activate hermes agent

apps/base/customer1/hermes-agent/deployment.yaml

@@ -30,13 +30,23 @@ spec:
 
           # === Telegram Configuration (polling only - no public exposure) ===
           - name: TELEGRAM_BOT_TOKEN
-            value: "YOUR_TELEGRAM_BOT_TOKEN_HERE"          # ← from @BotFather
+            valueFrom:
+              secretKeyRef:
+                name: hermes-secrets
+                key: TELE_BOT_TOKEN
+          - name: XAI_API_KEY
+            valuesFrom:
+              secretKeyRef:
+                name: xai-apikey
+                key: XAI_API_KEY 
+                
           - name: TELEGRAM_ALLOWED_USERS
-            value: "YOUR_TELEGRAM_USER_ID_HERE"            # ← numeric ID from @userinfobot
+            value: "7528130947"        
 
           # === Local vLLM (OpenAI-compatible) ===
           - name: OPENAI_BASE_URL
-            value: "http://vllm-service.customer1.svc.cluster.local:8000/v1"   # ← adjust if your service name differs
+            value: "http://openclaw-brain-service.customer1.svc.cluster.local:8000/v1"   # ← adjust if your service name differs
+          
           - name: OPENAI_API_KEY
             value: "dummy"                                 # vLLM ignores this
 

apps/base/customer1/hermes-agent/hermes-secret.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+data:
+    TELEGRAM_BOT_TOKEN: ENC[AES256_GCM,data:iJ5SoVIGSjdfXWZgV4iXK0WN7vaR/781X9FQbHy6R3ya6WZej2B+qXBCAlGwUOCxZxFGLuoUAbhi4sifk3JVNg==,iv:eev538DP17fSb7Xg5rCfnpnwQau8aiLkI5I9bpwpBOc=,tag:Jkuti5vmvCrnAMzJ4LX99A==,type:str]
+kind: Secret
+metadata:
+    creationTimestamp: null
+    name: hermes-secrets
+    namespace: customer1
+sops:
+    age:
+        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB2ODN5ZkdDTzVoM1BaTjNH
+            Ty9DcitiZE9VYnBZRGN1Vk1HMzNDa0pydGhJClRpUU9ObFNvK3lYQUtWUmNzd0U2
+            MGwvbzJVOGdQZ01ITlRqM041RitDMWsKLS0tIDI2N3MyaFZzRUJrMjB1bUFPb3NW
+            QndZS2FlRFVCeHRBZ2pEeXBQMWNLclEKwzpXjr8A6mS0RuEQJmx+NThNhE7NH6hB
+            mkTtsibO/kNki5Pcx8EjLQ+BHmLeJoUYtPJAJalErKMqaUt2BsaEfA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-04-25T21:00:34Z"
+    mac: ENC[AES256_GCM,data:cQ3tu7qEswvwwxklwuwfEpaDzspQNZkWqpg9aamIBMW2DaJ3gOM2d/N7lrnQjUvCWS6iYin+7VDNhNyYrSbh6ZOseK8Fr9cvfAxNOUpNd6hd951J2sCDORJxaxuqQPN3fuGG7JcKMHWuIKSAcWN5XnUb2Gn8Z1sW3k6U6pBvl88=,iv:3Ufa9NNRPJxLGfCISCsGIU6qDongpBHEcSQ/1l9oICg=,tag:2EKDkToBY3AHeG/e6HGMVw==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0

apps/base/customer1/hermes-agent/kustomization.yaml

@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - deployment.yaml
+  - hermes-secret.yaml

apps/base/customer1/kustomization.yaml

@@ -13,4 +13,4 @@ resources:
   - customer1-db-credentials.yaml 
   - apigateway.yaml
   - backup-cronjob.yaml
-  #- hermes-agent
+  - hermes-agent

apps/base/customer1/openclaw/xai_apikey.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-data:
-    XAI_API_KEY: ENC[AES256_GCM,data:fXDGp1ccVUP1KxGGsZGPo9YnHLf2dmbjQy/a5ZHqAIgSTlmcvJUlWA/t4GGmv8XGdbPDT39pFCtMvqMc+66cNwRqsarh05MnXrK1dIDs/LOBZ0YigVAaz1PfVUFCYgXNVL8EuSSOoSIgScNwgjyLMA==,iv:BVxO61qfOHHdHI3e3J8s1kYrgiEfBvgJtIykdQA1oak=,tag:OXGB7Qc2VIZzMUd1yGi7Uw==,type:str]
-kind: Secret
-metadata:
-    creationTimestamp: null
-    name: xai_apikey
-    namespace: customer1
-sops:
-    age:
-        - recipient: age1uuxf066xuuqgvjppxfcmqkwfcufnwp3wcwnl9h20g9k4l8nkw9jsaungf7
-          enc: |
-            -----BEGIN AGE ENCRYPTED FILE-----
-            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtY2pmdGZ5UmpXNkpaQnEr
-            VXpYblVmeVQ3ZVNnZUdoQmJ3bFMxdkd0d0RRCmdjMXVEUXVqc3dwWk51b3JvVnU1
-            dXRjOFJSVHd5UmVjd3BHUk1ka0lXeVUKLS0tIHYzeDBoRnkxSzRuVUNJcXJjQnNj
-            ZU1ydkQ0S3FhbmdHbEUvaWJ6VzZiWmcKgqjgDypgT2gOW7PTBE3mXf2IcWsFXLO/
-            SAMcaVEMIwMaG6bI/Od7eq9UBMrJNB3xqUZVHJzRYYupVWTne7y1AQ==
-            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-04-21T22:41:25Z"
-    mac: ENC[AES256_GCM,data:nHjacMjf0vjO+zEiI+RwFk4egw0EIgb+w9OgCvGvaBZhD9ay3aEWD+6NlVyr4+iAm/JPuRLXVV3KTGcGXkEmzD93nbAZQNTo7+0jZgzraCJrsbpRF5SOb7HjIG9l5WepBICJ7vSuZ6CpseV3tU+4E8Ip0CXH/RP8MfSCzUTX0Os=,iv:tKLtwGEYxOjXxo4KIjo9EB96OAY69jH1502ng5LD4AQ=,tag:cCKng6WR0+u8yt1sbk85Rw==,type:str]
-    encrypted_regex: ^(data|stringData)$
-    version: 3.11.0