diff --git a/k8s/welearn-api/secrets.staging.yaml b/k8s/welearn-api/secrets.staging.yaml new file mode 100644 index 0000000..a41aed9 --- /dev/null +++ b/k8s/welearn-api/secrets.staging.yaml @@ -0,0 +1,69 @@ +config: + sensitive: + AZURE_API_KEY: ENC[AES256_GCM,data:rSsBHkv6+woeS/38fnQv7/zSTkcCkVeAqs9NlbfBqyc=,iv:EeifW/xtv7BsOY6FxC1UfOuqLTY7gRUmv+JuYfT0Tr0=,tag:k4s2siDSbBtDRNf4Xp+rSg==,type:str] + AZURE_MISTRAL_API_KEY: ENC[AES256_GCM,data:WSnV6WyXwusaNiKZQyXBTT6EsaeUt5nBznojEUowA0+z7ZIhmmfNcpZqQN73g3DQBjVqeonwjD1u8hx6Onnw4QW/OnTEUa5Vp6+t+vW1+7d1iNxX,iv:3iX//fTSXeBhqx9kRa5E5+DByFA4jzLCPH442DIBUog=,tag:goZ3H0ylfkl00jqqERctSQ==,type:str] + AZURE_APIM_API_KEY: ENC[AES256_GCM,data:p6zRTRFqW320qie6pbTNKdJDpujRAu9ZSFoSoeav05Q=,iv:ty385vgYPpkTl6OfIunZ/6w1fI8tdUHuL4K6YHknHY4=,tag:B6o5zQao8LcNFprM5z5bxw==,type:str] + PG_PASSWORD: ENC[AES256_GCM,data:Ze5QJrXB2AbpxefDMWLJKRXVJX60n7FKZCVtpEoRkvk=,iv:SA30pb5grVCWnsE9JUlwXjLA+seyaplLmYiZedTduNQ=,tag:yarUgx8PO6uxY4YrBUI74A==,type:str] +azureSecrets: + azurestorageaccountname: ENC[AES256_GCM,data:kyI/EwF9TqC4rMdCow6SN0ZS1CTP,iv:U80Rx7diZZNS0t3RPzDrH1Xp66lLqLF1ha11sQMagN0=,tag:uV1OCZ7vS8Y5mPVpNVUk4Q==,type:str] + azurestorageaccountkey: ENC[AES256_GCM,data:kPZhG6oJCXZP++RQKecnvJK/rx7K/uP91X3+uk7LciR8Xe0gZzQqf6b/MuXytHUMUIgB+ModVO8VTWx2QUTI6YUaDoSBoe9I9gN8DePIUnpLDP0i7k59nQ==,iv:5igNpxTbv3zESaQCGwlDlsSWH+UK8yM1vDwN8sUlDq8=,tag:T8zg645+VQS5J/cukLnMQA==,type:str] +sops: + age: + - recipient: age1dvu205sflecfu6uewgwmgs83nkm2c2fzfxs55zfkjs2gmqjya50qmm6lck + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsdlpROWxWY2hKNURPc3Rj + eEJmWFozUXdteWdmUU5QbzNSbHZQSkwvYVNvClJVYk1SalZXQmRmWnAyVFlES2p4 + Y2ZaV1pPbDY5SkowQ0NucExPS3ZOKzgKLS0tIDlWK2lpNkFhUTYvSmtmVUlNQW9K + MTJzKzZsUHMwVFJ5QmJwejI3MkNSZzQKmvaZQ0QcmnP3I+JeE15HdzRkWYdAcPGZ + H1G/LONova4r/sOydOm5Lf5aMGh8SA/7JwoLd9zHu/qYZOIefk0aDw== + -----END AGE ENCRYPTED FILE----- + - recipient: age195mrdujpg239kfgzq45je9fr7xsdnplt7etu35l0u8y6g67h3a3qxtzam2 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbUxXSXY1OTBXcEJLMzc3 + VDFRSmI0enROdWlnWVIwcEN4ZlVXOUVYbmw4Cnl3eGduTVZvMi9wL1k1R2FMVnJw + c1hZVjc4MDdGWHZzK3hrOGZKSERhYzAKLS0tIFNRKzF5RnRpalFXZE4waG1DNjVm + WmRQcFlMOEg5VDZRS0VSMHhwYUJoMkEKKGzynl3ZzxgNTboUQiup41L8WVk2NT9w + MiEKcx9+nZh3+V+DDF2P+8zic763cZ2yglaA8Cn75J15VkOT5FOVpQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age14qavd6070runmtefwsh60ps3kxnu36fhsp76wvct4w4k4g7wqeksmk3r9z + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlK1dUUWRUdFFnNzJSTU04 + NDlYMVBMZjlGakFSZmpKVmNuRGRZblp3eTNjCkl6WlhLSm1FK0JjUENnRG9YQXBH + VUhRakFOOXJsYTFERFVLdW44RDBScFkKLS0tIFhKSFNkdkFlNG5GazV6TGhyOTJY + MEp3dkpHV2xiSjliaFMvL3krUU1ZdGMKij+UTk16BIbofXuLFAwnkDxUiuFwpYi/ + SJepJx6hAlkXWUDIVYtp2EGgmeNp+fyqZm39YUq+daaqEsVCh6WDyQ== + -----END AGE ENCRYPTED FILE----- + - recipient: age1kuagvmkjdw26q7dn9w5ljqd28ndrh4zvs38zepquftkn0ryyj97srw9gy4 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWGIwdU5jcVdyWDlzdVE1 + d0hmelBLOXZQVmt5L0hCLytJYXNEbDhMcEhNClYvTmhvbkR5VTlybkNHVmFLVkZX + WW1JSXBWUjhPQWdpQnV5enJ1S2NjWkUKLS0tIDZnTkJoU2FpZkI2L0xtWm9PZVoy + UGFCaXJlT1p3UUJhTjRKZWFOM0RnejQKfasRQrQcrG6SlZqY8klDUvnWsKw8c6mY + c4z3SpkBMII6YPRuQJLRVZYLZmQxGUrVZnOBMuKjsc4TWPRY4/58Dg== + -----END AGE ENCRYPTED FILE----- + - recipient: age1ew6kcn0fa6faqkc8w2hg2ww7xrh2g87nwa7ncdc2eq6xf4vkfs5q8yxy0l + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3MUFBZXY5NXBsRGM4WVQy + Q1JlWFVmOU4xcjhJbjN1UG1mTjd0bG9HbW5ZCjNLakVMdUQ3RmVycGJQd2FhczRK + cHNaeEcxQ1Q5SWg3K1BNc25nZ0t2YXMKLS0tIDJleEo0ek9UTzgvNEhXN2p6Ny92 + QWpPcHluR1haT2EzUzFNRmZCWTJkMk0Kfy0wN1YVeKmnvT7uAXAUJeEIpdPsUsU4 + c86okH1DqjnHUNkZ0ByuIiQ9wOUOfHOtMi/N9UGJ3fIMdbqu+TMDew== + -----END AGE ENCRYPTED FILE----- + - recipient: age1h2ta0vvj53zt9qyys5hskramd6cduy9k85hqaghjnrrrcv0e9shskl7dzd + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObDBndnRsUVVyTTJkQXdi + REFxTHF4WndHMEJCSWFFUTFMZ2lyQytPUVdvClU0aDllS1ZtUVFzeUt4bnR3WGdy + RGNlekNXU3ZVcTdiVEpOSDdtM3FMdjgKLS0tIElmNURGRGJsVmo0YVBOanQxYkpt + TnhnbS94TEpBbWtueTgwNDgzRWtYT3MKsLZA70szWZHLEn0fofYaRdBYDL8OCD7d + K+NsJ+fKyN7CqITQcNDOqnMYmFoNY9rgXmCPLyH+MkMfw0dZzKNYZA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-02-18T16:52:32Z" + mac: ENC[AES256_GCM,data:pOz31HmPMBSiFeNnD3u1lI1dk4g4igfILt+MqgyOwHWEHyGho4QcZMqlC946QXOJjL84bHfUzY+UPFhT6s2djAoFXEW3KE2RazVDhvfUrBayjB6lX3sCQGl7qEVxmuHcIEX4nwQBe6N6exBAIencZrQbtoeRxKDxoqb3XPggWCY=,iv:6RfQ8EpdKTvlxzDq+N/J3DnsX9giLYJDjZ87fn8gEZ8=,tag:JzkbJOH3y5Hx+DdIdYtGYQ==,type:str] + unencrypted_suffix: _unencrypted + version: 3.11.0 diff --git a/k8s/welearn-api/values.staging.yaml b/k8s/welearn-api/values.staging.yaml new file mode 100644 index 0000000..50a6a14 --- /dev/null +++ b/k8s/welearn-api/values.staging.yaml @@ -0,0 +1,16 @@ +ingress: + hostname: api.welearn.k8s.lp-i.xyz + +config: + nonSensitive: + PG_HOST: dev-lab-projects-backend.postgres.database.azure.com + PG_USER: welearn_datastack_staging + PG_DATABASE: welearn_datastack_staging + TIKA_URL_BASE: https://tika.k8s.lp-i.dev/ + DATA_COLLECTION_ORIGIN_PREFIX: welearn +allowedHostsRegexes: + mainUrl: |- + https:\/\/welearn\.k8s\.lp-i\.xyz + +rateLimiting: + enabled: true