From 1b53dfea2b8afe1325eedc38603041f83c29c1f6 Mon Sep 17 00:00:00 2001
From: Chad <chaddiao@google.com>
Date: Fri, 7 Aug 2026 14:38:38 -0500
Subject: [PATCH] feat(caretaker): add GCP deployment script for caretaker
 agent services (#28529)

---
 tools/caretaker-agent/scripts/deploy.sh | 92 +++++++++++++++++++++++++
 1 file changed, 92 insertions(+)
 create mode 100755 tools/caretaker-agent/scripts/deploy.sh

diff --git a/tools/caretaker-agent/scripts/deploy.sh b/tools/caretaker-agent/scripts/deploy.sh
new file mode 100755
index 0000000000..ac1ed6674c
--- /dev/null
+++ b/tools/caretaker-agent/scripts/deploy.sh
@@ -0,0 +1,92 @@
+#!/usr/bin/env bash
+# Caretaker Agent GCP Deployment Script
+set -euo pipefail
+
+if [ -z "${PROJECT_ID:-}" ]; then
+    echo "Error: PROJECT_ID environment variable is required." >&2
+    echo "Please export PROJECT_ID before running this script:" >&2
+    echo "  export PROJECT_ID=\"your-gcp-project-id\"" >&2
+    exit 1
+fi
+REGION="us-west1"
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ROOT_DIR="$(cd "${SCRIPT_DIR}/.." && pwd)"
+
+TARGETS=" $* "
+if [ $# -eq 0 ]; then
+    TARGETS=" all "
+fi
+
+echo "=================================================="
+echo " 🚀 Deploying Caretaker Agent Services to GCP"
+echo " Project ID: ${PROJECT_ID}"
+echo " Region:     ${REGION}"
+echo " Targets:   ${TARGETS}"
+echo " Build Logs: https://pantheon.corp.google.com/cloud-build/builds?project=${PROJECT_ID}"
+echo "=================================================="
+
+# 1. Deploy Ingestion Cloud Run Service
+if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " ingestion " ]]; then
+    echo ""
+    echo "--> Deploying Ingestion Service..."
+    gcloud run deploy ingestion-service \
+        --source "${ROOT_DIR}/cloudrun/ingestion-service" \
+        --service-account "ingestion-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
+        --min-instances 0 \
+        --max-instances 10 \
+        --no-allow-unauthenticated \
+        --region "${REGION}" \
+        --project "${PROJECT_ID}"
+fi
+
+# 2. Deploy Triage Worker Cloud Run Job
+if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " triage " ]]; then
+    echo ""
+    echo "--> Deploying Triage Worker Job..."
+    gcloud run jobs deploy triage-worker \
+        --source "${ROOT_DIR}/cloudrun/triage-worker" \
+        --service-account "triage-worker-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
+        --network "default" \
+        --subnet "default" \
+        --vpc-egress "all-traffic" \
+        --memory 1Gi \
+        --cpu 1 \
+        --task-timeout 20m \
+        --tasks 1 \
+        --max-retries 0 \
+        --region "${REGION}" \
+        --project "${PROJECT_ID}"
+fi
+
+# 3. Deploy Egress Cloud Run Service
+if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " egress " ]]; then
+    echo ""
+    echo "--> Deploying Egress Service..."
+    gcloud run deploy egress-service \
+        --source "${ROOT_DIR}/cloudrun/egress-service" \
+        --service-account "egress-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
+        --no-allow-unauthenticated \
+        --region "${REGION}" \
+        --project "${PROJECT_ID}"
+fi
+# 4. Deploy Triage Eval Runner Cloud Run Job
+if [[ "${TARGETS}" =~ " all " ]] || [[ "${TARGETS}" =~ " evals " ]]; then
+    echo ""
+    echo "--> Deploying Triage Eval Runner Job..."
+    gcloud run jobs deploy eval-runner \
+        --source "${ROOT_DIR}" \
+        --service-account "triage-eval-runner-sa@${PROJECT_ID}.iam.gserviceaccount.com" \
+        --memory 2Gi \
+        --cpu 1 \
+        --tasks 1 \
+        --task-timeout 1h \
+        --max-retries 0 \
+        --region "${REGION}" \
+        --project "${PROJECT_ID}"
+fi
+
+echo ""
+echo "=================================================="
+echo " ✅ Deployment completed successfully!"
+echo "=================================================="