refactor: k8s aigw deploy mode

Signed-off-by: bitliu <[email protected]>

Author: Xunzhuo

.github/workflows/k8s-config-test.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Test kustomize with different overlays
         run: |
           echo "Testing base kustomization..."
-          kustomize build deploy/kubernetes > /tmp/base-manifests.yaml
+          kustomize build deploy/kubernetes/ai-gateway/semantic-router > /tmp/base-manifests.yaml
 
           echo "Validating generated resources..."
 
@@ -57,22 +57,22 @@ jobs:
       - name: Verify ConfigMap generation
         run: |
           echo "Checking ConfigMap generation..."
-          kustomize build deploy/kubernetes | grep -A 20 "kind: ConfigMap"
+          kustomize build deploy/kubernetes/ai-gateway/semantic-router | grep -A 20 "kind: ConfigMap"
 
           # Verify config files are included
-          if ! kustomize build deploy/kubernetes | grep -q "config.yaml"; then
+          if ! kustomize build deploy/kubernetes/ai-gateway/semantic-router | grep -q "config.yaml"; then
             echo "Warning: config.yaml might not be properly included in ConfigMap"
           fi
 
-          if ! kustomize build deploy/kubernetes | grep -q "tools_db.json"; then
+          if ! kustomize build deploy/kubernetes/ai-gateway/semantic-router | grep -q "tools_db.json"; then
             echo "Warning: tools_db.json might not be properly included in ConfigMap"
           fi
 
       - name: Validate observability kustomization
         run: |
           echo "Validating observability stack kustomization..."
-          if [ -d "deploy/kubernetes/observability" ]; then
-            kustomize build deploy/kubernetes/observability > /tmp/observability-manifests.yaml
+          if [ -d "deploy/kubernetes/ai-gateway/semantic-router/observability" ]; then
+            kustomize build deploy/kubernetes/ai-gateway/semantic-router/observability > /tmp/observability-manifests.yaml
             echo "✓ Observability kustomization is valid"
             
             # Verify expected resources
@@ -90,9 +90,9 @@ jobs:
           echo "Validating AI Gateway configurations..."
 
           # Check if ai-gateway directory exists
-          if [ -d "deploy/kubernetes/ai-gateway" ]; then
+          if [ -d "deploy/kubernetes/ai-gateway/semantic-router/ai-gateway" ]; then
             # Validate configuration yamls (without CRDs)
-            for yaml_file in deploy/kubernetes/ai-gateway/configuration/*.yaml; do
+            for yaml_file in deploy/kubernetes/ai-gateway/semantic-router/ai-gateway/configuration/*.yaml; do
               if [ -f "$yaml_file" ]; then
                 echo "Checking $yaml_file..."
                 # Basic YAML syntax check
@@ -101,7 +101,7 @@ jobs:
             done
             
             # Validate inference-pool manifests (skip CRD validation as they may not be installed)
-            for yaml_file in deploy/kubernetes/ai-gateway/inference-pool/*.yaml; do
+            for yaml_file in deploy/kubernetes/ai-gateway/semantic-router/ai-gateway/inference-pool/*.yaml; do
               if [ -f "$yaml_file" ]; then
                 echo "Checking $yaml_file for YAML syntax..."
                 # Just check if it's valid YAML

.github/workflows/k8s-integration-test.yml

@@ -26,7 +26,7 @@ name: Kubernetes Integration Test
 on:
   pull_request:
     paths:
-      - "deploy/kubernetes/**"
+      - "deploy/kubernetes/ai-gateway/semantic-router/**"
       - ".github/workflows/k8s-integration-test*.yml"
       - "Dockerfile.extproc"
       - "tools/kind/**"

.github/workflows/k8s-kind-integration-test.yml

@@ -138,7 +138,7 @@ jobs:
           echo "Preparing CI deployment configuration..."
 
