Agent Gateway KrakenD Operator Reference
This reference covers KrakenD-specific implementation details of the Agent Gateway KrakenD Operator. For the AgentGateway and AgentGatewayClass CRD field tables, see AgentGateway and AgentGatewayClass Reference.
AgentGatewayClass controller name
The operator registers one AgentGatewayClass with the following controller name:
| Item | Value |
|---|---|
|
|
|
|
An AgentGateway resource with spec.agentGatewayClassName: krakend is claimed and reconciled by this operator. When spec.agentGatewayClassName is omitted and the krakend class carries the agentgatewayclass.kubernetes.io/is-default-class: "true" annotation, the operator also claims unclaimed gateways.
Generated ConfigMap
For each reconciled AgentGateway, the operator creates a ConfigMap in the same namespace. The name pattern is:
<agentgateway-name>-krakend-config
For example, an AgentGateway named agent-gateway produces a ConfigMap named agent-gateway-krakend-config. The ConfigMap contains one key:
| Key | Description |
|---|---|
|
Complete KrakenD v2 JSON configuration generated from discovered exposed agents and the gateway’s timeout setting. The file is mounted at |
KrakenD container defaults
The operator manages the KrakenD container in the generated Deployment.
| Item | Value |
|---|---|
Container image |
|
Container port |
|
Service port |
|
Memory request / limit |
|
CPU request / limit |
|
Liveness probe path |
|
Readiness probe path |
|
Config volume mount |
|
|
|
spec.env and spec.envFrom
Environment variables set in AgentGateway.spec.env and AgentGateway.spec.envFrom are forwarded to the KrakenD container. The operator appends them after its own managed variables, so they can override operator defaults.
| Variable | Effect |
|---|---|
|
When set, activates the KrakenD OpenTelemetry exporter. The operator parses the value as |
All other variables in spec.env are passed through to the container without modification.
Pod restart annotation
The operator annotates the pod template with a hash of the generated KrakenD configuration:
runtime.agentic-layer.ai/config-hash: <16-character hex>
When an exposed agent is added, removed, or its URL changes, the hash changes and Kubernetes rolls the Deployment automatically.
Endpoint routing
The operator discovers all Agent resources cluster-wide with spec.exposed: true and generates two endpoint pairs per agent:
| Endpoint pattern | Condition |
|---|---|
|
Always created. |
|
Created only when the agent name is unique across all namespaces (shorthand endpoint). |
In addition, the following OpenAI-compatible endpoints are always present:
| Endpoint | Description |
|---|---|
|
Returns all exposed agents in OpenAI model-list format. |
|
Routes requests to an agent selected by the |