apiVersion: apps/v1
kind: Deployment
metadata:
  name: agent-builder
  namespace: agents
  labels:
    app: agent-builder
    a2a/managed-by: control-plane
spec:
  replicas: 1
  strategy:
    type: Recreate
  selector:
    matchLabels:
      app: agent-builder
  template:
    metadata:
      labels:
        app: agent-builder
    spec:
      containers:
        - name: agent
          image: registry.a2acloud.io/agents/agent-builder:4b5af844465f035d3668675926aef6a273611183
          imagePullPolicy: Always
          ports:
            - containerPort: 8000
              name: http
          env:
            - name: SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: A2A_LITELLM_URL
              value: http://litellm.llm.svc.cluster.local:4000
            - name: A2A_LITELLM_KEY
              value: sk-microcash-local
            - name: A2A_LITELLM_MODEL
              value: gpt-5.5
            - name: A2A_CP_URL
              value: http://control-plane.control-plane.svc.cluster.local
            - name: A2A_MINIO_ENDPOINT
              value: http://microcash-infra-minio.microcash-infra.svc.cluster.local:9000
            - name: A2A_MINIO_ACCESS_KEY
              value: minioadmin
            - name: A2A_MINIO_SECRET_KEY
              value: minioadmin
          readinessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 8
            periodSeconds: 5
          livenessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 25
            periodSeconds: 15
          resources:
            requests: {cpu: 200m, memory: 512Mi}
            limits: {cpu: 1, memory: 1Gi}
---
apiVersion: v1
kind: Service
metadata:
  name: agent-builder
  namespace: agents
spec:
  type: ClusterIP
  selector:
    app: agent-builder
  ports:
    - name: http
      port: 80
      targetPort: 8000
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: agent-builder
  namespace: agents
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-prod
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
spec:
  tls:
    - hosts: [agent-builder.a2acloud.io]
      secretName: agent-builder-a2acloud-io-tls
  rules:
    - host: agent-builder.a2acloud.io
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: agent-builder
                port:
                  number: 80