enabled \"true\") }} apiVersion: mdb.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: PostgresqlUser metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user spec:   #  deletionPolicy: Orphan   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }}   forProvider:     name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user     passwordSecretRef:       name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-password       namespace: {{ template \"project-dyn-infra.namespace\" . }}       key: password     clusterId: {{ toYaml .Values.targetDb.clusterId }}     connLimit: 35     login: true     grants:       - mdb_admin       - mdb_replication {{- end }} <\/code><\/pre>\n<p><code>datatransfer.yaml<\/code><\/p>\n<pre><code class=\"yaml\"># Secret \u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u043e\u0442 \u043d\u043e\u0432\u043e\u0439 \u0411\u0414 {{- if (eq .Values.dataTransfer.enabled \"true\") }} apiVersion: v1 kind: Secret metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-password type: Opaque data:   password: {{ toYaml .Values.targetDb.password }}  --- # Secret \u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u043e\u0442 \u0411\u0414 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 apiVersion: v1 kind: Secret metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-s-db-password type: Opaque data:   password: {{ toYaml .Values.dataTransfer.endpoints.source.password }}  --- apiVersion: datatransfer.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: Endpoint metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-source spec:   #  deletionPolicy: Orphan   forProvider:     folderId: {{ toYaml .Values.dataTransfer.endpoints.source.folderId }}     name: {{ template \"project-dyn-infra.fullname\" . }}-source     settings:       - postgresSource:         - database: {{ toYaml .Values.dataTransfer.endpoints.source.dbName }}           user: {{ toYaml .Values.dataTransfer.endpoints.source.dbUser }}           password:             - rawSecretRef:                 name: {{ template \"project-dyn-infra.fullname\" . }}-s-db-password                 namespace: {{ template \"project-dyn-infra.namespace\" . }}                 key: password           objectTransferSettings:             - function: AFTER_DATA           connection:           - mdbClusterIdRef:               name: {{ toYaml .Values.dataTransfer.endpoints.source.mdbClusterIdRef }}   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }}  --- apiVersion: datatransfer.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: Endpoint metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-target spec:   #  deletionPolicy: Orphan   forProvider:     folderId: {{ toYaml .Values.dataTransfer.endpoints.target.folderId }}     name: {{ template \"project-dyn-infra.fullname\" . }}-target     settings:       - postgresTarget:         - database: {{ template \"project-dyn-infra.fullname\" . }}-t-db           user: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user           password:             - rawSecretRef:                 name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-password                 namespace: {{ template \"project-dyn-infra.namespace\" . }}                 key: password           connection:           - mdbClusterIdRef:               name: {{ toYaml .Values.dataTransfer.endpoints.target.mdbClusterIdRef }}   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }}  --- apiVersion: datatransfer.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: Transfer metadata:   name: {{ template \"project-dyn-infra.fullname\" . }} spec: #  deletionPolicy: Orphan   forProvider:     folderId: {{ toYaml .Values.dataTransfer.config.folderId }}     name: {{ template \"project-dyn-infra.fullname\" . }}     sourceIdRef:       name: {{ template \"project-dyn-infra.fullname\" . }}-source     targetIdRef:       name: {{ template \"project-dyn-infra.fullname\" . }}-target     type: {{ toYaml .Values.dataTransfer.config.type }}   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }} {{- end }} <\/code><\/pre>\n<p>project-dyn-infra &#8212; values<\/p>\n<pre><code class=\"yaml\">enabled: false  providerConfigRef:   name: yc  targetDb:   clusterId: XXX   name: db-project-dyn-{{branchNormalized}}   owner: db-user-project-dyn-{{branchNormalized}}   user: db-user-project-dyn-{{branchNormalized}}   password: XXX # base64  dataTransfer:   enabled: \"false\"   config:     folderId: XXX     type: \"SNAPSHOT_ONLY\"   endpoints:     source:       folderId: XXX       dbName: propject_source_db       dbUser: project_source_db_user       password: XXX       mdbClusterIdRef: XXX     target:       folderId: XXX       mdbClusterIdRef: project-dyn-envs <\/code><\/pre>\n<p>\u0427\u0435\u0440\u0435\u0437 Crossplane \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b endpoints (\u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u0440\u044f\u0434\u043e\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0430 \u0434\u0430\u043d\u043d\u044b\u0445) \u0432\u00a0DataTransfer, \u0442\u0430\u043a\u00a0\u0436\u0435 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c DataTransfer \u0441\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c <code>SNAPSHOT_ONLY<\/code>\u00a0\u2014 \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 API.