sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
667 commits 1 branch 0 tags 1.5 MiB
Commit graph

421 commits

Author SHA1 Message Date
sirius0xdev
c5dd91d112 fix docker file and move trade-dashboard 2026-05-03 21:31:25 +00:00
sirius0xdev
12ab52de91 fix dashboards python script 2026-05-03 21:06:36 +00:00
sirius0xdev
105d29de7e fix(trade-dashboard): get DB_USER from secret instead of configmap 2026-05-02 23:35:04 +00:00
sirius0xdev
23c7c707d8 fix(trade-dashboard): fix import errors and alembic migration 
- database.py: remove dead pre-definition of DATABASE_URL with
  undefined db_user/db_pass variables
- models.py: add missing Table import from sqlalchemy
- alembic/env.py: replace deprecated run_async() with asyncio.run()
  (removed in SQLAlchemy 2.0)
- alembic 001_initial: use raw SQL for CREATE TYPE instead of
  op.create_enum() which requires alembic_postgresql_enum

Migration 001_initial successfully applied to trading_data DB.
 2026-05-02 22:44:38 +00:00
sirius0xdev
6599249d65 feat(trade-dashboard): add GitHub Actions CI/CD pipeline 
- Build and push Docker image to ghcr.io on push to master
- Update deployment to pull from ghcr.io instead of GCR
- Tags: commit SHA + latest on default branch
 2026-05-02 22:29:06 +00:00
sirius0xdev
d94e62d77c fix(trade-dashboard): comment out TsProxy until Tailscale operator is installed 2026-05-02 22:21:35 +00:00
sirius0xdev
1497946049 fix(hermes-db): reencrypt with correct SOPS recipient key 
Use age1uuxf066x... from .sops.yaml instead of local key
that the cluster SOPS decryptor cannot read.
 2026-05-02 22:14:09 +00:00
sirius0xdev
58ea111b1d fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ 
Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace
and type fields. Recreated with --encrypted-regex targeting only stringData
section. New random passwords generated for all three roles.
 2026-05-02 22:01:03 +00:00
sirius0xdev
7df60cbeb9 feat: add trade dashboard service (FastAPI + Tailscale) 
- FastAPI app with async SQLAlchemy + Alembic migrations
- API: positions CRUD, PnL summary, trade history, webhook endpoint
- Dark-themed SPA frontend (vanilla HTML/JS)
- K8s: deployment, service, configmap, TsProxy for Tailscale access
- Backed by hermes-pgdb / trading_data database
- Wired into Flux staging pipeline
 2026-05-02 21:47:27 +00:00
sirius0xdev
a3ad07d191 feat: add dedicated CNPG cluster for Hermes agent memory and trading data 
- New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi)
- 3 databases: hermes_memory, trading_data, agent_memory
- 3 roles with SOPS-encrypted secrets (age encryption)
- Daily backups to gs://customer1_db_backup/hermes-backups/
- Wired into Flux pipeline via staging kustomization
 2026-05-02 21:31:41 +00:00
sirius0xdev
891e2cf817
Merge pull request #73 from sirius0xdev/fix/rtx6000-scale-to-zero-with-cooldown 
chore(paaas): update landing deployment to use hermes_workspace CD pipeline image
 2026-04-29 23:21:29 -04:00
sirius0xdev
41fbd1fca1 Update paaas-landing deployment to use new static nginx image from hermes_workspace with updated business plan landing page 2026-04-30 03:02:22 +00:00
sirius0xdev
862c8c0f19
Update deployment.yaml 2026-04-29 12:59:21 -04:00
sirius0xdev
2548bccfc6 fix(hermes-agent): add type: openai to vLLM providers for model listing 
Enables /v1/models endpoint query for custom providers (fixes qwen model not showing under qwen-vllm).

Changes:
- Added `type: openai` to `rtx6000-brain` and `qwen-vllm` providers
- Standardized base_url to full FQDN: \*.customer1.svc.cluster.local
- Added context_length to qwen-vllm provider
- Updated models.qwen-vllm base_url and context_length for consistency
 2026-04-29 16:18:35 +00:00
sirius0xdev
37a4179f96
Update deployment.yaml 2026-04-29 09:22:34 -04:00
sirius0xdev
ec41b38f1a feat: add rtx6000-brain and qwen-vllm custom vLLM providers to Hermes ConfigMap 
- Makes rtx6000-brain selectable in the /model provider picker (preferred name)
- Uses short Kubernetes service names (optimal for same-namespace)
- Keeps existing models: section for CLI compatibility
- Will appear as provider options after ArgoCD/Helm rollout + /restart
 2026-04-29 12:52:00 +00:00
sirius0xdev
8c1c55dd80
Update kustomization.yaml 2026-04-29 08:23:18 -04:00
sirius0xdev
13db3d4a3d
Update kustomization.yaml 2026-04-29 08:22:58 -04:00
sirius0xdev
6989b18f37 feat(hermes-config): add clean 'vllm' provider for the existing rtx6000-brain-service 
- Primary 'vllm' entry for easy /model vllm usage
- Uses model from the rtx6000 deployment
- Kept existing qwen-vllm, rtx6000-vllm, and rtx6000-brain for compatibility
 2026-04-29 05:50:54 +00:00
sirius0xdev
58451ccca5 feat(hermes-config): add rtx6000-brain provider using model from vLLM deployment 
Added rtx6000-brain alongside the existing rtx6000-vllm entry.
Uses the exact model name from rtx6000-vllm Deployment and the correct ClusterIP service endpoint.
 2026-04-29 05:42:31 +00:00
sirius0xdev
9e5eea2cd1 feat(hermes-agent): add hermes-config ConfigMap and mount to deployment 
- hermes-config::ConfigMap with current /opt/data/config.yaml (models incl. vLLM, agent/tool settings)
- deployment.yaml: volume + subPath mountPath=/opt/data/config.yaml (overrides PVC)
- kustomization.yaml: include configmap.yaml

