Webservice fdsn station deployment

.sops.yaml

+# creation rules are evaluated sequentially, the first match wins
+creation_rules:
+        - path_regex: secrets\.yaml$
+          pgp: 'C83ECA1E0B9D719C7FA2470F18E4F5A58801E669'
+          encrypted_regex: '^(data|stringData)$'
+

secrets.yaml

+apiVersion: v1
+kind: Secret
+metadata:
+    name: ws-station-preprod-secrets
+type: Opaque
+stringData:
+    resifinv_ro: ENC[AES256_GCM,data:uCbSF0pj5JcpLE00hLRVtw==,iv:dIbxD3i4PtHwTk9HwvtwXYMJOAPfQAUT01eNDyALFfk=,tag:TOTjtF3KyL5yqPYMx6tqWQ==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    lastmodified: '2020-07-16T09:29:32Z'
+    mac: ENC[AES256_GCM,data:/lv/CYqMPHWp5St1nHhxPC84r2dno7Onbn7hbDjBRlqULO2sbY0Y3GE8XlNd2pjMTyDd44Dr5ZFi//qS53TkEsE5AAnCsBkDAyLva7P7Z9h32pofAm9tDJN6xWbvwO6te9VhpZSvL1myBFTLxI4dCSseuiC5e6KzzG7jj1TqtCQ=,iv:2PKYrU19KLM0Brn19Gz3QeN0OpNAlebpzvxXjdK9mR0=,tag:OsnuRc4JTq2L6QlADSTRwg==,type:str]
+    pgp:
+    -   created_at: '2020-06-19T14:00:02Z'
+        enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA23uPS/3Y9M2AQgAjx0vTXHspE9LneeGi/ev/xk0A8yi3DxgJsZVtEsbSQwL
+            5ZijJ0wI/p0y2HzPlhl+w9INKcMQUxGo2Z184AIEwWFL8TbN97x700xiAV2gLTSq
+            yapwXwGloZZMCV6oWmktTA3IPeeLmGHpaR4lY4IR8iBAJophG9tc8C73xRQTzWec
+            ev3C+wtLnTlxpUhZj2foZ7B2ARAlE2LWqT2I3wp7d1ZJYmSrdJpltarMaJiw18X8
+            lpmJ/SmTO8ITRrPvtxZfBBlzNAAjbC0ed8Qs3RUHa1PSh/VeiOnefkz0lBQNKxvZ
+            JknwRw2AsGW0KirSLk9av7djUmasbf6mj+n8Tvi2J9JeAU4eCVRTc/AP+UFq5Ynn
+            yi79EnUAbM+19apxYkYQME4i2FrhnUtlcdrRNvwIBz1DOa12Z/8W7gdrpwFlM9mK
+            CjptN6pgRXNnV7yegPX8cJCGaoWB+TPpKheAwE3CMQ==
+            =CH3Z
+            -----END PGP MESSAGE-----
+        fp: C83ECA1E0B9D719C7FA2470F18E4F5A58801E669
+    encrypted_regex: ^(data|stringData)$
+    version: 3.5.0

ws-station.yaml

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ws-station-deployment
+  labels:
+    environment: preprod
+    app: ws-station
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ws-station
+  template: # POD template
+    metadata:
+      labels:
+        app: ws-station
+    spec:
+      containers:
+      - name: ws-station
+        image: gricad-registry.univ-grenoble-alpes.fr/osug/resif/ws-station/ws-station:1917a82a
+#        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+        env:
+        - name: PGHOST
+          value: resif-pgpreprod.u-ga.fr
+        - name: PGDATABASE
+          value: resifInv-Preprood
+        - name: PGUSER
+          value: resifinv_ro
+        - name: PGPASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: ws-station-preprod-secrets
+              key: resifinv_ro
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: ws-station-service
+  labels:
+    app: ws-station
+    environment: preprod
+spec:
+  type: NodePort
+  ports:
+  - port: 8080
+  selector:
+    app: ws-station