Nz helmfile (#830)

* Adding helmfile deploy to test envs

* Adding l2-optimism-goerli to helmfile

* Review l2 deploy to helmfile

* Review L2: disabling nodeselector, fixing credentials for frontend image pull

* Review deploy to helmfile

* Disabling node selector for review

* Review env link

* Final changes before merge

.github/workflows/publish-docker-deploy-review-l2.yml

@@ -5,14 +5,6 @@ on:
   # push:
   workflow_dispatch:
 
-env:
-  K8S_LOCAL_PORT: ${{ secrets.K8S_LOCAL_PORT }}
-  K8S_HOST: ${{ secrets.K8S_HOST }}
-  BASTION_HOST: ${{ secrets.BASTION_HOST }}
-  K8S_PORT: ${{ secrets.K8S_PORT }}
-  USERNAME: ${{ secrets.USERNAME }}
-  BASTION_SSH_KEY: ${{secrets.BASTION_SSH_KEY}}
-
 jobs:
   push_to_registry:
     name: Push Docker image to registry
@@ -66,14 +58,11 @@ jobs:
   deploy_review_l2:
     name: Deploy review l2
     needs: push_to_registry
-    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy.yaml@master
+    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy_helmfile.yaml@master
     with:
-      env_vars: VALUES_DIR=deploy/values/review-l2,APP_NAME=bs-stack,DOCKER_IMAGE=prerelease-$GITHUB_REF_NAME_SLUG,K8S_DOMAIN=blockscout-main.test.aws-k8s.blockscout.com
+      appName: review-l2-$GITHUB_REF_NAME_SLUG
       globalEnv: review
-      appNamespace: review-front-l2-$GITHUB_REF_NAME_SLUG
-      blockscoutIngressHost: review-front-l2
-      frontendIngressHost: review-front-l2
-      frontendImage: ghcr.io/blockscout/frontend:prerelease-$GITHUB_REF_NAME_SLUG
-      gethIngressHost: review-front-geth-l2
-      scVerifierIngressHost: review-front-sc-verifier-l2
+      helmfileDir: deploy
+      kubeConfigSecret: ci/data/dev/kubeconfig/k8s-dev
+      vaultRole: ci-dev
     secrets: inherit

.github/workflows/publish-docker-deploy-review.yml

@@ -5,14 +5,6 @@ on:
   # push:
   workflow_dispatch:
 
-env:
-  K8S_LOCAL_PORT: ${{ secrets.K8S_LOCAL_PORT }}
-  K8S_HOST: ${{ secrets.K8S_HOST }}
-  BASTION_HOST: ${{ secrets.BASTION_HOST }}
-  K8S_PORT: ${{ secrets.K8S_PORT }}
-  USERNAME: ${{ secrets.USERNAME }}
-  BASTION_SSH_KEY: ${{secrets.BASTION_SSH_KEY}}
-
 jobs:
   push_to_registry:
     name: Push Docker image to registry
@@ -66,14 +58,11 @@ jobs:
   deploy_review:
     name: Deploy review
     needs: push_to_registry
-    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy.yaml@master
+    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy_helmfile.yaml@master
     with:
-      env_vars: VALUES_DIR=deploy/values/review,APP_NAME=bs-stack,DOCKER_IMAGE=prerelease-$GITHUB_REF_NAME_SLUG,K8S_DOMAIN=blockscout-main.test.aws-k8s.blockscout.com
+      appName: review-$GITHUB_REF_NAME_SLUG
       globalEnv: review
-      appNamespace: review-front-$GITHUB_REF_NAME_SLUG
-      blockscoutIngressHost: review-front
-      frontendIngressHost: review-front
-      frontendImage: ghcr.io/blockscout/frontend:prerelease-$GITHUB_REF_NAME_SLUG
-      gethIngressHost: review-front-geth
-      scVerifierIngressHost: review-front-sc-verifier
+      helmfileDir: deploy
+      kubeConfigSecret: ci/data/dev/kubeconfig/k8s-dev
+      vaultRole: ci-dev
     secrets: inherit

