sirius0xdev
b3fdb91e13
Update rtx6000-vllm.yaml
2026-05-23 00:47:34 -04:00
sirius0xdev
54f2f42710
fix(osint-dashboard): fix critical manifest issues found during audit
...
- Fix PostgreSQL topologySpreadConstraints label selector (cnpg.io/cluster)
- Fix Ingress HTTPRoutes: route API and WS traffic to correct backends
- Fix API NetworkPolicy port mismatch (4000 -> 8000)
- Fix MinIO bucket index syntax (_0 -> 0) in ConfigMap
- Add postgresql.port and postgresql.database to values.yaml
- Add container-level securityContext to API deployment
- Restrict monitoring NetworkPolicy ingress to monitoring namespace
- Enable readOnlyRootFilesystem for MinIO container
- Add activeDeadlineSeconds (3600s) to all 4 CronJobs
2026-05-23 04:38:51 +00:00
sirius0xdev
87c22e71a4
Update rtx6000-vllm.yaml
2026-05-22 23:45:57 -04:00
sirius0xdev
fa6dd3c8a6
Update rtx6000-vllm.yaml
2026-05-22 23:39:27 -04:00
sirius0xdev
bfd9bbc3b6
Delete tailscale-0auth.yaml
2026-05-22 23:29:47 -04:00
sirius0xdev
b5f80fff50
Update kustomization.yaml
2026-05-22 23:27:46 -04:00
sirius0xdev
54267b0818
Update rtx6000-vllm.yaml
2026-05-22 23:27:18 -04:00
sirius0xdev
6df297086c
Update rtx6000-vllm.yaml
2026-05-22 13:56:53 -04:00
sirius0xdev
3c542b2d41
Update rtx6000-vllm.yaml
2026-05-22 13:54:20 -04:00
sirius0xdev
56cb32fa5a
Update kustomization.yaml
2026-05-22 07:02:03 -04:00
sirius0xdev
25fd3bf064
clean up
2026-05-22 03:13:21 +00:00
sirius0xdev
cc2074a4cb
change hermes image
2026-05-22 03:09:59 +00:00
sirius0xdev
f3c2e4991b
change hermes image
2026-05-22 03:06:36 +00:00
sirius0xdev
c76675335d
switch hermes image to main
2026-05-22 02:33:54 +00:00
sirius0xdev
75cea5abb7
fix secret issue
2026-05-22 02:11:22 +00:00
sirius0xdev
84e85d1432
Merge pull request #123 from sirius0xdev/refactor/move-trade-dashboard
...
refactor: remove trade-dashboard app code and rays-new-deployment.yaml
2026-05-21 21:45:26 -04:00
Hermes Agent
d89c1944e6
refactor: remove trade-dashboard app code and rays-new-deployment.yaml
...
- Removed trade-dashboard/ (moved to hermes-projects/trade-dashboard/)
- Removed .github/workflows/trade-dashboard.yml (CI now handled by hermes-projects root workflow)
- Deleted rays-new-deployment.yaml (orphan deployment YAML)
K8s manifests remain in apps/base/customer1/trade-dashboard/.
See hermes-projects PR #8 for the addition side.
2026-05-21 14:18:23 +00:00
sirius0xdev
752d173a07
Merge pull request #121 from sirius0xdev/feat/osint-dashboard-app
...
feat: OSINT Dashboard app + Helm chart integration
2026-05-21 10:18:07 -04:00
Hermes Agent
a433be1195
fix: resolve merge conflict in osint-dashboard values.yaml (keep real API config)
2026-05-21 14:17:52 +00:00
sirius0xdev
b957b3c704
Merge pull request #122 from sirius0xdev/refactor/repo-reorganization-plan
...
docs: repository reorganization migration plan
2026-05-21 10:15:06 -04:00
Hermes Agent
3a9a0476d2
docs: add repository reorganization migration plan
...
Audit completed identifying all misplaced items in gcloud-lab.
Plan proposes 6 PRs to move app code to hermes-projects and keep
only K8s manifests and infra config in gcloud-lab.
2026-05-21 13:52:21 +00:00
93754dcdf6
feat: OSINT Dashboard app + Helm templates
...
Add FastAPI backend for real-time geospatial OSINT dashboard:
- Full-text search via PostgreSQL tsvector (parameterized queries)
- Entity tracking, alert management, sentiment analytics
- Data ingestion: RSS feeds, GDELT, USGS earthquakes, social signals
- NATS JetStream consumer for event ingestion
- MinIO document storage integration
- Redis caching layer
- Alembic migrations with PostGIS + TimescaleDB extensions
- Single-page dashboard UI with live polling
- OpenTelemetry distributed tracing
Helm chart with infrastructure:
- CNPG PostgreSQL cluster (PostGIS + TimescaleDB)
- NATS JetStream with persistent streams
- MinIO distributed object storage (3 buckets)
- Redis Sentinel (1 primary + 2 replicas)
- NGINX Ingress with TLS and WebSocket support
- Prometheus + Grafana + Alertmanager monitoring stack
- Network policies with default deny
- ConfigMap, CronJob, Deployment, Service templates
Fixes applied during review:
- SQL injection in search endpoint (parameterized :q binding)
- Dockerfile PYTHONPATH mismatch (/app/app -> /app)
- Hardcoded DB credentials in alembic.ini
- RSS timestamp parsing (feedparser published_parsed -> parsedate_to_datetime)
- Removed dead PGVECTOR import
2026-05-21 13:39:52 +00:00
sirius0xdev
4a01c457ab
Update kustomization.yaml
2026-05-21 09:36:11 -04:00
8255467313
feat: add OSINT Dashboard Kubernetes infrastructure
...
