sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
984 commits 1 branch 0 tags 1.5 MiB
Commit graph

984 commits

This branch
This branch
All branches
Author SHA1 Message Date
sirius0xdev
28d475304c
Merge pull request #139 from sirius0xdev/fix/t_jwt-secret-key-wireup 
fix: add JWT_SECRET_KEY to execute-service deployment
 2026-05-24 21:27:36 -04:00
Hermes Agent
cbb0a20280 fix: add JWT_SECRET_KEY to execute-service deployment via SOPS-encrypted secret 
- Create execute-service-secret (SOPS encrypted) with JWT_SECRET_KEY
- Wire JWT_SECRET_KEY env var in execute-service deployment
- Fixes CrashLoopBack caused by missing JWT_SECRET_KEY validation error
 2026-05-25 01:24:17 +00:00
sirius0xdev
57ade49cb6
Merge pull request #138 from sirius0xdev/fix/t_3d94b392-cnpg-match-live-state 
fix: match pg-cluster manifest to live CNPG state, keep memory superuser
 2026-05-24 21:12:10 -04:00
Hermes Agent
27b7334dfb fix: match pg-cluster manifest to live CNPG cluster state 
- Remove imageName (was never applied, live cluster uses default CNPG image)
- Remove maintenance_work_mem (live cluster has no custom parameters)
- Set postgresql: {} to match live state
- Keep memory role superuser: true (the only needed change)

Fixes CNPG admission webhook: 'Can't change image name and configuration at the same time'
 2026-05-25 01:11:27 +00:00
sirius0xdev
126978a2bc
Merge pull request #137 from sirius0xdev/fix/t_3d94b392-rag-db-sql-field 
fix: remove unsupported sql field from agent-memory-rag Database
 2026-05-24 21:08:36 -04:00
Hermes Agent
9f60ca894d fix: remove unsupported sql field from agent-memory-rag Database 
CNPG version on cluster does not support .spec.sql on Database CR.
The rag-init-job.yaml already handles RAG schema initialization separately.

Unblocks Flux dry-run for agent-memory-rag.
 2026-05-25 01:08:12 +00:00
sirius0xdev
aa41f5995f
Merge pull request #136 from sirius0xdev/fix/t_3d94b392-cnpg-memory-superuser 
fix: remove unsupported CNPG fields, keep memory superuser
 2026-05-24 21:02:20 -04:00
Hermes Agent
9754c2aed2 fix: remove unsupported CNPG fields, keep memory superuser 
- Remove sharedPreloadLibraries and allowedExtensions (not supported by installed CNPG version)
- Keep memory role superuser: true (from PR #135) — sufficient since custom pgvector image already bundles the extension
- Unblocks dry-run validation on hermes-pgdb cluster
 2026-05-25 01:01:52 +00:00
sirius0xdev
ead9cff2d3
Merge pull request #134 from sirius0xdev/backend/t_6977ed0c-fix-execute-db-config 
fix: align execute-service DB config with EXECUTE_ env prefix
 2026-05-24 20:59:27 -04:00
sirius0xdev
9731719564
Merge pull request #135 from sirius0xdev/fix/t_3d94b392-cnpg-allowed-pgvector 
fix: enable pgvector for mem0 plugin
 2026-05-24 20:54:15 -04:00
sirius0xdev
8ccd21500e fix secrets 2026-05-25 00:49:20 +00:00
Hermes Agent
9ca7f7bd7a fix: enable pgvector for mem0 plugin 
- Add allowedExtensions: ['*'] so roles can CREATE EXTENSION
- Grant superuser to 'memory' role (was createdb/createrole, insufficient)
- Needed for mem0 plugin pgvector backend on agent_memory DB

