ashwin/nxtgauge-gitops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
346 commits 3 branches 0 tags 3.3 MiB
Commit graph

325 commits

Author SHA1 Message Date
Ashwin Kumar Sivakumar
e08618fdcf Merge remote-tracking branch 'origin/main' 2026-07-02 18:49:34 +05:30
Ashwin Kumar Sivakumar
a2e3260bb1 Switch ai-assistant to LiteLLM provider with task-specific models 
Was defaulting to plain Ollama with gemma3:270m for every request -
no LLM_PROVIDER or LITELLM_* env vars were set. LiteLLM is already
deployed with purpose-built model aliases per task
(apps/litellm/base/configmap.yaml); this wires ai-assistant to use it.
 2026-07-02 18:48:52 +05:30
github-actions[bot]
9ae63b8b37 chore(gitops): deploy ai-assistant@6decf8dce2a45acaacf17d8715218661fde93e73 2026-07-02 13:04:58 +00:00
Ashwin Kumar Sivakumar
6c77b8777e Add PayU merchant key and salt to backend-rust secrets 
Wires the PayU credentials for the classic hosted-checkout hash flow
(PAYU_MERCHANT_KEY, PAYU_SALT), consumed by the payments service's
resolve_payu_config fallback and the admin payment-gateway config API.
 2026-07-02 18:30:29 +05:30
Ashwin Kumar Sivakumar
3418b23d35 Rotate Postgres (postgres role) and Redis passwords 
Old password was reused across the postgres superuser, Redis, and
Forgejo's separate nxtgauge DB role. Rotated only the postgres role
and Redis (Forgejo's nxtgauge role password is untouched and still
valid, verified against the live DB).
 2026-07-02 18:15:10 +05:30
Ashwin Kumar Sivakumar
7889ed30f5 Fix cross-namespace secretKeyRef in ai-assistant deployment 
JWT_SECRET can't reference nxtgauge-backend-rust-secrets (namespace
nxtgauge) from the ai-assistant pod, which the prod overlay places in
nxtgauge-ai — Kubernetes secretKeyRef must be same-namespace. Duplicate
the value into nxtgauge-ai-assistant-secrets instead.
 2026-07-02 18:00:10 +05:30
Ashwin Kumar Sivakumar
e5793aefa5 Merge remote-tracking branch 'origin/main' 2026-07-02 17:57:41 +05:30
Ashwin Kumar Sivakumar
b4f371d415 Encrypt all secrets with SOPS, add Flux decryption support, rotate JWT_SECRET/AI_SERVICE_KEY 
- Add .sops.yaml (age) and encrypt every plaintext Secret manifest in apps/
- Commit the Flux GitRepository/Kustomization (previously only applied manually)
  with a decryption stanza referencing the sops-age key (created out-of-band,
  not committed)
- Rotate JWT_SECRET (previously exposed in plaintext) and set a real
  AI_SERVICE_KEY (was an empty placeholder), shared between
  nxtgauge-backend-rust and nxtgauge-ai-assistant
- Wire JWT_SECRET into the ai-assistant deployment (was missing entirely,
  causing every authenticated request to fail)
- Redact the leaked LiteLLM production master key from README/OPENCODE_CONNECT
  docs; move the litellm prod overlay off a plaintext secretGenerator onto an
  encrypted patch
 2026-07-02 17:56:28 +05:30
Ashwin Kumar Sivakumar
8515bcd3fe Merge branch 'main' of https://github.com/Traceworks2023/nxtgauge-gitops 
# Conflicts:
#	apps/nxtgauge-admin-solid/overlays/prod/release-patch.yaml
#	apps/nxtgauge-backend-rust/overlays/prod/backend-release-state.tsv
#	apps/nxtgauge-backend-rust/overlays/prod/release-patches.yaml
#	apps/nxtgauge-frontend-solid/overlays/prod/release-patch.yaml
 2026-07-02 17:26:04 +05:30
github-actions[bot]
98a9b9fb56 chore(gitops): deploy ai-assistant@2e0b986e20fda5a7bce07b2d5699599c171f442d 2026-07-02 11:55:00 +00:00
github-actions[bot]
041e3fc68d chore(gitops): deploy ai-assistant@e33ed2192c3cf9172888a6b3d9e77a9cb52b2892 2026-07-02 01:24:15 +00:00
github-actions[bot]
cb07580e70 chore(gitops): deploy backend ugc-content-creators@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:23:28 +00:00
github-actions[bot]
1c2eee9c80 chore(gitops): deploy backend cron@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:21:50 +00:00
github-actions[bot]
5c9a225763 chore(gitops): deploy backend catering-services@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:17:43 +00:00
github-actions[bot]
8120fe6691 chore(gitops): deploy backend social-media-managers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:17:08 +00:00
github-actions[bot]
c2c083c762 chore(gitops): deploy backend fitness-trainers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:16:46 +00:00
github-actions[bot]
172f69d3a5 chore(gitops): deploy backend graphic-designers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:10:49 +00:00
github-actions[bot]
05e9e4e255 chore(gitops): deploy backend developers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:09:16 +00:00