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
2026-05-21 13:25:15 +00:00
sirius0xdev
67e45a4464
Merge pull request #120 from sirius0xdev/feat/trading-platform-manifests
...
feat: add trading-platform K8s manifests for customer1
2026-05-21 09:24:59 -04:00
sirius0xdev
0f1c6bbdf5
Update kustomization.yaml
2026-05-21 09:00:00 -04:00
b0748538c0
feat: add trading-platform K8s manifests for customer1
...
- Scaffold trading-platform under apps/base/customer1/trading-platform/
- Add 4 microservice deployments: data-service, execute-service, news-service, dashboard
- Add ConfigMaps with DB/Kafka/Redis connection configs
- Add HTTPRoutes via Gateway API (external-http-gateway)
- Add NetworkPolicies for inter-service and DB/Kafka/Redis egress
- Add SOPS-encrypted secrets (age key)
- Add Kafka (KRaft) and Redis infrastructure to hermes-db/
- Update root and staging kustomizations
All containers: non-root, readOnlyRootFilesystem, resource limits, health probes
Images: ghcr.io/sirius0xdev/trading-{service}:latest
2026-05-21 04:17:05 +00:00
5e477492e6
feat: add OSINT Dashboard Kubernetes infrastructure
...
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
2026-05-21 04:15:55 +00:00
sirius0xdev
a06a105f31
Update kustomization.yaml
2026-05-20 22:18:37 -04:00
sirius0xdev
1a3804294d
Update kustomization.yaml
2026-05-20 22:12:07 -04:00
sirius0xdev
8fa640725c
Update kustomization.yaml
2026-05-20 00:46:46 -04:00
sirius0xdev
4d8311a732
Update kustomization.yaml
2026-05-19 08:11:46 -04:00
sirius0xdev
0d5f095885
Update kustomization.yaml
2026-05-18 21:54:53 -04:00
sirius0xdev
d1dd97f945
Merge pull request #117 from sirius0xdev/feat/trading-platform-k8s
...
feat: add trading platform K8s deployment infrastructure
2026-05-17 19:05:51 -04:00
d079d1239f
feat: add trading platform K8s deployment infrastructure
...
- Add Helm chart with 19 templates (Deployments, Services, Ingress,
ConfigMaps, Secrets, NetworkPolicy, cert-manager)
- Add Dockerfiles for 4 microservices (dashboard, data-service,
execute-service, news-service)
- Add CI/CD workflows (build-test, build-push, deploy)
- Add raw K8s manifests, per-service Helm charts, and deploy scripts
- Add SOPS-encrypted secrets template and config
- Configure deployment to customer1 namespace
- Include infrastructure components: PostgreSQL, Redis, Kafka
2026-05-17 22:15:00 +00:00
sirius0xdev
af4cb3d321
Update rtx6000-vllm.yaml
2026-05-17 16:42:06 -04:00
sirius0xdev
4ba4f08299
Update kustomization.yaml
2026-05-17 14:42:59 -04:00
sirius0xdev
c987ad6132
Update kustomization.yaml
2026-05-17 03:30:39 -04:00
sirius0xdev
1a6dd51076
Update rtx6000-vllm.yaml
2026-05-16 23:11:34 -04:00
sirius0xdev
aa1f5be323
Update rtx6000-vllm.yaml
2026-05-16 23:10:18 -04:00
sirius0xdev
18aa779232
Update rtx6000-vllm.yaml
2026-05-16 23:01:39 -04:00
sirius0xdev
0899aa1b97
Update rtx6000-vllm.yaml
2026-05-16 22:59:03 -04:00
sirius0xdev
3836578bb8
Update rtx6000-vllm.yaml
2026-05-16 22:58:38 -04:00
sirius0xdev
728a2dfe77
Update rtx6000-vllm.yaml
2026-05-16 22:57:54 -04:00
sirius0xdev
e4ce253e80
Update rtx6000-vllm.yaml
2026-05-16 22:35:02 -04:00
sirius0xdev
c12b31a47a
Update kustomization.yaml
2026-05-16 13:31:58 -04:00
sirius0xdev
da0ad4b7b9
Merge pull request #116 from sirius0xdev/feat/siriusdevops-site-deploy
...
feat: deploy siriusdevops.com main site to GKE
2026-05-15 11:02:01 -04:00
65e174a86d
feat: deploy siriusdevops.com main site to GKE
...
Add siriusdevops-site manifests:
- Deployment + ClusterIP Service (nginx:alpine, port 80)
- HTTPRoute for siriusdevops.com via external-http-gateway
- Kustomization overlay wiring
2026-05-15 14:56:10 +00:00
sirius0xdev
fe8d43b33a
Merge pull request #115 from sirius0xdev/docs/readme-may2026-rewrite
...
docs: A100 → RTX 6000 Pro, remove OpenClaw references
2026-05-15 10:31:39 -04:00
df5507747e
docs: A100 → RTX 6000 Pro, remove OpenClaw references
2026-05-15 14:25:36 +00:00