.github/workflows/publish-docker-image-and-deploy.yml

@@ -5,14 +5,6 @@ on:
     branches:
       - main
 
-env:
-  K8S_LOCAL_PORT: ${{ secrets.K8S_LOCAL_PORT }}
-  K8S_HOST: ${{ secrets.K8S_HOST }}
-  BASTION_HOST: ${{ secrets.BASTION_HOST }}
-  K8S_PORT: ${{ secrets.K8S_PORT }}
-  USERNAME: ${{ secrets.USERNAME }}
-  BASTION_SSH_KEY: ${{secrets.BASTION_SSH_KEY}}
-
 jobs:
   push_to_registry:
     name: Push Docker image to registry
@@ -54,22 +46,22 @@ jobs:
   deploy_main:
     name: Deploy frontend
     needs: push_to_registry
-    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy.yaml@master
+    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy_helmfile.yaml@master
     with:
-      env_vars: VALUES_DIR=deploy/values/main,APP_NAME=bs-stack
+      appName: front
       globalEnv: main
-      appNamespace: front-main
-      blockscoutIngressHost: blockscout
-      frontendIngressHost: blockscout
-      frontendImage: ghcr.io/blockscout/frontend:main
-      gethIngressHost: geth
-      scVerifierIngressHost: sc-verifier
+      helmfileDir: deploy
+      kubeConfigSecret: ci/data/dev/kubeconfig/k8s-dev
+      vaultRole: ci-dev
     secrets: inherit
   deploy_l2:
     name: Deploy frontend (L2)
     needs: push_to_registry
-    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy.yaml@master
+    uses: blockscout/blockscout-ci-cd/.github/workflows/deploy_helmfile.yaml@master
     with:
-      env_vars: VALUES_DIR=deploy/values/l2-optimism-goerli,APP_NAME=bs-stack
-      appNamespace: tests-optimism-goerli
+      appName: l2-optimism-goerli
+      globalEnv: optimism-goerli
+      helmfileDir: deploy
+      kubeConfigSecret: ci/data/dev/kubeconfig/k8s-dev
+      vaultRole: ci-dev
     secrets: inherit

deploy/helmfile.yaml

+environments:
+  {{ .Environment.Name }}:
+---
+helmDefaults:
+  timeout: 600
+  kubeContext: k8s-dev
+  wait: true
+  recreatePods: false
+
+repositories:
+  - name: blockscout-ci-cd
+    url: https://blockscout.github.io/blockscout-ci-cd
+  - name: bedag
+    url: https://bedag.github.io/helm-charts
+
+releases:
+  # Deploy front-main
+  - name: bs-stack
+    chart: blockscout-ci-cd/blockscout-stack
+    namespace: front-main
+    labels:
+      app: front
+    values:
+    - values/main/values.yaml
+    - global:
+        env: "main"
+  # Deploy l2-optimism-goerli
+  - name: bs-stack
+    chart: blockscout-ci-cd/blockscout-stack
+    namespace: l2-optimism-goerli
+    labels:
+      app: l2-optimism-goerli
+    values:
+    - values/l2-optimism-goerli/values.yaml
+    - global:
+        env: "optimism-goerli"
+  # Deploy review L2
+  - name: reg-secret
+    chart: bedag/raw
+    namespace: review-l2-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    labels:
+      app: review-l2-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    values:
+      - resources:
+        - apiVersion: v1
+          data:
+            .dockerconfigjson: ref+vault://deployment-values/blockscout/common?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/dockerRegistryCreds
+          kind: Secret
+          metadata:
+            name: regcred
+          type: kubernetes.io/dockerconfigjson
+  - name: bs-stack
+    chart: blockscout-ci-cd/blockscout-stack
+    namespace: review-l2-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    labels:
+      app: review-l2-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    values:
+    - values/review-l2/values.yaml.gotmpl
+    - global:
+        env: "review"
+  # Deploy review
+  - name: reg-secret
+    chart: bedag/raw
+    namespace: review-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    labels:
+      app: review-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    values:
+      - resources:
+        - apiVersion: v1
+          data:
+            .dockerconfigjson: ref+vault://deployment-values/blockscout/common?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/dockerRegistryCreds
+          kind: Secret
+          metadata:
+            name: regcred
+          type: kubernetes.io/dockerconfigjson
+  - name: bs-stack
+    chart: blockscout-ci-cd/blockscout-stack
+    namespace: review-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    labels:
+      app: review-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
+    values:
+    - values/review/values.yaml.gotmpl
+    - global:
+        env: "review"
\ No newline at end of file

