6 commits

Author	SHA1	Message	Date
sirius0xdev	503e8c4813	Merge branch 'master' into fix/age-key-encryption	2026-05-03 20:53:40 -04:00
sirius0xdev	852d2c76c1	fix: update tailscale operator authkey with fresh single-use key	2026-05-04 00:43:59 +00:00
sirius0xdev	caf08571c1	fix: re-encrypt authkey secret with correct age key	2026-05-04 00:41:27 +00:00
sirius0xdev	83b70951c6	fix(tailnet): move TsProxy to separate Kustomization that depends on operator ... - Remove TsProxy from infrastructure-controllers to avoid CRD timing issue - Create infrastructure/tailnet/ Kustomization for TsProxy resources - Add infrastructure-tailnet Flux Kustomization with dependsOn - Add dependsOn to customer1 Kustomization for trade-dashboard TsProxy	2026-05-04 00:06:51 +00:00
sirius0xdev	5f9b55af55	feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy ... - Add SOPS-encrypted tailscale-operator-authkey secret for operator auth - Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000) - Enable trade-dashboard TsProxy (was waiting for operator install)	2026-05-03 23:30:28 +00:00
Hermes Agent	6183159974	feat: add Prometheus, Grafana, and Tailscale monitoring stack ... - Install Prometheus + Grafana via kube-prometheus-stack (ClusterIP only, no public ingress) - Deploy Tailscale Operator for secure VPN access to internal services - Add CNPG/PostgreSQL monitoring dashboards - Add vLLM inference monitoring dashboards (tokens, latency, GPU) - Add Cilium networking dashboards (policy, traffic, drops) - Update infra-controllers staging kustomization to include all controllers - Add monitoring-configs Flux sync for dashboard deployment - Update README with monitoring architecture and access instructions - Remove broken stale monitoring files (Azure Key Vault refs, wrong domains) Access: kubectl port-forward or Tailscale VPN (replace auth key before deploy)	2026-04-26 02:31:53 +00:00