Commit graph

370 commits

Author SHA1 Message Date
Ashwin Kumar Sivakumar
7889ed30f5 Fix cross-namespace secretKeyRef in ai-assistant deployment
JWT_SECRET can't reference nxtgauge-backend-rust-secrets (namespace
nxtgauge) from the ai-assistant pod, which the prod overlay places in
nxtgauge-ai — Kubernetes secretKeyRef must be same-namespace. Duplicate
the value into nxtgauge-ai-assistant-secrets instead.
2026-07-02 18:00:10 +05:30
Ashwin Kumar Sivakumar
e5793aefa5 Merge remote-tracking branch 'origin/main' 2026-07-02 17:57:41 +05:30
Ashwin Kumar Sivakumar
b4f371d415 Encrypt all secrets with SOPS, add Flux decryption support, rotate JWT_SECRET/AI_SERVICE_KEY
- Add .sops.yaml (age) and encrypt every plaintext Secret manifest in apps/
- Commit the Flux GitRepository/Kustomization (previously only applied manually)
  with a decryption stanza referencing the sops-age key (created out-of-band,
  not committed)
- Rotate JWT_SECRET (previously exposed in plaintext) and set a real
  AI_SERVICE_KEY (was an empty placeholder), shared between
  nxtgauge-backend-rust and nxtgauge-ai-assistant
- Wire JWT_SECRET into the ai-assistant deployment (was missing entirely,
  causing every authenticated request to fail)
- Redact the leaked LiteLLM production master key from README/OPENCODE_CONNECT
  docs; move the litellm prod overlay off a plaintext secretGenerator onto an
  encrypted patch
2026-07-02 17:56:28 +05:30
Ashwin Kumar Sivakumar
8515bcd3fe Merge branch 'main' of https://github.com/Traceworks2023/nxtgauge-gitops
# Conflicts:
#	apps/nxtgauge-admin-solid/overlays/prod/release-patch.yaml
#	apps/nxtgauge-backend-rust/overlays/prod/backend-release-state.tsv
#	apps/nxtgauge-backend-rust/overlays/prod/release-patches.yaml
#	apps/nxtgauge-frontend-solid/overlays/prod/release-patch.yaml
2026-07-02 17:26:04 +05:30
github-actions[bot]
98a9b9fb56 chore(gitops): deploy ai-assistant@2e0b986e20fda5a7bce07b2d5699599c171f442d 2026-07-02 11:55:00 +00:00
github-actions[bot]
041e3fc68d chore(gitops): deploy ai-assistant@e33ed2192c3cf9172888a6b3d9e77a9cb52b2892 2026-07-02 01:24:15 +00:00
github-actions[bot]
cb07580e70 chore(gitops): deploy backend ugc-content-creators@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:23:28 +00:00
github-actions[bot]
1c2eee9c80 chore(gitops): deploy backend cron@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:21:50 +00:00
github-actions[bot]
5c9a225763 chore(gitops): deploy backend catering-services@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:17:43 +00:00
github-actions[bot]
8120fe6691 chore(gitops): deploy backend social-media-managers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:17:08 +00:00
github-actions[bot]
c2c083c762 chore(gitops): deploy backend fitness-trainers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:16:46 +00:00
github-actions[bot]
172f69d3a5 chore(gitops): deploy backend graphic-designers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:10:49 +00:00
github-actions[bot]
05e9e4e255 chore(gitops): deploy backend developers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:09:16 +00:00
github-actions[bot]
fd6466cea3 chore(gitops): deploy backend video-editors@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:09:07 +00:00
github-actions[bot]
515f14eaa8 chore(gitops): deploy backend tutors@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:04:02 +00:00
github-actions[bot]
834f3cdc78 chore(gitops): deploy backend cron@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 20:01:37 +00:00
github-actions[bot]
244002b0e8 chore(gitops): deploy backend makeup-artists@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:01:23 +00:00
github-actions[bot]
c86864709b chore(gitops): deploy backend ugc-content-creators@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:57:43 +00:00
github-actions[bot]
77bf405680 chore(gitops): deploy backend photographers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:57:12 +00:00
github-actions[bot]
7bdbc99e72 chore(gitops): deploy backend catering-services@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:53:26 +00:00
github-actions[bot]