<\/p>\n<p>\u0414\u043b\u044f\u00a0\u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0432\u00a0values (<code>project-backend<\/code>) init container \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b DataTransfer \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u0442\u0440\u0430\u043d\u0441\u0444\u0435\u0440 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0435\u0433\u043e \u0441\u0442\u0430\u0442\u0443\u0441. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f\u00a0\u2014 \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u0442 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u0441\u00a0\u0431\u0435\u043a\u043e\u043c.<\/p>\n<p>\u0412\u00a0\u0447\u0430\u0440\u0442 \u0441\u00a0\u0431\u0435\u043a\u043e\u043c (<code>project-backend<\/code>) \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d ConfigMap \u0432\u00a0\u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u043f\u0438\u0441\u0430\u043d \u0441\u043a\u0440\u0438\u043f\u0442\u00a0\u2014 entrypoint \u0434\u043b\u044f <code>init container<\/code> (<code>dynInitEntrypointDta<\/code>)\u00a0\u2014 \u0441\u043a\u0440\u0438\u043f\u0442 \u043c\u043e\u043d\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0extraVolumes \u0432\u00a0init container.<\/p>\n<p>\u0414\u043b\u044f\u00a0\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f\u00a0\u2014 \u0441\u00a0\u043a\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0440\u0430\u043d\u0441\u0444\u0435\u0440\u043e\u043c \u0434\u043e\u043b\u0436\u0435\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442 \u00ab\u043f\u0440\u043e\u0431\u0440\u043e\u0448\u0435\u043d\u043e\u00bb \u0438\u043c\u044f \u0432\u0435\u0442\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 <code>ConfigMap<\/code>\u00a0\u2014 dynenv \u0432 <code>init container<\/code><\/p>\n<h3>\u0422\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u00a0<\/h3>\n<p>\u0427\u0442\u043e\u00a0\u0431\u044b \u043d\u0435\u00a0\u0433\u0435\u043d\u0435\u0440\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 DNS \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f\u00a0\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0437\u0430\u0432\u0435\u0434\u0435\u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0430\u00a0\u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u00a0\u2014 <code>*.dyn.project.ru<\/code><\/p>\n<h2>\u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438\u00a0<\/h2>\n<ul>\n<li>\n<p>\u0438\u043c\u044f \u0432\u0435\u0442\u043a\u0438\u00a0\u2014 <code>id<\/code> \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f;<\/p>\n<\/li>\n<li>\n<p>\u043f\u043e\u0441\u0442\u0444\u0438\u043a\u0441 <code>dyn<\/code> \u0438 \u0438\u043c\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u00a0\u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0442\u043a\u0438 (<code>PROJECT-7777-my-branch-dyn<\/code>);<\/p>\n<\/li>\n<li>\n<p>\u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u043e\u0435 \u0438\u043c\u044f \u0432\u0435\u0442\u043a\u0438 \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0444\u0440\u043e\u043d\u0442\u0430 \u0438 \u0431\u0435\u043a\u0430;<\/p>\n<\/li>\n<li>\n<p>\u0434\u043b\u0438\u043d\u0430 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0442\u043a\u0438 \u043d\u0435\u00a0\u0431\u043e\u043b\u0435\u0435 <code>63<\/code> \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432;<\/p>\n<\/li>\n<li>\n<p>\u043f\u0440\u0438\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0431\u0435\u0440\u0435\u0442\u0441\u044f \u0438\u0437\u00a0\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0411\u0414 <strong>\u043d\u0430\u00a0\u043c\u043e\u043c\u0435\u043d\u0442 \u0434\u0435\u043f\u043b\u043e\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f<\/strong>;<\/p>\n<\/li>\n<li>\n<p>\u043f\u0440\u0438\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0435\u043a\u0430\u00a0\u2014 \u0411\u0414 \u043d\u0435\u00a0\u043f\u0435\u0440\u0435\u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f\u00a0\u2014 \u0435\u0441\u043b\u0438 \u043d\u0443\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u043e\u0437\u0434\u0430\u0442\u044c\u00a0\u2014 \u0434\u0440\u043e\u043f\u0430\u0435\u043c App \u0432\u00a0ArgoCD;<\/p>\n<\/li>\n<li>\n<p>\u0442\u0440\u0430\u043d\u0441\u0444\u0435\u0440 \u0411\u0414 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438;<\/p>\n<\/li>\n<li>\n<p>\u043d\u0435\u0442 \u0430\u043a\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0435\u043a\u0430 \u0438 \u0444\u0440\u043e\u043d\u0442\u0430 \u0441\u00a0\u043f\u0440\u043e\u0434\u043e\u043c (\u0434\u0435\u043f\u043b\u043e\u0438\u043c \u0444\u0440\u043e\u043d\u0442\u00a0\u2014 \u0444\u0440\u043e\u043d\u0442 \u0441\u043e\u0431\u0435\u0440\u0435\u0442\u0441\u044f, \u0432\u0435\u0440\u0441\u0438\u044f \u0431\u0435\u043a\u0430 \u0431\u0443\u0434\u0435\u0442 \u0438\u0437 <code>dev<\/code> \u0432\u0435\u0442\u043a\u0438 <code>manifests (project-stack\/dyn\/values.yaml)<\/code>;<\/p>\n<\/li>\n<li>\n<p><strong>\u043f\u0440\u0438\u00a0\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0411\u0414 \u043d\u0435\u00a0\u043f\u0435\u0440\u0435\u043d\u043e\u0441\u044f\u0442\u0441\u044f math views\u00a0\u2014 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 DataTransfer<\/strong>;<\/p>\n<\/li>\n<li>\n<p>\u0441\u043f\u0438\u0441\u043e\u043a \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u00a0ArgoCD;<\/p>\n<\/li>\n<li>\n<p>\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 = \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0432\u0435\u0442\u043a\u0438 \u0432 <code>manifests<\/code>.<\/p>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<p> <!----> <!----><\/div>\n<p> <!----> <\/p>\n<div class=\"tm-article-poll\">\n<div class=\"tm-notice tm-article-poll__notice tm-notice_positive\"><!----> <\/p>\n<div class=\"tm-notice__inner\"><!----> <\/p>\n<div class=\"tm-notice__content\"><span>\u0422\u043e\u043b\u044c\u043a\u043e \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0432 \u043e\u043f\u0440\u043e\u0441\u0435. <a rel=\"nofollow\" href=\"\/kek\/v1\/auth\/habrahabr\/?back=\/ru\/post\/717392\/&#038;hl=ru\">\u0412\u043e\u0439\u0434\u0438\u0442\u0435<\/a>, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430.<\/span><\/div>\n<\/div>\n<\/div>\n<div class=\"tm-article-poll__header\">\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 ArgoCD?<\/div>\n<div class=\"tm-article-poll__answers\">\n<div class=\"tm-article-poll__answer\">\n<div class=\"tm-article-poll__answer-data\"><span class=\"tm-article-poll__answer-percent\">             0%           <\/span> <span class=\"tm-article-poll__answer-label\">\u0414\u0430, \u0432 \u043f\u0440\u043e\u0434\u0435<\/span> <span class=\"tm-article-poll__answer-votes\">             0           <\/span><\/div>\n<div class=\"tm-article-poll__answer-bar\">\n<div class=\"tm-article-poll__answer-progress\" style=\"width:0%;\"><\/div>\n<\/div>\n<\/div>\n<div class=\"tm-article-poll__answer\">\n<div class=\"tm-article-poll__answer-data\"><span class=\"tm-article-poll__answer-percent\">             33.33%           <\/span> <span class=\"tm-article-poll__answer-label\">\u0414\u0430, \u0434\u043b\u044f \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439<\/span> <span class=\"tm-article-poll__answer-votes\">             1           <\/span><\/div>\n<div class=\"tm-article-poll__answer-bar\">\n<div class=\"tm-article-poll__answer-progress\" style=\"width:33.33%;\"><\/div>\n<\/div>\n<\/div>\n<div class=\"tm-article-poll__answer\">\n<div class=\"tm-article-poll__answer-data\"><span class=\"tm-article-poll__answer-percent\">             0%           <\/span> <span class=\"tm-article-poll__answer-label\">\u041d\u0435\u0442, \u043d\u043e \u0445\u043e\u0442\u0438\u043c<\/span> <span class=\"tm-article-poll__answer-votes\">             0           <\/span><\/div>\n<div class=\"tm-article-poll__answer-bar\">\n<div class=\"tm-article-poll__answer-progress\" style=\"width:0%;\"><\/div>\n<\/div>\n<\/div>\n<div class=\"tm-article-poll__answer\">\n<div class=\"tm-article-poll__answer-data\"><span class=\"tm-article-poll__answer-percent tm-article-poll__answer-percent_winning\">             66.67%           <\/span> <span class=\"tm-article-poll__answer-label\">\u041d\u0435\u0442<\/span> <span class=\"tm-article-poll__answer-votes\">             2           <\/span><\/div>\n<div class=\"tm-article-poll__answer-bar\">\n<div class=\"tm-article-poll__answer-progress tm-article-poll__answer-progress_winning\" style=\"width:66.67%;\"><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"tm-article-poll__stats\">        \u041f\u0440\u043e\u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043b\u0438 3 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.           \u0412\u043e\u0437\u0434\u0435\u0440\u0436\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u043d\u0435\u0442.      <\/div>\n<\/div>\n<p> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/post\/717392\/\"> https:\/\/habr.com\/ru\/post\/717392\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<figure class=\"full-width\"><figcaption>\u041f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430<\/figcaption><\/figure>\n<p>\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u00a0\u043f\u043e\u043c\u043e\u0449\u044c\u044e ArgoCD \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c GitOps \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043d\u0430\u00a0\u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435.<\/p>\n<p>\u0421\u0442\u0430\u0442\u044c\u044f \u0440\u0430\u0441\u0441\u0447\u0438\u0442\u0430\u043d\u0430 \u043d\u0430\u00a0DevOps \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043e\u0432 \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0443\u0436\u0435 \u0445\u043e\u0440\u043e\u0448\u043e \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u0441\u00a0\u0442\u0430\u043a\u0438\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u0430\u043a:<\/p>\n<ul>\n<li>\n<p>Kubernetes<\/p>\n<\/li>\n<li>\n<p>Helm<\/p>\n<\/li>\n<li>\n<p>Crossplane<\/p>\n<\/li>\n<li>\n<p>ArgoCD<\/p>\n<\/li>\n<li>\n<p>GitLab CI<\/p>\n<\/li>\n<\/ul>\n<p>\u041a\u0440\u0430\u0442\u043a\u0430\u044f \u043b\u043e\u0433\u0438\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d\u0430. <\/p>\n<ol>\n<li>\n<p>\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0443\u0448\u0438\u0442 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443 c \u043f\u043e\u0441\u0442\u0444\u0438\u043a\u0441\u043e\u043c \u2011<em>dyn <\/em>\u0432<em> <\/em>\u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0438<em> <\/em>\u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441 <code>project-backend<\/code><\/p>\n<\/li>\n<li>\n<p>\u0421\u0442\u0430\u0440\u0442\u0443\u0435\u0442 GitLabCI \u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d:<\/p>\n<ul>\n<li>\n<p>\u0431\u0438\u043b\u0434\u0438\u0442 docker image, \u043f\u0443\u0448\u0438\u0442 \u0435\u0433\u043e \u0432\u00a0image registry;<\/p>\n<\/li>\n<li>\n<p>\u00ab\u0438\u0434\u0435\u0442\u00bb \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 <code>manifests<\/code>, \u043e\u0442\u0440\u0435\u0437\u0430\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443\u00a0\u2014 \u0438\u043c\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0435 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0442\u043a\u0438 \u0432\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438\u00a0\u2014 <code>project-backend<\/code>;<\/p>\n<\/li>\n<li>\n<p>\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 image tag \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0432\u00a0Helm values \u0434\u043b\u044f\u00a0\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0443\u0448\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<li>\n<p>ApplicationSet \u0432\u00a0ArgoCD \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 manifests, \u00ab\u0432\u0438\u0434\u0438\u0442\u00bb \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u0441\u00a0\u043f\u043e\u0441\u0442\u0444\u0438\u043a\u0441\u043e\u043c \u0438 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 Application \u0432\u043c\u0435\u0441\u0442\u0435 \u0441\u00a0\u0431\u0430\u0437\u043e\u0439.<\/p>\n<\/li>\n<li>\n<p>\u041f\u0440\u0438\u00a0\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0438 \u0432\u0435\u0442\u043a\u0438 \u0438\u0437\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u00a0\u2014 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f App \u0438 \u0411\u0414 \u0438\u0437\u00a0\u043e\u0431\u043b\u0430\u043a\u0430.<\/p>\n<\/li>\n<\/ol>\n<p>\u0418\u0437\u00a0\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 ArgoCD \u0441\u00a0\u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u043c:<\/p>\n<blockquote>\n<p>Argo CD \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0441\u0445\u0435\u043c\u0435 GitOps, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Git \u0432\u00a0\u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0434\u043b\u044f\u00a0\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.<\/p>\n<p>Argo CD \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u043a\u0430\u043a\u00a0\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432\u0430\u0435\u0442 \u0442\u0435\u043a\u0443\u0449\u0435\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u044b\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c (\u043a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043e \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Git). \u0420\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0442\u0435\u043a\u0443\u0449\u0435\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u00a0\u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f, \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f OutOfSync. Argo CD \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f\u00a0\u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043b\u0438\u00a0\u0440\u0443\u0447\u043d\u043e\u0439 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0441\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u044b\u043c \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c. \u041b\u044e\u0431\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043d\u0435\u0441\u0435\u043d\u043d\u044b\u0435 \u0432\u00a0\u0436\u0435\u043b\u0430\u0435\u043c\u043e\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 Git, \u043c\u043e\u0433\u0443\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438 \u043e\u0442\u0440\u0430\u0436\u0430\u0442\u044c\u0441\u044f \u0432\u00a0\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.<\/p>\n<\/blockquote>\n<p>Crossplane \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u00a0\u0444\u043e\u0440\u043c\u0430\u0442\u0435 k8s yaml \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u043e\u0432, \u00ab\u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u00bb \u0438\u0445 \u0432\u00a0\u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u00a0\u043e\u0431\u043b\u0430\u043a\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e.<\/p>\n<p>\u0412\u0432\u043e\u0434\u043d\u044b\u0435:<\/p>\n<ul>\n<li>\n<p>\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0432\u00a0Yandex Cloud;<\/p>\n<\/li>\n<li>\n<p>\u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 -2\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u00a0\u2014 <code>project-frontend<\/code>, <code>project-backend<\/code>;<\/p>\n<\/li>\n<li>\n<p>\u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b (<code>docker image<\/code>) \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u00ab\u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442\u0441\u044f\u00bb \u0432\u00a0GitLab CI;<\/p>\n<\/li>\n<li>\n<p>\u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u00a0\u2014 2\u00a0docker image\u00a0\u2014 <code>project-frontend<\/code>, <code>project-backend<\/code>;<\/p>\n<\/li>\n<li>\n<p>\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u0435\u043f\u043b\u043e\u0438\u0442\u0441\u044f \u0432\u00a0Kubernetes cluster \u0447\u0435\u0440\u0435\u0437 <code>Helm<\/code> (\u0438\u043c\u0435\u0435\u0442 <code>Helm chart<\/code>);<\/p>\n<\/li>\n<li>\n<p>Git \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 <code>manifests<\/code> \u0441\u00a0Helm charts \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 crossplane \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (\u0411\u0414, DataTransfer \u0438\u00a0\u0442.\u00a0\u0434.);<\/p>\n<\/li>\n<li>\n<p>\u0434\u043b\u044f\u00a0\u0440\u0430\u0431\u043e\u0442\u044b <code>project-backend<\/code> \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430 \u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445\u00a0\u2014 PostgreSQL\u00a0\u2014 \u0434\u043b\u044f\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0411\u0414 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c Yandex Cloud DataTransfer\u00a0\u2014 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439\u00a0\u2014 \u00ab\u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439\u00bb \u0411\u0414 \u0432\u00a0\u043d\u043e\u0432\u0443\u044e.<\/p>\n<\/li>\n<\/ul>\n<h2>\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f manifests<\/h2>\n<pre><code class=\"yaml\">argocd:   argo-application-sets:     - project-dyn-envs-manifest-repo-scm.yaml # AppSet for project   argo-projects:     - project-dyn.yaml # ArgoCD project for dyn envs  charts: # project Helm Charts   project-backend:   project-dyn-infra   project-frontend   project-stack: # Main project chart - in deps has back, front and infra chart     ci:       dyn:         - dyn-values.yaml  custom-manifests:   crossplane-dyn-envs     external:        # external resources created not from crossplane        # used for dyn envs (DB clusters, VPS, etc) - imported to crossplane       folders       postgres       vpc   crossplane-provider-config-yc # YC provider config<\/code><\/pre>\n<p><strong>project-dyn-envs-manifest-repo-scm.yaml<\/strong><\/p>\n<pre><code class=\"yaml\">apiVersion: argoproj.io\/v1alpha1 kind: ApplicationSet metadata:   name: project-stack-dyn   namespace: argocd spec:   generators:     - scmProvider:         cloneProtocol: ssh         filters:           - branchMatch: .*PROJECT.