sirius0xdev
f6040befbd
Update rtx6000-vllm.yaml
2026-05-24 15:55:27 -04:00
sirius0xdev
2b9630d8dc
Update rtx6000-vllm.yaml
2026-05-24 15:52:52 -04:00
sirius0xdev
b536367aea
Merge pull request #125 from sirius0xdev/fix/data-service-redis-env
...
fix(data-service): inject REDIS_URL from ConfigMap
2026-05-24 14:31:02 -04:00
sirius0xdev
6d288a89e2
turn off vllm
2026-05-24 07:19:43 +00:00
sirius0xdev
a17e274d80
disable a100
2026-05-24 05:47:23 +00:00
sirius0xdev
d9ed1c0eb3
a100 deployment tweaks
2026-05-24 05:03:12 +00:00
sirius0xdev
99a864171b
Update kustomization.yaml
2026-05-23 20:36:41 -04:00
Hermes Agent
1d2d016eda
fix(data-service): inject REDIS_URL from ConfigMap
...
- Add REDIS_URL env var using variable expansion from the existing
trading-data-service-config ConfigMap (REDIS_HOST + REDIS_PORT).
- This resolves the 'connecting to localhost:6379' crash on startup.
- Matches the actual infrastructure configuration in customer1.
2026-05-23 18:34:51 +00:00
sirius0xdev
53ae85910d
Update kustomization.yaml
2026-05-23 01:59:50 -04:00
sirius0xdev
d68eb72833
Merge pull request #124 from sirius0xdev/fix/osint-dashboard-manifest-audit
...
Audit: OSINT Dashboard Helm chart - security, resilience and reliability fixes
2026-05-23 01:57:45 -04:00
sirius0xdev
ac60dc5a51
Fix NATS URL service name mismatch and split combined ConfigMap+StatefulSet
...
- F8: Correct NATS_URLS, REDIS_URL, MINIO_ENDPOINT to use actual service names
(nats, redis-master, minio) instead of fullname-prefixed names that don't exist
- F9: Split combined ConfigMap+StatefulSet in nats/statefulset.yaml into separate
configmap.yaml and statefulset.yaml files for maintainability
2026-05-23 05:12:24 +00:00
sirius0xdev
b3fdb91e13
Update rtx6000-vllm.yaml
2026-05-23 00:47:34 -04:00
sirius0xdev
54f2f42710
fix(osint-dashboard): fix critical manifest issues found during audit
...
- Fix PostgreSQL topologySpreadConstraints label selector (cnpg.io/cluster)
- Fix Ingress HTTPRoutes: route API and WS traffic to correct backends
- Fix API NetworkPolicy port mismatch (4000 -> 8000)
- Fix MinIO bucket index syntax (_0 -> 0) in ConfigMap
- Add postgresql.port and postgresql.database to values.yaml
- Add container-level securityContext to API deployment
- Restrict monitoring NetworkPolicy ingress to monitoring namespace
- Enable readOnlyRootFilesystem for MinIO container
- Add activeDeadlineSeconds (3600s) to all 4 CronJobs
2026-05-23 04:38:51 +00:00
sirius0xdev
87c22e71a4
Update rtx6000-vllm.yaml
2026-05-22 23:45:57 -04:00
sirius0xdev
fa6dd3c8a6
Update rtx6000-vllm.yaml
2026-05-22 23:39:27 -04:00
sirius0xdev
bfd9bbc3b6
Delete tailscale-0auth.yaml
2026-05-22 23:29:47 -04:00
sirius0xdev
b5f80fff50
Update kustomization.yaml
2026-05-22 23:27:46 -04:00
sirius0xdev
54267b0818
Update rtx6000-vllm.yaml
2026-05-22 23:27:18 -04:00
sirius0xdev
6df297086c
Update rtx6000-vllm.yaml
2026-05-22 13:56:53 -04:00
sirius0xdev
3c542b2d41
Update rtx6000-vllm.yaml
2026-05-22 13:54:20 -04:00
sirius0xdev
56cb32fa5a
Update kustomization.yaml
2026-05-22 07:02:03 -04:00
sirius0xdev
25fd3bf064
clean up
2026-05-22 03:13:21 +00:00
sirius0xdev
cc2074a4cb
change hermes image
2026-05-22 03:09:59 +00:00
sirius0xdev
f3c2e4991b
change hermes image
2026-05-22 03:06:36 +00:00
sirius0xdev
c76675335d
switch hermes image to main
2026-05-22 02:33:54 +00:00
sirius0xdev
75cea5abb7
fix secret issue
2026-05-22 02:11:22 +00:00
sirius0xdev
84e85d1432
Merge pull request #123 from sirius0xdev/refactor/move-trade-dashboard
...