deploy/values/l2-optimism-goerli/.sops.yaml

-
----
-creation_rules:
-  - path_regex: ^(.+/)?secrets\.yaml$
-    pgp: >-
-      99E83B7490B1A9F51781E6055317CE0D5CE1230B

deploy/values/main/.sops.yaml

-
----
-creation_rules:
-  - path_regex: ^(.+/)?secrets\.yaml$
-    pgp: >-
-      99E83B7490B1A9F51781E6055317CE0D5CE1230B

deploy/values/review-l2/.sops.yaml

-
----
-creation_rules:
-  - path_regex: ^(.+/)?secrets\.yaml$
-    pgp: >-
-      99E83B7490B1A9F51781E6055317CE0D5CE1230B

deploy/values/review-l2/secrets.yaml

-frontend:
-    environment:
-        NEXT_PUBLIC_NETWORK_TOKEN_ADDRESS:
-            _default: ENC[AES256_GCM,data:yShwsa6ajoFXg/6QSgEARkZRVVrwrdsR69NSmyvBH2O5EUQ0OvsWpW64,iv:K/HT6C9pYCK63LNyF3HERFc79vDS4cB0H4pINIlNhh0=,tag:X0HqeAP01diTvDOwoEP6lw==,type:str]
-        NEXT_PUBLIC_SENTRY_DSN:
-            _default: ENC[AES256_GCM,data:n/H2AH2n9ovn265iFbbrqeOOWS3s7FXgDv5FXJ2Dz133GuhTaqIU5psWjTraZ/Vh+dVM8M9zBLFfUanCWOz7cerq/QUoSVZjKvIvcyp6F072DGU=,iv:Co/pSR+U0vfkmWR+LDpxcQKDJl0WNbaEZihpzrRJcbc=,tag:HUiCX8WGJXWCDB59Y6iIbw==,type:str]
-        SENTRY_CSP_REPORT_URI:
-            _default: ENC[AES256_GCM,data:Hf4azYsGh2lysotK7afaHI85IaLBJeQmPlGE/lwokmX2eaQHVZJ/i5RsaoKoOCSiNyfAowr7P+6IBEC16BUTQMpbhYveBd7c/xjIsoomoHbTdoAdZA/QxNVpS4a2qVthruFudyT1BoZUHIGQ,iv:Mid+PfbslOyivrFSXopdeW96YvOcLP+g2RGcw1o7B98=,tag:IuPUsGdbZQodCMyi1DR04Q==,type:str]
-        NEXT_PUBLIC_AUTH0_CLIENT_ID:
-            _default: ENC[AES256_GCM,data:4cTeqxQnGcpzPK4bMqxZpLgMeFSSDbajN/fmb1UunH8=,iv:bPTQfahGfWF1OfArvYQeSQItMa0Ymkt6eUfDZFBQSOY=,tag:8xHe5AUkbH/rl6cOfkVAKg==,type:str]
-        NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID:
-            _default: ENC[AES256_GCM,data:x1CNJWk9wmqxjKWzD62pIb+scdzt5V22SPrXjvmsIR0=,iv:UjcwWfuGk3HDazHT5OcruevkQX/qAXiaHu6uVoJrSmE=,tag:NcCDR3tRULpiGJRpwBK0GQ==,type:str]