github-actions[bot]
fd6466cea3 chore(gitops): deploy backend video-editors@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:09:07 +00:00
github-actions[bot]
515f14eaa8 chore(gitops): deploy backend tutors@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:04:02 +00:00
github-actions[bot]
834f3cdc78 chore(gitops): deploy backend cron@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 20:01:37 +00:00
github-actions[bot]
244002b0e8 chore(gitops): deploy backend makeup-artists@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 20:01:23 +00:00
github-actions[bot]
c86864709b chore(gitops): deploy backend ugc-content-creators@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:57:43 +00:00
github-actions[bot]
77bf405680 chore(gitops): deploy backend photographers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:57:12 +00:00
github-actions[bot]
7bdbc99e72 chore(gitops): deploy backend catering-services@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:53:26 +00:00
github-actions[bot]
d1c2976184 chore(gitops): deploy backend fitness-trainers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:51:00 +00:00
github-actions[bot]
753d11cac6 chore(gitops): deploy backend employees@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:49:31 +00:00
github-actions[bot]
6f5fed6ac1 chore(gitops): deploy backend payments@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:45:16 +00:00
github-actions[bot]
41d2c456ba chore(gitops): deploy backend social-media-managers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:44:07 +00:00
github-actions[bot]
24d6bc698d chore(gitops): deploy backend customers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:42:37 +00:00
github-actions[bot]
34c7734a0d chore(gitops): deploy backend graphic-designers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:37:35 +00:00
github-actions[bot]
891c0fc90a chore(gitops): deploy backend video-editors@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:37:05 +00:00
github-actions[bot]
15939ab952 chore(gitops): deploy backend job-seekers@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:35:49 +00:00
github-actions[bot]
5da33729e1 chore(gitops): deploy backend leads@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:29:55 +00:00
github-actions[bot]
9919cefb26 chore(gitops): deploy backend developers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:29:32 +00:00
github-actions[bot]
f153f2d9fd chore(gitops): deploy backend jobs@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:28:01 +00:00
github-actions[bot]
ebaa744da5 chore(gitops): deploy backend tutors@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:25:16 +00:00
github-actions[bot]
2d966cbf67 chore(gitops): deploy backend makeup-artists@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:23:14 +00:00
github-actions[bot]
27b6b6c38f chore(gitops): deploy backend users@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:22:01 +00:00
github-actions[bot]
96d684d35f chore(gitops): deploy backend gateway@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:17:23 +00:00
github-actions[bot]
f8fe1f5585 chore(gitops): deploy backend companies@508242727996f205121b6759170a78fcc2851b5d 2026-06-26 19:16:10 +00:00
github-actions[bot]
c8b6ae6b2e chore(gitops): deploy backend employees@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:14:13 +00:00
github-actions[bot]
7388eae5d4 chore(gitops): deploy backend photographers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:13:36 +00:00
github-actions[bot]
363918607a chore(gitops): deploy admin-solid@22fe1409878d7434772c3c7e5400bed0794969c8 2026-06-26 19:10:30 +00:00
github-actions[bot]
f787c286a7 chore(gitops): deploy backend customers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:06:06 +00:00
github-actions[bot]
ea85927403 chore(gitops): deploy backend job-seekers@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:06:05 +00:00
github-actions[bot]
537fea88d0 chore(gitops): deploy backend leads@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 19:01:42 +00:00
github-actions[bot]
3aba437547 chore(gitops): deploy backend users@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:59:15 +00:00
github-actions[bot]
b8ebe27c20 chore(gitops): deploy backend jobs@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:58:31 +00:00
github-actions[bot]
4c04225966 chore(gitops): deploy backend companies@cd3fbfe7caaea42a438fea484eafcd1d85d16f17 2026-06-26 18:57:47 +00:00