使用 Argo Workflows 编排 AI Agent 自动开发与 Review 工作流#

1
GitHub Issue / Webhook
2
        |
3
        v
4
Argo Events EventSource
5
        |
6
        v
7
Argo Events Sensor
8
        |
9
        v
10
WorkflowTemplate: ai-agent-dev-review
11
        |
12
        +--> parse-requirement
13
        +--> clone-repo
14
        +--> agent-plan
15
        +--> agent-code
16
        +--> lint --------+
17
        +--> test --------+--> generate-review-report
18
        +--> security ----+
19
        +--> create-pr
20
        +--> wait-human-review
21
        +--> notify

1
ghcr.io/example/ai-agent-runner:0.1.0

1
apiVersion: argoproj.io/v1alpha1
2
kind: WorkflowTemplate
3
metadata:
4
  name: ai-agent-dev-review
5
  namespace: argo
6
spec:
7
  serviceAccountName: ai-agent-workflow
8
  entrypoint: main
9
  onExit: exit-notify
10
  arguments:
11
    parameters:
12
      - name: repo_url
13
      - name: base_branch
14
        value: main
15
      - name: requirement_id
16
      - name: requirement_text
17
      - name: requester
18
        value: unknown
19
      - name: model
20
        value: gpt-4.1
21
      - name: dry_run
22
        value: "false"
23

24
  artifactRepositoryRef:
25
    configMap: artifact-repositories
26
    key: default-v1
27

28
  templates:
29
    - name: main
30
      dag:
31
        failFast: false
32
        tasks:
33
          - name: parse-requirement
34
            template: parse-requirement
35

36
          - name: clone-repo
37
            dependencies: [parse-requirement]
38
            template: clone-repo
39
            arguments:
40
              artifacts:
41
                - name: requirement
42
                  from: "{{tasks.parse-requirement.outputs.artifacts.requirement}}"
43

44
          - name: agent-plan
45
            dependencies: [clone-repo]
46
            template: agent-plan
47
            arguments:
48
              artifacts:
49
                - name: workspace
50
                  from: "{{tasks.clone-repo.outputs.artifacts.workspace}}"
51
                - name: requirement
52
                  from: "{{tasks.parse-requirement.outputs.artifacts.requirement}}"
53

54
          - name: agent-code
55
            dependencies: [agent-plan]
56
            template: agent-code
57
            arguments:
58
              artifacts:
59
                - name: workspace
60
                  from: "{{tasks.clone-repo.outputs.artifacts.workspace}}"
61
                - name: plan
62
                  from: "{{tasks.agent-plan.outputs.artifacts.plan}}"
63

64
          - name: lint
65
            dependencies: [agent-code]
66
            template: lint
67
            arguments:
68
              artifacts:
69
                - name: workspace
70
                  from: "{{tasks.agent-code.outputs.artifacts.workspace}}"
71

72
          - name: test
73
            dependencies: [agent-code]
74
            template: test
75
            arguments:
76
              artifacts:
77
                - name: workspace
78
                  from: "{{tasks.agent-code.outputs.artifacts.workspace}}"
79

80
          - name: security-scan
81
            dependencies: [agent-code]
82
            template: security-scan
83
            arguments:
84
              artifacts:
85
                - name: workspace
86
                  from: "{{tasks.agent-code.outputs.artifacts.workspace}}"
87

88
          - name: generate-review-report
89
            dependencies: [lint, test, security-scan]
90
            template: generate-review-report
91
            arguments:
92
              artifacts:
93
                - name: workspace
94
                  from: "{{tasks.agent-code.outputs.artifacts.workspace}}"
95
                - name: lint-report
96
                  from: "{{tasks.lint.outputs.artifacts.lint-report}}"
97
                - name: test-report
98
                  from: "{{tasks.test.outputs.artifacts.test-report}}"
99
                - name: security-report
100
                  from: "{{tasks.security-scan.outputs.artifacts.security-report}}"
101

102
          - name: create-pr
103
            dependencies: [generate-review-report]
104
            template: create-pr
105
            when: "{{workflow.parameters.dry_run}} == false"
106
            arguments:
107
              artifacts:
108
                - name: workspace
109
                  from: "{{tasks.agent-code.outputs.artifacts.workspace}}"
110
                - name: review-report
111
                  from: "{{tasks.generate-review-report.outputs.artifacts.review-report}}"
112

