Customer: European Space Agency (ESA)

Programme: Copernicus

Supply Chain: ESA > AIRBUS DS > CS Group SPACE

Context

ESA, Airbus DS, Werum, CS Group France

CS Group responsabilities for AUXIP of Sentinel-1 hosting the Mission Planning and SRA subsystems are as follows:

• Development of data circulation services; Infrastructure; Security ; Maintenance

The features are as follows:

• The infrastructure layer (Cloud provider, VMs)
• The platform layer (Kubernetes/Docker)
• The security (SIEM, agents, IAM, reverse proxy)
• The monitoring (log&trace collection, ElasticSearch, Kibana/Grafana, Prometheus)
• The basic services (databases, Kafka queues)
• The processing elements (transfer from FS to Object Storage, ingestion clients, PRIP, zipping, …)
• Maintenance in Operational Condition ; 3 levels of SLA : Blocking (2d) / Urgent (5d) / Routine (no SLA)

Project implementation

The project objectives are as follows:

• Secured ingestion of Auxiliary files
• File Transformation for S1PDGS processing
• Publication of files with ingestor interface
• File transfer from external source to external target (Sentinel 1 routing)
• Hosting Mission Planning and SRA applications

The processes for carrying out the project are:

• Agile, Continuous integration, DevOps, DevSecOps, GitFlow, Licence compliance

Technical characteristics

The solution key points are as follows:

• Massive reuse of S1PDGs architecture
• Event-Driven architecture & micro-service architecture
• Independent deployment solution of the supplier
• Hardené Kubernetes platform
• Management of access and identities
• Indicator management (PI/KPI)
• High performance logs & audit
• Siem

The main technologies used in this project are:

Domain	Technology(ies)
Hardware environment(s)	Cloud, K8S
Operating System(s)	Linux CentOS
Programming language(s)	Java, Go
Interoperability (protocols, format, APIs)	Maven, Docker file, K8s yaml
Production software (IDE, DEVOPS etc.)	Safescale, VS Code, Jenkins, Helm, Kubernetes, SonarQube; Harbor, Jira, Confluence
Main COTS library(ies)	Blackbox Exporter, Calico, ClamAV, Curator, Docker, ElasticSearch, Fluentbit, Fluentd, FreeIPA, Grafana, Graylog, Harbor, Kafka, Keycloak, Kibana, Kong, MongoDB, OpenVAS, PostgreSQL, Prometheus, Rclone, Spring Boot, Stash, Suricata, Thanos, Wazuh