Skip to content

Commit 8d0e525

Browse files
pbalogh-sapbalogh-sa
authored
feat: various configs for slim (#118)
* feat(slim): multiple slim configs Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * fix: add example slim client configs Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * fix: update default slim chart Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * feat: add cert-manger deploy Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * fix: add task to remove cert-manager Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * fix: typo Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> * fix: update slim chart Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com> --------- Signed-off-by: Peter Balogh <p.balogh.sa@gmail.com>
1 parent f394474 commit 8d0e525

File tree

12 files changed

+281
-2
lines changed

12 files changed

+281
-2
lines changed

‎integrations/agntcy-slim/Taskfile.yml‎

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,8 @@ vars:
1313
IMAGE_REPO: '{{ .IMAGE_REPO | default "ghcr.io/agntcy" }}'
1414
SLIM_IMAGE_TAG: '{{ .SLIM_IMAGE_TAG | default "0.3.15" }}'
1515
MCP_PROXY_IMAGE_TAG: '{{ .MCP_PROXY_IMAGE_TAG | default "0.1.5" }}'
16-
SLIM_CHART_TAG: '{{ .SLIM_CHART_TAG | default "v0.1.5" }}'
16+
SLIM_CHART_TAG: '{{ .SLIM_CHART_TAG | default "v0.1.7" }}'
17+
SLIM_CONFIG: '{{ .SLIM_CONFIG | default "base" }}'
1718

1819
IMAGE_BAKE_OPTS: '{{ .IMAGE_BAKE_OPTS | default "--set *.platform=linux/arm64" }}'
1920
LANGCHAIN_APP_TAG: '{{ .LANGCHAIN_APP_TAG | default "v0.0.10" }}'
@@ -53,6 +54,7 @@ tasks:
5354
--set slim.image.tag="{{ .SLIM_IMAGE_TAG }}" \
5455
--set mcpProxy.image.tag="{{ .MCP_PROXY_IMAGE_TAG }}" \
5556
--set mcpProxy.enabled="{{ .MCP_PROXY_DEPLOY }}" \
57+
-f components/config/{{ .SLIM_CONFIG }}/server-config.yaml \
5658
--namespace {{ .HELM_NAMESPACE }} \
5759
--create-namespace \
5860
--install \
@@ -62,9 +64,33 @@ tasks:
6264
6365
test-env:cleanup:
6466
desc: Remove agent slim test env
67+
cmds:
68+
- helm delete --namespace {{ .HELM_NAMESPACE }} agntcy-slim
69+
70+
cert-manager:deploy:
71+
desc: Deploy cert-manager
6572
cmds:
6673
- |
67-
helm delete --namespace {{ .HELM_NAMESPACE }} agntcy-slim
74+
helm repo add jetstack https://charts.jetstack.io --force-update
75+
helm upgrade cert-manager jetstack/cert-manager \
76+
--namespace cert-manager \
77+
--create-namespace \
78+
--version v1.17.2 \
79+
--set crds.enabled=true \
80+
--install \
81+
--wait \
82+
--wait-for-jobs \
83+
--timeout "15m"
84+
85+
cert-manager:remove:
86+
desc: Remove cert-manager
87+
cmds:
88+
- helm delete cert-manger -n cert-manger
89+
90+
certificates:create:
91+
desc: Create certificates
92+
cmds:
93+
- kubectl apply -f components/certificates
6894

6995
build:agentic-apps:
7096
desc: Build agentic containers

‎integrations/agntcy-slim/components/certificates/ca-based-issuer.yaml‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
apiVersion: cert-manager.io/v1
2+
kind: ClusterIssuer
3+
metadata:
4+
name: ecdsa-ca-issuer
5+
spec:
6+
ca:
7+
secretName: ecdsa-ca-secret

‎integrations/agntcy-slim/components/certificates/client-cert.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: cert-manager.io/v1
2+
kind: Certificate
3+
metadata:
4+
name: mtls-client-cert
5+
spec:
6+
secretName: mtls-client-tls
7+
privateKey:
8+
algorithm: ECDSA
9+
size: 384 # secp384r1
10+
issuerRef:
11+
name: ecdsa-ca-issuer
12+
kind: ClusterIssuer
13+
commonName: "client.agntcy.org"
14+
dnsNames:
15+
- client.agntcy.org
16+
usages:
17+
- client auth

‎integrations/agntcy-slim/components/certificates/ecdsa-ca-cert.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: cert-manager.io/v1
2+
kind: Certificate
3+
metadata:
4+
name: ecdsa-ca
5+
namespace: cert-manager
6+
spec:
7+
secretName: ecdsa-ca-secret
8+
isCA: true
9+
privateKey:
10+
algorithm: ECDSA
11+
size: 384 # This selects secp384r1 (P-384)
12+
issuerRef:
13+
name: selfsigned-issuer
14+
kind: ClusterIssuer
15+
commonName: "my-ecdsa-ca"
16+
dnsNames:
17+
- ca.agntcy.org

