# Everything here is an endpoint or a public identifier. The one secret the
# agent holds arrives through catalogue-agent-secrets; nothing in this file is
# sensitive, which is the point of keeping the split visible.
apiVersion: v1
kind: ConfigMap
metadata:
  name: catalogue-agent-config
  namespace: agents
data:
  CATALOGUE_KEYCLOAK_REALM_URL: https://keycloak.sttlab.local/realms/classic-models
  CATALOGUE_CLIENT_ID: classic-models-agent-catalogue

  CATALOGUE_MCP_CATALOG_URL: https://catalog-dev.sttlab.local/catalog-mcp
  CATALOGUE_MCP_SALES_URL: https://sales-dev.sttlab.local/sales-mcp

  CATALOGUE_LLM_BASE_URL: https://llm-dev.sttlab.local/llm/v1
  CATALOGUE_LLM_MODEL: google/gemini-3.7-flash

  # Trust the lab CA rather than disabling verification. Mounted from the
  # sttlab-ca ConfigMap.
  CATALOGUE_CA_BUNDLE: /etc/sttlab-ca/ca.crt

  # What other agents dial, so it is the Service DNS name and not the bind
  # address. It is advertised in the Agent Card; get it wrong and A2A callers
  # are pointed at nothing.
  CATALOGUE_PUBLIC_URL: http://catalogue-agent.agents.svc.cluster.local:8080/