Add "setup aaos-sdv carla sim demo" workflow - #61
Open
tudormot wants to merge 20 commits into
Open
Conversation
added 20 commits
August 23, 2026 10:55
Adds support for deploying Horizon SDV in restricted environments where
external load balancers are constrained by organization policies.
Key changes:
1. GKE Gateway Configuration:
- Configured GKE Gateway to use Regional Internal Application Load
Balancing (gke-l7-rilb) for internal-only VPC routing.
- Updated platform HTTPRoutes to bind to the internal Gateway listener.
- Adjusted OIDC redirect URIs and backend policies to support internal
routing and health checks.
2. GitOps-Managed Gateway Tunnel:
- Added a declarative in-cluster L4 TCP port forwarder (gateway-tunnel)
to allow private Gateway access via kubectl.
- Configured host networking for seamless internal VPC VIP routing.
3. Developer Access Script:
- Added port-forward.sh to provide a single command for local port
forwarding, automatic domain resolution checks, and credential summaries.
…-builder workflow - Introduces the workloads-voltron-demo module and declarative Argo WorkflowTemplate sdv-voltron-demo-builder for automated building and snapshotting of the SDV Voltron demo. - Pushes built container images directly to the native horizon-sdv Artifact Registry repository. - Targets native Horizon SDV deployment infrastructure (sdv-cluster in CLOUD_REGION on sdv-network). - Enforces valid Cloud Workstations resource names within the 56-character GCP limit (voltron-builder-*, voltron-tester-*). - Executes Cloud Build jobs directly using the workflow's elevated service account identity (gke-argo-workflows-elevated-sa), eliminating cross-account compute SA impersonation. - Configures roles/artifactregistry.reader on the Workstations VM service agent for automated image pulling. - Dynamically extracts the workstation persistent disk's zone from instance metadata to ensure snapshot creation succeeds across multi-zone or single-zone topologies.
…e pool and configure n1-standard-16 + T4 for tester workstation
…ject.id in sdv_wi IAM bindings
…nd create snapshot from region
…st direct ssh test verification
…to avoid T4 stockout
…ions use default placement
… and unused gemini agent
…local AAOS patches
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
WIP