sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
856 commits 1 branch 0 tags 1.5 MiB
Commit graph

856 commits

This branch
This branch
All branches
Author SHA1 Message Date
sirius0xdev
a17e274d80 disable a100 2026-05-24 05:47:23 +00:00
sirius0xdev
d9ed1c0eb3 a100 deployment tweaks 2026-05-24 05:03:12 +00:00
sirius0xdev
99a864171b
Update kustomization.yaml 2026-05-23 20:36:41 -04:00
sirius0xdev
53ae85910d
Update kustomization.yaml 2026-05-23 01:59:50 -04:00
sirius0xdev
d68eb72833
Merge pull request #124 from sirius0xdev/fix/osint-dashboard-manifest-audit 
Audit: OSINT Dashboard Helm chart - security, resilience and reliability fixes
 2026-05-23 01:57:45 -04:00
sirius0xdev
ac60dc5a51 Fix NATS URL service name mismatch and split combined ConfigMap+StatefulSet 
- F8: Correct NATS_URLS, REDIS_URL, MINIO_ENDPOINT to use actual service names
  (nats, redis-master, minio) instead of fullname-prefixed names that don't exist
- F9: Split combined ConfigMap+StatefulSet in nats/statefulset.yaml into separate
  configmap.yaml and statefulset.yaml files for maintainability
 2026-05-23 05:12:24 +00:00
sirius0xdev
b3fdb91e13
Update rtx6000-vllm.yaml 2026-05-23 00:47:34 -04:00
sirius0xdev
54f2f42710 fix(osint-dashboard): fix critical manifest issues found during audit 
- Fix PostgreSQL topologySpreadConstraints label selector (cnpg.io/cluster)
- Fix Ingress HTTPRoutes: route API and WS traffic to correct backends
- Fix API NetworkPolicy port mismatch (4000 -> 8000)
- Fix MinIO bucket index syntax (_0 -> 0) in ConfigMap
- Add postgresql.port and postgresql.database to values.yaml
- Add container-level securityContext to API deployment
- Restrict monitoring NetworkPolicy ingress to monitoring namespace
- Enable readOnlyRootFilesystem for MinIO container
- Add activeDeadlineSeconds (3600s) to all 4 CronJobs
 2026-05-23 04:38:51 +00:00
sirius0xdev
87c22e71a4
Update rtx6000-vllm.yaml 2026-05-22 23:45:57 -04:00
sirius0xdev
fa6dd3c8a6
Update rtx6000-vllm.yaml 2026-05-22 23:39:27 -04:00
sirius0xdev
bfd9bbc3b6
Delete tailscale-0auth.yaml 2026-05-22 23:29:47 -04:00
sirius0xdev
b5f80fff50
Update kustomization.yaml 2026-05-22 23:27:46 -04:00
sirius0xdev
54267b0818
Update rtx6000-vllm.yaml 2026-05-22 23:27:18 -04:00
sirius0xdev
6df297086c
Update rtx6000-vllm.yaml 2026-05-22 13:56:53 -04:00
sirius0xdev
3c542b2d41
Update rtx6000-vllm.yaml 2026-05-22 13:54:20 -04:00
sirius0xdev
56cb32fa5a
Update kustomization.yaml 2026-05-22 07:02:03 -04:00
sirius0xdev
25fd3bf064 clean up 2026-05-22 03:13:21 +00:00
sirius0xdev
cc2074a4cb change hermes image 2026-05-22 03:09:59 +00:00
sirius0xdev
f3c2e4991b change hermes image 2026-05-22 03:06:36 +00:00
sirius0xdev
c76675335d switch hermes image to main 2026-05-22 02:33:54 +00:00
sirius0xdev
75cea5abb7 fix secret issue 2026-05-22 02:11:22 +00:00
sirius0xdev
84e85d1432
Merge pull request #123 from sirius0xdev/refactor/move-trade-dashboard 
refactor: remove trade-dashboard app code and rays-new-deployment.yaml
 2026-05-21 21:45:26 -04:00
Hermes Agent
d89c1944e6 refactor: remove trade-dashboard app code and rays-new-deployment.yaml 
- Removed trade-dashboard/ (moved to hermes-projects/trade-dashboard/)
- Removed .github/workflows/trade-dashboard.yml (CI now handled by hermes-projects root workflow)
- Deleted rays-new-deployment.yaml (orphan deployment YAML)

K8s manifests remain in apps/base/customer1/trade-dashboard/.

See hermes-projects PR #8 for the addition side.
 2026-05-21 14:18:23 +00:00
sirius0xdev
752d173a07
Merge pull request #121 from sirius0xdev/feat/osint-dashboard-app 
feat: OSINT Dashboard app + Helm chart integration
 2026-05-21 10:18:07 -04:00
Hermes Agent
a433be1195 fix: resolve merge conflict in osint-dashboard values.yaml (keep real API config) 2026-05-21 14:17:52 +00:00
sirius0xdev
b957b3c704
Merge pull request #122 from sirius0xdev/refactor/repo-reorganization-plan 
docs: repository reorganization migration plan
 2026-05-21 10:15:06 -04:00
Hermes Agent
3a9a0476d2 docs: add repository reorganization migration plan 
Audit completed identifying all misplaced items in gcloud-lab.
Plan proposes 6 PRs to move app code to hermes-projects and keep
only K8s manifests and infra config in gcloud-lab.
 2026-05-21 13:52:21 +00:00
Sirius Devops
93754dcdf6 feat: OSINT Dashboard app + Helm templates 
Add FastAPI backend for real-time geospatial OSINT dashboard:
- Full-text search via PostgreSQL tsvector (parameterized queries)
- Entity tracking, alert management, sentiment analytics
- Data ingestion: RSS feeds, GDELT, USGS earthquakes, social signals
- NATS JetStream consumer for event ingestion
- MinIO document storage integration
- Redis caching layer
- Alembic migrations with PostGIS + TimescaleDB extensions
- Single-page dashboard UI with live polling
- OpenTelemetry distributed tracing

