sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
gcloud-lab/apps/base/customer1/hermes-db/trading-db-credentials.yaml

25 lines
1.4 KiB
YAML
Raw Normal View History

fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
apiVersion: v1
kind: Secret
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
metadata:
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
name: trading-db-credentials
namespace: customer1
type: Opaque
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
stringData:
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
username: ENC[AES256_GCM,data:M3gBIiP+uA==,iv:QhosCv8SfKcGMzy0Ja9+son5okXVtML5l9JUi/c2C9U=,tag:juYKzLFLsDGXSsgaF/BI3g==,type:str]
password: ENC[AES256_GCM,data:9ajk/hBlnzkg2fi/zM0Rzx9MACyMKhtyv3lOERBcR4Y=,iv:voTjlgJVgO8yXirIgbAzg8MqmSxAdmmPPtPpeWYLqwA=,tag:RBBl4xD0NplMqp8y6oS8uw==,type:str]
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
sops:
age:
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
- recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBvZDg2amk0eVZSRUUvNkdO
TTIySjB3QVpwMjlIcWE1dDBEeVBUSDlLbGpNCmVIL3hGeWY4TDJORGk0amZNU1dC
czdwRFM3c2VTcVZUVXZoUUM0R0JNY2MKLS0tIHI3ODhRMjJ6NHhDSjBEbGx4QURj
eVI0d1ZhNStZajU5K2lEVmhNalRrWDgKJStJ5MsUWBF1Ceq1uiTwxu8R8dzFz+SL
MtFisTEwxgu5HoMpj3hxiDIMWi2pflp/iDwksK43BSw9lTHNYyQDWw==
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
-----END AGE ENCRYPTED FILE-----
fix(hermes-db): reencrypt with correct SOPS recipient key Use age1uuxf066x... from .sops.yaml instead of local key that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
lastmodified: "2026-05-02T22:14:04Z"
mac: ENC[AES256_GCM,data:Tkg6KYjxddWMynrLZP26zjP+fp++WtMaPDf79CJie/Kps6PvFWHXDAXAhcS406xOEdj29IgBjrCGJp9PQK7nmI9UXw//p+s201jhG+hFCCG+estOmZyFJL0sHDZlAWx/993swwymDfTX564AfC7dj61MqdCQUz3BISSCjK4Tyd8=,iv:nC9LetZDlQ8SCiFf0MYi7og6qy76+tz7+7v6UM3PJrg=,tag:cWhU1egQAtVYwSZ9vbRi4Q==,type:str]
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace and type fields. Recreated with --encrypted-regex targeting only stringData section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
encrypted_regex: ^(data|stringData)$
feat: add dedicated CNPG cluster for Hermes agent memory and trading data - New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi) - 3 databases: hermes_memory, trading_data, agent_memory - 3 roles with SOPS-encrypted secrets (age encryption) - Daily backups to gs://customer1_db_backup/hermes-backups/ - Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
version: 3.12.2
Reference in a new issue Copy permalink