-        NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY:
-            _default: ENC[AES256_GCM,data:MCne89QeuJCrC/xIsYm+8n2dEPIdrd7UTfKm5H3w34nLCrCP5+e4ZA==,iv:NAEBjnkHCuiojGBD49hJGFd5R1jvS6VOEbqMmWQ4mWc=,tag:zYRe8AYbjNwV64gEoGcI3A==,type:str]
-        NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID:
-            _default: ENC[AES256_GCM,data:THISN87wh5fx8L+SbMg=,iv:8u75H8qcsgViNkQrK5mI0McdjpvxPx5ylAicac/CehA=,tag:HwnAUsb/AnNt2d8PsLDPcQ==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2023-03-01T17:33:19Z"
-    mac: ENC[AES256_GCM,data:5Sgd7HmsqruUIvbzUt6eJymEp6dE9Vt+oz2ufOynQgprvLZcRG/kK65aJoeP7c6MfyUmiNoq49u1hr/Z3xyXU86Hma9vHlvRwczEdoIEviioDlMhTwA41Y8cCOouXdSQ3kl2z4gBp8YO3owCq1nDqsFL0JEmZ+OKZ8VEKAPBg/o=,iv:RaXttpW/s8Ufmfsko1XViRB/oBrtojE7Sf9Duz5d0mc=,tag:acBj4fmhcpfgliHY81DlFA==,type:str]
-    pgp:
-        - created_at: "2022-09-14T13:42:28Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQEMA1MXzg1c4SMLAQgAoRceoDDpqXEbiz6DaMX7YS7j5mcp+xVoemU9qY4ln7dT
-            XtwAWiRVr7mf1ZDI77bQunbyWAU3zM/lFDsrlNUMAUGZzoOOtIGSnjCqCYB5JGiP
-            ZfdjG88RAJx+WMIgWl66PW1ceru8We+KauQyG7bD5g59g3b5RadEhH3VER4cYJof
-            VI0+NPpAcGciRsV3vxGGf4q1ppM3Pz0AnXcC+HB+hxWa5DeAhZlavFO2zYBCzw/o
-            ypyLCoOcuEDSj9AY+EYnjyXIS72DXPA953/8QSaMSZ9JVKG5imtXslGEdj9PIQOp
-            0rPqjZCxzydQaPZ68jXMg2Ci4gZT4ZPle9fRFxNGdtJeAScCUk+5L70orvNmWwgD
-            3fFnMY6tMDd/qSqSRFEJ0Vm0M4MYSg5mgW9M64zGfw1bZLLjsIGMe2ZqQC/sZh1O
-            Mrk3/xd4md/Ko8BQcaZ6lCi0olz6KWTzmQhXgNTx9A==
-            =mNH9
-            -----END PGP MESSAGE-----
-          fp: 99E83B7490B1A9F51781E6055317CE0D5CE1230B
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3

