sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
gcloud-lab/apps/base/customer1/hermes-db/memory-db-credentials.yaml

25 lines
1.4 KiB
YAML
Raw Normal View History

fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
apiVersion: v1
kind: Secret
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
metadata:
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
name: memory-db-credentials
namespace: customer1
type: Opaque
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
stringData:
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
username: ENC[AES256_GCM,data:qCoYuXNK,iv:cZIJ9IgPWBnfGsNDFIT3T63v+jzxKMrTDcbY4R9ZXDk=,tag:THcqn7xE3UOFmq/YGEj8zg==,type:str]
password: ENC[AES256_GCM,data:S594bfUc+w83/M6eoMuzWaTboTmbBOjq5WEy+ExNzG8=,iv:JGLwfvei/SmMaLUneZ20/Pp8WsnWP+Ih87sTIyllDFA=,tag:VlH+4Wopp2z9J4MTSDYH2g==,type:str]
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
sops:
age:
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
- recipient: age1z674fe9c0whe6g55l9lpm6vssx0l9xyzw5rv42tucwua25gvvg6q42t77v
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBXQU1PbFNMWTMyM2dxUlpp
eTRHbnRXSnk2bDR4VVZycmFUcUVZYVRvUTJnCkFuQURyMTQ0Y0RwUDZNQWpFRFMx
Q0ZHRHdzN2VCeU1vcWx6dzFKT3cwQk0KLS0tIDZYYkxoSGk1RmF5VjJkK09IejJ1
SmR0TGlHOGZad2NNa1grUVNGQnZNUFUKHAJhqYReMS+w5gjQqqHTWafy6etxLpDP
mRujATlpk85g60GeKB7mwWvvX82SpaOZ9GJ+LePjpXwdclIOusofhg==
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
-----END AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
lastmodified: "2026-05-02T22:00:51Z"
mac: ENC[AES256_GCM,data:5EPPuVDZNXYE50rnXQyxajV4Zs0gZX+Lu5Zf5oERLs/TqFEBTQkew3hMMLuMflg3WQME7f9vcOVIYNAXL93rUCt28KHDAxv5WSNyBIZdTuZvfsYK6+we41wjdehvTf4SqsX2KznBVJKIO65ypNUtzrW/rJCj440UwWpgm/B2+/0=,iv:umvqqa7eSVgsbTopdOz0vkJdVPQxa66SFQx9dDxovmg=,tag:SJmrzPoX4gdrdTNEj8qe1g==,type:str]
encrypted_regex: ^(data|stringData)$
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
version: 3.12.2
Reference in a new issue Copy permalink