Add commonMetadata and podMetadata to Agent/ToolServer specs with reconciliation

[Copilot]

Users have no way to attach custom labels or annotations to the Deployments, Services, or Pods managed by the operator — blocking common cluster patterns like team ownership labels, monitoring annotations, or Istio injection hints.

Changes

New API: EmbeddedMetadata struct

Added api/v1alpha1/common_types.go with a shared EmbeddedMetadata type:

type EmbeddedMetadata struct {
    Labels      map[string]string `json:"labels,omitempty"`
    Annotations map[string]string `json:"annotations,omitempty"`
}

CRD fields added

• AgentSpec and ToolServerSpec: commonMetadata + podMetadata with full reconciliation
• AgentGatewaySpec, AiGatewaySpec, ToolGatewaySpec: fields added, reconciliation not implemented

Propagation semantics

Field	Deployment	Service	Pod template
commonMetadata.labels	✅	✅	✅
commonMetadata.annotations	✅	✅	✅
podMetadata.labels	—	—	✅
podMetadata.annotations	—	—	✅

• podMetadata overrides commonMetadata on the pod template when keys conflict
• Operator-managed labels (e.g. app, framework) and selector labels always take precedence

Example usage

spec:
  commonMetadata:
    labels:
      team: platform
    annotations:
      prometheus.io/scrape: "true"
  podMetadata:
    annotations:
      sidecar.istio.io/inject: "true"

Implementation

• Added applyCommonMetadataToObjectMeta() and buildPodTemplateMetadata() helpers to util.go to avoid duplication between the two reconcilers
• CRDs regenerated via make manifests && make generate

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Add metadata to Agents / ToolServers and apply to the deployments</issue_title>
<issue_description>When deploying agents and tools in a cluster, I would like to add some annotations and labels to the deployments or pods.

Proposal: Add commonMetadata and podMetadata to the spec of Agent, ToolServer, AiGateway, AgentGateway and ToolGateway.

Implement the reconciliation for agents and toolServers.</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Add metadata to Agents / ToolServers and apply to the deployments #77

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.