From 5674b86d582a5d14a2e223b07a9aa83f012fee2f Mon Sep 17 00:00:00 2001 From: Repinoid Date: Fri, 2 Oct 2026 07:56:47 +0300 Subject: [PATCH] =?UTF-8?q?docs(crud):=20=D1=81=D0=BF=D1=80=D0=B0=D0=B2?= =?UTF-8?q?=D0=BA=D0=B0=20=D0=BF=D0=BE=20=D0=B2=D1=8B=D1=85=D0=BE=D0=B4?= =?UTF-8?q?=D0=BD=D1=8B=D0=BC=20=D0=BF=D0=B0=D1=80=D0=B0=D0=BC=D0=B5=D1=82?= =?UTF-8?q?=D1=80=D0=B0=D0=BC=20pg=20=E2=80=94=20=D1=81=D0=BE=D1=81=D1=82?= =?UTF-8?q?=D0=B0=D0=B2,=20=D0=B2=D0=B8=D0=B4=20JSON=20=D0=B8=20=D0=BA?= =?UTF-8?q?=D0=B0=D0=BA=20=D0=B8=D1=85=20=D1=87=D0=B8=D1=82=D0=B0=D1=8E?= =?UTF-8?q?=D1=82=20=D0=BF=D1=80=D0=B8=D0=BB=D0=BE=D0=B6=D0=B5=D0=BD=D0=B8?= =?UTF-8?q?=D1=8F=20=D0=A8=D0=B0=D0=B3=202=20=D1=82=D0=B5=D0=BF=D0=B5?= =?UTF-8?q?=D1=80=D1=8C=20=D0=BF=D0=BE=D1=8F=D1=81=D0=BD=D1=8F=D0=B5=D1=82?= =?UTF-8?q?=20=D0=BD=D0=B5=20=D1=82=D0=BE=D0=BB=D1=8C=D0=BA=D0=BE=20=D0=BA?= =?UTF-8?q?=D0=BE=D0=BC=D0=B0=D0=BD=D0=B4=D1=83=20=D0=B2=D1=8B=D0=B3=D1=80?= =?UTF-8?q?=D1=83=D0=B7=D0=BA=D0=B8,=20=D0=BD=D0=BE=20=D0=B8=20=D1=87?= =?UTF-8?q?=D1=82=D0=BE=20=D0=B8=D0=BC=D0=B5=D0=BD=D0=BD=D0=BE=20=D0=B2?= =?UTF-8?q?=D1=8B=D0=B3=D1=80=D1=83=D0=B6=D0=B0=D0=B5=D1=82=D1=81=D1=8F:?= =?UTF-8?q?=20-=20=D1=82=D0=B0=D0=B1=D0=BB=D0=B8=D1=86=D0=B0=20=D1=88?= =?UTF-8?q?=D0=B5=D1=81=D1=82=D0=B8=20=D0=B2=D1=8B=D1=85=D0=BE=D0=B4=D0=BE?= =?UTF-8?q?=D0=B2=20pg/outputs.tf=20(pg=5Fhost/pg=5Fport/pg=5Fusername/pg?= =?UTF-8?q?=5Fdb=5Fname/=20=20=20pg=5Fpassword/pg=5Fssl=5Fmode)=20=D1=81?= =?UTF-8?q?=20=D1=83=D0=BA=D0=B0=D0=B7=D0=B0=D0=BD=D0=B8=D0=B5=D0=BC=20?= =?UTF-8?q?=D0=B8=D1=81=D1=82=D0=BE=D1=87=D0=BD=D0=B8=D0=BA=D0=B0=20=D0=BA?= =?UTF-8?q?=D0=B0=D0=B6=D0=B4=D0=BE=D0=B3=D0=BE;=20-=20=D1=87=D1=82=D0=BE?= =?UTF-8?q?=20terraform=20output=20-json=20=D0=BA=D0=BB=D0=B0=D0=B4=D1=91?= =?UTF-8?q?=D1=82=20=D0=BE=D0=B1=D1=8A=D0=B5=D0=BA=D1=82=D1=8B=20{sensitiv?= =?UTF-8?q?e,=20type,=20value},=20=D0=B0=20=D0=BD=D0=B5=20=D0=B3=D0=BE?= =?UTF-8?q?=D0=BB=D1=8B=D0=B5=20=20=20=D0=B7=D0=BD=D0=B0=D1=87=D0=B5=D0=BD?= =?UTF-8?q?=D0=B8=D1=8F,=20=D0=BF=D0=BE=D1=8D=D1=82=D0=BE=D0=BC=D1=83=20?= =?UTF-8?q?=D0=B2=20apps/locals.tf=20=D0=BE=D0=B1=D1=80=D0=B0=D1=89=D0=B5?= =?UTF-8?q?=D0=BD=D0=B8=D0=B5=20=D0=B8=D0=B4=D1=91=D1=82=20=D1=87=D0=B5?= =?UTF-8?q?=D1=80=D0=B5=D0=B7=20.value;=20-=20=D1=82=D0=B0=D0=B1=D0=BB?= =?UTF-8?q?=D0=B8=D1=86=D0=B0=20=D1=81=D0=BE=D0=BE=D1=82=D0=B2=D0=B5=D1=82?= =?UTF-8?q?=D1=81=D1=82=D0=B2=D0=B8=D1=8F:=20=D0=B2=D1=8B=D1=85=D0=BE?= =?UTF-8?q?=D0=B4=20pg/=20->=20=D0=BF=D0=B5=D1=80=D0=B5=D0=BC=D0=B5=D0=BD?= =?UTF-8?q?=D0=BD=D0=B0=D1=8F=20=D0=BE=D0=BA=D1=80=D1=83=D0=B6=D0=B5=D0=BD?= =?UTF-8?q?=D0=B8=D1=8F=20=D0=B2=20Flask/Node.js/Lucee=20=20=20(PGHOST/PGP?= =?UTF-8?q?ORT/PGUSER/PGPASSWORD/PGDATABASE/PGSSLMODE,=20=D1=83=20Lucee=20?= =?UTF-8?q?