@bluefly/openstandardagents 0.2.4

package/examples/bridges/k8s/deployment.yaml

@@ -0,0 +1,275 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+    component: agent
+    framework: aiflow
+    ossa-compliant: "true"
+    version: "1.0.0"
+  annotations:
+    description: "AIFlow personality-driven social agent with BuildKit registration"
+    phoenix-project: "aiflow-social-agents"
+    ossa-manifest: "social-agent-aiflow.ossa.yaml"
+spec:
+  replicas: 2
+  revisionHistoryLimit: 3
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 0
+  selector:
+    matchLabels:
+      app: aiflow-social-agent
+  template:
+    metadata:
+      labels:
+        app: aiflow-social-agent
+        component: agent
+        framework: aiflow
+        version: "1.0.0"
+      annotations:
+        prometheus.io/scrape: "true"
+        prometheus.io/port: "8000"
+        prometheus.io/path: "/metrics"
+        phoenix.arize.com/project: "aiflow-social-agents"
+    spec:
+      serviceAccountName: aiflow-agent
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        fsGroup: 1000
+      
+      terminationGracePeriodSeconds: 30
+      
+      # Init container to check BuildKit registry availability
+      initContainers:
+        - name: wait-for-buildkit
+          image: busybox:1.36
+          command:
+            - sh
+            - -c
+            - |
+              echo "Waiting for BuildKit registry..."
+              until wget -q --spider http://buildkit.agent-buildkit.svc.cluster.local/api/v1/health; do
+                echo "BuildKit not ready, waiting..."
+                sleep 5
+              done
+              echo "BuildKit is ready!"
+          resources:
+            requests:
+              cpu: 10m
+              memory: 16Mi
+            limits:
+              cpu: 50m
+              memory: 32Mi
+
+      containers:
+        - name: aiflow-agent
+          image: registry.bluefly.io/llm/aiflow-social-agent:1.0.0
+          imagePullPolicy: IfNotPresent
+
+          ports:
+            - name: http
+              containerPort: 8000
+              protocol: TCP
+            - name: metrics
+              containerPort: 8000
+              protocol: TCP
+
+          env:
+            # Agent Identity
+            - name: AGENT_ID
+              value: "social-agent-aiflow"
+            - name: AGENT_NAME
+              value: "AIFlow Social Agent"
+            - name: AGENT_VERSION
+              value: "1.0.0"
+
+            # Service URLs
+            - name: BASE_URL
+              value: "http://aiflow-social-agent.agents.svc.cluster.local:8000"
+            - name: BUILDKIT_REGISTRY_URL
+              value: "http://buildkit.agent-buildkit.svc.cluster.local/api/v1"
+
+            # Phoenix Tracing
+            - name: PHOENIX_ENDPOINT
+              value: "http://otel-collector.observability.svc.cluster.local:4318"
+            - name: PHOENIX_PROJECT
+              value: "aiflow-social-agents"
+            - name: PHOENIX_ENABLED
+              value: "true"
+
+            # Runtime Configuration
+            - name: HEARTBEAT_INTERVAL
+              value: "30"
+            - name: LOG_LEVEL
+              value: "info"
+            - name: PYTHONUNBUFFERED
+              value: "1"
+
+            # API Key from Secret
+            - name: AIFLOW_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: aiflow-agent-secrets
+                  key: api-key
+
+            # Social Platform Credentials
+            - name: TWITTER_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: aiflow-agent-secrets
+                  key: twitter-api-key
+                  optional: true
+            - name: TELEGRAM_BOT_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: aiflow-agent-secrets
+                  key: telegram-bot-token
+                  optional: true
+
+            # Kubernetes Info
+            - name: K8S_POD_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+            - name: K8S_POD_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+            - name: K8S_NODE_NAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+
+          # Resource Limits
+          resources:
+            requests:
+              cpu: 500m
+              memory: 512Mi
+            limits:
+              cpu: 1000m
+              memory: 1Gi
+
+          # Health Checks
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+            timeoutSeconds: 5
+            successThreshold: 1
+            failureThreshold: 3
+
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            timeoutSeconds: 3
+            successThreshold: 1
+            failureThreshold: 2
+
+          startupProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 5
+            timeoutSeconds: 3
+            successThreshold: 1
+            failureThreshold: 12 # 60 seconds max startup time
+        
+        # Graceful Shutdown
+        lifecycle:
+          preStop:
+            exec:
+              command:
+                - sh
+                - -c
+                - |
+                  echo "Initiating graceful shutdown..."
+                  sleep 5  # Allow current requests to complete
+        
+        # Volume Mounts
+        volumeMounts:
+            - name: config
+              mountPath: /app/config
+              readOnly: true
+            - name: character-data
+              mountPath: /app/characters
+              readOnly: true
+            - name: tmp
+              mountPath: /tmp
+
+      # Volumes
+      volumes:
+        - name: config
+          configMap:
+            name: aiflow-agent-config
+        - name: character-data
+          configMap:
+            name: aiflow-character-config
+        - name: tmp
+          emptyDir: {}
+
+      # Scheduling
+      affinity:
+        # Prefer spreading across nodes
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 100
+              podAffinityTerm:
+                labelSelector:
+                  matchLabels:
+                    app: aiflow-social-agent
+                topologyKey: kubernetes.io/hostname
+
+      # Tolerations
+      tolerations:
+        - key: "workload"
+          operator: "Equal"
+          value: "agents"
+          effect: "NoSchedule"
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: aiflow-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+  annotations:
+    prometheus.io/scrape: "true"
+    prometheus.io/port: "8000"
+    prometheus.io/path: "/metrics"
+spec:
+  type: ClusterIP
+  sessionAffinity: None
+  ports:
+    - name: http
+      port: 8000
+      targetPort: http
+      protocol: TCP
+    - name: metrics
+      port: 9090
+      targetPort: metrics
+      protocol: TCP
+  selector:
+    app: aiflow-social-agent

