tools/caretaker-agent/scripts/deploy.sh

#!/usr/bin/env bash
# Caretaker Agent GCP Deployment Script
set -euo pipefail

if [ -z "${PROJECT_ID:-}" ]; then
    echo "Error: PROJECT_ID environment variable is required." >&2
    echo "Please export PROJECT_ID before running this script:" >&2
    echo "  export PROJECT_ID=\"your-gcp-project-id\"" >&2
    exit 1
fi
REGION="us-west1"

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"

TARGETS=" $* "
if [ $# -eq 0 ]; then
    TARGETS=" all "
fi

echo "=================================================="
echo " 🚀 Deploying Caretaker Agent Services to GCP"
echo " Project ID: ${PROJECT_ID}"
echo " Region:     ${REGION}"
echo " Targets:   ${TARGETS}"
echo " Build Logs: https://pantheon.corp.google.com/cloud-build/builds?project=${PROJECT_ID}"
echo "=================================================="

# 1. Deploy Ingestion Cloud Run Service
if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " ingestion " ]]; then
    echo ""
    echo "--> Deploying Ingestion Service..."
    gcloud run deploy ingestion-service \
        --source "${ROOT_DIR}/cloudrun/ingestion-service" \
        --service-account "ingestion-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
        --min-instances 0 \
        --max-instances 10 \
        --no-allow-unauthenticated \
        --region "${REGION}" \
        --project "${PROJECT_ID}"
fi

# 2. Deploy Triage Worker Cloud Run Job
if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " triage " ]]; then
    echo ""
    echo "--> Deploying Triage Worker Job..."
    gcloud run jobs deploy triage-worker \
        --source "${ROOT_DIR}/cloudrun/triage-worker" \
        --service-account "triage-worker-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
        --network "default" \
        --subnet "default" \
        --vpc-egress "all-traffic" \
        --memory 1Gi \
        --cpu 1 \
        --task-timeout 20m \
        --tasks 1 \
        --max-retries 0 \
        --region "${REGION}" \
        --project "${PROJECT_ID}"
fi

# 3. Deploy Egress Cloud Run Service
if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " egress " ]]; then
    echo ""
    echo "--> Deploying Egress Service..."
    gcloud run deploy egress-service \
        --source "${ROOT_DIR}/cloudrun/egress-service" \
        --service-account "egress-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
        --no-allow-unauthenticated \
        --region "${REGION}" \
        --project "${PROJECT_ID}"
fi
# 4. Deploy Triage Eval Runner Cloud Run Job
if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " evals " ]]; then
    echo ""
    echo "--> Deploying Triage Eval Runner Job..."
    gcloud run jobs deploy eval-runner \
        --source "${ROOT_DIR}" \
        --service-account "triage-eval-runner-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
        --memory 2Gi \
        --cpu 1 \
        --tasks 1 \
        --task-timeout 1h \
        --max-retries 0 \
        --region "${REGION}" \
        --project "${PROJECT_ID}"
fi

echo ""
echo "=================================================="
echo " ✅ Deployment completed successfully!"
echo "=================================================="