feat: bootstrap staging

k8s/welearn-api/secrets.staging.yaml

@@ -0,0 +1,69 @@
+config:
+    sensitive:
+        AZURE_API_KEY: ENC[AES256_GCM,data:rSsBHkv6+woeS/38fnQv7/zSTkcCkVeAqs9NlbfBqyc=,iv:EeifW/xtv7BsOY6FxC1UfOuqLTY7gRUmv+JuYfT0Tr0=,tag:k4s2siDSbBtDRNf4Xp+rSg==,type:str]
+        AZURE_MISTRAL_API_KEY: ENC[AES256_GCM,data:WSnV6WyXwusaNiKZQyXBTT6EsaeUt5nBznojEUowA0+z7ZIhmmfNcpZqQN73g3DQBjVqeonwjD1u8hx6Onnw4QW/OnTEUa5Vp6+t+vW1+7d1iNxX,iv:3iX//fTSXeBhqx9kRa5E5+DByFA4jzLCPH442DIBUog=,tag:goZ3H0ylfkl00jqqERctSQ==,type:str]
+        AZURE_APIM_API_KEY: ENC[AES256_GCM,data:p6zRTRFqW320qie6pbTNKdJDpujRAu9ZSFoSoeav05Q=,iv:ty385vgYPpkTl6OfIunZ/6w1fI8tdUHuL4K6YHknHY4=,tag:B6o5zQao8LcNFprM5z5bxw==,type:str]
+        PG_PASSWORD: ENC[AES256_GCM,data:Ze5QJrXB2AbpxefDMWLJKRXVJX60n7FKZCVtpEoRkvk=,iv:SA30pb5grVCWnsE9JUlwXjLA+seyaplLmYiZedTduNQ=,tag:yarUgx8PO6uxY4YrBUI74A==,type:str]
+azureSecrets:
+    azurestorageaccountname: ENC[AES256_GCM,data:kyI/EwF9TqC4rMdCow6SN0ZS1CTP,iv:U80Rx7diZZNS0t3RPzDrH1Xp66lLqLF1ha11sQMagN0=,tag:uV1OCZ7vS8Y5mPVpNVUk4Q==,type:str]
+    azurestorageaccountkey: ENC[AES256_GCM,data:kPZhG6oJCXZP++RQKecnvJK/rx7K/uP91X3+uk7LciR8Xe0gZzQqf6b/MuXytHUMUIgB+ModVO8VTWx2QUTI6YUaDoSBoe9I9gN8DePIUnpLDP0i7k59nQ==,iv:5igNpxTbv3zESaQCGwlDlsSWH+UK8yM1vDwN8sUlDq8=,tag:T8zg645+VQS5J/cukLnMQA==,type:str]
+sops:
+    age:
+        - recipient: age1dvu205sflecfu6uewgwmgs83nkm2c2fzfxs55zfkjs2gmqjya50qmm6lck
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBsdlpROWxWY2hKNURPc3Rj
+            eEJmWFozUXdteWdmUU5QbzNSbHZQSkwvYVNvClJVYk1SalZXQmRmWnAyVFlES2p4
+            Y2ZaV1pPbDY5SkowQ0NucExPS3ZOKzgKLS0tIDlWK2lpNkFhUTYvSmtmVUlNQW9K
+            MTJzKzZsUHMwVFJ5QmJwejI3MkNSZzQKmvaZQ0QcmnP3I+JeE15HdzRkWYdAcPGZ
+            H1G/LONova4r/sOydOm5Lf5aMGh8SA/7JwoLd9zHu/qYZOIefk0aDw==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age195mrdujpg239kfgzq45je9fr7xsdnplt7etu35l0u8y6g67h3a3qxtzam2
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVbUxXSXY1OTBXcEJLMzc3
+            VDFRSmI0enROdWlnWVIwcEN4ZlVXOUVYbmw4Cnl3eGduTVZvMi9wL1k1R2FMVnJw
+            c1hZVjc4MDdGWHZzK3hrOGZKSERhYzAKLS0tIFNRKzF5RnRpalFXZE4waG1DNjVm
+            WmRQcFlMOEg5VDZRS0VSMHhwYUJoMkEKKGzynl3ZzxgNTboUQiup41L8WVk2NT9w
+            MiEKcx9+nZh3+V+DDF2P+8zic763cZ2yglaA8Cn75J15VkOT5FOVpQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age14qavd6070runmtefwsh60ps3kxnu36fhsp76wvct4w4k4g7wqeksmk3r9z
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBlK1dUUWRUdFFnNzJSTU04
+            NDlYMVBMZjlGakFSZmpKVmNuRGRZblp3eTNjCkl6WlhLSm1FK0JjUENnRG9YQXBH