package/examples/bridges/k8s/hpa.yaml

@@ -0,0 +1,126 @@
+apiVersion: autoscaling/v2
+kind: HorizontalPodAutoscaler
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+  annotations:
+    description: "Auto-scale AIFlow agent based on CPU, memory, and custom metrics"
+spec:
+  scaleTargetRef:
+    apiVersion: apps/v1
+    kind: Deployment
+    name: aiflow-social-agent
+
+  minReplicas: 2
+  maxReplicas: 10
+
+  behavior:
+    scaleDown:
+      stabilizationWindowSeconds: 300 # Wait 5 minutes before scaling down
+      policies:
+        - type: Percent
+          value: 50
+          periodSeconds: 60 # Remove 50% of pods per minute max
+        - type: Pods
+          value: 2
+          periodSeconds: 60 # Remove 2 pods per minute max
+      selectPolicy: Min # Use the most conservative policy
+
+    scaleUp:
+      stabilizationWindowSeconds: 0 # Scale up immediately
+      policies:
+        - type: Percent
+          value: 100
+          periodSeconds: 30 # Double pods every 30 seconds if needed
+        - type: Pods
+          value: 4
+          periodSeconds: 30 # Add 4 pods per 30 seconds max
+      selectPolicy: Max # Use the most aggressive policy
+
+  metrics:
+    # CPU Utilization
+    - type: Resource
+      resource:
+        name: cpu
+        target:
+          type: Utilization
+          averageUtilization: 70
+
+    # Memory Utilization
+    - type: Resource
+      resource:
+        name: memory
+        target:
+          type: Utilization
+          averageUtilization: 80
+
+    # Custom Metric: API Request Rate
+    - type: Pods
+      pods:
+        metric:
+          name: aiflow_api_requests_per_second
+        target:
+          type: AverageValue
+          averageValue: "100"
+
+    # Custom Metric: Active Tasks
+    - type: Pods
+      pods:
+        metric:
+          name: aiflow_active_tasks
+        target:
+          type: AverageValue
+          averageValue: "50"
+
+    # Custom Metric: API Latency (P95)
+    - type: Pods
+      pods:
+        metric:
+          name: aiflow_api_latency_p95
+        target:
+          type: AverageValue
+          averageValue: "500m" # 500ms
+
+---
+apiVersion: v1
+kind: ServiceMonitor
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+    prometheus: kube-prometheus
+spec:
+  selector:
+    matchLabels:
+      app: aiflow-social-agent
+  endpoints:
+    - port: metrics
+      interval: 30s
+      path: /metrics
+      scheme: http
+      honorLabels: true
+      relabelings:
+        - sourceLabels: [__meta_kubernetes_pod_name]
+          targetLabel: pod
+        - sourceLabels: [__meta_kubernetes_pod_node_name]
+          targetLabel: node
+        - sourceLabels: [__meta_kubernetes_namespace]
+          targetLabel: namespace
+
+---
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+spec:
+  minAvailable: 1
+  selector:
+    matchLabels:
+      app: aiflow-social-agent
+  unhealthyPodEvictionPolicy: IfHealthyBudget

