feat: load service adapters from ConfigMap, remove k8s API dependency

Adapters defined in config.yaml alongside routes and models. Parsed by existing config loader, populated into registry at startup. Removed: client-go deps, REST loader, informer, nginx proxy, CiliumNetworkPolicy, apis/gateway/v1/ (duplicate types). Kept: merged CI pipeline, imagePullPolicy Always, CA certs in Dockerfile.
2026-08-26 16:39:30 -07:00
parent 0cdfae2a93
commit 9c5fb0ce84
13 changed files with 276 additions and 423 deletions
@@ -36,3 +36,107 @@ data:
    - name: "BAAI/bge-reranker-base"
      address: "reranker-predictor.llm-serving:80"
      path: "/v1/rerank"
+    
+    # Service adapters for X-Service header routing
+    adapters:
+    - serviceName: sqs
+      upstream:
+        url: http://kmsvc-management-service.kmsvc.svc.cluster.local:8080
+        timeoutSeconds: 30
+      auth:
+        required: false
+      resources:
+      - name: send-message
+        methods:
+        - verb: POST
+          upstreamPath: /sqs/send
+      - name: receive-message
+        methods:
+        - verb: POST
+          upstreamPath: /sqs/receive
+      - name: list-queues
+        methods:
+        - verb: GET
+          upstreamPath: /sqs/queues
+
+    - serviceName: workflow
+      upstream:
+        url: http://temporal-frontend.temporal.svc.cluster.local:7233
+        timeoutSeconds: 60
+      auth:
+        required: false
+      resources:
+      - name: execute
+        methods:
+        - verb: POST
+          upstreamPath: /workflow/execute
+      - name: describe
+        methods:
+        - verb: GET
+          upstreamPath: /workflow/describe
+      - name: list
+        methods:
+        - verb: GET
+          upstreamPath: /workflow/list
+
+    - serviceName: memory
+      upstream:
+        url: http://poimen-memory.poimen.svc.cluster.local:8080
+        timeoutSeconds: 30
+      auth:
+        required: true
+        capability: "memory:read"
+      resources:
+      - name: query
+        methods:
+        - verb: POST
+          upstreamPath: /memory/query
+      - name: ingest
+        methods:
+        - verb: POST
+          upstreamPath: /memory/ingest
+      - name: skills
+        methods:
+        - verb: GET
+          upstreamPath: /memory/skills
+
+    - serviceName: s3
+      upstream:
+        url: http://minio-operator.minio-operator.svc.cluster.local:9000
+        timeoutSeconds: 30
+      auth:
+        required: false
+      resources:
+      - name: list-objects
+        methods:
+        - verb: GET
+          upstreamPath: /
+      - name: get-object
+        methods:
+        - verb: GET
+          upstreamPath: /
+      - name: put-object
+        methods:
+        - verb: PUT
+          upstreamPath: /
+
+    - serviceName: iam
+      upstream:
+        url: http://authentik-outpost.authentik.svc.cluster.local:9000
+        timeoutSeconds: 30
+      auth:
+        required: true
+        capability: "iam:admin"
+      resources:
+      - name: list-roles
+        methods:
+        - verb: GET
+          upstreamPath: /api/v3/roles
+      - name: list-users
+        methods:
+        - verb: GET
+          upstreamPath: /api/v3/users
+      - name: create-role
+        methods:
+        - verb: POST
+          upstreamPath: /api/v3/roles