113
          - name: wait-human-review
114
            dependencies: [create-pr]
115
            template: wait-human-review
116

117
          - name: post-review-summary
118
            dependencies: [wait-human-review]
119
            template: post-review-summary
120

121
    - name: parse-requirement
122
      container:
123
        image: ghcr.io/example/ai-agent-runner:0.1.0
124
        command: [sh, -c]
125
        args:
126
          - |
127
            agent parse-requirement \
128
              --id "$REQUIREMENT_ID" \
129
              --text "$REQUIREMENT_TEXT" \
130
              --requester "$REQUESTER" \
131
              --output /tmp/requirement.json
132
        env:
133
          - name: REQUIREMENT_ID
134
            value: "{{workflow.parameters.requirement_id}}"
135
          - name: REQUIREMENT_TEXT
136
            value: "{{workflow.parameters.requirement_text}}"
137
          - name: REQUESTER
138
            value: "{{workflow.parameters.requester}}"
139
      outputs:
140
        artifacts:
141
          - name: requirement
142
            path: /tmp/requirement.json
143

144
    - name: clone-repo
145
      inputs:
146
        artifacts:
147
          - name: requirement
148
            path: /tmp/requirement.json
149
      container:
150
        image: ghcr.io/example/ai-agent-runner:0.1.0
151
        command: [sh, -c]
152
        args:
153
          - |
154
            agent clone \
155
              --repo "$REPO_URL" \
156
              --base-branch "$BASE_BRANCH" \
157
              --work-branch "ai-agent/${REQUIREMENT_ID}" \
158
              --requirement /tmp/requirement.json \
159
              --output /workspace/repo
160
        env:
161
          - name: REPO_URL
162
            value: "{{workflow.parameters.repo_url}}"
163
          - name: BASE_BRANCH
164
            value: "{{workflow.parameters.base_branch}}"
165
          - name: REQUIREMENT_ID
166
            value: "{{workflow.parameters.requirement_id}}"
167
          - name: GIT_TOKEN
168
            valueFrom:
169
              secretKeyRef:
170
                name: ai-agent-git-token
171
                key: token
172
      outputs:
173
        artifacts:
174
          - name: workspace
175
            path: /workspace/repo
176

177
    - name: agent-plan
178
      inputs:
179
        artifacts:
180
          - name: workspace
181
            path: /workspace/repo
182
          - name: requirement
183
            path: /tmp/requirement.json
184
      container:
185
        image: ghcr.io/example/ai-agent-runner:0.1.0
186
        command: [sh, -c]
187
        args:
188
          - |
189
            agent plan \
190
              --repo /workspace/repo \
191
              --requirement /tmp/requirement.json \
192
              --model "$MODEL" \
193
              --output /tmp/plan.md
194
        env:
195
          - name: MODEL
196
            value: "{{workflow.parameters.model}}"
197
          - name: MODEL_API_KEY
198
            valueFrom:
199
              secretKeyRef:
200
                name: ai-agent-model-token
201
                key: apiKey
202
      outputs:
203
        artifacts:
204
          - name: plan
205
            path: /tmp/plan.md
206

207
    - name: agent-code
208
      inputs:
209
        artifacts:
210
          - name: workspace
211
            path: /workspace/repo
212
          - name: plan
213
            path: /tmp/plan.md
214
      container:
215
        image: ghcr.io/example/ai-agent-runner:0.1.0
216
        command: [sh, -c]
217
        args:
218
          - |
219
            agent code \
220
              --repo /workspace/repo \
221
              --plan /tmp/plan.md \
222
              --model "$MODEL" \
223
              --max-files 20 \
224
              --output /workspace/repo
225
        env:
226
          - name: MODEL
227
            value: "{{workflow.parameters.model}}"
228
          - name: MODEL_API_KEY
229
            valueFrom:
230
              secretKeyRef:
231
                name: ai-agent-model-token
232
                key: apiKey
233
      outputs:
234
        artifacts:
235
          - name: workspace
236
            path: /workspace/repo
237

