---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
    creationTimestamp: null
    name: tidbcloud-credentials
    namespace: test-infra
spec:
    encryptedData:
        credentials: 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
    template:
        data: null
        metadata:
            creationTimestamp: null
            name: tidbcloud-credentials
            namespace: test-infra
---
apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
    creationTimestamp: null
    name: tidbcloud-kubeconfig
    namespace: test-infra
spec:
    encryptedData:
        config: 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
    template:
        data: null
        metadata:
            creationTimestamp: null
            name: tidbcloud-kubeconfig
            namespace: test-infra
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: tidbcloud-kubectl-proxy
  namespace: test-infra
spec:
  selector:
    matchLabels:
      app: tidbcloud-kubectl-proxy
  replicas: 2
  template:
    metadata:
      annotations:
        app.kubernetes.io/managed-by: test-infra
      labels:
        app: tidbcloud-kubectl-proxy
    spec:
      containers:
        - name: kubectl
          command: [kubectl]
          args:
            - proxy
            - --address
            - 0.0.0.0
            - --accept-hosts
            - '.*'
          image: 'hub.pingcap.net/qa/kubectl-proxy'
          imagePullPolicy: Always
          ports:
            - containerPort: 8001
          resources:
            requests:
              cpu: 500m
              memory: 2000Mi
            limits:
              cpu: 500m
              memory: 2000Mi
          volumeMounts:
            - name: credentials
              mountPath: /root/.aws
              readOnly: true
            - name: kubeconfig
              mountPath: /root/.kube
              readOnly: true
      volumes:
        - name: credentials
          secret:
            secretName: tidbcloud-credentials
            optional: false
        - name: kubeconfig
          secret:
              secretName: tidbcloud-kubeconfig
              optional: false
      terminationGracePeriodSeconds: 10
---
apiVersion: v1
kind: Service
metadata:
  name: tidbcloud-kubectl-proxy-service
  namespace: test-infra
spec:
  type: ClusterIP
  selector:
    app: tidbcloud-kubectl-proxy
  ports:
    - protocol: TCP
      port: 8001
      targetPort: 8001