sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
888 commits 1 branch 0 tags 1.5 MiB
Commit graph

4 commits

Author SHA1 Message Date
Hermes Agent
3f96800222 feat: migrate all trading-platform services from hermes-pgdb to siriusdevops-pgdb 
- Add 'trading' managed role to siriusdevops-pgdb cluster
- Move trading-db-credentials from hermes-db to siriusdevops-db
- Create trading-data-db.yaml (Database kind) pointing to siriusdevops-pgdb
- Update DB_HOST in all 4 trading-platform configmaps to siriusdevops-pgdb-rw
- Remove trading-data-db.yaml and trading-db-credentials.yaml from hermes-db
- Update siriusdevops-db kustomization.yaml to include new resources
 2026-05-25 07:55:15 +00:00
sirius0xdev
1497946049 fix(hermes-db): reencrypt with correct SOPS recipient key 
Use age1uuxf066x... from .sops.yaml instead of local key
that the cluster SOPS decryptor cannot read.
 2026-05-02 22:14:09 +00:00
sirius0xdev
58ea111b1d fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ 
Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace
and type fields. Recreated with --encrypted-regex targeting only stringData
section. New random passwords generated for all three roles.
 2026-05-02 22:01:03 +00:00
sirius0xdev
a3ad07d191 feat: add dedicated CNPG cluster for Hermes agent memory and trading data 
- New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi)
- 3 databases: hermes_memory, trading_data, agent_memory
- 3 roles with SOPS-encrypted secrets (age encryption)
- Daily backups to gs://customer1_db_backup/hermes-backups/
- Wired into Flux pipeline via staging kustomization
 2026-05-02 21:31:41 +00:00