sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
gcloud-lab/apps/base/customer1/hermes-db/memory-db-credentials.yaml

25 lines
1.4 KiB
YAML
Raw Permalink Normal View History

fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
apiVersion: v1
kind: Secret
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
metadata:
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
name: memory-db-credentials
namespace: customer1
type: Opaque
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
stringData:
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
username: ENC[AES256_GCM,data:aBZzGnqc,iv:V27qpmj00bYIERMxBGZ72bHkN6rIkdrSOzzDRj21kpA=,tag:7mCcAeOe+Gst2Fw6dZt2dw==,type:str]
password: ENC[AES256_GCM,data:B02Xw4UUoGvjLFd2AYYx6kVHeQ2q+K40NHgNguna5BU=,iv:+Cli7nB2j5DC6zI0uXfFYUkBsz2XRMwm3y81WsuRzCA=,tag:ziIEeiW+rkkkAkDnWmCb7Q==,type:str]
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
sops:
age:
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
- recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArZ09BMHFWRGNJMGJpdGpL
ZGZGL0tvWWUwVXRWNlBpUU9QUHZEcUF5emdrCkh5RmFTeWpMY2UyalVwZFNLVXhk
MW4rS202MktiekxKZzZBbnpwVlowRXcKLS0tIDlpK2VycDRxMHdPeExycmNMZXh6
YTVBaVFobTZieStEN3pUVy9ZVU5iKzAKxozE9s5lFIuvnh/R0ySDkLoYQ8lV62KT
hVkeBYdK5u9gGakmw+okUVNKS2Hh+7Mio6OIvM+jLrpTgsd8NzabWg==
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
-----END AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
lastmodified: "2026-05-02T22:14:04Z"
mac: ENC[AES256_GCM,data:yKiV+s5d5O/XT+J92ShQR0rqnSc+VnmH3BnvfNdkOqfMjZsYQAWLtEmGaOKUCCkWwvE1J4B5DhmMAuPhb5RVekirZkQyaXqPO7MA2riRvFQD24MZGtAeGHRRiLMH4L/UMEAm3YqtSKOj5tfjWica4pXQDsmLS0b/qNq+kXTo/aI=,iv:YuG+qxuwYOflVzW+hj8frwhpD833+xAMx6aki0dG8Qw=,tag:ExMYr24Xqztp8atid2eCBg==,type:str]
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
encrypted_regex: ^(data|stringData)$
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
version: 3.12.2
Reference in a new issue Copy permalink