From fafd242d01d32d4e9f0415a7d52a56dac10b85ff Mon Sep 17 00:00:00 2001 From: Pale Hazy <44535172+PaleHazy@users.noreply.github.com> Date: Fri, 9 Oct 2026 21:51:26 -0500 Subject: [PATCH] Stop deploying Chat2DB to Anvil Primaris The operator asked on 2026-10-09 to decommission Chat2DB for now. Over the previous week chat2db.hazyforge.io received 37 requests a day, every one a redirect to the login page. Argo CD on Anvil Primaris discovers this repository by its .hazyforge folder and deploys the chart and the four ExternalSecrets from it. Removing the folder is what stops that. The files are preserved in HazyForge/anvil-primaris under retirements/2026-10-09-festival-simulator-chat2db-hazyctl/sources/chat2db, so restoring the deployment means copying them back. The chart, the image and the application code are untouched. Co-Authored-By: Claude Opus 5.5 --- .../namespace/chat2db/deploy.yaml | 68 ------------------- .../encryption-key-external-secret.yaml | 22 ------ .../manifests/ghcr-creds-external-secret.yaml | 21 ------ .../hazytrade-datasource-external-secret.yaml | 21 ------ .../openai-proxy-external-secret.yaml | 18 ----- 5 files changed, 150 deletions(-) delete mode 100644 .hazyforge/clusters/anvil-primaris/namespace/chat2db/deploy.yaml delete mode 100644 .hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/encryption-key-external-secret.yaml delete mode 100644 .hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/ghcr-creds-external-secret.yaml delete mode 100644 .hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/hazytrade-datasource-external-secret.yaml delete mode 100644 .hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/openai-proxy-external-secret.yaml diff --git a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/deploy.yaml b/.hazyforge/clusters/anvil-primaris/namespace/chat2db/deploy.yaml deleted file mode 100644 index ee5914dec5..0000000000 --- a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/deploy.yaml +++ /dev/null @@ -1,68 +0,0 @@ -helmChartPath: charts/chat2db - -image: - repository: ghcr.io/hazyforge/chat2db - tag: sha-c8ba58b - digest: sha256:47e4639da38fc2ba9c8db493d18bbde78f40874d2534f27de67568a543996e09 - pullPolicy: IfNotPresent - -imagePullSecrets: - - name: ghcr-creds - -persistence: - storageClassName: observability-local - accessModes: - - ReadWriteOnce - size: 10Gi - -encryptionKey: - existingSecret: chat2db-encryption-key - secretKey: encryption.key - mountPath: /run/secrets/chat2db-community-encryption.key - -cors: - allowedOrigin: https://chat2db.hazyforge.io - -ai: - openai: - existingSecret: chat2db-openai-proxy - secretKey: api-key - baseUrl: https://codex.hazycloud.io - models: - - gpt-5.4 - -datasourceBootstrap: - enabled: true - rolloutRevision: "1" - managementKey: hazytrade-production-readonly - alias: Hazy Trade Production (read only) - type: POSTGRESQL - host: 5.161.253.191 - port: 5432 - database: hazytrade - user: chat2db_hazytrade_ro - authenticationType: "1" - environmentId: 2 - sslMode: verify-full - existingSecret: chat2db-hazytrade-datasource - passwordKey: password - caKey: ca.crt - -resources: - requests: - cpu: 500m - memory: 1Gi - limits: - cpu: "2" - memory: 4Gi - -nodeSelector: - kubernetes.io/hostname: z400 - -networkPolicy: - enabled: true - allowedIngress: - namespace: oauth2-proxy - podLabels: - app.kubernetes.io/name: oauth2-proxy - app.kubernetes.io/instance: chat2db diff --git a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/encryption-key-external-secret.yaml b/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/encryption-key-external-secret.yaml deleted file mode 100644 index 904a7eff4c..0000000000 --- a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/encryption-key-external-secret.yaml +++ /dev/null @@ -1,22 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: chat2db-encryption-key - namespace: chat2db -spec: - refreshInterval: 1h - secretStoreRef: - kind: ClusterSecretStore - name: azurekv-cluster-secret-store - target: - name: chat2db-encryption-key - creationPolicy: Owner - deletionPolicy: Retain - template: - type: Opaque - data: - encryption.key: "{{ .encryptionKey }}" - data: - - secretKey: encryptionKey - remoteRef: - key: secret/chat2db-community-encryption-key diff --git a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/ghcr-creds-external-secret.yaml b/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/ghcr-creds-external-secret.yaml deleted file mode 100644 index 1209cc8014..0000000000 --- a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/ghcr-creds-external-secret.yaml +++ /dev/null @@ -1,21 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: ghcr-creds - namespace: chat2db -spec: - refreshInterval: 1h - secretStoreRef: - kind: ClusterSecretStore - name: azurekv-cluster-secret-store - target: - name: ghcr-creds - creationPolicy: Owner - template: - type: kubernetes.io/dockerconfigjson - data: - .dockerconfigjson: '{"auths":{"ghcr.io":{"username":"hazyforge","password":"{{ .pat }}","auth":"{{ printf "%s:%s" "hazyforge" .pat | b64enc }}"}}}' - data: - - secretKey: pat - remoteRef: - key: secret/anvil-primaris-ghcr-read-pat diff --git a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/hazytrade-datasource-external-secret.yaml b/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/hazytrade-datasource-external-secret.yaml deleted file mode 100644 index e5a8d9caf3..0000000000 --- a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/hazytrade-datasource-external-secret.yaml +++ /dev/null @@ -1,21 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: chat2db-hazytrade-datasource - namespace: chat2db -spec: - refreshInterval: 1h - secretStoreRef: - kind: ClusterSecretStore - name: azurekv-cluster-secret-store - target: - name: chat2db-hazytrade-datasource - creationPolicy: Owner - deletionPolicy: Delete - data: - - secretKey: password - remoteRef: - key: secret/chat2db-hazytrade-ro-password - - secretKey: ca.crt - remoteRef: - key: secret/hazy-trade-postgres-ca-crt diff --git a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/openai-proxy-external-secret.yaml b/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/openai-proxy-external-secret.yaml deleted file mode 100644 index 90a70b559c..0000000000 --- a/.hazyforge/clusters/anvil-primaris/namespace/chat2db/manifests/openai-proxy-external-secret.yaml +++ /dev/null @@ -1,18 +0,0 @@ -apiVersion: external-secrets.io/v1 -kind: ExternalSecret -metadata: - name: chat2db-openai-proxy - namespace: chat2db -spec: - refreshInterval: 1h - secretStoreRef: - kind: ClusterSecretStore - name: azurekv-cluster-secret-store - target: - name: chat2db-openai-proxy - creationPolicy: Owner - deletionPolicy: Delete - data: - - secretKey: api-key - remoteRef: - key: secret/openai-key-proxy-client-api-key