boost-packaging — Dynamic plugin packaging and deployment configuration (issue 15 of 15)

[gabemontero]

Labels: ready-to-code
Depends on: Issues 10, 11, 12

Configure all boost packages for RHDH dynamic plugin export (OCI), create deployment examples, implement security hardening (CSRF, credential encryption), and add skills marketplace proxy routes.

Tasks

From openspec/changes/pluggable-ai-platform-architecture/tasks.md section 6:

• 6.1 Configure boost-backend-module-llamastack for RHDH dynamic plugin export (OCI)
• 6.2 Configure boost-backend-module-kagenti for RHDH dynamic plugin export (OCI)
• 6.3 Create dynamic-plugins.yaml examples for modular deployment

From openspec/changes/security-safety-governance/tasks.md section 8:

• 8.2 Encrypt sensitive values in admin config DB

From openspec/changes/agent-creation-discovery/tasks.md section 5:

• 5.1 Implement proxy routes to external skills catalog backend
• 5.3 Implement K8s manifest generation with OCI init containers
• 5.4 Add deployment progress polling
• 5.6 Route chat to skill agents via chatEndpoint field

From openspec/changes/platform-operations-deployment/tasks.md section 3:

• 3.1 Document all 25+ configurable keys with scope
• 3.2 Add schema documentation to Zod definitions

Specifications

• openspec/changes/platform-operations-deployment/specs/deployment/spec.md
• openspec/changes/platform-operations-deployment/specs/white-label/spec.md
• openspec/changes/agent-creation-discovery/design.md — Decision 6 (skills marketplace consumer)

[fullsend-ai-triage]

Triage Summary

This issue is blocked by upstream dependencies that must land first.

The issue body states a dependency on issues 10, 11, and 12 from the boost series:

• boost-backend-module-llamastack — Llama Stack provider module (issue 10 of 15) #3306 — Llama Stack provider module (OPEN)
• boost-backend-module-kagenti — Kagenti provider module (issue 11 of 15) #3307 — Kagenti provider module (OPEN)
• boost-entity-providers — Catalog entities for AI domain objects (issue 12 of 15) #3308 — Catalog entities for AI domain objects (OPEN)

Tasks 6.1 and 6.2 in this issue require configuring boost-backend-module-llamastack and boost-backend-module-kagenti for RHDH dynamic plugin export (OCI). Those modules are defined in #3306 and #3307 respectively, and cannot be packaged until they exist.

This issue should be unblocked once those dependencies are resolved. The remaining tasks (deployment examples, security hardening, skills marketplace proxy routes, documentation) may be partially workable in isolation, but the core packaging tasks require the provider modules to be in place first.

---

Labels: This is a boost workspace enhancement issue covering packaging, deployment, and security tasks.