46 Commits

Author SHA1 Message Date
jenkins
d66af9dbd4 hermes: deploy verified release and roll broker code by content 2026-09-13 18:44:33 -05:00
jenkins
c0b806e5d2 release(hermes): automate validated image promotion 2026-08-23 13:41:58 -03:00
jenkins
271f3e8c32 ops: spread saturated node workloads 2026-08-23 10:37:01 -03:00
jenkins
9d42ff33f5 Merge origin/main (#16 image-builder) into hermes-safe-gitea-pr
Resolve 8 conflicts, uniting #16's daemonless image-release lane with
#14's SCM broker + node-audit boundary. Nothing dropped from either side.

- quality_coverage.py / test_quality_coverage_helpers.py: take main's
  dual-metric gate (line+branch enforced per file at minimum_percent);
  drop #14's now-dead branch_tracked_files/minimum_branch_percent keys.
- quality_contract.json: union all lists (managed_modules, lint_paths,
  coverage_sources, tracked_files, hygiene globs) so #14's scm-broker,
  git_pack_objects, receive_pack_scan, deadline_http and node_polkit_audit
  are branch-checked alongside #16's image-builder modules.
- Vault auth (vault_k8s_auth_configure.sh): coexist both role sets. Keep
  #16's hermes-switchyard split + hermes-jenkins-token-seed; keep #14's
  hermes-scm-broker role. Preserve #14's security property: hermes-agent
  no longer holds developer-gitea (broker role carries it).
- agent-deployment.yaml / stage_runtime_access.py: keep #16's
  jenkins-image-build-token injection/staging; keep #14's removal of the
  agent's gitea-token/gitea-username.
- Bump vault-k8s-auth-hermes job -9 -> -10 (and its health check + test)
  so the merged auth config re-applies over any -9 already in-cluster.
- flux hermes dependsOn: union jenkins + hermes-scm-broker + observer-rbac.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-17 21:07:06 -03:00
jenkins
e8c26ecf85 hermes: add daemonless agent image release lane 2026-08-17 08:25:52 -03:00
jenkins
8c6e3acdac hermes: isolate Atlas SCM write authority 2026-08-17 07:58:44 -03:00
jenkins
ea015ca787 flux(hermes): retire recovery reconciler 2026-08-13 05:18:49 -03:00
jenkins
abd31a86df flux(hermes): recover blocked router rollout 2026-08-13 05:14:20 -03:00
jenkins
11063daaaa feat(hermes-triage-demo): isolated demo surface + Jenkins job + Hermes key seeding
- New hermes-triage-demo namespace with fixture PVC and RBAC scoped to
  Jenkins agent Job creation only
- JCasC pipelineJob hermes-triage-demo: SEED_FAILURE-parameterized fixture
  check running as a Kubernetes Job in the demo namespace, emitting the
  incident ID to pod stdout (Fluent Bit -> OpenSearch kube-*) and JUnit to
  Jenkins
- Hermes init container can seed API_SERVER_KEY in the persistent .env
  from an optional hermes-api-server-key Secret (no-op until it exists)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:42:37 -03:00
jenkins
5f4bdc6e7e ai(hermes): add isolated user chat instance 2026-08-02 02:31:01 -03:00
jenkins
eb71470023 Enable Cassandra image automation 2026-07-27 12:14:57 -03:00
jenkins
b5dd4f5058 feat(cassandra): add parallel migration infrastructure 2026-07-25 00:20:01 -03:00
jenkins
880736b4ff agent: replace OpenClaw with Hermes 2026-07-21 21:02:44 -03:00
jenkins
1d20fb35d2 veles: stage atlas infrastructure 2026-06-09 00:46:46 -03:00
jenkins
5bec30bd30 game-stream: deploy Wolf foundation 2026-05-21 02:07:17 -03:00
jenkins
52e0ee60fd openclaw: add testing triage workspace 2026-05-19 19:17:14 -03:00
45fde5e2bc quality: standardize suite checks and add SonarQube stack 2026-04-19 14:18:58 -03:00
0a59343a1f typhon: add AC Infinity telemetry service and Flux wiring 2026-04-12 15:23:08 -03:00
8da007759b bstein-dev-home: separate portal migrations 2026-01-23 03:28:49 -03:00
05cdf75dc6 finance: add actual budget and firefly 2026-01-16 23:52:56 -03:00
1eab80648d vault: finalize sidecar migration 2026-01-15 01:52:24 -03:00
4279db1619 vault: stabilize injector templates and add health apps 2026-01-14 13:40:29 -03:00
3c3a573e3d platform: move postgres to infrastructure 2026-01-13 17:53:04 -03:00
20f8d4980c postgres: add flux + vault csi 2026-01-13 12:35:59 -03:00
4826cb24c6 outline: move to local storage 2026-01-12 23:14:17 -03:00
0c6f02a0fb services: add minio, outline, planka 2026-01-12 21:22:54 -03:00
598f98e27f chore: remove ci-demo workload 2026-01-12 00:46:16 -03:00
4a7acc8203 comms: tidy stack and guest naming 2026-01-08 05:34:03 -03:00
fc5d0aa682 comms: consolidate stack manifests 2026-01-08 01:55:58 -03:00
365179890a flux: track nextcloud app 2026-01-06 14:14:38 -03:00
6d8d6b7892 vaultwarden: add flux kustomization 2026-01-02 16:17:53 -03:00
b381554cb8 nextcloud: flux-manage mail sync 2026-01-01 17:47:07 -03:00
607ecd8da1 comms: create namespace via Flux 2026-01-01 13:03:43 -03:00
84e6010204 sso(openldap): restore in-cluster LDAP 2026-01-01 11:37:52 -03:00
ca3a5dec6a communication: add Othrys stack via Flux 2025-12-31 12:00:12 -03:00
95ebdce813 ai: add ollama service and wire chat backend 2025-12-20 14:10:34 -03:00
aede36dd55 Add bstein-dev-home deployment and Jenkins job 2025-12-18 01:14:09 -03:00
aeafde4ad5 ci-demo: add flux image automation 2025-12-17 19:18:29 -03:00
39f35e15de harbor: add image automation 2025-12-17 03:21:35 -03:00
3870a8259d chore: remove zot stack 2025-12-16 14:10:04 -03:00
be0c321648 harbor: add helm repo and deploy via helmrelease 2025-12-15 22:05:32 -03:00
02956b18c9 jenkins: add helm release with ingress + astreae storage 2025-12-14 15:57:42 -03:00
0771bc954d mailu: capture helm release and cert 2025-12-11 23:54:43 -03:00
c7b73555c4 add oauth2-proxy for SSO forward-auth 2025-12-06 14:42:24 -03:00
7210c0784d flux: add keycloak kustomization 2025-12-02 18:10:20 -03:00
077654fa2d refactor: restructure atlas flux layout 2025-11-09 11:48:45 -03:00