Merge remote-tracking branch 'origin/main' into kkb-hugo-docs-migration

Signed-off-by: Kristin Brown <kristin.brown@solo.io>

Author: kristin-kronstain-brown

.github/workflows/preview.yaml

@@ -1,4 +1,11 @@
 name: Deploy Preview
+
+# Runs on every PR to main. Builds the combined site (Hugo docs + Next.js
+# marketing Worker) and uploads it as an isolated Worker VERSION with its own
+# preview URL. It deliberately uses `wrangler versions upload`, NOT `deploy`, so
+# production traffic is never shifted — the currently-deployed version keeps
+# serving prod. Promotion to production happens only via production.yaml
+# (on merge to main).
 on:
   pull_request:
     types:
@@ -7,6 +14,11 @@ on:
     branches:
       - main
 
+# Cancel superseded preview runs for the same PR.
+concurrency:
+  group: preview-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   deploy:
     runs-on: ubuntu-latest
@@ -18,21 +30,65 @@ jobs:
         with:
           node-version: 20.x
 
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.24'
+
+      - name: Setup Hugo
+        uses: peaceiris/actions-hugo@v3
+        with:
+          hugo-version: '0.160.1'
+          extended: true
+
       - name: Install dependencies
-        run: npm ci
+        run: |
+          npm ci
+          cd docs-site && npm ci
+
+      # Builds the Hugo docs, injects them into public/docs, then builds the
+      # OpenNext Worker (which bundles public/ as static assets). HUGO=hugo uses
+      # the Hugo installed above instead of the local hugo160 alias.
+      - name: Build (Hugo docs + inject into /docs + Worker)
+        run: make build HUGO=hugo
 
-      - name: Build the site
-        run: npm run build:worker
+      # Derive a stable preview alias from the PR branch name. Cloudflare preview
+      # aliases must be a valid subdomain label (lowercase alphanumerics and
+      # hyphens), and `<alias>-<worker>` must stay under the 63-char DNS limit, so
+      # sanitize and cap the length.
+      - name: Compute preview alias from branch name
+        id: alias
+        run: |
+          alias=$(echo "${{ github.head_ref }}" \
+            | tr '[:upper:]' '[:lower:]' \
+            | sed 's/[^a-z0-9-]/-/g; s/-\{2,\}/-/g; s/^-*//; s/-*$//' \
+            | cut -c1-40)
+          echo "alias=$alias" >> "$GITHUB_OUTPUT"
+          echo "Preview alias: $alias"
 
-      - name: Create website preview
+      - name: Upload preview version (does NOT touch production)
         id: deploy
         uses: cloudflare/wrangler-action@v3.14.1
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-          command: deploy --minify
+          # Upload a new Worker version and get a preview URL WITHOUT shifting
+          # production traffic. `deploy` promotes the version to 100% live, so PR
+          # runs were redeploying prod. `versions upload` keeps prod on the
+          # currently-deployed version; production is deployed only by
+          # production.yaml (on merge to main).
+          #
+          # --preview-alias gives a STABLE, branch-named preview URL
+          # (<alias>-<worker>.<subdomain>.workers.dev) that updates in place on
+          # each push, instead of a new per-version hostname every time.
+          command: versions upload --minify --preview-alias ${{ steps.alias.outputs.alias }}
 
-      - name: Print website URL
+      - name: Print website URLs
         env:
-          DEPLOYMENT_URL: ${{ steps.deploy.outputs.deployment-url }}
-        run: echo $DEPLOYMENT_URL
+          # Per-version URL (changes each push) from the wrangler-action output;
+          # stable alias URL built from the branch alias + fixed worker/subdomain.
+          VERSION_URL: ${{ steps.deploy.outputs.deployment-url }}
+          ALIAS: ${{ steps.alias.outputs.alias }}
+        run: |
+          echo "Version Preview URL: ${VERSION_URL}"
+          echo "Version Preview Alias URL: https://${ALIAS}-kagent-website.solo-io.workers.dev"

src/app/blog/page.tsx

@@ -14,6 +14,20 @@ function shortDate(date: string) {
 }
 
 const posts = [
+    {
+        slug: 'dnb-kagent-agentgateway',
+        publishDate: '2026-07-13',
+        title: 'How One Platform Team Scaled AI Adoption with Kagent and Agentgateway',
+        description: 'Lin spoke with David Karlsen and Ibrahim Umar from DNB about their journey adopting kagent and agentgateway',
+        authorId: 'linsun',
+    },
+    {
+        slug: 'deploy-kagent-with-agent-substrate',
+        publishDate: '2026-07-13',
+        title: 'Code Share: Deploy kagent with Agent Substrate',
+        description: 'Agent sessions are bursty and idle most of the time. Agent Substrate multiplexes gVisor-sandboxed actors onto a small pool of warm workers with sub-second suspend/resume. This guide explains the model, the use cases, and how to stand up kagent OSS with substrate on a kind cluster.',
+        authorId: 'sebastianmaniak',
+    },
     {
         slug: 'community-nginx-khook-kagent',
         publishDate: '2025-10-15',

src/app/docs/kagent/examples/slack-a2a/page.mdx

@@ -50,7 +50,7 @@ You'll be redirected to the app's basic information page. Next, we need to give
 1. Click the OAuth & Permissions tab from the left sidebar.
 2. Scroll down to the "Scopes" section.
 3. Click "Add an OAuth Scope" in the "Bot Token Scopes" section.
-4. From the dropdown menu add the the following scopes (you can add more scopes if you want to experiment with other features):
+4. From the dropdown menu add the following scopes (you can add more scopes if you want to experiment with other features):
     - `chat:write`
     - `commands`
 

src/app/docs/kagent/resources/helm/page.mdx

@@ -316,6 +316,12 @@ A Helm chart for kagent, built with Google ADK
 | ui.backendInternalUrl | string | `""` |  |
 | ui.env | object | `{}` |  |
 | ui.externalUrl | string | "" (share tools return paths only) | Public-facing base URL of the UI (e.g. https://kagent.example.com). When set, the controller injects KAGENT_UI_URL into agent pods so that share link tools return full clickable URLs instead of relative paths. |
+| ui.httpRoute | object | `{"annotations":{},"enabled":false,"hostnames":[],"labels":{},"parentRefs":[],"rules":[]}` | Gateway API `HTTPRoute` for the UI. Requires the Gateway API CRDs (`gateway.networking.k8s.io/v1`) and an existing `Gateway` to attach to via `parentRefs`. Disabled by default; enable to front the UI with a Gateway API implementation (kgateway, Istio, Envoy Gateway, etc.) instead of the OpenShift Route or bundled oauth2-proxy. |
+| ui.httpRoute.annotations | object | `{}` | Annotations to add to the `HTTPRoute`. |
+| ui.httpRoute.hostnames | list | `[]` | Hostnames matched by the route. |
+| ui.httpRoute.labels | object | `{}` | Extra labels to add to the `HTTPRoute` (merged with the chart labels). |
+| ui.httpRoute.parentRefs | list | `[]` | Gateways this route attaches to. Required when `enabled` is `true`. |
+| ui.httpRoute.rules | list | `[]` | Routing rules. When a rule omits `backendRefs`, it defaults to the UI `Service` on `ui.service.ports.port`. Each rule may also set `matches`, `filters`, and `timeouts`. |
 | ui.image.pullPolicy | string | `""` |  |
 | ui.image.registry | string | `""` |  |
 | ui.image.repository | string | `"kagent-dev/kagent/ui"` |  |