sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
751 commits 1 branch 0 tags 1.5 MiB
Commit graph

751 commits

This branch
This branch
All branches
Author SHA1 Message Date
sirius0xdev
116ac9ca48 Fix Tailscale operator HelmRelease for v1.96.x + PodSecurity 
- Bump chart version 1.86.x -> 1.96.x
- Migrate operator: -> operatorConfig: (new chart structure)
- Disable OAuth/OIDC to use existing authkey secret
- Add securityContext for restricted:latest PodSecurity policy
- Add podSecurityContext.runAsNonRoot
- Drop ALL capabilities, disable privilege escalation
- Add RuntimeDefault seccomp profile
 2026-05-04 01:41:50 +00:00
sirius0xdev
b40ffc68cb update release 2026-05-04 01:17:40 +00:00
sirius0xdev
dc400a364d fix tsproxy issue 2026-05-04 01:09:48 +00:00
sirius0xdev
896ecc8c51 Merge branch 'master' of github.com:sirius0xdev/gcloud-lab 
i am the captain #
 2026-05-04 01:07:18 +00:00
sirius0xdev
3874014c85 fix kustomizations 2026-05-04 01:07:09 +00:00
sirius0xdev
69964e5cbc
Merge pull request #90 from sirius0xdev/fix/tailscale-timeout 
Fix/tailscale timeout
 2026-05-03 20:53:59 -04:00
sirius0xdev
503e8c4813
Merge branch 'master' into fix/age-key-encryption 2026-05-03 20:53:40 -04:00
sirius0xdev
bf4a2b260f fix: increase tailscale-operator HelmRelease timeout to 15m 2026-05-04 00:50:43 +00:00
sirius0xdev
2b6225c4e8 fix: increase tailscale-operator HelmRelease timeout to 10m (install was timing out) 2026-05-04 00:48:09 +00:00
sirius0xdev
852d2c76c1 fix: update tailscale operator authkey with fresh single-use key 2026-05-04 00:43:59 +00:00
sirius0xdev
caf08571c1 fix: re-encrypt authkey secret with correct age key 2026-05-04 00:41:27 +00:00
sirius0xdev
64bc378884
Merge pull request #88 from sirius0xdev/fix/remove-wait 
fix: remove wait: true from infrastructure-controllers (dependsOn + F…
 2026-05-03 20:36:45 -04:00
sirius0xdev
508c5c048e fix: remove wait: true from infrastructure-controllers (dependsOn + Flux retry is sufficient) 2026-05-04 00:35:52 +00:00
sirius0xdev
1e91fa71e8
Merge pull request #87 from sirius0xdev/fix/separate-monitoring-controllers 
fix: separate monitoring from controllers so broken prometheus-stack …
 2026-05-03 20:31:19 -04:00
sirius0xdev
61165c2b00 fix: separate monitoring from controllers so broken prometheus-stack doesn't block tailnet chain 2026-05-04 00:30:02 +00:00
sirius0xdev
f614d925de
Merge pull request #86 from sirius0xdev/temp-fix-wait 
fix(tailnet): add wait: true to infrastructure-controllers so HelmRel…
 2026-05-03 20:26:12 -04:00
sirius0xdev
88dd60498f fix(tailnet): add wait: true to infrastructure-controllers so HelmRelease completes before downstream dependsOn 2026-05-04 00:25:45 +00:00
sirius0xdev
d1cfb262c4
Merge pull request #85 from sirius0xdev/temp-fix 
fix(tailnet): move tsproxy-rtx6000.yaml into tailnet dir for Flux build
 2026-05-03 20:18:18 -04:00
sirius0xdev
5e3b34646c fix(tailnet): move tsproxy-rtx6000.yaml into tailnet dir for Flux build 2026-05-04 00:17:17 +00:00
sirius0xdev
9c322003f0
Merge pull request #84 from sirius0xdev/fix/tsproxy-depends-on-operator 
fix(tailnet): move TsProxy to separate Kustomization that depends on …
 2026-05-03 20:08:25 -04:00
sirius0xdev
83b70951c6 fix(tailnet): move TsProxy to separate Kustomization that depends on operator 
- Remove TsProxy from infrastructure-controllers to avoid CRD timing issue
- Create infrastructure/tailnet/ Kustomization for TsProxy resources
- Add infrastructure-tailnet Flux Kustomization with dependsOn
- Add dependsOn to customer1 Kustomization for trade-dashboard TsProxy
 2026-05-04 00:06:51 +00:00
sirius0xdev
c8d54c68d7
Merge pull request #83 from sirius0xdev/feat/tailscale-operator-authkey-tsproxy 
feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy
 2026-05-03 20:02:09 -04:00
sirius0xdev
5f9b55af55 feat(tailscale): add operator authkey secret and rtx6000-brain TsProxy 
- Add SOPS-encrypted tailscale-operator-authkey secret for operator auth
- Add TsProxy to expose rtx6000-brain-service on tailnet (port 8000)
- Enable trade-dashboard TsProxy (was waiting for operator install)
 2026-05-03 23:30:28 +00:00
sirius0xdev
7e7794d3f5 start vllm server 2026-05-03 22:29:58 +00:00
sirius0xdev
8d8d4853b6 add async_session 2026-05-03 22:15:19 +00:00
sirius0xdev
dd09bcf218 fix alembic issue in main.py 2026-05-03 22:10:32 +00:00
sirius0xdev
0d949ce48c fix tradedashboard python 2026-05-03 21:53:06 +00:00
sirius0xdev
c8baff8a19 Merge branch 'master' of github.com:sirius0xdev/gcloud-lab 
whateever#
 2026-05-03 21:45:29 +00:00
sirius0xdev
2d552e3ff9 fix workflow 2026-05-03 21:45:16 +00:00
sirius0xdev
ea8224b3d2
Update Docker build context for trade-dashboard 2026-05-03 17:35:14 -04:00
sirius0xdev
2716694876
Update workflow path for trade-dashboard 2026-05-03 17:31:42 -04:00
sirius0xdev
c5dd91d112 fix docker file and move trade-dashboard 2026-05-03 21:31:25 +00:00
sirius0xdev
12ab52de91 fix dashboards python script 2026-05-03 21:06:36 +00:00
sirius0xdev
698d4aec3d
Update kustomization.yaml 2026-05-02 19:44:14 -04:00
sirius0xdev
5bc7f60f35
Update kustomization.yaml 2026-05-02 19:43:59 -04:00
sirius0xdev
3db7c1fb00
Merge pull request #81 from sirius0xdev/fix/trade-dashboard-db-user 
fix(trade-dashboard): get DB_USER from secret instead of configmap
 2026-05-02 19:42:08 -04:00
sirius0xdev
105d29de7e fix(trade-dashboard): get DB_USER from secret instead of configmap 2026-05-02 23:35:04 +00:00
sirius0xdev
b574c8e6f4
Merge pull request #80 from sirius0xdev/fix/trade-dashboard-imports 
Fix/trade dashboard imports
 2026-05-02 18:54:05 -04:00
sirius0xdev
23c7c707d8 fix(trade-dashboard): fix import errors and alembic migration 
- database.py: remove dead pre-definition of DATABASE_URL with
  undefined db_user/db_pass variables
- models.py: add missing Table import from sqlalchemy
- alembic/env.py: replace deprecated run_async() with asyncio.run()
  (removed in SQLAlchemy 2.0)
- alembic 001_initial: use raw SQL for CREATE TYPE instead of
  op.create_enum() which requires alembic_postgresql_enum