*-dyn             repositoryMatch: manifests         gitlab:           group: \"12345678\"            allBranches: true           includeSubgroups: true           tokenRef:             secretName: gitlab-token             key: token   template:     metadata:       name: \"{{branchNormalized}}\"     spec:       source:         path: charts\/project-stack         repoURL: https:\/\/gitlab.com\/manifests.git         targetRevision: \"{{branch}}\"         helm:           valueFiles:             - ci\/dyn\/dyn-values.yaml           values: |             project-backend:               extraVolumes:                 - name: dynenv                   configMap:                      name: {{branchNormalized}}-project-backend                 - name: dynentrypointinitdta                   configMap:                      name: {{branchNormalized}}-project-backend-entrypointinitdta                     defaultMode: 0755               envConfig:                 dynenv: |                   BRANCH_NAME=\"{{branchNormalized}}\"                   TARGET_DB=\"{{branchNormalized}}-t-db\"                 FRONT_BASE_URL: {{branchNormalized}}.dyn.project.ru                 APPLICATION_REDIS_KEY_PREFIX: \"project:{{branchNormalized}}:\"                 DATASOURCE_URL: \"jdbc:postgresql:\/\/db-dyn-project.ru:6432\/{{branchNormalized}}-t-db\"                 DATASOURCE_USERNAME: \"{{branchNormalized}}-t-db-user\"                 DATASOURCE_PASSWORD: \"12345678\"             project-ingress:               hosts:                 - host: {{branchNormalized}}.dyn.project.ru               tls:                 - secretName: {{branchNormalized}}-dyn-project-ru                   hosts:                     - {{branchNormalized}}.dyn.project.ru             project-dyn-infra:               enabled: true               fullnameOverride: {{branchNormalized}}               namespace: argo-app-project-dyn               dataTransfer:                 enabled: \"true\"                 endpoints:                   target:                     dbName: db-project-dyn-{{branchNormalized}}                     dbUser: db-user-project-dyn-{{branchNormalized}}       project: project-dyn       destination:         namespace: 'argo-app-project-dyn'         server: https:\/\/XXX.XXX.XXX.XXX       syncPolicy:         automated:           selfHeal: true           prune: true           allowEmpty: true         syncOptions:           - CreateNamespace=true <\/code><\/pre>\n<p>ApplicationSet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 SCM provider geneator\u00a0\u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u00a0\u0442\u0440\u0438\u0433\u0435\u0440\u0443 (\u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u0432\u00a0\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 <code>manifests<\/code>\u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0442\u043a\u0438, \u0438\u043c\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u043f\u043e\u00a0Regexp \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u00a0ArgoCD) AppSet \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b (helm values) \u0434\u043b\u044f\u00a0\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430\u00a0\u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0432\u0435\u0442\u043a\u0438. \u041c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 sha \u043a\u043e\u043c\u0438\u0442\u0430 \u0438\u043b\u0438\u00a0\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0438\u043c\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f, \u043f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432 <a href=\"https:\/\/argo-cd.readthedocs.io\/en\/stable\/operator-manual\/applicationset\/Generators-SCM-Provider\/#template\" rel=\"noopener noreferrer nofollow\">\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438<\/a> \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430.<\/p>\n<h2>project-stack Helm Chart<\/h2>\n<pre><code class=\"yaml\">apiVersion: v2 description: project stack (project) Helm chart type: application maintainers:   - name: xxx     email: xxx version: 0.1.0 appVersion: 1.0.0 kubeVersion: \">=1.23.0-0\" keywords: - project annotations:   \"finalizers\": \"resources-finalizer.argocd.argoproj.io\"   \"gitlab.com\/links\": |     - name: Chart Source       url: https:\/\/gitlab.com\/project     - name: Upstream Projects       url: https:\/\/gitlab.com\/project dependencies:   # Project   - name: project-frontend     condition: project-frontend.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-frontend\"   - name: project-backend     condition: project-backend.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-backend\"   - name: project-ingress     condition: project-ingress.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-ingress\"   - name: project-dyn-infra     condition: project-dyn-infra.enabled     version: \"0.1.*\"     repository: \"file:\/\/..\/project-dyn-infra\"<\/code><\/pre>\n<h2>Crossplane<\/h2>\n<p>\u0414\u043e\u043f\u0443\u0441\u0442\u0438\u043c crossplane \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0438 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u00a0\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435.