Agentgateway egress with kagent

[artberger]

From Nina, egress with agentgateway, specifically within kagent, in agentgateway community meeting 12/4/2025.

Example prompt guard steps

• In agentgateway, deploy Gateway resource
• for the HTTPRoute, it goes to the openai AgentgatewayBackend, attached to the egress gateway
• in kagent ModelConfig, point the baseUrl to point to the egress gateway address such as http://egress-gateway.default.svc.cluster.local:8080/openai
• in kagent agent, have it use the new ModelConfig for the agentgateway egress
• ask agent to come up with a person's email, and it will
• then, apply an AgentgatewayPolicy to the Gateway or HTTPRoute for prompt guard built-ins for email
• the agent doesn't get changes, but the egress gateway gets the policy
• when you ask the agent again, then the email addresses get masked
• Then, you can do other AgentgatewayPolicies like rate limiting or federation and such.

Other considerations

• Decide where to put this, maybe in integrations?
• whether to reuse also in kagent docs?