apiVersion: serving.knative.dev/v1
kind: Service
metadata:
  name: agent-builder
  namespace: agents
  labels:
    app: agent-builder
    a2a/managed-by: control-plane
spec:
  template:
    metadata:
      labels:
        app: agent-builder
      annotations:
        autoscaling.knative.dev/minScale: "0"
        autoscaling.knative.dev/maxScale: "20"
        autoscaling.knative.dev/metric: concurrency
        autoscaling.knative.dev/target: "1"
    spec:
      containerConcurrency: 1
      enableServiceLinks: false
      responseStartTimeoutSeconds: 600
      timeoutSeconds: 1200
      containers:
        - name: agent
          image: registry.a2acloud.io/agents/agent-builder:8b8535ddeccf1ae693f3b9f8a9da98866a1d75ad
          imagePullPolicy: Always
          ports:
            - containerPort: 8000
              name: http1
              protocol: TCP
          env:
            - name: A2A_AGENT_IMAGE
              value: registry.a2acloud.io/agents/agent-builder:8b8535ddeccf1ae693f3b9f8a9da98866a1d75ad
            - name: A2A_RENDER_IMAGE
              value: registry.a2acloud.io/agents/agent-builder:8b8535ddeccf1ae693f3b9f8a9da98866a1d75ad
            - name: SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: A2A_SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: SANDBOX_TIMEOUT_S
              value: "1200"
            - name: A2A_SANDBOX_TIMEOUT_S
              value: "1200"
            - name: DEPLOY_WAIT_TIMEOUT_S
              value: "900"
            - name: A2A_GRANT_VERIFYING_KEY
              valueFrom:
                secretKeyRef: {name: platform-secrets, key: grant_verifying_key}
            - name: A2A_CP_URL
              value: http://control-plane.control-plane.svc.cluster.local
          readinessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 8
            periodSeconds: 5
            failureThreshold: 3
            successThreshold: 1
            timeoutSeconds: 1
          livenessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 25
            periodSeconds: 15
          resources:
            requests: {cpu: 200m, memory: 512Mi}
            limits: {cpu: "1", memory: 1Gi}
  traffic:
    - latestRevision: true
      percent: 100
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: agent-builder
  namespace: agents
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
spec:
  tls:
    - hosts: [agent-builder.a2acloud.io]
      secretName: agent-builder-a2acloud-io-tls
  rules:
    - host: agent-builder.a2acloud.io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: agent-builder
                port:
                  number: 80