package/examples/bridges/k8s/ingress.yaml

@@ -0,0 +1,155 @@
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+  annotations:
+    # Nginx ingress annotations
+    kubernetes.io/ingress.class: "nginx"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+
+    # Rate limiting
+    nginx.ingress.kubernetes.io/limit-rps: "100"
+    nginx.ingress.kubernetes.io/limit-burst-multiplier: "5"
+
+    # Timeouts
+    nginx.ingress.kubernetes.io/proxy-connect-timeout: "30"
+    nginx.ingress.kubernetes.io/proxy-send-timeout: "30"
+    nginx.ingress.kubernetes.io/proxy-read-timeout: "30"
+
+    # CORS
+    nginx.ingress.kubernetes.io/enable-cors: "true"
+    nginx.ingress.kubernetes.io/cors-allow-origin: "https://agent-buildkit.orb.local"
+    nginx.ingress.kubernetes.io/cors-allow-methods: "GET, POST, OPTIONS"
+
+    # Security headers
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers "X-Frame-Options: DENY";
+      more_set_headers "X-Content-Type-Options: nosniff";
+      more_set_headers "X-XSS-Protection: 1; mode=block";
+      more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
+spec:
+  tls:
+    - hosts:
+        - aiflow-agent.agents.orb.local
+      secretName: aiflow-agent-tls
+
+  rules:
+    - host: aiflow-agent.agents.orb.local
+      http:
+        paths:
+          # API endpoints
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: aiflow-social-agent
+                port:
+                  number: 8000
+
+          # Metrics endpoint (protected)
+          - path: /metrics
+            pathType: Exact
+            backend:
+              service:
+                name: aiflow-social-agent
+                port:
+                  number: 9090
+
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: aiflow-social-agent
+  namespace: agents
+  labels:
+    app: aiflow-social-agent
+spec:
+  podSelector:
+    matchLabels:
+      app: aiflow-social-agent
+
+  policyTypes:
+    - Ingress
+    - Egress
+
+  ingress:
+    # Allow traffic from ingress controller
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              name: ingress-nginx
+      ports:
+        - protocol: TCP
+          port: 8000
+
+    # Allow traffic from BuildKit registry
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              name: agent-buildkit
+        - podSelector:
+            matchLabels:
+              app: buildkit-registry
+      ports:
+        - protocol: TCP
+          port: 8000
+
+    # Allow Prometheus scraping
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              name: observability
+        - podSelector:
+            matchLabels:
+              app: prometheus
+      ports:
+        - protocol: TCP
+          port: 9090
+
+  egress:
+    # Allow DNS
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              name: kube-system
+        - podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - protocol: UDP
+          port: 53
+
+    # Allow BuildKit registry
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              name: agent-buildkit
+      ports:
+        - protocol: TCP
+          port: 80
+        - protocol: TCP
+          port: 443
+
+    # Allow OTEL collector
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              name: observability
+        - podSelector:
+            matchLabels:
+              app: otel-collector
+      ports:
+        - protocol: TCP
+          port: 4318
+
+    # Allow external API calls (Twitter, Telegram, etc.)
+    - to:
+        - namespaceSelector: {}
+      ports:
+        - protocol: TCP
+          port: 443

