apiVersion: apps/v1
kind: Deployment
metadata:
  name: tep-server
  namespace: tep
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: tep-server
  template:
    metadata:
      labels:
        app.kubernetes.io/name: tep-server
    spec:
      containers:
      - name: tep-server
        image: hub.pingcap.net/louis/tep-server:latest
        imagePullPolicy: Always
        command: ["/usr/local/bin/tep-server"]
        args:
        - -dsn=$(DSN)
        # - --endpoint=rook-ceph-rgw-tep-store.rook-ceph
        # - --region=:default-placement
        # - --access-key=U3TN0IT831UH80PWE5ER
        # - --secret-key=ecnd4GCH6YNG9E66MVZMsL0DO5q5w6OC51LH5iiz
        # - --backup-storage-class=backup-storage
        # - --pd-storage-class=shared-ssd-storage
        # - --tikv-storage-class=ssd-storage
        # - --monitor-storage-class=local-storage
        env:
        - name: DSN
          valueFrom:
            secretKeyRef:
              name: tep-mysql-dsn
              key: dsn
        volumeMounts:
          - mountPath: /var/lib/tls
            name: tls
            readOnly: true
      volumes:
      - name: tls
        secret:
          defaultMode: 420
          secretName: tep-client-cert