Agent Platform Architecture

graph TD
    subgraph Google Tenant Project
        RE["Agent Runtime (reasoningEngines / ADK Agent)"]
        GW_Proxy["Agent Gateway Envoy Proxy"]
    end

    subgraph Consumer Project
        ACT["Agent Connectivity Template<br/>• vpcEgress: ALL_TRAFFIC<br/>• dnsPeeringConfig: internal.example.com."]
        NA["PSC-I Network Attachment<br/>• ACCEPT_AUTOMATIC<br/>• Subnet >= /26"]
        ConsumerVPC["Consumer VPC Network"]
    end

    RE -->|Local Bonding| GW_Proxy
    GW_Proxy -->|Bound via Template| ACT
    ACT -->|PSC Interface| NA
    NA -->|Enters Network| ConsumerVPC

+-----------------------------------------------------------------------------------------+
| Agent Connectivity Template (ACT)                                                       |
|   - Template ID: ${TEMPLATE_ID}                                                         |
|   - vpcEgress: ALL_TRAFFIC (or PRIVATE_RANGES_ONLY)                                     |
|   - networkAttachment: projects/${PROJECT_NUMBER}/regions/${REGION}/networkAttachments  |
|   - dnsPeeringConfig: domain: ${PEERING_DOMAIN} -> targetNetwork: ${VPC_NAME}           |
+--------------------------------------------+--------------------------------------------+
                                             |
                                             v (Referenced by Gateway)
+-----------------------------------------------------------------------------------------+
| Agent Gateway (${GATEWAY_ID})                                                           |
|   - Governed Access Path: AGENT_TO_ANYWHERE                                             |
|   - Registries: //agentregistry.googleapis.com/projects/${PROJECT_NUMBER}/locations/... |
|                 (Max 2: 1 global + 1 regional; never register in us/eu multi-regions)   |
+---------------------+---------------------------------------------+---------------------+
                      |                                             |
                      v                                             v
+-------------------------------------------+ +-------------------------------------------+
| IAP Request Authz Extension & Policy      | | Model Armor Content Authz Ext & Policy    |
| • service: iap.googleapis.com             | | • service: modelarmor.REGION.rep:443      |
| • metadata: iapPolicyVersion: "V1" / "V2" | | • metadata: model_armor_settings          |
| • policyProfile: REQUEST_AUTHZ            | | • policyProfile: CONTENT_AUTHZ            |
+-------------------------------------------+ +-------------------------------------------+
                      |                                             |
                      v                                             v
+-------------------------------------------+ +-------------------------------------------+
| Semantic Governance Policies (SGP)        | | Secure Web Proxy (SWP) Egress             |
| • Semantic Governance Policy Engine       | | • Dedicated Proxy-Only Subnet (/26)       |
| • Stripped DNS Trailing Dot Record        | | • Gateway: NEXT_HOP_ROUTING_MODE          |
| • CEL gRPC Exclusion Rule                 | | • Policy-Based Route (PBR) from PSC-I     |
+-------------------------------------------+ +-------------------------------------------+

name: projects/${PROJECT_NUMBER}/locations/${REGION}/agentConnectivityTemplates/${TEMPLATE_ID}
description: "Production ACT with full egress governance and DNS peering"
accessPath: AGENT_TO_ANYWHERE
accessTypes:
  - PRIVATE
agentCompute: GKE
deploymentModel: CENTRALIZED
egressNetworkConfig:
  networkAttachment: "projects/${PROJECT_NUMBER}/regions/${REGION}/networkAttachments/${ATTACHMENT_NAME}"
  vpcEgress: ALL_TRAFFIC
  dnsPeeringConfig:
    domains:
      - "internal.example.com."
    targetNetwork: "projects/${PROJECT_NUMBER}/global/networks/${VPC_NAME}" # Use ${HOST_PROJECT_NUMBER} in Shared VPC topologies
  # Optional when using Private CA TrustConfig:
  # tlsConfig:
  #   trustConfig: "projects/${PROJECT_NUMBER}/locations/${REGION}/trustConfigs/${TRUST_CONFIG_ID}"
  #   additionalRoots: PUBLICLY_TRUSTED_ROOTS

name: projects/${PROJECT_NUMBER}/locations/${REGION}/agentConnectivityTemplates/${TEMPLATE_ID}
description: "Private-only ACT for internal RFC 1918 tool routing"
accessPath: AGENT_TO_ANYWHERE
accessTypes:
  - PRIVATE
agentCompute: GKE
deploymentModel: CENTRALIZED
egressNetworkConfig:
  networkAttachment: "projects/${PROJECT_NUMBER}/regions/${REGION}/networkAttachments/${ATTACHMENT_NAME}"
  vpcEgress: PRIVATE_RANGES_ONLY
  dnsPeeringConfig:
    domains:
      - "internal.example.com."
    targetNetwork: "projects/${PROJECT_NUMBER}/global/networks/${VPC_NAME}"

pip install "pyyaml>=6.0,<7.0"
ACCESS_TOKEN=$(gcloud auth print-access-token)
BASE_URL="https://networkservices.googleapis.com/v1/projects/${PROJECT_NUMBER}/locations/${REGION}"