Helm chart with infrastructure:
- CNPG PostgreSQL cluster (PostGIS + TimescaleDB)
- NATS JetStream with persistent streams
- MinIO distributed object storage (3 buckets)
- Redis Sentinel (1 primary + 2 replicas)
- NGINX Ingress with TLS and WebSocket support
- Prometheus + Grafana + Alertmanager monitoring stack
- Network policies with default deny
- ConfigMap, CronJob, Deployment, Service templates

Fixes applied during review:
- SQL injection in search endpoint (parameterized :q binding)
- Dockerfile PYTHONPATH mismatch (/app/app -> /app)
- Hardcoded DB credentials in alembic.ini
- RSS timestamp parsing (feedparser published_parsed -> parsedate_to_datetime)
- Removed dead PGVECTOR import
 2026-05-21 13:39:52 +00:00
sirius0xdev
4a01c457ab
Update kustomization.yaml 2026-05-21 09:36:11 -04:00
Sirius Devops
8255467313 feat: add OSINT Dashboard Kubernetes infrastructure 
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
 2026-05-21 13:25:15 +00:00
sirius0xdev
67e45a4464
Merge pull request #120 from sirius0xdev/feat/trading-platform-manifests 
feat: add trading-platform K8s manifests for customer1
 2026-05-21 09:24:59 -04:00
sirius0xdev
0f1c6bbdf5
Update kustomization.yaml 2026-05-21 09:00:00 -04:00
Sirius Devops
b0748538c0 feat: add trading-platform K8s manifests for customer1 
- Scaffold trading-platform under apps/base/customer1/trading-platform/
- Add 4 microservice deployments: data-service, execute-service, news-service, dashboard
- Add ConfigMaps with DB/Kafka/Redis connection configs
- Add HTTPRoutes via Gateway API (external-http-gateway)
- Add NetworkPolicies for inter-service and DB/Kafka/Redis egress
- Add SOPS-encrypted secrets (age key)
- Add Kafka (KRaft) and Redis infrastructure to hermes-db/
- Update root and staging kustomizations

All containers: non-root, readOnlyRootFilesystem, resource limits, health probes
Images: ghcr.io/sirius0xdev/trading-{service}:latest
 2026-05-21 04:17:05 +00:00
Sirius Devops
5e477492e6 feat: add OSINT Dashboard Kubernetes infrastructure 
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
 2026-05-21 04:15:55 +00:00
sirius0xdev
a06a105f31
Update kustomization.yaml 2026-05-20 22:18:37 -04:00
sirius0xdev
1a3804294d
Update kustomization.yaml 2026-05-20 22:12:07 -04:00
sirius0xdev
8fa640725c
Update kustomization.yaml 2026-05-20 00:46:46 -04:00
sirius0xdev
4d8311a732
Update kustomization.yaml 2026-05-19 08:11:46 -04:00
sirius0xdev
0d5f095885
Update kustomization.yaml 2026-05-18 21:54:53 -04:00
sirius0xdev
d1dd97f945
Merge pull request #117 from sirius0xdev/feat/trading-platform-k8s 
feat: add trading platform K8s deployment infrastructure
 2026-05-17 19:05:51 -04:00
Sirius Devops
d079d1239f feat: add trading platform K8s deployment infrastructure 
- Add Helm chart with 19 templates (Deployments, Services, Ingress,
  ConfigMaps, Secrets, NetworkPolicy, cert-manager)
- Add Dockerfiles for 4 microservices (dashboard, data-service,
  execute-service, news-service)
- Add CI/CD workflows (build-test, build-push, deploy)
- Add raw K8s manifests, per-service Helm charts, and deploy scripts
- Add SOPS-encrypted secrets template and config
- Configure deployment to customer1 namespace
- Include infrastructure components: PostgreSQL, Redis, Kafka
 2026-05-17 22:15:00 +00:00
sirius0xdev
af4cb3d321
Update rtx6000-vllm.yaml 2026-05-17 16:42:06 -04:00
sirius0xdev
4ba4f08299
Update kustomization.yaml 2026-05-17 14:42:59 -04:00
sirius0xdev
c987ad6132
Update kustomization.yaml 2026-05-17 03:30:39 -04:00
sirius0xdev
1a6dd51076
Update rtx6000-vllm.yaml 2026-05-16 23:11:34 -04:00
sirius0xdev
aa1f5be323
Update rtx6000-vllm.yaml 2026-05-16 23:10:18 -04:00
sirius0xdev
18aa779232
Update rtx6000-vllm.yaml 2026-05-16 23:01:39 -04:00
sirius0xdev
0899aa1b97
Update rtx6000-vllm.yaml 2026-05-16 22:59:03 -04:00
sirius0xdev
3836578bb8
Update rtx6000-vllm.yaml 2026-05-16 22:58:38 -04:00
sirius0xdev
728a2dfe77
Update rtx6000-vllm.yaml 2026-05-16 22:57:54 -04:00