From dc1afb147273a8b4a6f4006b3ac8f216cfe5f957 Mon Sep 17 00:00:00 2001 From: sirius0xdev Date: Sat, 25 Apr 2026 21:02:14 +0000 Subject: [PATCH] activate hermes agent --- .../customer1/hermes-agent/deployment.yaml | 18 +++++++++++---- .../customer1/hermes-agent/hermes-secret.yaml | 23 +++++++++++++++++++ .../customer1/hermes-agent/kustomization.yaml | 1 + apps/base/customer1/kustomization.yaml | 2 +- apps/base/customer1/openclaw/xai_apikey.yaml | 23 ------------------- 5 files changed, 39 insertions(+), 28 deletions(-) create mode 100644 apps/base/customer1/hermes-agent/hermes-secret.yaml delete mode 100644 apps/base/customer1/openclaw/xai_apikey.yaml diff --git a/apps/base/customer1/hermes-agent/deployment.yaml b/apps/base/customer1/hermes-agent/deployment.yaml index b03f6ef..b073ff1 100644 --- a/apps/base/customer1/hermes-agent/deployment.yaml +++ b/apps/base/customer1/hermes-agent/deployment.yaml @@ -30,13 +30,23 @@ spec: # === Telegram Configuration (polling only - no public exposure) === - name: TELEGRAM_BOT_TOKEN - value: "YOUR_TELEGRAM_BOT_TOKEN_HERE" # ← from @BotFather + valueFrom: + secretKeyRef: + name: hermes-secrets + key: TELE_BOT_TOKEN + - name: XAI_API_KEY + valuesFrom: + secretKeyRef: + name: xai-apikey + key: XAI_API_KEY + - name: TELEGRAM_ALLOWED_USERS - value: "YOUR_TELEGRAM_USER_ID_HERE" # ← numeric ID from @userinfobot + value: "7528130947" # === Local vLLM (OpenAI-compatible) === - name: OPENAI_BASE_URL - value: "http://vllm-service.customer1.svc.cluster.local:8000/v1" # ← adjust if your service name differs + value: "http://openclaw-brain-service.customer1.svc.cluster.local:8000/v1" # ← adjust if your service name differs + - name: OPENAI_API_KEY value: "dummy" # vLLM ignores this @@ -61,4 +71,4 @@ spec: - ReadWriteOnce resources: requests: - storage: 5Gi \ No newline at end of file + storage: 5Gi diff --git a/apps/base/customer1/hermes-agent/hermes-secret.yaml b/apps/base/customer1/hermes-agent/hermes-secret.yaml new file mode 100644 index 0000000..03146bc --- /dev/null +++ b/apps/base/customer1/hermes-agent/hermes-secret.yaml @@ -0,0 +1,23 @@ +apiVersion: v1 +data: + TELEGRAM_BOT_TOKEN: ENC[AES256_GCM,data:iJ5SoVIGSjdfXWZgV4iXK0WN7vaR/781X9FQbHy6R3ya6WZej2B+qXBCAlGwUOCxZxFGLuoUAbhi4sifk3JVNg==,iv:eev538DP17fSb7Xg5rCfnpnwQau8aiLkI5I9bpwpBOc=,tag:Jkuti5vmvCrnAMzJ4LX99A==,type:str] +kind: Secret +metadata: + creationTimestamp: null + name: hermes-secrets + namespace: customer1 +sops: + age: + - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7 + enc: | + -----BEGIN AGE ENCRYPTED FILE----- + YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ODN5ZkdDTzVoM1BaTjNH + Ty9DcitiZE9VYnBZRGN1Vk1HMzNDa0pydGhJClRpUU9ObFNvK3lYQUtWUmNzd0U2 + MGwvbzJVOGdQZ01ITlRqM041RitDMWsKLS0tIDI2N3MyaFZzRUJrMjB1bUFPb3NW + QndZS2FlRFVCeHRBZ2pEeXBQMWNLclEKwzpXjr8A6mS0RuEQJmx+NThNhE7NH6hB + mkTtsibO/kNki5Pcx8EjLQ+BHmLeJoUYtPJAJalErKMqaUt2BsaEfA== + -----END AGE ENCRYPTED FILE----- + lastmodified: "2026-04-25T21:00:34Z" + mac: ENC[AES256_GCM,data:cQ3tu7qEswvwwxklwuwfEpaDzspQNZkWqpg9aamIBMW2DaJ3gOM2d/N7lrnQjUvCWS6iYin+7VDNhNyYrSbh6ZOseK8Fr9cvfAxNOUpNd6hd951J2sCDORJxaxuqQPN3fuGG7JcKMHWuIKSAcWN5XnUb2Gn8Z1sW3k6U6pBvl88=,iv:3Ufa9NNRPJxLGfCISCsGIU6qDongpBHEcSQ/1l9oICg=,tag:2EKDkToBY3AHeG/e6HGMVw==,type:str] + encrypted_regex: ^(data|stringData)$ + version: 3.11.0 diff --git a/apps/base/customer1/hermes-agent/kustomization.yaml b/apps/base/customer1/hermes-agent/kustomization.yaml index 9c2d28b..41dc187 100644 --- a/apps/base/customer1/hermes-agent/kustomization.yaml +++ b/apps/base/customer1/hermes-agent/kustomization.yaml @@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - deployment.yaml + - hermes-secret.yaml diff --git a/apps/base/customer1/kustomization.yaml b/apps/base/customer1/kustomization.yaml index 93503fa..ae832cc 100644 --- a/apps/base/customer1/kustomization.yaml +++ b/apps/base/customer1/kustomization.yaml @@ -13,4 +13,4 @@ resources: - customer1-db-credentials.yaml - apigateway.yaml - backup-cronjob.yaml - #- hermes-agent + - hermes-agent diff --git a/apps/base/customer1/openclaw/xai_apikey.yaml b/apps/base/customer1/openclaw/xai_apikey.yaml deleted file mode 100644 index 9350cc5..0000000 --- a/apps/base/customer1/openclaw/xai_apikey.yaml +++ /dev/null @@ -1,23 +0,0 @@ -apiVersion: v1 -data: - XAI_API_KEY: ENC[AES256_GCM,data:fXDGp1ccVUP1KxGGsZGPo9YnHLf2dmbjQy/a5ZHqAIgSTlmcvJUlWA/t4GGmv8XGdbPDT39pFCtMvqMc+66cNwRqsarh05MnXrK1dIDs/LOBZ0YigVAaz1PfVUFCYgXNVL8EuSSOoSIgScNwgjyLMA==,iv:BVxO61qfOHHdHI3e3J8s1kYrgiEfBvgJtIykdQA1oak=,tag:OXGB7Qc2VIZzMUd1yGi7Uw==,type:str] -kind: Secret -metadata: - creationTimestamp: null - name: xai_apikey - namespace: customer1 -sops: - age: - - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7 - enc: | - -----BEGIN AGE ENCRYPTED FILE----- - YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtY2pmdGZ5UmpXNkpaQnEr - VXpYblVmeVQ3ZVNnZUdoQmJ3bFMxdkd0d0RRCmdjMXVEUXVqc3dwWk51b3JvVnU1 - dXRjOFJSVHd5UmVjd3BHUk1ka0lXeVUKLS0tIHYzeDBoRnkxSzRuVUNJcXJjQnNj - ZU1ydkQ0S3FhbmdHbEUvaWJ6VzZiWmcKgqjgDypgT2gOW7PTBE3mXf2IcWsFXLO/ - SAMcaVEMIwMaG6bI/Od7eq9UBMrJNB3xqUZVHJzRYYupVWTne7y1AQ== - -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-04-21T22:41:25Z" - mac: ENC[AES256_GCM,data:nHjacMjf0vjO+zEiI+RwFk4egw0EIgb+w9OgCvGvaBZhD9ay3aEWD+6NlVyr4+iAm/JPuRLXVV3KTGcGXkEmzD93nbAZQNTo7+0jZgzraCJrsbpRF5SOb7HjIG9l5WepBICJ7vSuZ6CpseV3tU+4E8Ip0CXH/RP8MfSCzUTX0Os=,iv:tKLtwGEYxOjXxo4KIjo9EB96OAY69jH1502ng5LD4AQ=,tag:cCKng6WR0+u8yt1sbk85Rw==,type:str] - encrypted_regex: ^(data|stringData)$ - version: 3.11.0