           # Create a temporary kustomization file for CI
-          cd deploy/kubernetes
+          cd deploy/kubernetes/ai-gateway/semantic-router
 
           # Backup original kustomization.yaml
           cp kustomization.yaml kustomization.yaml.backup
@@ -241,7 +241,7 @@ jobs:
       - name: Deploy to kind cluster
         run: |
           echo "Deploying semantic-router to kind cluster..."
-          kustomize build deploy/kubernetes | kubectl apply -f -
+          kustomize build deploy/kubernetes/ai-gateway/semantic-router | kubectl apply -f -
 
           echo "Waiting for namespace to be active..."
           kubectl wait --for=jsonpath='{.status.phase}'=Active namespace/vllm-semantic-router-system --timeout=60s
@@ -394,7 +394,7 @@ jobs:
           echo "Cleaning up kind cluster..."
           kind delete cluster --name semantic-router-cluster || true
           echo "Restoring original kustomization..."
-          cd deploy/kubernetes
+          cd deploy/kubernetes/ai-gateway/semantic-router
           if [ -f kustomization.yaml.backup ]; then
             mv kustomization.yaml.backup kustomization.yaml
           fi

.github/workflows/k8s-security-scan.yml

@@ -28,7 +28,7 @@ jobs:
         uses: aquasecurity/trivy-action@master
         with:
           scan-type: "config"
-          scan-ref: "deploy/kubernetes"
+          scan-ref: "deploy/kubernetes/ai-gateway/semantic-router"
           format: "sarif"
           output: "trivy-results.sarif"
           severity: "CRITICAL,HIGH"
@@ -43,7 +43,7 @@ jobs:
       - name: Run Checkov scan
         uses: bridgecrewio/checkov-action@master
         with:
-          directory: deploy/kubernetes
+          directory: deploy/kubernetes/ai-gateway/semantic-router
           framework: kubernetes
           output_format: cli
           soft_fail: true # Don't fail the build

.github/workflows/k8s-validate-manifests.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Validate Kustomize build
         run: |
           echo "Building kustomization..."
-          kustomize build deploy/kubernetes > /tmp/k8s-manifests.yaml
+          kustomize build deploy/kubernetes/ai-gateway/semantic-router > /tmp/k8s-manifests.yaml
           echo "Kustomize build successful!"
           echo "Generated manifests:"
           cat /tmp/k8s-manifests.yaml
@@ -42,7 +42,7 @@ jobs:
       - name: Validate manifests with kubeconform
         run: |
           echo "Validating Kubernetes manifests..."
-          kustomize build deploy/kubernetes | \
+          kustomize build deploy/kubernetes/ai-gateway/semantic-router | \
             kubeconform -strict -summary \
               -kubernetes-version 1.28.0 \
               -schema-location default \

config/config.yaml

@@ -53,7 +53,7 @@ vllm_endpoints:
 model_config:
   "qwen3":
     reasoning_family: "qwen3" # This model uses Qwen-3 reasoning syntax
-    preferred_endpoints: ["endpoint1"]
+    preferred_endpoints: ["endpoint1"]  # Optional: omit to let upstream handle endpoint selection
     pii_policy:
       allow_by_default: true
 

config/envoy.yaml

@@ -31,7 +31,6 @@ static_resources:
                   upstream_local_address: "%UPSTREAM_LOCAL_ADDRESS%"
                   request_id: "%REQ(X-REQUEST-ID)%"
                   selected_model: "%REQ(X-SELECTED-MODEL)%"
-                  selected_endpoint: "%REQ(X-GATEWAY-DESTINATION-ENDPOINT)%"
           route_config:
             name: local_route
             virtual_hosts:
@@ -106,7 +105,7 @@ static_resources:
     lb_policy: CLUSTER_PROVIDED
     original_dst_lb_config:
       use_http_header: true
-      http_header_name: "x-gateway-destination-endpoint"
+      http_header_name: "x-vsr-destination-endpoint"
     typed_extension_protocol_options:
       envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
         "@type": type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions

deploy/docker-compose/addons/envoy.yaml

@@ -31,7 +31,6 @@ static_resources:
                   upstream_local_address: "%UPSTREAM_LOCAL_ADDRESS%"
                   request_id: "%REQ(X-REQUEST-ID)%"
                   selected_model: "%REQ(X-SELECTED-MODEL)%"
-                  selected_endpoint: "%REQ(X-GATEWAY-DESTINATION-ENDPOINT)%"
           route_config:
             name: local_route
             virtual_hosts:
@@ -106,7 +105,7 @@ static_resources:
     lb_policy: CLUSTER_PROVIDED
     original_dst_lb_config:
       use_http_header: true
-      http_header_name: "x-gateway-destination-endpoint"
+      http_header_name: "x-vsr-destination-endpoint"
     typed_extension_protocol_options:
       envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
         "@type": type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions