apiVersion: apps/v1
kind: Deployment
metadata:
  name: agent-reviewer
  namespace: agents
  labels:
    app: agent-reviewer
    a2a/managed-by: control-plane
spec:
  replicas: 1
  revisionHistoryLimit: 1
  selector:
    matchLabels:
      app: agent-reviewer
  strategy:
    type: RollingUpdate
    rollingUpdate:
      maxSurge: 1
      maxUnavailable: 0
  progressDeadlineSeconds: 900
  template:
    metadata:
      labels:
        app: agent-reviewer
    spec:
      enableServiceLinks: false
      terminationGracePeriodSeconds: 30
      containers:
        - name: agent
          image: registry.a2acloud.io/agents/agent-reviewer:32cab7f29fff3ac7bda0cbbc3cbda5309fe69ded
          imagePullPolicy: Always
          ports:
            - containerPort: 8000
              name: http1
              protocol: TCP
          env:
            - name: SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: A2A_SANDBOX_URL
              value: http://sandbox.sandbox.svc.cluster.local:8000
            - name: SANDBOX_TIMEOUT_S
              value: "600"
            - name: A2A_GRANT_VERIFYING_KEY
              valueFrom:
                secretKeyRef: {name: platform-secrets, key: grant_verifying_key}
            - name: A2A_RECEIPT_SIGNING_KEY
              valueFrom:
                secretKeyRef: {name: platform-secrets, key: receipt_signing_key, optional: true}
            - name: A2A_REPLAY_SIGNING_KEY
              valueFrom:
                secretKeyRef: {name: platform-secrets, key: replay_signing_key, optional: true}
            - name: A2A_GITEA_INTERNAL
              value: http://gitea-http.gitea.svc.cluster.local:3000
            - name: A2A_GITEA_PUBLIC
              value: http://gitea.a2acloud.io
            - name: A2A_CP_URL
              value: http://control-plane.control-plane.svc.cluster.local
          readinessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 8
            periodSeconds: 5
            failureThreshold: 3
            timeoutSeconds: 1
          livenessProbe:
            httpGet: {path: /healthz, port: 8000}
            initialDelaySeconds: 25
            periodSeconds: 15
          resources:
            requests: {cpu: 200m, memory: 384Mi}
            limits: {cpu: "1", memory: 768Mi}
---
apiVersion: v1
kind: Service
metadata:
  name: agent-reviewer
  namespace: agents
  annotations:
    argocd.argoproj.io/sync-options: ServerSideApply=false,Replace=true
  labels:
    app: agent-reviewer
    a2a/managed-by: control-plane
spec:
  selector:
    app: agent-reviewer
  ports:
    - name: http
      port: 80
      targetPort: 8000
      protocol: TCP