apiVersion: apps/v1
kind: Deployment
metadata:
  name: dbaas-core-svc-server
spec:
  replicas: 0
  template:
    spec:
      containers:
        - name: core-svc-server
          env:
            - name: GCP_WORKLOAD_IDENTITY_AUDIENCE
              value: //iam.googleapis.com/projects/27323915999/locations/global/workloadIdentityPools/dev-dbaas/providers/dev-dbaas-eks-oidc
            - name: GCP_IMPERSONATE_SA
              value: dev-nightly-central@pingcap-gardener.iam.gserviceaccount.com
            - name: TIINF_POD_NAME
              value: "coresvc-server-dummy1-dummy2"
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /gcloud-config/application_default_credentials.json
            - name: O11Y_AUTH0_SECRET
              valueFrom:
                secretKeyRef:
                  name: core-svc-o11y-auth0-secret
                  key: auth0-client-secret
          image: 385595570414.dkr.ecr.us-west-2.amazonaws.com/dbaas/nightly/core-svc:eedaab307ac81aca09e1dc44a4a380f5a377760a
          resources:
            limits:
              cpu: "2"
              memory: 4Gi
            requests:
              cpu: 100m
              memory: 500Mi
          volumeMounts:
            - mountPath: /gardener
              name: gardener
            - mountPath: /gcloud-config/
              name: core-svc-gcp-credential-config
      volumes:
        - name: gardener
          secret:
            defaultMode: 420
            secretName: core-svc-gardener-kubeconfig # gardener apiserver kubeconfig
        - name: core-svc-gcp-credential-config
          secret:
            secretName: core-svc-gcp-credential-config