package/examples/bridges/kagent-bridge-example.yml

@@ -0,0 +1,94 @@
+ossaVersion: "1.0"
+agent:
+  id: kubernetes-ops-agent
+  name: Kubernetes Operations Agent
+  version: 1.0.0
+  description: OSSA agent with kagent.dev bridge for Kubernetes operations
+  role: orchestration
+  tags: ["kubernetes", "k8s", "devops", "kagent"]
+
+  runtime:
+    type: k8s
+    resources:
+      cpu: "500m"
+      memory: "512Mi"
+
+  capabilities:
+    - name: manage_deployments
+      description: Manage Kubernetes deployments
+      input_schema:
+        type: object
+        properties:
+          action:
+            type: string
+            enum: ["create", "update", "delete", "scale"]
+          deployment:
+            type: string
+          namespace:
+            type: string
+      output_schema:
+        type: object
+        properties:
+          status:
+            type: string
+          message:
+            type: string
+
+  monitoring:
+    traces: true
+    metrics: true
+    logs: true
+
+  # kagent.dev bridge configuration
+  bridge:
+    kagent:
+      enabled: true
+      api_version: kagent.dev/v1alpha2
+      agent_type: declarative
+      deployment:
+        replicas: 1
+        resources:
+          requests:
+            cpu: "100m"
+            memory: "256Mi"
+          limits:
+            cpu: "1000m"
+            memory: "1Gi"
+      model_config: default-model-config
+      system_message: |
+        You are a Kubernetes operations expert. You help users manage
+        and troubleshoot Kubernetes clusters. Use your tools to query
+        cluster state and perform operations safely.
+      tools:
+        - type: McpServer
+          mcpServer:
+            toolServer: kagent-tool-server
+            toolNames:
+              - k8s_get_resources
+              - k8s_get_available_api_resources
+              - k8s_apply_manifest
+              - k8s_delete_resource
+      a2a_config:
+        skills:
+          - id: cluster-management
+            name: Cluster Management
+            description: Manage Kubernetes cluster resources
+            examples:
+              - "Scale deployment nginx to 3 replicas"
+              - "Get all pods in production namespace"
+              - "Delete failed jobs in default namespace"
+            tags:
+              - kubernetes
+              - deployment
+              - operations
+          - id: troubleshooting
+            name: Cluster Troubleshooting
+            description: Diagnose and resolve cluster issues
+            examples:
+              - "Why is my pod crashing?"
+              - "Check resource usage across nodes"
+              - "Find pods consuming most memory"
+            tags:
+              - debugging
+              - diagnostics
+              - troubleshooting

package/examples/bridges/load-tests/Dockerfile

@@ -0,0 +1,28 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# Copy application files
+COPY aiflow-bridge-enhanced.py .
+COPY aiflow-phoenix-tracing.py .
+COPY requirements.txt .
+
+# Install dependencies
+RUN pip install --no-cache-dir -r requirements.txt
+
+# Create non-root user
+RUN useradd -m -u 1000 aiflow && \
+    chown -R aiflow:aiflow /app
+
+USER aiflow
+
+# Expose port
+EXPOSE 8000
+
+# Health check
+HEALTHCHECK --interval=30s --timeout=5s --start-period=30s --retries=3 \
+    CMD python -c "import requests; requests.get('http://localhost:8000/health').raise_for_status()"
+
+# Run application
+CMD ["python", "aiflow-bridge-enhanced.py"]
+