refactor: remove trade-dashboard app code and rays-new-deployment.yaml
2026-05-21 21:45:26 -04:00
Hermes Agent
d89c1944e6
refactor: remove trade-dashboard app code and rays-new-deployment.yaml
...
- Removed trade-dashboard/ (moved to hermes-projects/trade-dashboard/)
- Removed .github/workflows/trade-dashboard.yml (CI now handled by hermes-projects root workflow)
- Deleted rays-new-deployment.yaml (orphan deployment YAML)
K8s manifests remain in apps/base/customer1/trade-dashboard/.
See hermes-projects PR #8 for the addition side.
2026-05-21 14:18:23 +00:00
sirius0xdev
752d173a07
Merge pull request #121 from sirius0xdev/feat/osint-dashboard-app
...
feat: OSINT Dashboard app + Helm chart integration
2026-05-21 10:18:07 -04:00
Hermes Agent
a433be1195
fix: resolve merge conflict in osint-dashboard values.yaml (keep real API config)
2026-05-21 14:17:52 +00:00
sirius0xdev
b957b3c704
Merge pull request #122 from sirius0xdev/refactor/repo-reorganization-plan
...
docs: repository reorganization migration plan
2026-05-21 10:15:06 -04:00
Hermes Agent
3a9a0476d2
docs: add repository reorganization migration plan
...
Audit completed identifying all misplaced items in gcloud-lab.
Plan proposes 6 PRs to move app code to hermes-projects and keep
only K8s manifests and infra config in gcloud-lab.
2026-05-21 13:52:21 +00:00
93754dcdf6
feat: OSINT Dashboard app + Helm templates
...
Add FastAPI backend for real-time geospatial OSINT dashboard:
- Full-text search via PostgreSQL tsvector (parameterized queries)
- Entity tracking, alert management, sentiment analytics
- Data ingestion: RSS feeds, GDELT, USGS earthquakes, social signals
- NATS JetStream consumer for event ingestion
- MinIO document storage integration
- Redis caching layer
- Alembic migrations with PostGIS + TimescaleDB extensions
- Single-page dashboard UI with live polling
- OpenTelemetry distributed tracing
Helm chart with infrastructure:
- CNPG PostgreSQL cluster (PostGIS + TimescaleDB)
- NATS JetStream with persistent streams
- MinIO distributed object storage (3 buckets)
- Redis Sentinel (1 primary + 2 replicas)
- NGINX Ingress with TLS and WebSocket support
- Prometheus + Grafana + Alertmanager monitoring stack
- Network policies with default deny
- ConfigMap, CronJob, Deployment, Service templates
Fixes applied during review:
- SQL injection in search endpoint (parameterized :q binding)
- Dockerfile PYTHONPATH mismatch (/app/app -> /app)
- Hardcoded DB credentials in alembic.ini
- RSS timestamp parsing (feedparser published_parsed -> parsedate_to_datetime)
- Removed dead PGVECTOR import
2026-05-21 13:39:52 +00:00
sirius0xdev
4a01c457ab
Update kustomization.yaml
2026-05-21 09:36:11 -04:00
8255467313
feat: add OSINT Dashboard Kubernetes infrastructure
...
