prod deployment

deploy/k8s/prod/secrets/ai-secrets.tpl.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ai-secrets
+  namespace: ai
+type: Opaque
+stringData:
+  anthropic-api-key: "{{ op://AI Prod/Gateway/anthropic_api_key }}"

deploy/k8s/prod/secrets/flink-secrets.tpl.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: flink-secrets
+  namespace: ai
+type: Opaque
+stringData:
+  minio-access-key: "{{ op://AI Prod/MinIO/access_key }}"
+  minio-secret-key: "{{ op://AI Prod/MinIO/secret_key }}"

deploy/k8s/prod/secrets/gateway-secrets.tpl.yaml

@@ -0,0 +1,45 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gateway-secrets
+  namespace: ai
+type: Opaque
+stringData:
+  secrets.yaml: |
+    # Gateway Secrets (production)
+
+    # Authentication secret for JWT signing
+    auth:
+      secret: "{{ op://AI Prod/Gateway/jwt_secret }}"
+
+    # LLM Provider API Keys
+    llm_providers:
+      anthropic_api_key: "{{ op://AI Prod/Gateway/anthropic_api_key }}"
+      openai_api_key: "{{ op://AI Prod/Gateway/openai_api_key }}"
+      google_api_key: "{{ op://AI Prod/Gateway/google_api_key }}"
+      openrouter_api_key: "{{ op://AI Prod/Gateway/openrouter_api_key }}"
+
+    # Telegram (optional)
+    telegram:
+      bot_token: "{{ op://AI Prod/Telegram/bot_token }}"
+
+    # Email service (optional)
+    email:
+      service_key: ""
+
+    # Push notification service (optional)
+    push:
+      service_key: ""
+
+    # Qdrant API key (optional, for hosted Qdrant)
+    qdrant:
+      api_key: ""
+
+    # Iceberg S3 credentials (must match minio-secret)
+    iceberg:
+      s3_access_key: "{{ op://AI Prod/MinIO/access_key }}"
+      s3_secret_key: "{{ op://AI Prod/MinIO/secret_key }}"
+
+    # Embedding API key (if using external provider)
+    embedding:
+      api_key: ""

deploy/k8s/prod/secrets/ingestor-secrets.tpl.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ingestor-secrets
+  namespace: ai
+type: Opaque
+stringData:
+  binance-api-key: "{{ op://AI Prod/Ingestor/binance_api_key }}"
+  binance-api-secret: "{{ op://AI Prod/Ingestor/binance_api_secret }}"
+  coinbase-api-key: "{{ op://AI Prod/Ingestor/coinbase_api_key }}"
+  coinbase-api-secret: "{{ op://AI Prod/Ingestor/coinbase_api_secret }}"
+  kraken-api-key: "{{ op://AI Prod/Ingestor/kraken_api_key }}"
+  kraken-api-secret: "{{ op://AI Prod/Ingestor/kraken_api_secret }}"

deploy/k8s/prod/secrets/minio-secret.tpl.yaml

@@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: minio-secret
+  namespace: ai
+type: Opaque
+stringData:
+  root-user: "{{ op://AI Prod/MinIO/access_key }}"
+  root-password: "{{ op://AI Prod/MinIO/secret_key }}"

deploy/k8s/prod/secrets/postgres-secret.tpl.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgres-secret
+  namespace: ai
+type: Opaque
+stringData:
+  password: "{{ op://AI Prod/PostgreSQL/password }}"

deploy/k8s/prod/secrets/sandbox-secrets.tpl.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: sandbox-secrets
+  namespace: sandbox
+  labels:
+    app.kubernetes.io/name: sandbox
+    app.kubernetes.io/component: secrets
+type: Opaque
+stringData:
+  secrets.yaml: |
+    # S3/MinIO credentials for Iceberg data access (must match minio-secret)
+    s3_access_key: "{{ op://AI Prod/MinIO/access_key }}"
+    s3_secret_key: "{{ op://AI Prod/MinIO/secret_key }}"