deploy/values/review-l2/values.yaml → deploy/values/review-l2/values.yaml.gotmpl

@@ -4,11 +4,11 @@ frontend:
   app: blockscout
   enabled: true
   image:
-    _default: ghcr.io/blockscout/frontend:main
+    _default: ghcr.io/blockscout/frontend:prerelease-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
   ingress:
     enabled: true
     host:
-      _default: frontend.test.blockscout.aws-k8s.blockscout.com
+      _default: review-l2-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}.k8s-dev.blockscout.com
     # enable https
     tls:
       enabled: true
@@ -56,6 +56,8 @@ frontend:
         _default: 384Mi
       cpu:
         _default: 250m
+  nodeSelector:
+    enabled: false
   environment:
     NEXT_PUBLIC_BLOCKSCOUT_VERSION:
       _default: v5.1.0-beta
@@ -92,10 +94,9 @@ frontend:
     NEXT_PUBLIC_FEATURED_NETWORKS:
       _default: https://raw.githubusercontent.com/blockscout/frontend-configs/dev/configs/featured-networks/base-goerli.json
     NEXT_PUBLIC_API_HOST:
-      _default: blockscout-optimism-goerli.test.aws-k8s.blockscout.com
-      review: blockscout-optimism-goerli.test.aws-k8s.blockscout.com
+      _default: blockscout-optimism-goerli.k8s-dev.blockscout.com
     NEXT_PUBLIC_APP_HOST:
-      _default: blockscout-optimism-goerli.test.aws-k8s.blockscout.com
+      _default: review-l2-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}.k8s-dev.blockscout.com
     NEXT_PUBLIC_API_BASE_PATH:
       _default: /
     NEXT_PUBLIC_MARKETPLACE_SUBMIT_FORM:
@@ -103,10 +104,9 @@ frontend:
     NEXT_PUBLIC_LOGOUT_URL:
       _default: https://blockscoutcom.us.auth0.com/v2/logout
     NEXT_PUBLIC_LOGOUT_RETURN_URL:
-      _default: http://blockscout-optimism-goerli.test.aws-k8s.blockscout.com/auth/logout
-      review: http://blockscout-optimism-goerli.test.aws-k8s.blockscout.com/auth/logout
+      _default: http://blockscout-optimism-goerli.k8s-dev.blockscout.com/auth/logout
     NEXT_PUBLIC_STATS_API_HOST:
-      _default: https://stats-optimism-goerli.test.aws-k8s.blockscout.com
+      _default: https://stats-optimism-goerli.k8s-dev.blockscout.com
     NEXT_PUBLIC_API_SPEC_URL:
       _default: https://raw.githubusercontent.com/blockscout/blockscout-api-v2-swagger/main/swagger.yaml
     NEXT_PUBLIC_MARKETPLACE_CONFIG_URL:
@@ -128,7 +128,7 @@ frontend:
     NEXT_PUBLIC_IS_TESTNET:
       _default: true
     NEXT_PUBLIC_VISUALIZE_API_HOST:
-      _default: https://visualizer-optimism-goerli.test.aws-k8s.blockscout.com
+      _default: https://visualizer-optimism-goerli.k8s-dev.blockscout.com
     NEXT_PUBLIC_CONTRACT_INFO_API_HOST:
       _default: https://contracts-info-test.k8s-dev.blockscout.com
     NEXT_PUBLIC_ADMIN_SERVICE_API_HOST:
@@ -136,8 +136,22 @@ frontend:
     NEXT_PUBLIC_IS_L2_NETWORK:
       _default: "true"
     NEXT_PUBLIC_L1_BASE_URL:
-      _default: https://blockscout-main.test.aws-k8s.blockscout.com
+      _default: https://blockscout-main.k8s-dev.blockscout.com
     NEXT_PUBLIC_L2_WITHDRAWAL_URL:
       _default: https://app.optimism.io/bridge/withdraw
     NEXT_PUBLIC_GRAPHIQL_TRANSACTION:
       _default: 0x4a0ed8ddf751a7cb5297f827699117b0f6d21a0b2907594d300dc9fed75c7e62
+    NEXT_PUBLIC_NETWORK_TOKEN_ADDRESS:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_NETWORK_TOKEN_ADDRESS
+    NEXT_PUBLIC_SENTRY_DSN:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_SENTRY_DSN
+    SENTRY_CSP_REPORT_URI:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/SENTRY_CSP_REPORT_URI
+    NEXT_PUBLIC_AUTH0_CLIENT_ID:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_AUTH0_CLIENT_ID
+    NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID
+    NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY
+    NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID:
+      _default: ref+vault://deployment-values/blockscout/dev/review-l2?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID

deploy/values/review/.sops.yaml

-
----
-creation_rules:
-  - path_regex: ^(.+/)?secrets\.yaml$
-    pgp: >-
-      99E83B7490B1A9F51781E6055317CE0D5CE1230B

