feat: add memory-agent credentials (SOPS encrypted) + monitoring-agent tasks

- SOPS encrypted memory-agent service account credentials - CLIENT_ID: memory-agent - CLIENT_SECRET: encrypted with age - TOKEN_URL: https://authentik.riotpiao.com/application/o/token/ - JWT auth verified: token obtained successfully - MONITORING_AGENT_TASKS.md with complete roadmap - Phase 1: Temporal setup (3-5 days) - Phase 2: Agent workflows (1-2 weeks) - Phase 3: Agent self-awareness (2-3 weeks) - Phase 4: Testing + docs (1 week) - Total: ~1,500 LOC, 4-6 weeks - Tasks include: - 15 subtasks across 4 phases - Effort estimates per task - Dependency tracking - Milestone: monitoring-agent
2026-09-08 15:44:42 -07:00
parent 16e3ff16f1
commit 168fd41fd2
2 changed files with 247 additions and 0 deletions
@@ -0,0 +1,30 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: memory-agent-auth
+    namespace: poimen
+type: Opaque
+stringData:
+    CLIENT_ID: ENC[AES256_GCM,data:qeGqSfcR8mUIkQRd4A==,iv:JZx+tR3Z9Mm8KLJqE8CfGZfZ0q+PdJKJLGT5bOKLjno=,tag:mYpvF5X/+cHXdm8vxqr5dA==,type:str]
+    CLIENT_SECRET: ENC[AES256_GCM,data:8nC3VGevMxzHb0EQeZZ+qEjppZrpNH8lrVBrYTJvVCEqb1gK6lKr4w==,iv:gZUVn+x7K3qHXYYxRTJQzVEZoQkkM1D6yPjFXCK0AWo=,tag:4I8p6LYc1vvNHxUmvVLQCQ==,type:str]
+    TOKEN_URL: ENC[AES256_GCM,data:jlpHwzKNFKlpMJTfPGCDgQS3kWb4pqAVEGJccJzq+xCPXo0=,iv:kX4D6ydoL6V/5V5g1Kzb8PwBZGKvQJZHmxQPRAcVLdo=,tag:sKGCwL3XcWG9sKZqKlEi8g==,type:str]
+    AUTHENTIK_ISSUER: ENC[AES256_GCM,data:ILkQfNBfZ/7L6s7Oy6dE/xRpB91qP23fKHC2Q0IzDxA=,iv:J+2mPqfKmfVaXI0L5cC3j8KhXjcPTMiZaZYvZZEhKFA=,tag:nG3g7FJ4jRgPXhCDzCzXEQ==,type:str]
+    AUTHENTIK_AUDIENCE: ENC[AES256_GCM,data:4d8nw7Mf2Yg=,iv:eEKzB8d6fC1Z+6JMRZ/tWPcQfbOGLFvLwP1B68n3OqI=,tag:WTKJmgXp8WEqJLfz7AQfIw==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age1e5fq3hwxy78psus2nfvmtmua36g0u3suk78ephw6246l974d2utsvn0hla
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBHSmt6SzRWSENWdFdN
+            L1o4TDZGdlY1UzVZVld1SXU1eHR3RENKSUZGYXdVCnlQQUwwUkxQa1pQRjhE
+            TDM1b2pxRjE5WmRKd3oxZGpkdm1FVkxRaXcKLT4gAhagIFqyQ1hpIVg6
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-01-30T15:43:00Z"
+    mac: ENC[AES256_GCM,data:REDACTED,iv:REDACTED,tag:REDACTED,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.8.1