Unblocks kanban task t_3d94b392
 2026-05-25 00:36:04 +00:00
Hermes Agent
a2644b39c7 fix: rename K8s env vars to EXECUTE_ prefix for execute-service 
- ConfigMap keys: DB_HOST -> EXECUTE_DB_HOST, DB_PORT -> EXECUTE_DB_PORT, etc.
- Deployment secrets: DB_USER -> EXECUTE_DB_USER, DB_PASSWORD -> EXECUTE_DB_PASSWORD
- Helm configmap: add EXECUTE_DB_* keys alongside legacy POSTGRES_* keys
- Base deployment: add EXECUTE_DB_USER/PASSWORD from secrets
 2026-05-24 23:57:04 +00:00
sirius0xdev
ad37645d7d
Merge pull request #129 from sirius0xdev/backend/t_5f60938d-memory-user-privs 
Grant CREATEDB and CREATEROLE to memory role on hermes-pgdb
 2026-05-24 18:25:52 -04:00
Hermes Agent
c04823d416 Grant CREATEDB and CREATEROLE to memory role on hermes-pgdb 
The memory user needs CREATEDB and CREATEROLE privileges to install
the pgvector extension on the agent_memory database.
 2026-05-24 22:14:49 +00:00
sirius0xdev
8bc3738a3f
Merge pull request #127 from sirius0xdev/feat/add-trading-dashboard-db-to-siriusdevops-pgdb 
Feat/add trading dashboard db to siriusdevops pgdb
 2026-05-24 16:56:27 -04:00
sirius0xdev
9f9bdba2b7
Merge pull request #128 from sirius0xdev/backend/t_438b663e-pgvector-rag-kb 
feat(customer1): add pgvector RAG knowledge base with embedding service
 2026-05-24 16:56:06 -04:00
Hermes Agent
9723674d9e feat(customer1): add embedding service kustomization, Service manifest, and staging reference 2026-05-24 20:33:50 +00:00
Hermes Agent
4df7450461 feat(customer1): add pgvector RAG knowledge base with embedding service 
- Custom PostgreSQL 15.2 image with pgvector 0.8.0 extension
- Updated pg-cluster-hermes.yaml: custom image, sharedPreloadLibraries, maintenance_work_mem
- RAG schema: documents table with vector(768) embeddings + HNSW index
- RAG init job: ConfigMap + Job to apply schema to agent_memory db
- Embedding service: FastAPI with nomic-embed-text-v1.5
  - OpenAI-compatible /v1/embeddings endpoint
  - Deployment (1 replica, 2Gi-4Gi memory) + Service manifests
- Updated kustomization.yaml to include new resources
 2026-05-24 20:31:59 +00:00
Hermes Agent
57e41178c3 feat(customer1): add trading_dashboard database to siriusdevops-pgdb CNPG cluster 
- Add trading_dashboard role + Database CR on siriusdevops-pgdb
- Create SOPS-encrypted credentials secret (template)
- Update trade-dashboard to use the new dedicated DB
  - New host: siriusdevops-pgdb-rw
  - New database: trading_dashboard
  - New credentials secret
 2026-05-24 20:02:20 +00:00
sirius0xdev
5bf0601e8d
Update rtx6000-vllm.yaml 2026-05-24 15:58:35 -04:00
sirius0xdev
8aeaf2100f
Update kustomization.yaml 2026-05-24 15:55:56 -04:00
sirius0xdev
f6040befbd
Update rtx6000-vllm.yaml 2026-05-24 15:55:27 -04:00
sirius0xdev
2b9630d8dc
Update rtx6000-vllm.yaml 2026-05-24 15:52:52 -04:00
sirius0xdev
b536367aea
Merge pull request #125 from sirius0xdev/fix/data-service-redis-env 
fix(data-service): inject REDIS_URL from ConfigMap
 2026-05-24 14:31:02 -04:00
sirius0xdev
6d288a89e2 turn off vllm 2026-05-24 07:19:43 +00:00
sirius0xdev
a17e274d80 disable a100 2026-05-24 05:47:23 +00:00
sirius0xdev
d9ed1c0eb3 a100 deployment tweaks 2026-05-24 05:03:12 +00:00
Hermes Agent
da8fe22f6e feat(devops): add Solana quant bot K8s/Helm, CI/CD, observability, and funding 
- Add solana-quant-bot deployment + ClusterIP service templates
- Add solana-rpc ExternalName service for Helius/QuickNode
- Add Alembic migration init job template
- Update values.yaml: solana-rpc, bot config, new Kafka topics, observability
