Hermes Agent
c04823d416
Grant CREATEDB and CREATEROLE to memory role on hermes-pgdb
...
The memory user needs CREATEDB and CREATEROLE privileges to install
the pgvector extension on the agent_memory database.
2026-05-24 22:14:49 +00:00
Hermes Agent
4df7450461
feat(customer1): add pgvector RAG knowledge base with embedding service
...
- Custom PostgreSQL 15.2 image with pgvector 0.8.0 extension
- Updated pg-cluster-hermes.yaml: custom image, sharedPreloadLibraries, maintenance_work_mem
- RAG schema: documents table with vector(768) embeddings + HNSW index
- RAG init job: ConfigMap + Job to apply schema to agent_memory db
- Embedding service: FastAPI with nomic-embed-text-v1.5
- OpenAI-compatible /v1/embeddings endpoint
- Deployment (1 replica, 2Gi-4Gi memory) + Service manifests
- Updated kustomization.yaml to include new resources
2026-05-24 20:31:59 +00:00
b0748538c0
feat: add trading-platform K8s manifests for customer1
...
- Scaffold trading-platform under apps/base/customer1/trading-platform/
- Add 4 microservice deployments: data-service, execute-service, news-service, dashboard
- Add ConfigMaps with DB/Kafka/Redis connection configs
- Add HTTPRoutes via Gateway API (external-http-gateway)
- Add NetworkPolicies for inter-service and DB/Kafka/Redis egress
- Add SOPS-encrypted secrets (age key)
- Add Kafka (KRaft) and Redis infrastructure to hermes-db/
- Update root and staging kustomizations
All containers: non-root, readOnlyRootFilesystem, resource limits, health probes
Images: ghcr.io/sirius0xdev/trading-{service}:latest
2026-05-21 04:17:05 +00:00
sirius0xdev
27f56f8623
Update kustomization.yaml
2026-05-09 11:33:40 -04:00
sirius0xdev
86550e1c9c
add tele secretbfor webhook
2026-05-08 16:16:28 +00:00
sirius0xdev
1497946049
fix(hermes-db): reencrypt with correct SOPS recipient key
...
Use age1uuxf066x... from .sops.yaml instead of local key
that the cluster SOPS decryptor cannot read.
2026-05-02 22:14:09 +00:00
sirius0xdev
58ea111b1d
fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$
...
Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace
and type fields. Recreated with --encrypted-regex targeting only stringData
section. New random passwords generated for all three roles.
2026-05-02 22:01:03 +00:00
sirius0xdev
a3ad07d191
feat: add dedicated CNPG cluster for Hermes agent memory and trading data
...
- New hermes-pgdb cluster (Postgres 15.2, 1 instance, 20Gi)
- 3 databases: hermes_memory, trading_data, agent_memory
- 3 roles with SOPS-encrypted secrets (age encryption)
- Daily backups to gs://customer1_db_backup/hermes-backups/
- Wired into Flux pipeline via staging kustomization
2026-05-02 21:31:41 +00:00