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
2026-05-21 13:25:15 +00:00
sirius0xdev
67e45a4464
Merge pull request #120 from sirius0xdev/feat/trading-platform-manifests
...
feat: add trading-platform K8s manifests for customer1
2026-05-21 09:24:59 -04:00
sirius0xdev
0f1c6bbdf5
Update kustomization.yaml
2026-05-21 09:00:00 -04:00
b0748538c0
feat: add trading-platform K8s manifests for customer1
...
- Scaffold trading-platform under apps/base/customer1/trading-platform/
- Add 4 microservice deployments: data-service, execute-service, news-service, dashboard
- Add ConfigMaps with DB/Kafka/Redis connection configs
- Add HTTPRoutes via Gateway API (external-http-gateway)
- Add NetworkPolicies for inter-service and DB/Kafka/Redis egress
- Add SOPS-encrypted secrets (age key)
- Add Kafka (KRaft) and Redis infrastructure to hermes-db/
- Update root and staging kustomizations
All containers: non-root, readOnlyRootFilesystem, resource limits, health probes
Images: ghcr.io/sirius0xdev/trading-{service}:latest
2026-05-21 04:17:05 +00:00
5e477492e6
feat: add OSINT Dashboard Kubernetes infrastructure
...
- Helm chart scaffold (Chart.yaml, values.yaml, _helpers.tpl)
- Namespace + RBAC manifests
- PostgreSQL (CNPG, 3 replicas, PostGIS + TimescaleDB)
- NATS JetStream (3 replicas, persistent, custom subjects)
- Redis Sentinel (1 primary + 2 replicas, HA)
- MinIO distributed (4 replicas, bucket init job)
- Gateway API HTTPRoute + cert-manager TLS certificates
- Monitoring stack (Prometheus, Grafana, Alertmanager, exporters)
- NetworkPolicies (default deny + per-component policies)
- GitHub Actions CI/CD pipeline (lint, template, security scan)
- Flux CD staging overlay
2026-05-21 04:15:55 +00:00
sirius0xdev
a06a105f31
Update kustomization.yaml
2026-05-20 22:18:37 -04:00
sirius0xdev
1a3804294d
Update kustomization.yaml
2026-05-20 22:12:07 -04:00
sirius0xdev
8fa640725c
Update kustomization.yaml
2026-05-20 00:46:46 -04:00
sirius0xdev
4d8311a732
Update kustomization.yaml
2026-05-19 08:11:46 -04:00
sirius0xdev
0d5f095885
Update kustomization.yaml
2026-05-18 21:54:53 -04:00
sirius0xdev
d1dd97f945
Merge pull request #117 from sirius0xdev/feat/trading-platform-k8s
...
feat: add trading platform K8s deployment infrastructure
2026-05-17 19:05:51 -04:00
d079d1239f
feat: add trading platform K8s deployment infrastructure
...
- Add Helm chart with 19 templates (Deployments, Services, Ingress,
ConfigMaps, Secrets, NetworkPolicy, cert-manager)
- Add Dockerfiles for 4 microservices (dashboard, data-service,
execute-service, news-service)
- Add CI/CD workflows (build-test, build-push, deploy)
- Add raw K8s manifests, per-service Helm charts, and deploy scripts
- Add SOPS-encrypted secrets template and config
- Configure deployment to customer1 namespace
- Include infrastructure components: PostgreSQL, Redis, Kafka
2026-05-17 22:15:00 +00:00
sirius0xdev
af4cb3d321
Update rtx6000-vllm.yaml
2026-05-17 16:42:06 -04:00
sirius0xdev
4ba4f08299
Update kustomization.yaml
2026-05-17 14:42:59 -04:00
sirius0xdev
c987ad6132
Update kustomization.yaml
2026-05-17 03:30:39 -04:00
sirius0xdev
1a6dd51076
Update rtx6000-vllm.yaml
2026-05-16 23:11:34 -04:00