=D0=B5=D1=89=D1=91=20testds=5F*=20=D0=B8=20DATABASE=5FURL).=20?= =?UTF-8?q?=D0=92=D1=81=D0=B5=20=D1=84=D0=B0=D0=BA=D1=82=D1=8B=20=D1=81?= =?UTF-8?q?=D0=B2=D0=B5=D1=80=D0=B5=D0=BD=D1=8B=20=D1=87=D1=82=D0=B5=D0=BD?= =?UTF-8?q?=D0=B8=D0=B5=D0=BC=20=D1=84=D0=B0=D0=B9=D0=BB=D0=BE=D0=B2:=20pg?= =?UTF-8?q?/outputs.tf,=20apps/locals.tf,=20apps/flask.tf,=20apps/nodejs.t?= =?UTF-8?q?f,=20apps/lucee.tf.?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- TEST_STAND/CRUD/README.md | 41 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 41 insertions(+) diff --git a/TEST_STAND/CRUD/README.md b/TEST_STAND/CRUD/README.md index 27728ba..aed4aa8 100644 --- a/TEST_STAND/CRUD/README.md +++ b/TEST_STAND/CRUD/README.md @@ -58,6 +58,47 @@ terraform output -json > ../apps/creds.json > ⚠️ В `creds.json` пароль лежит **открытым текстом**: файл в `apps/.gitignore`, не коммитить и не пересылать. +#### Для справки: что выгружается и как это читают приложения + +В `pg/outputs.tf` объявлено шесть выходов: + +| Выход | Значение | Откуда | +|---|---|---| +| `pg_host` | внутренний хост master | `state_out_flat["internalMaster"]` кластера | +| `pg_port` | `5432` | константа в `outputs.tf` | +| `pg_username` | имя пользователя БД | выход подресурса `nubes_postgres_user` | +| `pg_db_name` | имя базы | выход `nubes_postgres_database` | +| `pg_password` | пароль, `sensitive = true` | выход подресурса `nubes_postgres_user`: платформа генерирует пароль сама при создании пользователя, провайдер читает его из Vault и отдаёт выходом подресурса | +| `pg_ssl_mode` | `require` | константа в `outputs.tf` | + +`terraform output -json` кладёт в файл не голые значения, а объекты вида `{ "sensitive": ..., "type": ..., "value": ... }`: + +```json +{ + "pg_host": { "sensitive": false, "type": "string", "value": "<хост master>" }, + "pg_password": { "sensitive": true, "type": "string", "value": "<пароль>" } +} +``` + +Поэтому в `apps/locals.tf` значение берётся через `.value`: + +```hcl +creds = jsondecode(file("${path.module}/creds.json")) +pg_host = local.creds.pg_host.value +pg_pass = local.creds.pg_password.value +``` + +Дальше `apps/*.tf` передают эти значения приложениям как переменные окружения: + +| Выход `pg/` | Flask | Node.js | Lucee | +|---|---|---|---| +| `pg_host` | `PGHOST` | `PGHOST` | `PGHOST`, `testds_connectionString` | +| `pg_port` | `PGPORT` | `PGPORT` | `PGPORT`, `testds_connectionString` | +| `pg_username` | `PGUSER` | `PGUSER` | `PGUSER`, `testds_username` | +| `pg_password` | `PGPASSWORD` | `PGPASSWORD` | `PGPASSWORD`, `testds_password` | +| `pg_db_name` | `PGDATABASE` | `PGDATABASE` | `testds_connectionString`, `DATABASE_URL` | +| `pg_ssl_mode` | `PGSSLMODE` | `PGSSLMODE` | `PGSSLMODE` | + ### 3. Приложения (`apps/`) ```bash