sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
gcloud-lab/apps/base/customer1/hermes-db/hermes-db-credentials.yaml

25 lines
1.4 KiB
YAML
Raw Normal View History

fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
apiVersion: v1
kind: Secret
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
metadata:
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
name: hermes-db-credentials
namespace: customer1
type: Opaque
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
stringData:
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
username: ENC[AES256_GCM,data:4QolDU9x,iv:hDtGbpDnzwEMTFsb0AN4Mj0DYJ7gJJGVtG87RZYyBT4=,tag:Po0IES1AfnIoq3Bl2TWnsA==,type:str]
password: ENC[AES256_GCM,data:0uMXswkEF/RlH5PLFfOrew7/n9URpf5YM7GMnoEVO0k=,iv:9LasAdfoBbTeEXCQmFjGjNnB5UY4JxX4QM7V4YY0GiU=,tag:L3Kb9Z366jdBe3p1a3hdzQ==,type:str]
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
sops:
age:
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
- recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBZWXhlYmxJMnd6THgrbE5Z
Si9wWkI2bklvTWZSR1lodWpVTTIwV3dNODFnCnhKRSsveFRMbFBvZGMrM00wd2hy
UTBHQTZERUhGWmt0aVdlWmZDYVNOWjAKLS0tIGI3Z0lFTHN3ZUhYNUxrdzVEb09n
dDFrSzZTdDU0NVU2YUNCK0NqdTdhQUkKL1Pp3OY0S/u1f1KxcXqgtdQ8V466W0On
Lw0FLig3aeAQG+XTGLbC8WYYxPYLznk5vKJlCZPK1A4O42zixiLOSg==
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
-----END AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
lastmodified: "2026-05-02T22:14:04Z"
mac: ENC[AES256_GCM,data:kkIkkVXXUvEvnky8EIqWdOGw10pAShuwJ/B1g0HW49iUchP8sEDJbP2o7NFQKVcj14Rpo7FfpiIcO12yh/WngAUo2o0kXYQsJNnMqpnePyHePwWWcTaiXE/8pqLuL0bTQ3MWK/Xp5CH/tvf22rS9ntuNTBDmhGqQDm+qqNyw/sA=,iv:yYxAfWg/b4WtdnP78AJDwxRWAonvSVPRtxqQrlytIwA=,tag:bNFwg3cxD+ZrZGQT8coePA==,type:str]
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
encrypted_regex: ^(data|stringData)$
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
version: 3.12.2
Reference in a new issue Copy permalink