mirror of
https://github.com/hanzoai/agent.git
synced 2026-09-11 21:08:51 +00:00
zeekay
f0b9d4998e
Updates deployments/helm/hanzo-agents/values.yaml to the canonical
Hanzo Go binary shape:
- Image: ghcr.io/hanzoai/agents:v0.1.0 (CI-built per
~/.claude/CLAUDE.md, never local docker build)
- Ingress: hanzoai/ingress className (NEVER nginx/caddy)
- Domain: agents.hanzo.ai
- Env:
AGENTD_DATA_DIR=/data
AGENTD_HTTP_ADDR=:8080
AGENTD_REQUIRE_IDENTITY=true ← multitenant gateway-trust
Older HANZO_AGENTS_* env names still work via the binary's
backward-compat reader; operator migrates by replacing the
canonical names in their values overlays.
129 lines
3.1 KiB
YAML
129 lines
3.1 KiB
YAML
controlPlane:
|
|
replicaCount: 1
|
|
|
|
image:
|
|
# Canonical Hanzo Go binary: ghcr.io/hanzoai/<svc>:vN.M.P. The
|
|
# 'agents' image carries the agentd binary built from
|
|
# ~/work/hanzo/agent/control-plane/cmd/agentd via CI (no local
|
|
# docker build per ~/.claude/CLAUDE.md).
|
|
repository: ghcr.io/hanzoai/agents
|
|
tag: v0.1.0
|
|
pullPolicy: IfNotPresent
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8080
|
|
# Admin gRPC listens on (port + 100). Set to 0 to auto-compute.
|
|
grpcPort: 0
|
|
|
|
ingress:
|
|
# Canonical Hanzo ingress is hanzoai/ingress + hanzoai/static
|
|
# plugin (NEVER nginx, NEVER caddy per ~/.claude/CLAUDE.md).
|
|
# Operators set className to 'hanzoai-ingress' in their cluster
|
|
# values to attach the right controller.
|
|
enabled: true
|
|
className: "hanzoai-ingress"
|
|
annotations: {}
|
|
hosts:
|
|
- host: agents.hanzo.ai
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
tls:
|
|
- secretName: agents-hanzo-ai-tls
|
|
hosts:
|
|
- agents.hanzo.ai
|
|
|
|
storage:
|
|
# local (SQLite/Bolt under AGENTD_DATA_DIR) or postgres
|
|
mode: local
|
|
# If mode=postgres and this is empty, and postgres.enabled=true, the chart will auto-wire it.
|
|
postgresUrl: ""
|
|
|
|
env:
|
|
# Canonical agentd env. Older HANZO_AGENTS_* names still work
|
|
# for backward compatibility while the operator migrates.
|
|
AGENTD_DATA_DIR: /data
|
|
AGENTD_HTTP_ADDR: ":8080"
|
|
# Multitenant gateway-trust mode. hanzoai/gateway sits in front,
|
|
# validates the IAM JWT, and emits X-Org-Id / X-User-Id /
|
|
# X-User-Email. Set to "false" only for solo dev clusters.
|
|
AGENTD_REQUIRE_IDENTITY: "true"
|
|
|
|
extraEnv: []
|
|
|
|
persistence:
|
|
enabled: true
|
|
existingClaim: ""
|
|
storageClass: ""
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 1Gi
|
|
|
|
podAnnotations: {}
|
|
annotations: {}
|
|
|
|
podSecurityContext: {}
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: false
|
|
|
|
resources: {}
|
|
|
|
nodeSelector: {}
|
|
tolerations: []
|
|
affinity: {}
|
|
|
|
apiAuth:
|
|
enabled: false
|
|
apiKey: ""
|
|
existingSecret: ""
|
|
existingSecretKey: apiKey
|
|
|
|
postgres:
|
|
enabled: false
|
|
image:
|
|
repository: pgvector/pgvector
|
|
tag: pg16
|
|
pullPolicy: IfNotPresent
|
|
auth:
|
|
username: hanzo-agents
|
|
password: hanzo-agents
|
|
database: hanzo-agents
|
|
existingSecret: ""
|
|
existingSecretUsernameKey: username
|
|
existingSecretPasswordKey: password
|
|
existingSecretDatabaseKey: database
|
|
persistence:
|
|
enabled: true
|
|
storageClass: ""
|
|
accessModes:
|
|
- ReadWriteOnce
|
|
size: 5Gi
|
|
|
|
demoAgent:
|
|
enabled: false
|
|
image:
|
|
# Build locally from deployments/docker/Dockerfile.demo-go-agent and push/load into your cluster.
|
|
repository: hanzo-agents-demo-go-agent
|
|
tag: local
|
|
pullPolicy: IfNotPresent
|
|
nodeId: demo-go-agent
|
|
service:
|
|
type: ClusterIP
|
|
port: 8001
|
|
|
|
demoPythonAgent:
|
|
# Demo agent that installs the Python SDK from PyPI at startup (no custom image required).
|
|
# Intended for evaluation only.
|
|
enabled: false
|
|
image:
|
|
repository: python
|
|
tag: "3.11-slim"
|
|
pullPolicy: IfNotPresent
|
|
pipPackage: "hanzo-agents"
|
|
nodeId: demo-python-agent
|
|
service:
|
|
type: ClusterIP
|
|
port: 8001
|