3 commits

Author	SHA1	Message	Date
Hermes DevOps	7e8fd296c4	fix(platform): allow tailscale namespace in NetworkPolicy for proxy access ... Tailscale proxy pods run in the tailscale namespace, so the existing customer1-only namespaceSelector blocked proxy → dashboard traffic.	2026-05-25 07:15:59 +00:00
Hermes DevOps	113324abc1	fix(platform): add port 3000 to trading-platform NetworkPolicy ingress rules ... Dashboard listens on port 3000 but NetworkPolicy only allowed 8000-8003. This blocked all traffic including Tailscale proxy connections to trade:3000.	2026-05-25 07:05:45 +00:00
Sirius Devops	b0748538c0	feat: add trading-platform K8s manifests for customer1 ... - Scaffold trading-platform under apps/base/customer1/trading-platform/ - Add 4 microservice deployments: data-service, execute-service, news-service, dashboard - Add ConfigMaps with DB/Kafka/Redis connection configs - Add HTTPRoutes via Gateway API (external-http-gateway) - Add NetworkPolicies for inter-service and DB/Kafka/Redis egress - Add SOPS-encrypted secrets (age key) - Add Kafka (KRaft) and Redis infrastructure to hermes-db/ - Update root and staging kustomizations All containers: non-root, readOnlyRootFilesystem, resource limits, health probes Images: ghcr.io/sirius0xdev/trading-{service}:latest	2026-05-21 04:17:05 +00:00