add: stand configs

2026-06-30 15:46:24 +04:00
parent ca276d200f
commit 1a52506fb1
91 changed files with 10766 additions and 0 deletions
@@ -0,0 +1,71 @@
+
+# resource "nubes_lucee" "app1" {
+#   # Lucee-приложение, зависит от Postgres
+#   resource_name  = "lucy_teststand_0"
+#   resource_realm = nubes_postgres.npg.resource_realm
+#   domain         = "web-test-stand"
+
+#   git_path = "https://gitea-naeel.giteak8s.services.ngcloud.ru/naeel/testlucee.git"
+
+#   json_env = jsonencode({
+#     # 🔗 Настройки Data Source 'testds' для Lucee (Application.cfc)
+#     testds_class            = "org.postgresql.Driver"                                                                                                                            # 📂 Драйвер БД
+#     testds_bundleName       = "org.postgresql.jdbc"                                                                                                                              # 📦 Имя бандла JDBC
+#     testds_bundleVersion    = "42.6.0"                                                                                                                                           # 🔢 Версия драйвера
+#     testds_connectionString = "jdbc:postgresql://${nubes_postgres.npg.state_out_flat["internalConnect.master"]}:5432/${nubes_postgres_database.db2_app.db_name}?sslmode=require" # 🚀 Строка подключения
+#     testds_username         = nubes_postgres_user.pg_user.username                                                                                                               # 👤 Логин
+#     testds_password         = jsondecode(nubes_postgres.npg.vault_secrets["users"])[nubes_postgres_user.pg_user.username]["password"]                                            # 🔑 Пароль
+#     testds_connectionLimit  = "5"                                                                                                                                                # 🚦 Лимит соединений
+#     testds_liveTimeout      = "15"                                                                                                                                               # ⏳ Таймаут жизни
+#     testds_validate         = "false"                                                                                                                                            # ✅ Валидация при запросе
+#   })
+
+#   resource_c_p_u     = 300
+#   resource_memory    = 512
+#   resource_instances = 1
+#   app_version        = "5.4"
+
+#   depends_on = [nubes_postgres.npg]
+# }
+
+# resource "nubes_nodejs" "app3" {
+#   # NodeJS демо, работающий с тем же Postgres.
+#   resource_name  = "node_01"
+#   resource_realm = nubes_postgres.npg.resource_realm
+#   domain         = "node07"
+#   git_path       = "https://gitea-naeel.giteak8s.services.ngcloud.ru/naeel/testnode.git"
+#   health_path    = "/healthz"
+#   app_version    = "23"
+
+#   json_env = jsonencode({
+#     # Переменные подключения к Postgres.
+#     PGHOST     = nubes_postgres.npg.state_out_flat["internalConnect.master"]
+#     PGPORT     = "5432"
+#     PGUSER     = nubes_postgres_user.pg_user.username
+#     PGPASSWORD = jsondecode(nubes_postgres.npg.vault_secrets["users"])[nubes_postgres_user.pg_user.username]["password"]
+#     PGDATABASE = nubes_postgres_database.db2_app.db_name
+#     PGSSLMODE  = "require"
+#     DATABASE_URL = format(
+#       "postgresql://%s:%s@%s:5432/%s?sslmode=require",
+#       nubes_postgres_user.pg_user.username,
+#       jsondecode(nubes_postgres.npg.vault_secrets["users"])[nubes_postgres_user.pg_user.username]["password"],
+#       nubes_postgres.npg.state_out_flat["internalConnect.master"],
+#       nubes_postgres_database.db2_app.db_name
+#     )
+#   })
+
+#   resource_c_p_u     = 300
+#   resource_memory    = 256
+#   resource_instances = 1
+
+#   depends_on = [nubes_postgres.npg]
+# }
+
+# output "pg_vault_secrets" {
+#   value     = nubes_postgres.npg.vault_secrets
+#   sensitive = true
+# }
+
+#  terraform output -json pg_vault_secrets
+
+
@@ -0,0 +1,31 @@
+terraform {
+  required_providers {
+    nubes = {
+      source  = "terra.k8c.ru/nubes/nubes"
+      version = "5.0.52"
+    }
+  }
+}
+
+variable "api_token" {
+  type        = string
+  sensitive   = true
+  description = "Nubes API token"
+}
+variable "s3_uid" {
+  type        = string
+  sensitive   = true
+  description = "Nubes S3 UID"
+}
+variable "realm" {
+  type        = string
+  sensitive   = true
+  description = "resource_realm parameter for nubes_postgres resource"
+}
+
+provider "nubes" {
+  api_token    = var.api_token
+  api_endpoint = "https://deck-api-test.ngcloud.ru/api/v1/index.cfm"
+  log_level    = "debug"   # none | info | debug, default = "none"
+}
+
@@ -0,0 +1,50 @@
+resource "nubes_postgres" "npg" {
+  resource_name      = "pg4tf033"
+  s3_uid             = var.s3_uid
+  resource_realm     = var.realm
+  resource_instances = 1
+  resource_memory    = 512
+  resource_c_p_u     = 500
+  resource_disk      = "1"
+  app_version        = "17"
+  json_parameters = jsonencode({
+    log_connections    = "off"
+    log_disconnections = "off"
+  })
+  enable_pg_pooler_master      = false
+  enable_pg_pooler_slave       = false
+  allow_no_s_s_l               = false
+  auto_scale                   = false
+  auto_scale_percentage        = 10
+  auto_scale_tech_window       = 0
+  auto_scale_quota_gb          = "1"
+  need_external_address_master = false
+
+  # suspend_on_destroy = false
+  operation_timeout        = "11m"
+  adopt_existing_on_create = true
+}
+
+
+# resource "nubes_s3bucket" "baba_bucket" {
+#   resource_name = "baba-buck-test1"
+#   s3_user_uid = var.s3_uid
+#   bucket_name   = "baba000"
+#   adopt_existing_on_create=true
+# }
+
+resource "nubes_postgres_user" "pg_user" {
+  postgres_id              = nubes_postgres.npg.id
+  username                 = "user0"
+  role                     = "ddl_user"
+  adopt_existing_on_create = true
+}
+
+resource "nubes_postgres_database" "db2_app" {
+  postgres_id              = nubes_postgres.npg.id
+  db_name                  = "db_terra"
+  db_owner                 = nubes_postgres_user.pg_user.username
+  adopt_existing_on_create = true
+  # suspend_on_destroy = false
+}
+