apiVersion: apps/v1
kind: Deployment
metadata:
  name: dbaas-core-portal-server
spec:
  replicas: 2
  template:
    spec:
      containers:
        - name: core-portal-server
          env:
            - name: GCP_WORKLOAD_IDENTITY_AUDIENCE
              value: //iam.googleapis.com/projects/301623017899/locations/global/workloadIdentityPools/prod-dbaas/providers/prod-dbaas-eks-oidc
            - name: GCP_IMPERSONATE_SA
              value: prod-prod-central@dbaas-prod.iam.gserviceaccount.com
            - name: DBAAS-ACCOUNT-AUTH0-DOMAIN
              value: tidb.auth0.com
            - name: DBAAS-ACCOUNT-AUTH0-CLIENT-AUDIENCE
              value: prod-management-portal-service
            - name: CORE_SVC_API_KEY
              valueFrom:
                secretKeyRef:
                  name: core-portal-api-key
                  key: core-svc
            - name: TIINF_POD_NAME
              value: "coreportal-server-dummy1-dummy2"
          image: 380838443567.dkr.ecr.us-west-2.amazonaws.com/dbaas/prod/core-svc:release-v20260408
          resources:
            limits:
              cpu: "2"
              memory: 2Gi
            requests:
              cpu: "1"
              memory: 2Gi