Migration 001_initial successfully applied to trading_data DB.
 2026-05-02 22:44:38 +00:00
sirius0xdev
6afe8f41b7
Merge pull request #79 from sirius0xdev/feat/trade-dashboard-github-actions 
feat(trade-dashboard): add GitHub Actions CI/CD + switch to ghcr.io
 2026-05-02 18:32:08 -04:00
sirius0xdev
997d726624 fix(trade-dashboard): switch image registry to ghcr.io 2026-05-02 18:31:59 -04:00
sirius0xdev
f4b1996e06 feat(trade-dashboard): add GitHub Actions CI/CD pipeline 2026-05-02 18:31:59 -04:00
sirius0xdev
6599249d65 feat(trade-dashboard): add GitHub Actions CI/CD pipeline 
- Build and push Docker image to ghcr.io on push to master
- Update deployment to pull from ghcr.io instead of GCR
- Tags: commit SHA + latest on default branch
 2026-05-02 22:29:06 +00:00
sirius0xdev
d29ade4a8b
Merge pull request #78 from sirius0xdev/fix/tsproxy-comment-out 
feat(trade-dashboard): comment out TsProxy until Tailscale operator is installed
 2026-05-02 18:24:46 -04:00
sirius0xdev
d94e62d77c fix(trade-dashboard): comment out TsProxy until Tailscale operator is installed 2026-05-02 22:21:35 +00:00
sirius0xdev
3571e1ca80
Merge pull request #77 from sirius0xdev/feat/trade-dashboard-service 
feat(trade-dashboard): add service, fix SOPS secret encryption
 2026-05-02 18:18:07 -04:00
sirius0xdev
1497946049 fix(hermes-db): reencrypt with correct SOPS recipient key 
Use age1uuxf066x... from .sops.yaml instead of local key
that the cluster SOPS decryptor cannot read.
 2026-05-02 22:14:09 +00:00
sirius0xdev
e1aaa7a12f
Merge pull request #76 from sirius0xdev/feat/trade-dashboard-service 
feat: add trade dashboard service (FastAPI + Tailscale)
 2026-05-02 18:03:17 -04:00
sirius0xdev
58ea111b1d fix(hermes-db): reencrypt secrets with correct encrypted-regex ^(data|stringData)$ 
Previous secrets encrypted apiVersion, kind, metadata.name, metadata.namespace
and type fields. Recreated with --encrypted-regex targeting only stringData
section. New random passwords generated for all three roles.
 2026-05-02 22:01:03 +00:00
sirius0xdev
7df60cbeb9 feat: add trade dashboard service (FastAPI + Tailscale) 
- FastAPI app with async SQLAlchemy + Alembic migrations
- API: positions CRUD, PnL summary, trade history, webhook endpoint
- Dark-themed SPA frontend (vanilla HTML/JS)
- K8s: deployment, service, configmap, TsProxy for Tailscale access
- Backed by hermes-pgdb / trading_data database
- Wired into Flux staging pipeline
 2026-05-02 21:47:27 +00:00