37 lines
965 B
Markdown
37 lines
965 B
Markdown
|
# Kagent Base Configuration
|
||
|
|
|
||
|
|
Base Kubernetes manifests for Kagent deployment, environment-agnostic.
|
||
|
|
|
||
|
|
## Files
|
||
|
|
|
||
|
|
- **namespace.yaml** - Creates `kagent` namespace with labels
|
||
|
|
- **rbac.yaml** - ServiceAccount, ClusterRole, ClusterRoleBinding, ResourceQuota
|
||
|
|
- **configmap.yaml** - Kagent configuration with A2A integration settings
|
||
|
|
- **statefulset.yaml** - Kagent StatefulSet (3 replicas, anti-affinity, health checks)
|
||
|
|
- **service.yaml** - Headless service and API/gRPC endpoints
|
||
|
|
- **kustomization.yaml** - Kustomize manifest combining all resources
|
||
|
|
|
||
|
|
## Apply Base (Not Recommended for Production)
|
||
|
|
|
||
|
|
Base configuration is typically not applied directly. Use overlays instead:
|
||
|
|
|
||
|
|
```bash
|
||
|
|
# Development
|
||
|
|
kubectl apply -k overlays/dev
|
||
|
|
|
||
|
|
# Production
|
||
|
|
kubectl apply -k overlays/prod
|
||
|
|
```
|
||
|
|
|
||
|
|
## Resource Quotas
|
||
|
|
|
||
|
|
- CPU: 10 req, 20 limit
|
||
|
|
- Memory: 20Gi req, 40Gi limit
|
||
|
|
- Pods: 100
|
||
|
|
|
||
|
|
## Security Context
|
||
|
|
|
||
|
|
- Non-root user (UID 1000)
|
||
|
|
- No privilege escalation
|
||
|
|
- Capabilities dropped (ALL)
|