d1c2976184 chore(gitops): deploy backend fitness-trainers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:51:00 +00:00
github-actions[bot]
753d11cac6 chore(gitops): deploy backend employees@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:49:31 +00:00
github-actions[bot]
6f5fed6ac1 chore(gitops): deploy backend payments@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:45:16 +00:00
github-actions[bot]
41d2c456ba chore(gitops): deploy backend social-media-managers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:44:07 +00:00
github-actions[bot]
24d6bc698d chore(gitops): deploy backend customers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:42:37 +00:00
github-actions[bot]
34c7734a0d chore(gitops): deploy backend graphic-designers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:37:35 +00:00
github-actions[bot]
891c0fc90a chore(gitops): deploy backend video-editors@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:37:05 +00:00
github-actions[bot]
15939ab952 chore(gitops): deploy backend job-seekers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:35:49 +00:00
github-actions[bot]
5da33729e1 chore(gitops): deploy backend leads@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:29:55 +00:00
github-actions[bot]
9919cefb26 chore(gitops): deploy backend developers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:29:32 +00:00
github-actions[bot]
f153f2d9fd chore(gitops): deploy backend jobs@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:28:01 +00:00
github-actions[bot]
ebaa744da5 chore(gitops): deploy backend tutors@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:25:16 +00:00
github-actions[bot]
2d966cbf67 chore(gitops): deploy backend makeup-artists@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:23:14 +00:00
github-actions[bot]
27b6b6c38f chore(gitops): deploy backend users@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:22:01 +00:00
github-actions[bot]
96d684d35f chore(gitops): deploy backend gateway@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:17:23 +00:00
github-actions[bot]
f8fe1f5585 chore(gitops): deploy backend companies@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:16:10 +00:00
github-actions[bot]
c8b6ae6b2e chore(gitops): deploy backend employees@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:14:13 +00:00
github-actions[bot]
7388eae5d4 chore(gitops): deploy backend photographers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:13:36 +00:00
github-actions[bot]
363918607a chore(gitops): deploy admin-solid@22fe1409878d7434772c3c7e5400bed0794969c8 2026-06-26 19:10:30 +00:00
github-actions[bot]
f787c286a7 chore(gitops): deploy backend customers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:06:06 +00:00
github-actions[bot]
ea85927403 chore(gitops): deploy backend job-seekers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:06:05 +00:00
github-actions[bot]
537fea88d0 chore(gitops): deploy backend leads@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:01:42 +00:00
github-actions[bot]
3aba437547 chore(gitops): deploy backend users@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:59:15 +00:00
github-actions[bot]
b8ebe27c20 chore(gitops): deploy backend jobs@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:58:31 +00:00
github-actions[bot]
4c04225966 chore(gitops): deploy backend companies@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:57:47 +00:00
github-actions[bot]
0f3c312c0c chore(gitops): deploy backend gateway@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:53:58 +00:00
github-actions[bot]
b4a7ec7665 chore(gitops): deploy frontend-solid@ab054884eb51b1de7bc76ace8db7c5e53263adae 2026-06-26 18:53:08 +00:00
Ashwin Kumar Sivakumar
30ed1833c7 Switch nxtgauge deploys to Forgejo registry 2026-06-17 03:28:47 +05:30
github-actions[bot]
5956b79e8b chore(gitops): deploy backend ugc-content-creators@a38a2fd1850dbf720c4a192a5c5085a6807bde18 2026-06-15 22:43:41 +00:00
github-actions[bot]
c9d5c8e4f7 chore(gitops): deploy backend catering-services@a38a2fd1850dbf720c4a192a5c5085a6807bde18 2026-06-15 22:43:16 +00:00