Добавлены материалы подготовки к экзамену ФИЯР МГУ, PGwNewRegistry tf-конфиг, скрипт сравнения YAML/API, обновлены services_list

2026-08-07 21:51:11 +04:00
parent 18f954b7ab
commit 16c7e05b4b
19 changed files with 847 additions and 8 deletions
@@ -0,0 +1,35 @@
+terraform {
+  required_providers {
+    nubes = {
+      source  = "go-registry.containerk8s.dev.nubes.ru/nubes-dev/nubes"
+      version = "5.1.16"
+    }
+  }
+}
+
+variable "api_token" {
+  type        = string
+  sensitive   = true
+  description = "Nubes API token"
+}
+variable "s3_uid" {
+  type        = string
+  sensitive   = true
+  description = "Nubes S3 UID"
+}
+variable "realm" {
+  type        = string
+  sensitive   = true
+  description = "resource_realm parameter for nubes_postgres resource"
+}
+variable "s3_user_uid" {
+  type        = string
+  description = "S3 user UUID"
+}
+
+provider "nubes" {
+  api_token    = var.api_token
+  api_endpoint = "https://lk-api-gateway-dev.ngcloud.ru/api/v1/svc"
+  # log_level    = "debug"   # none | info | debug, default = "none"
+}
+
@@ -0,0 +1,58 @@
+resource "nubes_postgres" "npg" {
+  resource_name = "pgdev01"
+
+  startup_configuration = {
+    resource_realm = var.realm
+  }
+
+  cluster_configuration = {
+    cpu      = 500
+    memory   = 512
+    replicas = 1
+    disk     = 10
+  }
+
+  access_configuration = {
+    master_ip_space     = "no-needed"
+    master_access_list  = jsonencode(["10.0.0.0/8"])
+    slave_ip_space      = "no-needed"
+    slave_access_list   = jsonencode([])
+  }
+
+  postgres_configuration = {
+    version       = "17"
+    ssl_required  = true
+    pooler_master = false
+    pooler_slave  = false
+  }
+
+  postgres_conf = jsonencode([{
+    param_name  = "log_connections"
+    param_value = ""
+  }])
+
+  backup_configuration = {
+    s3_uid   = var.s3_uid
+    retain   = 14
+    schedule = "0 0 * * *"
+  }
+
+  autoscale_configuration = {
+    enabled  = false
+    schedule = 0
+    percent  = 10
+    quota    = 100
+  }
+
+  mtls_configuration = {
+    type            = "off"
+    duration_ca     = 175200
+    duration_server = 87600
+  }
+
+  operation_timeout        = "11m"
+  adopt_existing_on_create = true
+}
+
+
+
@@ -0,0 +1,50 @@
+# =============================================================================
+# PostgreSQL — пользователи (6 шт.)
+# =============================================================================
+resource "nubes_postgres_user" "pg_user_0" {
+  postgres_id              = nubes_postgres.npg.id
+  username                 = "user0"
+  role                     = "ddl_user"
+  mtls_access              = false
+  adopt_existing_on_create = true
+}
+
+# resource "nubes_postgres_user" "pg_user_1" {
+#   postgres_id              = nubes_postgres.npg.id
+#   username                 = "user1"
+#   role                     = "ddl_user"
+#   adopt_existing_on_create = true
+# }
+
+# # =============================================================================
+# # PostgreSQL — базы данных (3 шт.)
+# # =============================================================================
+# resource "nubes_postgres_database" "pg_db_1" {
+#   postgres_id              = nubes_postgres.npg.id
+#   db_name                  = "dbapp1"
+#   db_owner                 = nubes_postgres_user.pg_user_1.username
+#   adopt_existing_on_create = true
+# }
+
+resource "nubes_postgres_database" "pg_db_2" {
+  postgres_id              = nubes_postgres.npg.id
+  db_name                  = "dbapp2"
+  db_owner                 = nubes_postgres_user.pg_user_0.username
+  adopt_existing_on_create = true
+}
+
+# resource "nubes_postgres_database" "pg_db_3" {
+#   postgres_id              = nubes_postgres.npg.id
+#   db_name                  = "dbapp3"
+#   db_owner                 = nubes_postgres_user.pg_user_1.username
+#   adopt_existing_on_create = true
+# }
+
+# S3 bucket — замени "buck0" на своё имя везде ниже
+resource "nubes_s3bucket" "bukka0" {            # ← замени buck0 на своё имя ресурса
+  resource_name = "btst"                      # ← замени buck0 на своё имя ресурса
+  #s3_user_uid   = "naeel-s3"
+  s3_user_uid   = var.s3_user_uid
+  bucket_name   = "buckdev-e8c2"                      # ← замени buck0 на своё имя бакета
+  adopt_existing_on_create = true
+}