Standardizes Hermes config via K8s ConfigMap for easier management.
 2026-04-29 04:45:18 +00:00
sirius0xdev
bb7dcd5651 fix node selector for 6000pro 2026-04-28 23:16:51 +00:00
sirius0xdev
d309141ea1 fix health check 2026-04-28 04:49:09 +00:00
sirius0xdev
d61f2a2e3b health check for paaas 2026-04-28 04:44:20 +00:00
sirius0xdev
205c43f7c2 add health check for paaas 2026-04-28 04:42:42 +00:00
sirius0xdev
7d50abc1a1 fix kustomization 2026-04-28 03:40:54 +00:00
sirius0xdev
cdec727963 fix kustomization file 2026-04-28 03:35:39 +00:00
sirius0xdev
9f5d1fb723 clean up and add routes to paas site 2026-04-28 03:31:52 +00:00
Hermes Agent
1df06eed96 feat: add Kong AI plugins and Cilium Local Redirect Policy 
- CiliumLocalRedirectPolicy: Zero-latency Kong → vLLM on GPU nodes
- KongPlugin bundle: ai-rate-limiting (TPM), ai-prompt-guard, ai-semantic-cache, ai-failover
- Flux-integrated via kustomization.yaml
- Attach plugins to Kong routes post-deploy

Refs: LLM gateway.md optimizations.
 2026-04-27 03:24:59 +00:00
Hermes Agent
9b62c1e6b5 feat: add HTTPRoute (cilium-gateway-to-kong-route) 
- Cilium Gateway API HTTPRoute routes /v1 traffic to Kong service
- Includes placeholders for Gateway/Kong names (update post-merge)
- Added to openclaw kustomization.yaml for FluxCD sync

Refs LLM gateway.md optimizations.
 2026-04-27 03:15:23 +00:00
sirius0xdev
cd665d3374
Update kustomization.yaml 2026-04-26 01:09:59 -04:00
sirius0xdev
cc23faf568
Update kustomization.yaml 2026-04-25 23:53:04 -04:00
Hermes Agent
6183159974 feat: add Prometheus, Grafana, and Tailscale monitoring stack 
- Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress)
- Deploy Tailscale Operator for secure VPN access to internal services
- Add CNPG/PostgreSQL monitoring dashboards
- Add vLLM inference monitoring dashboards (tokens, latency, GPU)
- Add Cilium networking dashboards (policy, traffic, drops)
- Update infra-controllers staging kustomization to include all controllers
- Add monitoring-configs Flux sync for dashboard deployment
- Update README with monitoring architecture and access instructions
- Remove broken stale monitoring files (Azure Key Vault refs, wrong domains)

Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy)
 2026-04-26 02:31:53 +00:00
Hermes Agent
01061d1b92 feat(keda): add path filter to HTTPScaledObject 
Filter scales only on inference traffic (/v1/chat/completions):
- Ignores probes (/health, /v1/models)
- targetPendingRequests defaults (low queue → up)
- Keeps scaledownPeriod 900s idle zero
 2026-04-25 23:58:38 +00:00
sirius0xdev
b8bf9dd242 fix deployment error 2026-04-25 23:38:36 +00:00
sirius0xdev
0a1eb2d961 bye bye openclaw 2026-04-25 23:34:07 +00:00
sirius0xdev
06123cfddf turn off keda 2026-04-25 23:33:03 +00:00
sirius0xdev
b4ffa0c238 add wellness probes to vllm and activate keda 2026-04-25 23:23:48 +00:00
sirius0xdev
ed165b9cc4 add xai to hermes 2026-04-25 21:26:54 +00:00
sirius0xdev
33570bd137 fix typo 2026-04-25 21:11:57 +00:00
sirius0xdev
b57f9a7811 activate hermes agent 2026-04-25 21:06:44 +00:00
sirius0xdev
dc1afb1472 activate hermes agent 2026-04-25 21:02:14 +00:00
sirius0xdev
3ff531dc6e
Update deployment.yaml 2026-04-25 11:25:23 -04:00
sirius0xdev
eac576db58
Update kustomization.yaml 2026-04-25 09:59:24 -04:00
sirius0xdev
ae5e4b5515
Update a100-vllm.yaml 2026-04-24 22:54:14 -04:00
sirius0xdev
1ba0ad2dcf
Update pg-cluster-openclaw.yaml 2026-04-24 19:52:21 -04:00
sirius0xdev
d30d4ee43f
Update pg-cluster-customer1.yaml 2026-04-24 19:51:36 -04:00
sirius0xdev
b7efbc8df9
Update kustomization.yaml 2026-04-24 00:36:33 -04:00
sirius0xdev
fbbf1e2790
Update kustomization.yaml 2026-04-24 00:35:55 -04:00
sirius0xdev
e02948ffbc
Update new-configmap.yaml 2026-04-24 00:01:24 -04:00