- Update configmap with Solana RPC endpoint via internal DNS
- Update network policies: bot ingress/egress, postgres/redis/kafka access
- Update CI/CD workflow: build/push/deploy solana-quant-bot service
- Add Prometheus ServiceMonitor, PrometheusRules (alerts)
- Add Grafana dashboard ConfigMap (trades, latency, balance, P&L)
- Add initial funding script with dry-run and verification modes
 2026-05-24 04:46:58 +00:00
sirius0xdev
99a864171b
Update kustomization.yaml 2026-05-23 20:36:41 -04:00
Hermes Agent
1d2d016eda fix(data-service): inject REDIS_URL from ConfigMap 
- Add REDIS_URL env var using variable expansion from the existing
  trading-data-service-config ConfigMap (REDIS_HOST + REDIS_PORT).
- This resolves the 'connecting to localhost:6379' crash on startup.
- Matches the actual infrastructure configuration in customer1.
 2026-05-23 18:34:51 +00:00
sirius0xdev
53ae85910d
Update kustomization.yaml 2026-05-23 01:59:50 -04:00
sirius0xdev
d68eb72833
Merge pull request #124 from sirius0xdev/fix/osint-dashboard-manifest-audit 
Audit: OSINT Dashboard Helm chart - security, resilience and reliability fixes
 2026-05-23 01:57:45 -04:00
sirius0xdev
ac60dc5a51 Fix NATS URL service name mismatch and split combined ConfigMap+StatefulSet 
- F8: Correct NATS_URLS, REDIS_URL, MINIO_ENDPOINT to use actual service names
  (nats, redis-master, minio) instead of fullname-prefixed names that don't exist
- F9: Split combined ConfigMap+StatefulSet in nats/statefulset.yaml into separate
  configmap.yaml and statefulset.yaml files for maintainability
 2026-05-23 05:12:24 +00:00
sirius0xdev
b3fdb91e13
Update rtx6000-vllm.yaml 2026-05-23 00:47:34 -04:00
sirius0xdev
54f2f42710 fix(osint-dashboard): fix critical manifest issues found during audit 
- Fix PostgreSQL topologySpreadConstraints label selector (cnpg.io/cluster)
- Fix Ingress HTTPRoutes: route API and WS traffic to correct backends
- Fix API NetworkPolicy port mismatch (4000 -> 8000)
- Fix MinIO bucket index syntax (_0 -> 0) in ConfigMap
- Add postgresql.port and postgresql.database to values.yaml
- Add container-level securityContext to API deployment
- Restrict monitoring NetworkPolicy ingress to monitoring namespace
- Enable readOnlyRootFilesystem for MinIO container
- Add activeDeadlineSeconds (3600s) to all 4 CronJobs
 2026-05-23 04:38:51 +00:00
sirius0xdev
87c22e71a4
Update rtx6000-vllm.yaml 2026-05-22 23:45:57 -04:00
sirius0xdev
fa6dd3c8a6
Update rtx6000-vllm.yaml 2026-05-22 23:39:27 -04:00
sirius0xdev
bfd9bbc3b6
Delete tailscale-0auth.yaml 2026-05-22 23:29:47 -04:00
sirius0xdev
b5f80fff50
Update kustomization.yaml 2026-05-22 23:27:46 -04:00
sirius0xdev
54267b0818
Update rtx6000-vllm.yaml 2026-05-22 23:27:18 -04:00
sirius0xdev
6df297086c
Update rtx6000-vllm.yaml 2026-05-22 13:56:53 -04:00
sirius0xdev
3c542b2d41
Update rtx6000-vllm.yaml 2026-05-22 13:54:20 -04:00
sirius0xdev
56cb32fa5a
Update kustomization.yaml 2026-05-22 07:02:03 -04:00
sirius0xdev
25fd3bf064 clean up 2026-05-22 03:13:21 +00:00
sirius0xdev
cc2074a4cb change hermes image 2026-05-22 03:09:59 +00:00
sirius0xdev
f3c2e4991b change hermes image 2026-05-22 03:06:36 +00:00
sirius0xdev
c76675335d switch hermes image to main 2026-05-22 02:33:54 +00:00
sirius0xdev
75cea5abb7 fix secret issue 2026-05-22 02:11:22 +00:00
sirius0xdev
84e85d1432
Merge pull request #123 from sirius0xdev/refactor/move-trade-dashboard 
refactor: remove trade-dashboard app code and rays-new-deployment.yaml
 2026-05-21 21:45:26 -04:00