+            VUhRakFOOXJsYTFERFVLdW44RDBScFkKLS0tIFhKSFNkdkFlNG5GazV6TGhyOTJY
+            MEp3dkpHV2xiSjliaFMvL3krUU1ZdGMKij+UTk16BIbofXuLFAwnkDxUiuFwpYi/
+            SJepJx6hAlkXWUDIVYtp2EGgmeNp+fyqZm39YUq+daaqEsVCh6WDyQ==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1kuagvmkjdw26q7dn9w5ljqd28ndrh4zvs38zepquftkn0ryyj97srw9gy4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxWGIwdU5jcVdyWDlzdVE1
+            d0hmelBLOXZQVmt5L0hCLytJYXNEbDhMcEhNClYvTmhvbkR5VTlybkNHVmFLVkZX
+            WW1JSXBWUjhPQWdpQnV5enJ1S2NjWkUKLS0tIDZnTkJoU2FpZkI2L0xtWm9PZVoy
+            UGFCaXJlT1p3UUJhTjRKZWFOM0RnejQKfasRQrQcrG6SlZqY8klDUvnWsKw8c6mY
+            c4z3SpkBMII6YPRuQJLRVZYLZmQxGUrVZnOBMuKjsc4TWPRY4/58Dg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1ew6kcn0fa6faqkc8w2hg2ww7xrh2g87nwa7ncdc2eq6xf4vkfs5q8yxy0l
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB3MUFBZXY5NXBsRGM4WVQy
+            Q1JlWFVmOU4xcjhJbjN1UG1mTjd0bG9HbW5ZCjNLakVMdUQ3RmVycGJQd2FhczRK
+            cHNaeEcxQ1Q5SWg3K1BNc25nZ0t2YXMKLS0tIDJleEo0ek9UTzgvNEhXN2p6Ny92
+            QWpPcHluR1haT2EzUzFNRmZCWTJkMk0Kfy0wN1YVeKmnvT7uAXAUJeEIpdPsUsU4
+            c86okH1DqjnHUNkZ0ByuIiQ9wOUOfHOtMi/N9UGJ3fIMdbqu+TMDew==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age1h2ta0vvj53zt9qyys5hskramd6cduy9k85hqaghjnrrrcv0e9shskl7dzd
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBObDBndnRsUVVyTTJkQXdi
+            REFxTHF4WndHMEJCSWFFUTFMZ2lyQytPUVdvClU0aDllS1ZtUVFzeUt4bnR3WGdy
+            RGNlekNXU3ZVcTdiVEpOSDdtM3FMdjgKLS0tIElmNURGRGJsVmo0YVBOanQxYkpt
+            TnhnbS94TEpBbWtueTgwNDgzRWtYT3MKsLZA70szWZHLEn0fofYaRdBYDL8OCD7d
+            K+NsJ+fKyN7CqITQcNDOqnMYmFoNY9rgXmCPLyH+MkMfw0dZzKNYZA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-02-18T16:52:32Z"
+    mac: ENC[AES256_GCM,data:pOz31HmPMBSiFeNnD3u1lI1dk4g4igfILt+MqgyOwHWEHyGho4QcZMqlC946QXOJjL84bHfUzY+UPFhT6s2djAoFXEW3KE2RazVDhvfUrBayjB6lX3sCQGl7qEVxmuHcIEX4nwQBe6N6exBAIencZrQbtoeRxKDxoqb3XPggWCY=,iv:6RfQ8EpdKTvlxzDq+N/J3DnsX9giLYJDjZ87fn8gEZ8=,tag:JzkbJOH3y5Hx+DdIdYtGYQ==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0

k8s/welearn-api/values.staging.yaml

@@ -0,0 +1,16 @@
+ingress:
+  hostname: api.welearn.k8s.lp-i.xyz
+
+config:
+  nonSensitive:
+    PG_HOST: dev-lab-projects-backend.postgres.database.azure.com
+    PG_USER: welearn_datastack_staging
+    PG_DATABASE: welearn_datastack_staging
+    TIKA_URL_BASE: https://tika.k8s.lp-i.dev/
+    DATA_COLLECTION_ORIGIN_PREFIX: welearn
+allowedHostsRegexes:
+  mainUrl: |-
+    https:\/\/welearn\.k8s\.lp-i\.xyz
+
+rateLimiting:
+  enabled: true