238
    - name: lint
239
      inputs:
240
        artifacts:
241
          - name: workspace
242
            path: /workspace/repo
243
      container:
244
        image: ghcr.io/example/ai-agent-runner:0.1.0
245
        command: [sh, -c]
246
        args:
247
          - |
248
            agent lint \
249
              --repo /workspace/repo \
250
              --output /tmp/lint-report.json
251
      outputs:
252
        artifacts:
253
          - name: lint-report
254
            path: /tmp/lint-report.json
255

256
    - name: test
257
      inputs:
258
        artifacts:
259
          - name: workspace
260
            path: /workspace/repo
261
      container:
262
        image: ghcr.io/example/ai-agent-runner:0.1.0
263
        command: [sh, -c]
264
        args:
265
          - |
266
            agent test \
267
              --repo /workspace/repo \
268
              --output /tmp/test-report.json
269
      outputs:
270
        artifacts:
271
          - name: test-report
272
            path: /tmp/test-report.json
273

274
    - name: security-scan
275
      inputs:
276
        artifacts:
277
          - name: workspace
278
            path: /workspace/repo
279
      container:
280
        image: ghcr.io/example/ai-agent-runner:0.1.0
281
        command: [sh, -c]
282
        args:
283
          - |
284
            agent security-scan \
285
              --repo /workspace/repo \
286
              --output /tmp/security-report.json
287
      outputs:
288
        artifacts:
289
          - name: security-report
290
            path: /tmp/security-report.json
291

292
    - name: generate-review-report
293
      inputs:
294
        artifacts:
295
          - name: workspace
296
            path: /workspace/repo
297
          - name: lint-report
298
            path: /tmp/lint-report.json
299
          - name: test-report
300
            path: /tmp/test-report.json
301
          - name: security-report
302
            path: /tmp/security-report.json
303
      container:
304
        image: ghcr.io/example/ai-agent-runner:0.1.0
305
        command: [sh, -c]
306
        args:
307
          - |
308
            agent review-report \
309
              --repo /workspace/repo \
310
              --lint /tmp/lint-report.json \
311
              --test /tmp/test-report.json \
312
              --security /tmp/security-report.json \
313
              --output /tmp/review-report.md
314
      outputs:
315
        artifacts:
316
          - name: review-report
317
            path: /tmp/review-report.md
318

319
    - name: create-pr
320
      inputs:
321
        artifacts:
322
          - name: workspace
323
            path: /workspace/repo
324
          - name: review-report
325
            path: /tmp/review-report.md
326
      container:
327
        image: ghcr.io/example/ai-agent-runner:0.1.0
328
        command: [sh, -c]
329
        args:
330
          - |
331
            agent create-pr \
332
              --repo /workspace/repo \
333
              --base-branch "$BASE_BRANCH" \
334
              --branch "ai-agent/${REQUIREMENT_ID}" \
335
              --title "AI Agent: ${REQUIREMENT_ID}" \
336
              --body-file /tmp/review-report.md
337
        env:
338
          - name: BASE_BRANCH
339
            value: "{{workflow.parameters.base_branch}}"
340
          - name: REQUIREMENT_ID
341
            value: "{{workflow.parameters.requirement_id}}"
342
          - name: GIT_TOKEN
343
            valueFrom:
344
              secretKeyRef:
345
                name: ai-agent-git-token
346
                key: token
347

348
    - name: wait-human-review
349
      suspend: {}
350

351
    - name: post-review-summary
352
      container:
353
        image: ghcr.io/example/ai-agent-runner:0.1.0
354
        command: [sh, -c]
355
        args:
356
          - |
357
            agent notify \
358
              --status "human-review-finished" \
359
              --requirement-id "$REQUIREMENT_ID"
360
        env:
361
          - name: REQUIREMENT_ID
362
            value: "{{workflow.parameters.requirement_id}}"
363

364
    - name: exit-notify
365
      container:
366
        image: ghcr.io/example/ai-agent-runner:0.1.0
367
        command: [sh, -c]
368
        args:
369
          - |
370
            agent notify \
371
              --status "{{workflow.status}}" \
372
              --workflow "{{workflow.name}}" \
373
              --requirement-id "$REQUIREMENT_ID"
374
        env:
375
          - name: REQUIREMENT_ID
376
            value: "{{workflow.parameters.requirement_id}}"

