Production

production/deployment.yaml

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ws-station-deployment
+  labels:
+    environment: production
+    app: ws-station
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: ws-station
+  template: # POD template
+    metadata:
+      labels:
+        app: ws-station
+        environment: production
+    spec:
+      containers:
+      - name: redis
+        image: redis
+        ports:
+          - containerPort: 6379
+            name: redis
+            protocol: TCP
+      - name: ws-station
+        image: gricad-registry.univ-grenoble-alpes.fr/osug/resif/ws-station/ws-station:269e09b2
+        imagePullPolicy: Always
+        ports:
+        - containerPort: 8080
+        env:
+        - name: RUNMODE
+          value: production
+        - name: PGHOST
+          value: resif-pgprod.u-ga.fr
+        - name: PGPORT
+          value: "5432"
+        - name: PGDATABASE
+          value: resifInv-Preprod
+        - name: PGUSER
+          value: wsstation
+        - name: PGPASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: ws-station-production-secrets
+              key: wsstation
+      - name: fdsnwsstat
+        image: gricad-registry.univ-grenoble-alpes.fr/osug/resif/fdsnwsstat/fdsnwsstat:a08b331d
+        ports:
+          -   containerPort: 8000
+        env:
+          - name: STATS_DBURI
+            valueFrom:
+              secretKeyRef:
+                name: ws-station-production-secrets
+                key: resifstatsuri
+          - name: INV_DBURI
+            valueFrom:
+              secretKeyRef:
+                name: ws-station-production-secrets
+                key: resifinvuri
+          - name: AUTH_DBURI
+            valueFrom:
+              secretKeyRef:
+                name: ws-station-production-secrets
+                key: resifauthuri
+          - name: RUNMODE
+            value: production
+          - name: REDIS_QUEUE
+            value: fdsnwsstat

production/ingress.yaml

+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: ws-station-ingress
+  labels:
+    app: ws-station
+    environment: production
+spec:
+  rules:
+  - http:
+      paths:
+      - path: /fdsnws/station/1/(.*)
+        pathType: Prefix
+        backend:
+          service:
+            name: ws-station-service
+            port:
+              number: 8080

production/secrets.yaml

+apiVersion: v1
+kind: Secret
+metadata:
+    name: ws-station-production-secrets
+type: Opaque
+stringData:
+    resifinv_ro: ENC[AES256_GCM,data:Upx4Vc+Wf19Nf0ZKkdWSFg==,iv:qPvui+Wu608s31zziZwtq00SKrbDZJMdz9F+V0Sp4Yw=,tag:T3hCsCCP49I0DVua2lAjDg==,type:str]
+    wsstation: ENC[AES256_GCM,data:VpoR198mZ1ZNgeK+,iv:1KHBGrHQ6uIxX9IbwdqCRx0QeixVDkK43pQOdmHdiPI=,tag:ODpKxhhcB4Zj+/P+nB2r3A==,type:str]
+    resifstatsuri: ENC[AES256_GCM,data:QOLFO7XbqjyVi7kHVGYcQ/M+1H+3Y7JCtkOziA8Qoe11kZljxhLjyZG1BvFOiY3cclhgn00bd7CFFN0j7XfJVwpJuhwPI/kBWg==,iv:N6bF0jjez95L9eI/TNEhiJPwjJsNic2rIVd+IWlxYmk=,tag:LLcnqEDSaLanI+gjCNinkA==,type:str]
+    resifinvuri: ENC[AES256_GCM,data:ECWHBKuZmTgW6plUeVrdx5ZlK1ZQXc1/s76wHwR6Hvw2PrtXxDV6kEm7Z0oCkYss/r5U+pDXlhjC2L/QEg1Cb6iojkDdmU7JlsFYKA==,iv:K3QKXuWlZnZDx0jL0U/6iIzOxp+LQRC1NFK01KqvRlg=,tag:W/UPedXNTri7viMworEPuw==,type:str]
+    resifauthuri: ENC[AES256_GCM,data:mb0dP9Mem2PntQmHrg12iyWoRZJmT6qbWv78tRU85tNbrq+GDl9CWzNTnqObLr44h/3lPh4RcHPYTkiazvq9iOkFiGqwnA2y,iv:zKf+Dm5oiyZ0RXGHccqOXXf7iAnZOnwrHwOy0xFNTgg=,tag:/1J99WqN9SIAU1vkCGI1XA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age: []
+    lastmodified: "2021-04-29T12:51:34Z"
+    mac: ENC[AES256_GCM,data:YspxZ5p6U/ivJiJEOb+C78Zr89md4Pv7X0hsrbENBjx/+xuVgSgxF5WUgr94tgLwisbXQPYMnDu13QlAnq4IcAvzX8S05NYhWCp3YudcMkebCp/cjabduYcNc+rPlAb8AtgnbSfg6294H7PEmG5QhjUo0Rct5rqRW1wAnITg0dg=,iv:67b4Efq3aJh6w32g3HlnAoHfaGMpFlEhgTVPe2rvsqQ=,tag:t6j3y7X8ESAn7KpkQie4Mw==,type:str]
+    pgp:
+        - created_at: "2020-06-19T14:00:02Z"
+          enc: |
+            -----BEGIN PGP MESSAGE-----
+
+            hQEMA23uPS/3Y9M2AQgAjx0vTXHspE9LneeGi/ev/xk0A8yi3DxgJsZVtEsbSQwL
+            5ZijJ0wI/p0y2HzPlhl+w9INKcMQUxGo2Z184AIEwWFL8TbN97x700xiAV2gLTSq
+            yapwXwGloZZMCV6oWmktTA3IPeeLmGHpaR4lY4IR8iBAJophG9tc8C73xRQTzWec
+            ev3C+wtLnTlxpUhZj2foZ7B2ARAlE2LWqT2I3wp7d1ZJYmSrdJpltarMaJiw18X8
+            lpmJ/SmTO8ITRrPvtxZfBBlzNAAjbC0ed8Qs3RUHa1PSh/VeiOnefkz0lBQNKxvZ
+            JknwRw2AsGW0KirSLk9av7djUmasbf6mj+n8Tvi2J9JeAU4eCVRTc/AP+UFq5Ynn
+            yi79EnUAbM+19apxYkYQME4i2FrhnUtlcdrRNvwIBz1DOa12Z/8W7gdrpwFlM9mK
+            CjptN6pgRXNnV7yegPX8cJCGaoWB+TPpKheAwE3CMQ==
+            =CH3Z
+            -----END PGP MESSAGE-----
+          fp: C83ECA1E0B9D719C7FA2470F18E4F5A58801E669
+    encrypted_regex: ^(data|stringData)$
+    version: 3.7.1

production/service.yaml

+apiVersion: v1
+kind: Service
+metadata:
+  name: ws-station-service
+  labels:
+    app: ws-station
+    environment: production
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8080
+  selector:
+    app: ws-station
+    environment: production