9 Commits

Author SHA1 Message Date
Hermes Agent
c857dbd9e1 keycloak: rerun Hermes OIDC ensure for chat/triage hostname rollout
PR #34 renamed the public chat/triage hosts in
hermes_access_oidc_ensure.sh (chat.bstein.dev, triage.bstein.dev) but
the last applied hermes-access-oidc-client-ensure Job predates that
change, so Keycloak still has the old redirect_uri/webOrigins/rootUrl
registered for hermes-chat-proxy and hermes-triage-proxy. Live check
confirms Keycloak returns HTTP 400 Invalid parameter: redirect_uri for
both new hosts. Bump the Job name to force Flux to recreate the
(immutable) Job and rerun the ensure script, matching this repo's
established retry convention for this Job (ensure-7..ensure-10).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-21 08:27:17 +00:00
jenkins
f81557e1c2 keycloak: fit Hermes bootstrap on Pi workers 2026-08-13 18:07:22 -03:00
jenkins
2a3e8cf064 keycloak: prefer healthy workers for Hermes bootstrap 2026-08-13 18:03:08 -03:00
jenkins
c5b3dee08f keycloak: retry Hermes automation bootstrap 2026-08-13 17:55:58 -03:00
jenkins
d4776556b4 keycloak: add Hermes automation identity 2026-08-13 17:45:09 -03:00
jenkins
c817f3cef7 hermes(agent): replace HERDR with native CLI lanes 2026-08-10 16:31:06 -03:00
jenkins
bb73efb285 feat(hermes): split chat agent and triage surfaces 2026-08-08 17:59:57 -03:00
jenkins
c4b4e8a404 Merge origin/main into layout migration
Reconciles the services layout migration with ~991 upstream commits:
- Remote content wins for cassandra/cassandra-auth, monitoring dashboards,
  vmalert availability rules, veles, vault auth script, dashboard render
  script and tests (request-v4 availability definition)
- Layout paths win for structure: keycloak/bstein-dev-home job dirs use
  bootstrap-jobs/validation-jobs; cassandra realm jobs live in
  cassandra-auth (removed keycloak duplicates)
- Union: applications CR list gains hermes-chat and cassandra
  image-automation
- Fixed post-migration paths in dashboard test module loader and
  hermes-access job header

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:26:36 -03:00
jenkins
8f45f47e60 refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
  repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-05 16:21:36 -03:00