‎integrations/agntcy-slim/components/certificates/self-signed-cluster-issuer.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
apiVersion: cert-manager.io/v1
2+
kind: ClusterIssuer
3+
metadata:
4+
name: selfsigned-issuer
5+
spec:
6+
selfSigned: {}

‎integrations/agntcy-slim/components/certificates/server-cert.yaml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
apiVersion: cert-manager.io/v1
2+
kind: Certificate
3+
metadata:
4+
name: mtls-server-cert
5+
spec:
6+
secretName: mtls-server-tls
7+
privateKey:
8+
algorithm: ECDSA
9+
size: 384 # secp384r1
10+
issuerRef:
11+
name: ecdsa-ca-issuer
12+
kind: ClusterIssuer
13+
commonName: "server.agntcy.org"
14+
dnsNames:
15+
- server.agntcy.org
16+
usages:
17+
- server auth

‎integrations/agntcy-slim/components/config/base/client-config.yaml‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
# Copyright AGNTCY Contributors (https://github.com/agntcy)
2+
# SPDX-License-Identifier: Apache-2.0
3+
4+
slim:
5+
config:
6+
tracing:
7+
log_level: info
8+
display_thread_names: true
9+
display_thread_ids: true
10+
11+
runtime:
12+
n_cores: 0
13+
thread_name: "slim-data-plane"
14+
drain_timeout: 10s
15+
16+
services:
17+
slim/0:
18+
pubsub:
19+
clients:
20+
- endpoint: "http://agntcy-slim:46357"
21+
tls:
22+
insecure: true

‎integrations/agntcy-slim/components/config/base/server-config.yaml‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
# Copyright AGNTCY Contributors (https://github.com/agntcy)
2+
# SPDX-License-Identifier: Apache-2.0
3+
4+
slim:
5+
config:
6+
tracing:
7+
log_level: debug
8+
display_thread_names: true
9+
display_thread_ids: true
10+
11+
runtime:
12+
n_cores: 0
13+
thread_name: "slim-data-plane"
14+
drain_timeout: 10s
15+
16+
services:
17+
slim/0:
18+
pubsub:
19+
servers:
20+
- endpoint: "0.0.0.0:46357"
21+
tls:
22+
insecure: true
23+
clients: []
24+
25+
controller:
26+
server:
27+
endpoint: "0.0.0.0:46358"
28+
tls:
29+
insecure: true

‎integrations/agntcy-slim/components/config/mtls/client-config.yaml‎

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,34 @@
1+
# Copyright AGNTCY Contributors (https://github.com/agntcy)
2+
# SPDX-License-Identifier: Apache-2.0
3+
4+
slim:
5+
config:
6+
tracing:
7+
log_level: debug
8+
display_thread_names: true
9+
display_thread_ids: true
10+
11+
runtime:
12+
n_cores: 0
13+
thread_name: "slim-data-plane"
14+
drain_timeout: 10s
15+
16+
services:
17+
slim/0:
18+
pubsub:
19+
clients:
20+
- endpoint: "https://agntcy-slim:46357"
21+
tls:
22+
ca_file: "/etc/certs/ca.crt"
23+
cert_file: "/etc/certs/tls.crt"
24+
key_file: "/etc/certs/tls.key"
25+
26+
extraVolumes:
27+
- name: certs
28+
secret:
29+
secretName: mtls-server-tls
30+
31+
extraVolumeMounts:
32+
- name: certs
33+
mountPath: "/etc/certs"
34+
readOnly: true

‎integrations/agntcy-slim/components/config/mtls/server-config.yaml‎

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
# Copyright AGNTCY Contributors (https://github.com/agntcy)
2+
# SPDX-License-Identifier: Apache-2.0
3+
4+
slim:
5+
config:
6+
tracing:
7+
log_level: debug
8+
display_thread_names: true
9+
display_thread_ids: true
10+
11+
runtime:
12+
n_cores: 0
13+
thread_name: "slim-data-plane"
14+
drain_timeout: 10s
15+
16+
services:
17+
slim/0:
18+
pubsub:
19+
servers:
20+
- endpoint: "0.0.0.0:46357"
21+
tls:
22+
cert_file: "/etc/certs/tls.crt"
23+
key_file: "/etc/certs/tls.key"
24+
25+
client_ca_file: "/etc/certs/ca.crt"
26+
27+
clients: []
28+
29+
extraVolumes:
30+
- name: certs
31+
secret:
32+
secretName: mtls-server-tls
33+
34+
extraVolumeMounts:
35+
- name: certs
36+
mountPath: "/etc/certs"
37+
readOnly: true

0 commit comments

Comments
 (0)