# 1. Deploy Agent Connectivity Template (using act.yaml from Section 3.1 / 3.2)
curl -s -X POST "${BASE_URL}/agentConnectivityTemplates?agentConnectivityTemplateId=${TEMPLATE_ID}" \
  -H "Authorization: Bearer ${ACCESS_TOKEN}" -H "X-Goog-User-Project: ${PROJECT_ID}" \
  -H "Content-Type: application/json" \
  -d "$(envsubst < act.yaml | python3 -c 'import sys, yaml, json; print(json.dumps(yaml.safe_load(sys.stdin)))')"

# 2. Deploy Agent Gateway referencing ACT and dual registries (using agw.yaml from Section 3.4)
curl -s -X POST "${BASE_URL}/agentGateways?agentGatewayId=${GATEWAY_ID}" \
  -H "Authorization: Bearer ${ACCESS_TOKEN}" -H "X-Goog-User-Project: ${PROJECT_ID}" \
  -H "Content-Type: application/json" \
  -d "$(envsubst < agw.yaml | python3 -c 'import sys, yaml, json; print(json.dumps(yaml.safe_load(sys.stdin)))')"

name: projects/${PROJECT_NUMBER}/locations/${REGION}/agentGateways/${GATEWAY_ID}
description: "Production Agent Gateway referencing ACT and Agent Registry"
# Mandatory in VPC-SC / SWP-inspected enterprise environments (mutually exclusive with inline networkConfig):
agentConnectivityTemplate: "projects/${PROJECT_NUMBER}/locations/${REGION}/agentConnectivityTemplates/${TEMPLATE_ID}"
# Note: In stable v1 environments without a standalone ACT, omit agentConnectivityTemplate and specify inline networkConfig:
# networkConfig:
#   egress:
#     networkAttachment: "projects/${PROJECT_NUMBER}/regions/${REGION}/networkAttachments/${ATTACHMENT_NAME}"
#   dnsPeeringConfig:
#     domains: ["internal.example.com."]
#     targetProject: "${HOST_PROJECT_ID}"
#     targetNetwork: "projects/${HOST_PROJECT_ID}/global/networks/${VPC_NAME}"
googleManaged:
  governedAccessPath: AGENT_TO_ANYWHERE
registries:
  - "//agentregistry.googleapis.com/projects/${PROJECT_NUMBER}/locations/global"
  - "//agentregistry.googleapis.com/projects/${PROJECT_NUMBER}/locations/${REGION}"

# iap_request_authz_extension.yaml
name: projects/${PROJECT_NUMBER}/locations/${REGION}/authzExtensions/${IAP_EXT_ID}
authority: iap.googleapis.com
service: iap.googleapis.com
timeout: 1s
failOpen: false
forwardHeaders:
  - Authorization
metadata:
  iapPolicyVersion: "V2" # Use "V2" for Unified Access Policy (or "V1" for IAM condition mode)

# iap_request_authz_policy.yaml
name: projects/${PROJECT_NUMBER}/locations/${REGION}/authzPolicies/${IAP_POLICY_ID}
action: CUSTOM
policyProfile: REQUEST_AUTHZ
target:
  resources:
    - projects/${PROJECT_NUMBER}/locations/${REGION}/agentGateways/${GATEWAY_ID}
customProvider:
  authzExtension:
    resources:
      - projects/${PROJECT_NUMBER}/locations/${REGION}/authzExtensions/${IAP_EXT_ID}

FROM python:3.11-slim

RUN apt-get update && apt-get install -y --no-install-recommends \
    ca-certificates \
    && rm -rf /var/lib/apt/lists/*

# Copy exported Egress Agent Gateway Root CA into system trust store
COPY agw_root.crt /usr/local/share/ca-certificates/agw_root.crt
RUN update-ca-certificates

# Point Python SSL, Requests, httpx, and gRPC C-core at the updated bundle
ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
ENV REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
ENV GRPC_DEFAULT_SSL_ROOTS_FILE_PATH=/etc/ssl/certs/ca-certificates.crt