deploy/values/review/secrets.yaml

-frontend:
-    environment:
-        NEXT_PUBLIC_NETWORK_TOKEN_ADDRESS:
-            _default: ENC[AES256_GCM,data:yShwsa6ajoFXg/6QSgEARkZRVVrwrdsR69NSmyvBH2O5EUQ0OvsWpW64,iv:K/HT6C9pYCK63LNyF3HERFc79vDS4cB0H4pINIlNhh0=,tag:X0HqeAP01diTvDOwoEP6lw==,type:str]
-        NEXT_PUBLIC_SENTRY_DSN:
-            _default: ENC[AES256_GCM,data:n/H2AH2n9ovn265iFbbrqeOOWS3s7FXgDv5FXJ2Dz133GuhTaqIU5psWjTraZ/Vh+dVM8M9zBLFfUanCWOz7cerq/QUoSVZjKvIvcyp6F072DGU=,iv:Co/pSR+U0vfkmWR+LDpxcQKDJl0WNbaEZihpzrRJcbc=,tag:HUiCX8WGJXWCDB59Y6iIbw==,type:str]
-        SENTRY_CSP_REPORT_URI:
-            _default: ENC[AES256_GCM,data:Hf4azYsGh2lysotK7afaHI85IaLBJeQmPlGE/lwokmX2eaQHVZJ/i5RsaoKoOCSiNyfAowr7P+6IBEC16BUTQMpbhYveBd7c/xjIsoomoHbTdoAdZA/QxNVpS4a2qVthruFudyT1BoZUHIGQ,iv:Mid+PfbslOyivrFSXopdeW96YvOcLP+g2RGcw1o7B98=,tag:IuPUsGdbZQodCMyi1DR04Q==,type:str]
-        NEXT_PUBLIC_AUTH0_CLIENT_ID:
-            _default: ENC[AES256_GCM,data:4cTeqxQnGcpzPK4bMqxZpLgMeFSSDbajN/fmb1UunH8=,iv:bPTQfahGfWF1OfArvYQeSQItMa0Ymkt6eUfDZFBQSOY=,tag:8xHe5AUkbH/rl6cOfkVAKg==,type:str]
-        NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID:
-            _default: ENC[AES256_GCM,data:x1CNJWk9wmqxjKWzD62pIb+scdzt5V22SPrXjvmsIR0=,iv:UjcwWfuGk3HDazHT5OcruevkQX/qAXiaHu6uVoJrSmE=,tag:NcCDR3tRULpiGJRpwBK0GQ==,type:str]
-        NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY:
-            _default: ENC[AES256_GCM,data:MCne89QeuJCrC/xIsYm+8n2dEPIdrd7UTfKm5H3w34nLCrCP5+e4ZA==,iv:NAEBjnkHCuiojGBD49hJGFd5R1jvS6VOEbqMmWQ4mWc=,tag:zYRe8AYbjNwV64gEoGcI3A==,type:str]
-        NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID:
-            _default: ENC[AES256_GCM,data:Nm/7/dsRvdg91X80C/Y=,iv:+LhfJRIeOADiAWoZF6pGCoNbHGzcVBND0fzaBZwNKZ8=,tag:JPZw8Cevs9sxqAb2nmV0rA==,type:str]
-sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
-    age: []
-    lastmodified: "2023-03-01T17:33:11Z"
-    mac: ENC[AES256_GCM,data:z5cswSDNt0dXKKJcQRhxnZhUiMM9BHSFcWqE7GaFINatN2JMeYOTj/R7laCmbD5tWtkFDAz3v7YOcSkMFPR2fywBIjZpCg37n5N9Km0SaTr4QD1ILBywJBvBv+0WerQUaUoDjxFoB7WMg1jZDwcxXqPrmswgBWniBGTQBs+KXtI=,iv:u5agr/TABxSzVcpWGMO4wpKUDTRWF8oLknOq9rdSz68=,tag:dJ/8E/Blkz8exloyo75vjQ==,type:str]
-    pgp:
-        - created_at: "2022-09-14T13:42:28Z"
-          enc: |
-            -----BEGIN PGP MESSAGE-----
-
-            hQEMA1MXzg1c4SMLAQgAoRceoDDpqXEbiz6DaMX7YS7j5mcp+xVoemU9qY4ln7dT
-            XtwAWiRVr7mf1ZDI77bQunbyWAU3zM/lFDsrlNUMAUGZzoOOtIGSnjCqCYB5JGiP
-            ZfdjG88RAJx+WMIgWl66PW1ceru8We+KauQyG7bD5g59g3b5RadEhH3VER4cYJof
-            VI0+NPpAcGciRsV3vxGGf4q1ppM3Pz0AnXcC+HB+hxWa5DeAhZlavFO2zYBCzw/o
-            ypyLCoOcuEDSj9AY+EYnjyXIS72DXPA953/8QSaMSZ9JVKG5imtXslGEdj9PIQOp
-            0rPqjZCxzydQaPZ68jXMg2Ci4gZT4ZPle9fRFxNGdtJeAScCUk+5L70orvNmWwgD
-            3fFnMY6tMDd/qSqSRFEJ0Vm0M4MYSg5mgW9M64zGfw1bZLLjsIGMe2ZqQC/sZh1O
-            Mrk3/xd4md/Ko8BQcaZ6lCi0olz6KWTzmQhXgNTx9A==
-            =mNH9
-            -----END PGP MESSAGE-----
-          fp: 99E83B7490B1A9F51781E6055317CE0D5CE1230B
-    unencrypted_suffix: _unencrypted
-    version: 3.7.3

