AgentStack Infrastructure Overview
This document describes everything currently running in Azure under the AgentStack organization. It is the single source of truth for new engineers onboarding to the platform.
Architecture at a Glance
┌─────────────────────────────────────────┐
│ INTERNET / CLIENTS │
└────────┬───────────────┬────────────────┘
│ │
agentstacktech.com hitl-frontend.*
│ │
┌────────▼───────────────▼────────────────┐
│ Azure Container Apps │
│ (cerebro-auth-env) │
│ │
│ ┌──────────────┐ ┌────────────────┐ │
│ │ Marketing │ │ HITL Frontend │ │
│ │ Site │ │ (React App) │ │
│ └──────────────┘ └────────────────┘ │
│ │
│ ┌──────────────┐ ┌────────────────┐ │
│ │ Keycloak │ │ OpenFGA │ │
│ │ (Auth) │ │ (AuthZ, int.) │ │
│ └──────┬───────┘ └────────────────┘ │
│ │ │
│ ┌──────▼───────────────────────────┐ │
│ │ APIM Gateway │ │
│ │ cerebro-stg-apim.azure-api.net │ │
│ └──────┬───────────────────────────┘ │
│ │ │
│ ┌──────▼───────────────────────────┐ │
│ │ Backend Microservices │ │
│ │ Router → Ingest / Review / │ │
│ │ Config / Assistant Agent │ │
│ └──────┬───────────────────────────┘ │
└─────────┼───────────────────────────────┘
│
┌────────────┼──────────────┐
│ │ │
┌──────▼──────┐ ┌──▼──────┐ ┌───▼────────┐
│ PostgreSQL │ │Event Hub│ │ Key Vault │
│ (Auth + App) │ │(Streams)│ │ (Secrets) │
└─────────────┘ └─────────┘ └────────────┘
What's Live Right Now
| Service | URL / Endpoint | Region | Status |
|---|---|---|---|
| Marketing Site | agentstacktech.com | South India | ✅ Live |
| HITL Frontend | hitl-frontend.southindia | South India | ✅ Live |
| Keycloak | keycloak.southindia | South India | ✅ Live |
| OpenFGA | Internal only | South India | ✅ Live |
| Assistant Agent | assistant-agent.centralindia | Central India | ✅ Live |
| Review Service | review-service.southindia | South India | ✅ Live |
| Ingest Service | ingest-service.southindia | South India | ✅ Live |
| Config Service | config-service-test.southindia | South India | ✅ Live |
| Router Service | Internal only | South India | ✅ Live |
| APIM Gateway | cerebro-stg-apim.azure-api.net | South India | ✅ Live |
| Auth DB (Postgres) | cerebro-authstack-pg.postgres.database.azure.com | South India | ✅ Live |
| App DB (Postgres) | assistant-agent-pg-62be6d5f.postgres.database.azure.com | Central India | ✅ Live |
| Event Hub | cerebro-ingest-eh | South India | ✅ Live |
| Key Vault | cerebro-auth-kv-62be6d5f.vault.azure.net | South India | ✅ Live |
Resource Groups
| Group | Region | Purpose |
|---|---|---|
testing | South India | Auth stack, HITL platform, microservices |
assistant-agent-rg | Central India + South India | Assistant agent, marketing site |
Container Registries
| Registry | Login Server | Stores |
|---|---|---|
ca45076245feacr | ca45076245feacr.azurecr.io | Auth services, HITL, microservices |
ca74e243f29aacr | ca74e243f29aacr.azurecr.io | Assistant agent images |