apiVersion: apps/v1
kind: Deployment
metadata:
  name: config-manager
spec:
  template:
    spec:
      containers:
        - name: manager
          image: gcr.io/pingcap-public/config-manager:ad0a7525b5d8cac17d689995eca6bb3b04fec58d
          args:
          - --leader-elect
          - --zap-devel=false
          - --activity
          - --activity-config=/etc/config-manager/activity.yaml
          - --jump-endpoint=https://ops-dev.tidbcloud.com/configchange
          - --cluster-ns-prefix=nightly-ms-
          - --api-bind-address=:8082
          - --config-revision-ttl=168h0m0s
          - --config-path=/etc/config-manager/config.yaml
          env:
          - name: KUBECONFIG
            value: /.kube/config
          - name: PROXY_AUTH0_CLIENT_ID
            valueFrom:
              secretKeyRef:
                name: proxy-auth0-client
                key: Auth0ClientID
          - name: ACCOUNT_XREGION_AUTH_KEY
            valueFrom:
              secretKeyRef:
                name: proxy-auth0-client
                key: Auth0ClientID
          - name: PROXY_AUTH0_CLIENT_SECRET
            valueFrom:
              secretKeyRef:
                name: proxy-auth0-client
                key: Auth0ClientSecret
          - name: ACCOUNT_XREGION_AUTH_KEY
            valueFrom:
              secretKeyRef:
                name: config-manager-external-keys
                key: auth_key
          - name: CLINIC_ACTIVITY_TOKEN
            valueFrom:
              secretKeyRef:
                name: config-manager-external-keys
                key: clinic_activity_token
          volumeMounts:
          - name: bizconfig
            mountPath: /etc/config-manager
      serviceAccountName: eks-infra-provider # use the same SA as eks-infra-provider
      volumes:
        - name: kubeconfig
          secret:
            secretName: eks-provider-infra-kubeconfig
        - name: bizconfig
          projected: 
            sources:
            - secret:
                name: config-manager-ghapp-private-key
            - configMap:
                name: config-manager-config