1
{
2
  "repo_url": "https://github.com/example/demo-service.git",
3
  "base_branch": "main",
4
  "requirement_id": "REQ-2026-001",
5
  "requirement_text": "给订单查询接口增加按状态过滤，并补充测试",
6
  "requester": "alice"
7
}

1
apiVersion: argoproj.io/v1alpha1
2
kind: EventSource
3
metadata:
4
  name: github-issue-eventsource
5
  namespace: argo-events
6
spec:
7
  github:
8
    aiAgentIssue:
9
      repositories:
10
        - owner: example
11
          names:
12
            - demo-service
13
      webhook:
14
        endpoint: /github
15
        port: "12000"
16
        method: POST
17
        url: https://argo-events.example.com
18
      events:
19
        - issues
20
      apiToken:
21
        name: github-webhook-secret
22
        key: token
23
      webhookSecret:
24
        name: github-webhook-secret
25
        key: secret
26
      insecure: false
27
      active: true
28
      contentType: json

1
dependencies:
2
  - name: github-issue
3
    eventSourceName: github-issue-eventsource
4
    eventName: aiAgentIssue
5
    filters:
6
      data:
7
        - path: body.action
8
          type: string
9
          value:
10
            - opened
11
            - labeled
12
        - path: body.issue.labels.#.name
13
          type: string
14
          value:
15
            - ai-agent

1
apiVersion: v1
2
kind: ConfigMap
3
metadata:
4
  name: artifact-repositories
5
  namespace: argo
6
  annotations:
7
    workflows.argoproj.io/default-artifact-repository: default-v1
8
data:
9
  default-v1: |
10
    s3:
11
      bucket: ai-agent-workflow-artifacts
12
      endpoint: s3.amazonaws.com
13
      region: us-east-1
14
      useSDKCreds: true

1
apiVersion: v1
2
kind: Secret
3
metadata:
4
  name: s3-credentials
5
  namespace: argo
6
type: Opaque
7
stringData:
8
  accessKey: replace_me
9
  secretKey: replace_me
10
---
11
apiVersion: v1
12
kind: ConfigMap
13
metadata:
14
  name: artifact-repositories
15
  namespace: argo
16
  annotations:
17
    workflows.argoproj.io/default-artifact-repository: default-v1
18
data:
19
  default-v1: |
20
    s3:
21
      bucket: ai-agent-workflow-artifacts
22
      endpoint: minio.minio.svc.cluster.local:9000
23
      insecure: true
24
      accessKeySecret:
25
        name: s3-credentials
26
        key: accessKey
27
      secretKeySecret:
28
        name: s3-credentials
29
        key: secretKey

1
- name: wait-human-review
2
  suspend: {}

1
apiVersion: argoproj.io/v1alpha1
2
kind: Workflow
3
metadata:
4
  generateName: ai-agent-simple-
5
  namespace: argo
6
spec:
7
  entrypoint: ai-agent-simple
8
  arguments:
9
    parameters:
10
      - name: requirement_text
11
        value: "给用户列表接口增加 name 模糊搜索"
12
  templates:
13
    - name: ai-agent-simple
14
      steps:
15
        - - name: plan
16
            template: run
17
            arguments:
18
              parameters:
19
                - name: command
20
                  value: "agent plan --text '{{workflow.parameters.requirement_text}}'"
21
        - - name: code
22
            template: run
23
            arguments:
24
              parameters:
25
                - name: command
26
                  value: "agent code"
27
        - - name: test
28
            template: run
29
            arguments:
30
              parameters:
31
                - name: command
32
                  value: "agent test"
33
        - - name: create-pr
34
            template: run
35
            arguments:
36
              parameters:
37
                - name: command
38
                  value: "agent create-pr"
39
        - - name: wait-review
40
            template: wait-review
41

42
    - name: run
43
      inputs:
44
        parameters:
45
          - name: command
46
      container:
47
        image: ghcr.io/example/ai-agent-runner:0.1.0
48
        command: [sh, -c]
49
        args: ["{{inputs.parameters.command}}"]
50

51
    - name: wait-review
52
      suspend: {}

1
GitHub Issue/Webhook
2
  -> Argo Events
3
  -> Argo WorkflowTemplate
4
  -> Agent 生成分支和 PR
5
  -> 自动测试/扫描
6
  -> 人工 Review
7
  -> 手动合并