feat(applicationsets): deploy the agent plane (kagent + agentgateway) on EKS

addons/ai-platform/agentgateway-crds/values-dev.yaml

@@ -0,0 +1 @@
+# agentgateway-crds — CRD-only chart; no values.

addons/ai-platform/agentgateway-crds/values-production.yaml

@@ -0,0 +1 @@
+# agentgateway-crds — CRD-only chart; no values.

addons/ai-platform/agentgateway-crds/values-staging.yaml

@@ -0,0 +1 @@
+# agentgateway-crds — CRD-only chart; no values.

addons/ai-platform/agentgateway-crds/values.yaml

@@ -0,0 +1 @@
+# agentgateway-crds — CRD-only chart; no values.

addons/ai-platform/agentgateway/values-dev.yaml

@@ -0,0 +1 @@
+# agentgateway — dev deltas from values.yaml

addons/ai-platform/agentgateway/values-production.yaml

@@ -0,0 +1 @@
+# agentgateway — production deltas from values.yaml

addons/ai-platform/agentgateway/values-staging.yaml

@@ -0,0 +1 @@
+# agentgateway — staging deltas from values.yaml

addons/ai-platform/agentgateway/values.yaml

@@ -0,0 +1,6 @@
+# agentgateway — model/tool gateway (mirrors the kx ai-platform install).
+# The operator emits Gateway/HTTPRoute/AgentgatewayBackend/AgentgatewayPolicy
+# CRs that route tenant traffic to Bedrock through this gateway.
+# Tune per-env below: replicas, Bedrock region/PrivateLink, guardrail config.
+controller:
+  replicaCount: 2

addons/ai-platform/kagent-crds/values-dev.yaml

@@ -0,0 +1 @@
+# kagent-crds — CRD-only chart; no values.

addons/ai-platform/kagent-crds/values-production.yaml

@@ -0,0 +1 @@
+# kagent-crds — CRD-only chart; no values.

addons/ai-platform/kagent-crds/values-staging.yaml

@@ -0,0 +1 @@
+# kagent-crds — CRD-only chart; no values.

addons/ai-platform/kagent-crds/values.yaml

@@ -0,0 +1 @@
+# kagent-crds — CRD-only chart; no values.

addons/ai-platform/kagent/values-dev.yaml

@@ -0,0 +1 @@
+# kagent — dev deltas from values.yaml

addons/ai-platform/kagent/values-production.yaml

@@ -0,0 +1 @@
+# kagent — production deltas from values.yaml

addons/ai-platform/kagent/values-staging.yaml

@@ -0,0 +1 @@
+# kagent — staging deltas from values.yaml

addons/ai-platform/kagent/values.yaml

@@ -0,0 +1,3 @@
+# kagent — Kubernetes-native agent runtime (mirrors the kx ai-platform install).
+# eks-agent-platform AgentFleet/ModelGateway CRs reconcile into kagent here.
+# Tune per-env below: Bedrock model access, replicas, kagent-tools/kmcp sub-charts.

applicationsets/addons-ai-platform.yaml

@@ -0,0 +1,86 @@
+apiVersion: argoproj.io/v1alpha1
+kind: ApplicationSet
+metadata:
+  name: addons-ai-platform
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "40"
+spec:
+  goTemplate: true
+  goTemplateOptions: ["missingkey=error"]
+  generators:
+    - matrix:
+        generators:
+          - clusters:
+              selector:
+                matchLabels:
+                  argocd.argoproj.io/secret-type: cluster
+          - list:
+              elements:
+                # CRDs first (wave 40), then the controllers (wave 42).
+                - appName: kagent-crds
+                  namespace: kagent
+                  chartRepo: oci://ghcr.io/kagent-dev/kagent/helm
+                  chart: kagent-crds
+                  chartVersion: "0.9.4"
+                  path: addons/ai-platform/kagent-crds
+                  syncWave: "40"
+                - appName: agentgateway-crds
+                  namespace: agentgateway
+                  chartRepo: oci://ghcr.io/agentgateway/agentgateway/charts
+                  chart: agentgateway-crds
+                  chartVersion: "1.0.1"
+                  path: addons/ai-platform/agentgateway-crds
+                  syncWave: "40"
+                - appName: kagent
+                  namespace: kagent
+                  chartRepo: oci://ghcr.io/kagent-dev/kagent/helm
+                  chart: kagent
+                  chartVersion: "0.9.4"
+                  path: addons/ai-platform/kagent
+                  syncWave: "42"
+                - appName: agentgateway
+                  namespace: agentgateway
+                  chartRepo: oci://ghcr.io/agentgateway/agentgateway/charts
+                  chart: agentgateway
+                  chartVersion: "1.0.1"
+                  path: addons/ai-platform/agentgateway
+                  syncWave: "42"
+  template:
+    metadata:
+      name: '{{ .appName }}'
+      annotations:
+        argocd.argoproj.io/sync-wave: '{{ .syncWave }}'
+    spec:
+      project: platform
+      sources:
+        - repoURL: '{{ .chartRepo }}'
+          chart: '{{ .chart }}'
+          targetRevision: '{{ .chartVersion }}'
+          helm:
+            releaseName: '{{ .appName }}'
+            # No clusterName/vpcId parameters: these are upstream charts with
+            # their own value schemas (passing unknown --set values fails their
+            # render, as it did for cert-manager).
+            valueFiles:
+              - $values/{{ .path }}/values.yaml
+              - $values/{{ .path }}/values-{{ index .metadata.labels "environment" }}.yaml
+        - repoURL: https://github.com/nanohype/eks-gitops.git
+          targetRevision: main
+          ref: values
+      destination:
+        server: https://kubernetes.default.svc
+        namespace: '{{ .namespace }}'
+      syncPolicy:
+        automated:
+          prune: true
+          selfHeal: true
+        syncOptions:
+          - CreateNamespace=true
+          - ServerSideApply=true
+        retry:
+          limit: 5
+          backoff:
+            duration: 5s
+            factor: 2
+            maxDuration: 3m