substrate-install.yaml

# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# An Agent Substrate installation, as a document an operator owns.
#
#   ate-setup deploy ate-system --config substrate-install.yaml
#   ATE_CONFIG=substrate-install.yaml hack/install-ate.sh --deploy-ate-system
#
# Every setting here can equally be an environment variable or a flag; see
# docs/operator-install.md for the full list and the precedence between them.
# Keys not named below keep their declared default, which `ate-setup --help`
# prints. A key named with an empty value is set to empty, not left at its
# default -- that is how a setting is cleared.
apiVersion: install.ate.dev/v1alpha1
kind: SubstrateInstall

# Where the control plane goes.
namespace: ate-system
context: my-cluster

# Coarse sizing. size10 assumes a dedicated PostgreSQL node.
clusterSize: size0

# Per-workload readiness wait, as a Go duration.
rolloutTimeout: 1m0s

# Ingress and egress dataplane: envoy or agentgateway.
atenet:
  dataplane: envoy

# Prebuilt images. Both halves are required together: a tag with no repository
# would be dropped, leaving a build from source that looks like the release the
# tag names.
images:
  repo: ghcr.io/agent-substrate/substrate
  tag: v0.4.1

# Snapshot storage.
storage:
  bucketName: ate-snapshots

ateapi:
  postgres:
    schema: public
    # Credentials do not belong in a document that gets committed. Supply this
    # from the environment instead:
    #   export ATE_API_POSTGRES_READ_WRITE_CONNECTION_STRING=...
    # readWrite:
    #   connectionString: omitted on purpose