<\/p>\n<p>Crossplane \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0434\u043b\u044f\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0411\u0414 \u0434\u043b\u044f <code>project-bakcned<\/code> \u0438 DataTranser. \u041f\u0440\u0438\u00a0\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0411\u0414 \u0447\u0435\u0440\u0435\u0437 DataTransfer \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u00a0\u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439\u00a0\u2014 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u043e\u0439 \u0411\u0414 \u0432\u00a0\u043d\u043e\u0432\u0443\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0434\u043b\u044f\u00a0\u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.<\/p>\n<p>\u041c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u044b Crossplane \u00ab\u0443\u043f\u0430\u043a\u043e\u0432\u0430\u043d\u044b\u00bb \u0432\u00a0Helm chart, \u043f\u0440\u0438\u0432\u0435\u0434\u0443 \u043f\u0440\u0438\u043c\u0435\u0440 <code>templates<\/code> \u0438 <code>values<\/code>\u0434\u043b\u044f\u00a0Yandex Cloud.<\/p>\n<p>\u041d\u043e\u0432\u0430\u044f \u0411\u0414 \u0434\u043b\u044f <code>project-backend<\/code> <code>db-target.yaml<\/code>.<\/p>\n<p>\u0422\u0443\u0442 \u0432\u0430\u0436\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442\u00a0\u2014 \u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 PostgreSQL \u0434\u043b\u044f\u00a0\u0432\u0441\u0435\u0445 \u0411\u0414 \u0432\u00a0\u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u00a0\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Terraform\u00a0\u2014 \u043e\u043d \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u00a0Crossplane \u043a\u0430\u043a\u00a0\u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0440\u0435\u0441\u0443\u0440\u0441. \u041d\u043e\u00a0\u043d\u0438\u043a\u0442\u043e \u043d\u0435\u00a0\u043c\u0435\u0448\u0430\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Postgres \u0438\u0437\u00a0Crosplane. <\/p>\n<pre><code class=\"yaml\">{{- if (eq .Values.dataTransfer.enabled \"true\") }} apiVersion: mdb.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: PostgresqlDatabase metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-t-db spec:   #  deletionPolicy: Orphan   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }}   forProvider:     name: {{ template \"project-dyn-infra.fullname\" . }}-t-db     clusterId: {{ toYaml .Values.targetDb.clusterId }}     owner: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user     lcCollate: en_US.UTF-8     lcType: en_US.UTF-8     extension:       - name: uuid-ossp {{- end }} <\/code><\/pre>\n<p>\u0411\u0414 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u2014 \u0432\u00a0Yandex Cloud \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 API:<\/p>\n<p><code>db-user-target.yaml<\/code><\/p>\n<pre><code class=\"yaml\">{{- if (eq .Values.dataTransfer.enabled \"true\") }} apiVersion: mdb.yandex-cloud.jet.crossplane.io\/v1alpha1 kind: PostgresqlUser metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user spec:   #  deletionPolicy: Orphan   providerConfigRef:     name: {{ toYaml .Values.providerConfigRef.name }}   forProvider:     name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-user     passwordSecretRef:       name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-password       namespace: {{ template \"project-dyn-infra.namespace\" . }}       key: password     clusterId: {{ toYaml .Values.targetDb.clusterId }}     connLimit: 35     login: true     grants:       - mdb_admin       - mdb_replication {{- end }} <\/code><\/pre>\n<p><code>datatransfer.yaml<\/code><\/p>\n<pre><code class=\"yaml\"># Secret \u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u043e\u0442 \u043d\u043e\u0432\u043e\u0439 \u0411\u0414 {{- if (eq .Values.dataTransfer.enabled \"true\") }} apiVersion: v1 kind: Secret metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-t-db-password type: Opaque data:   password: {{ toYaml .Values.targetDb.password }}  --- # Secret \u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u043e\u0442 \u0411\u0414 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 apiVersion: v1 kind: Secret metadata:   name: {{ template \"project-dyn-infra.fullname\" . }}-s-db-password type: Opaque data:   password: {{ toYaml .Values.dataTransfer.endpoints.source.password }}  --- apiVersion:<\/code><\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-345524","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/345524","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=345524"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/345524\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=345524"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=345524"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=345524"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}