apiVersion: kustomize.toolkit.fluxcd.io/v1
kind: Kustomization
metadata:
  name: platform-llm-dev
  namespace: llm
spec:
  interval: 10m
  sourceRef:
    kind: GitRepository
    name: platform-llm-dev
  path: ./kong
  prune: true
  dependsOn:
    - name: llm-dev-ai-gateway
      namespace: flux-system
  postBuild:
    substitute:
      NAME: llm-dev
      NAMESPACE: llm
      CONTROL_PLANE_REF_NAME: llm-dev-jzvxt
      OIDC_ISSUER: https://keycloak.sttlab.eu/realms/sttlab
      AGENT_AUDIENCE: '["llm-proxy"]'
      OPENROUTER_UPSTREAM_URL: https://openrouter.ai/api/v1/chat/completions
      OPENROUTER_EMBEDDINGS_UPSTREAM_URL: https://openrouter.ai/api/v1/embeddings
      VECTORDB_HOST: llm-dev-vectordb
      VECTORDB_PORT: "6379"
      RATE_LIMIT_GLOBAL_TOKENS_PER_MINUTE: "500000"
      RATE_LIMIT_PER_CLIENT_TOKENS_PER_MINUTE: "50000"
      # Looked up after consumer.yaml's llm-anonymous KongConsumer first
      # reconciled — config.anonymous needs the real Consumer ID, not the
      # username (Konnect stores it as a literal string otherwise, silently
      # never resolving — verified live, request-termination never fired).
      LLM_ANONYMOUS_CONSUMER_ID: "1efd79ee-fd2d-4f2d-beb8-e6e9b24185a1"
    substituteFrom:
      - kind: Secret
        name: platform-llm-dev-secrets