Sirius Devops
d079d1239f
- Add Helm chart with 19 templates (Deployments, Services, Ingress, ConfigMaps, Secrets, NetworkPolicy, cert-manager) - Add Dockerfiles for 4 microservices (dashboard, data-service, execute-service, news-service) - Add CI/CD workflows (build-test, build-push, deploy) - Add raw K8s manifests, per-service Helm charts, and deploy scripts - Add SOPS-encrypted secrets template and config - Configure deployment to customer1 namespace - Include infrastructure components: PostgreSQL, Redis, Kafka
33 lines
927 B
YAML
33 lines
927 B
YAML
# Trading Secrets - Encrypt with SOPS before applying
|
|
# Usage: sops -e -i trading-secrets.yaml && kubectl apply -f trading-secrets.yaml
|
|
#
|
|
# DO NOT commit unencrypted secrets to git!
|
|
# Generate secrets with: python -c "import secrets; print(secrets.token_urlsafe(24))"
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: trading-secrets
|
|
namespace: customer1
|
|
labels:
|
|
app.kubernetes.io/managed-by: security-audit
|
|
annotations:
|
|
secrets.yaml.sops.io/v2: encrypted
|
|
type: Opaque
|
|
stringData:
|
|
# JWT authentication - use 32+ byte hex token
|
|
EXECUTE_JWT_SECRET_KEY: ""
|
|
|
|
# Exchange private keys - NEVER commit plaintext!
|
|
EXECUTE_HYPERLIQUID_PRIVATE_KEY: ""
|
|
EXECUTE_SOLANA_PRIVATE_KEY_BASE58: ""
|
|
|
|
# Database credentials - use 24+ byte URL-safe tokens
|
|
POSTGRES_PASSWORD: ""
|
|
NEWS_DB_PASSWORD: ""
|
|
|
|
# Redis password
|
|
REDIS_PASSWORD: ""
|
|
|
|
# Kafka SASL authentication
|
|
KAFKA_SASL_USERNAME: ""
|
|
KAFKA_SASL_PASSWORD: ""
|