.env.example

# Copy to .env (gitignored) and fill in real values. Source it before running
# platform scripts / terraform:
#
#   cp .env.example .env
#   # edit .env
#   set -a; source .env; set +a
#
# These are account-specific / capacity-dependent and are never committed.

# --- Platform AWS account (EKS / MLOps), profile autowarefoundation ---
export AWS_PROFILE=autowarefoundation
export AWS_REGION=us-west-2
export PLATFORM_ACCOUNT_ID=000000000000        # 12-digit platform account id
export EKS_CLUSTER=auto-e2e-platform

# --- Terraform state backend (created once by bootstrap.sh) ---
export TFSTATE_REGION=us-east-1
export TFSTATE_BUCKET=auto-e2e-platform-tfstate
export TFLOCK_TABLE=auto-e2e-platform-tflock

# --- ECR (derived; export for convenience in scripts) ---
export ECR_URL=${PLATFORM_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com

# --- Dev EC2 account (g6e single box), default profile ---
export DEV_ACCOUNT_ID=000000000000             # 12-digit dev account id
export DEV_INSTANCE_ID=i-xxxxxxxxxxxxxxxxx

# --- ECR image registry (Platform account; overrides the workflows.py default) ---
# workflows.py reads ECR_PREFIX from the env; keep the real account out of git.
export ECR_PREFIX=${PLATFORM_ACCOUNT_ID}.dkr.ecr.${AWS_REGION}.amazonaws.com

# --- Reasoning-label cache (persistent, sample_id-keyed) ---
# generate_reasoning_labels caches every teacher label here so Cosmos is billed
# at most once per (dataset, teacher, prompt_version, sample) — re-packing the
# shards never re-hits the endpoint. Defaults to the datasets bucket
# in workflows.py; override to keep the account-specific name out of git.
export REASONING_LABELS_CACHE_BUCKET=auto-e2e-platform-datasets-${PLATFORM_ACCOUNT_ID}

# --- Cosmos3-Nano offline reasoning teacher (model-agnostic OpenAI endpoint) ---
# Consumed only by generate_reasoning_labels(teacher="openai_compatible"). The
# real values live in the `cosmos-teacher` K8s Secret (created out-of-band), and
# for local runs in this .env — never committed. The endpoint is a cross-account
# ALB in the Cosmos PoC account; its concrete URL is in that repo's
# .secrets/ENV.md (gitignored).
export COSMOS_TEACHER_BASE_URL=http://REPLACE-with-cosmos-alb-host:8000/v1
export COSMOS_TEACHER_MODEL=nvidia/Cosmos3-Nano
# export COSMOS_TEACHER_API_KEY=            # optional; empty for the open PoC endpoint

# Create the K8s Secret Flyte injects (run against the Platform EKS cluster):
#   kubectl create secret generic cosmos-teacher -n flytesnacks-development \
#     --from-literal=COSMOS_TEACHER_BASE_URL="$COSMOS_TEACHER_BASE_URL" \
#     --from-literal=COSMOS_TEACHER_MODEL="$COSMOS_TEACHER_MODEL"