apiVersion: apps/v1
kind: Deployment
metadata:
  name: agent-builder
  namespace: agents
  labels:
    app: agent-builder
    a2a/managed-by: control-plane
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: agent-builder
  template:
    metadata:
      labels:
        app: agent-builder
    spec:
      containers:
        - name: agent
          image: registry.a2acloud.io/agents/agent-builder:7829e5c71e834fa868319c2b81569c3a00a5a0b9
          imagePullPolicy: Always
          ports:
            - containerPort: 8000
              name: http
          env:
            - name: A2A_AGENT_IMAGE
              value: registry.a2acloud.io/agents/agent-builder:7829e5c71e834fa868319c2b81569c3a00a5a0b9
            - name: A2A_RENDER_IMAGE
              value: registry.a2acloud.io/agents/agent-builder:7829e5c71e834fa868319c2b81569c3a00a5a0b9
            - name: SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: A2A_SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: SANDBOX_TIMEOUT_S
              value: "1200"
            - name: A2A_SANDBOX_TIMEOUT_S
              value: "1200"
            - name: DEPLOY_WAIT_TIMEOUT_S
              value: "900"
            - name: A2A_GRANT_VERIFYING_KEY
              valueFrom:
                secretKeyRef: {name: platform-secrets, key: grant_verifying_key}
            - name: A2A_CP_URL
              value: http://control-plane.control-plane.svc.cluster.local
          readinessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 8
            periodSeconds: 5
          livenessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 25
            periodSeconds: 15
          resources:
            requests: {cpu: 200m, memory: 512Mi}
            limits: {cpu: 1, memory: 1Gi}
---
apiVersion: v1
kind: Service
metadata:
  name: agent-builder
  namespace: agents
spec:
  type: ClusterIP
  selector:
    app: agent-builder
  ports:
    - name: http
      port: 80
      targetPort: 8000
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: agent-builder
  namespace: agents
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
spec:
  tls:
    - hosts: [agent-builder.a2acloud.io]
      secretName: agent-builder-a2acloud-io-tls
  rules:
    - host: agent-builder.a2acloud.io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: agent-builder
                port:
                  number: 80