apiVersion: apps/v1
kind: Deployment
metadata:
  name: dbaas-core-svc-server
spec:
  replicas: 0
  template:
    spec:
      containers:
        - name: core-svc-server
          env:
            - name: GCP_WORKLOAD_IDENTITY_AUDIENCE
              value: //iam.googleapis.com/projects/301623017899/locations/global/workloadIdentityPools/prod-dbaas/providers/prod-dbaas-eks-oidc
            - name: GCP_IMPERSONATE_SA
              value: prod-prod-central@dbaas-prod.iam.gserviceaccount.com
            - name: TIINF_POD_NAME
              value: "coresvc-server-dummy1-dummy2"
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /gcloud-config/application_default_credentials.json
            - name: O11Y_AUTH0_SECRET
              valueFrom:
                secretKeyRef:
                  name: core-svc-o11y-auth0-secret
                  key: auth0-client-secret
          image: 380838443567.dkr.ecr.us-west-2.amazonaws.com/dbaas/prod/core-svc:release-v20260408
          resources:
            limits:
              cpu: "2"
              memory: 4Gi
            requests:
              cpu: "1"
              memory: 2Gi
          volumeMounts:
            - mountPath: /gardener
              name: gardener
            - mountPath: /gcloud-config/
              name: core-svc-gcp-credential-config
      volumes:
        - name: gardener
          secret:
            defaultMode: 420
            secretName: core-svc-gardener-kubeconfig # gardener apiserver kubeconfig
        - name: core-svc-gcp-credential-config
          secret:
            secretName: core-svc-gcp-credential-config