deploy/values/review/values.yaml → deploy/values/review/values.yaml.gotmpl

@@ -4,11 +4,11 @@ frontend:
   app: blockscout
   enabled: true
   image:
-    _default: ghcr.io/blockscout/frontend:main
+    _default: ghcr.io/blockscout/frontend:prerelease-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}
   ingress:
     enabled: true
     host:
-      _default: frontend.test.blockscout.aws-k8s.blockscout.com
+      _default: review-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}.k8s-dev.blockscout.com
     # enable https
     tls:
       enabled: true
@@ -52,6 +52,8 @@ frontend:
         _default: 384Mi
       cpu:
         _default: 250m
+  nodeSelector:
+    enabled: false
   environment:
     NEXT_PUBLIC_BLOCKSCOUT_VERSION:
       _default: v5.1.2-beta
@@ -92,18 +94,17 @@ frontend:
     NEXT_PUBLIC_FEATURED_NETWORKS:
       _default: https://raw.githubusercontent.com/blockscout/frontend-configs/dev/configs/featured-networks/eth-goerli.json
     NEXT_PUBLIC_API_HOST:
-      _default: blockscout.com
-      review: blockscout-main.test.aws-k8s.blockscout.com
+      _default: blockscout-main.k8s-dev.blockscout.com
     NEXT_PUBLIC_STATS_API_HOST:
-      _default: https://stats-test.aws-k8s.blockscout.com/
+      _default: https://stats-test.k8s-dev.blockscout.com/
     NEXT_PUBLIC_VISUALIZE_API_HOST:
-      _default: https://visualizer.aws-k8s.blockscout.com
+      _default: http://visualizer-svc.visualizer-testing.svc.cluster.local/
     NEXT_PUBLIC_CONTRACT_INFO_API_HOST:
       _default: https://contracts-info-test.k8s-dev.blockscout.com
     NEXT_PUBLIC_ADMIN_SERVICE_API_HOST:
       _default: https://admin-rs-test.k8s-dev.blockscout.com
     NEXT_PUBLIC_AUTH_URL:
-      _default: https://blockscout-main.test.aws-k8s.blockscout.com
+      _default: https://blockscout-main.k8s-dev.blockscout.com
     NEXT_PUBLIC_API_BASE_PATH:
       _default: /
     NEXT_PUBLIC_MARKETPLACE_SUBMIT_FORM:
@@ -111,12 +112,11 @@ frontend:
     NEXT_PUBLIC_LOGOUT_URL:
       _default: https://blockscoutcom.us.auth0.com/v2/logout
     NEXT_PUBLIC_LOGOUT_RETURN_URL:
-      _default: https://blockscout.com/auth/logout
-      review: blockscout-main.test.aws-k8s.blockscout.com/auth/logout
+      _default: blockscout-main.k8s-dev.blockscout.com/auth/logout
     NEXT_PUBLIC_HOMEPAGE_CHARTS:
       _default: "['daily_txs','coin_price','market_cap']"
     NEXT_PUBLIC_APP_HOST:
-      _default: blockscout.com
+      _default: review-{{ requiredEnv "GITHUB_REF_NAME_SLUG" }}.k8s-dev.blockscout.com
     NEXT_PUBLIC_NETWORK_RPC_URL:
       _default: https://rpc.ankr.com/eth_goerli
     NEXT_PUBLIC_NETWORK_EXPLORERS:
@@ -129,3 +129,17 @@ frontend:
       _default: true
     NEXT_PUBLIC_GRAPHIQL_TRANSACTION:
       _default: 0xf7d4972356e6ae44ae948d0cf19ef2beaf0e574c180997e969a2837da15e349d
+    NEXT_PUBLIC_NETWORK_TOKEN_ADDRESS:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_NETWORK_TOKEN_ADDRESS
+    NEXT_PUBLIC_SENTRY_DSN:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_SENTRY_DSN
+    SENTRY_CSP_REPORT_URI:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/SENTRY_CSP_REPORT_URI
+    NEXT_PUBLIC_AUTH0_CLIENT_ID:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_AUTH0_CLIENT_ID
+    NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID
+    NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_RE_CAPTCHA_APP_SITE_KEY
+    NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID:
+      _default: ref+vault://deployment-values/blockscout/dev/review?token_env=VAULT_TOKEN&address=https://vault.k8s.blockscout.com#/NEXT_PUBLIC_GOOGLE_ANALYTICS_PROPERTY_ID