apiVersion: apps/v1
kind: Deployment
metadata:
  name: migrate-server
  namespace: infra
  labels:
    app: migrate-server
spec:
  replicas: 1
  selector:
    matchLabels:
      app: migrate-server
  template:
    metadata:
      labels:
        app: migrate-server
    spec:
      serviceAccountName: migrate-server
      containers:
      - name: migrate-server
        image: 385595570414.dkr.ecr.us-west-2.amazonaws.com/dbaas/dev/migrate-server:test
        imagePullPolicy: Always
        env:
        - name: GOOGLE_APPLICATION_CREDENTIALS
          value: /etc/gcp/credential.json
        command:
        - /app/migrator
        - --config-base-dir=/.kube
        - --global-config=infra
        - --mode=http
        volumeMounts:
        - name: kubeconfig
          mountPath: /.kube
        - name: gcp-credential
          mountPath: /etc/gcp
        - name: token
          mountPath: /var/run/cloud.google.com
      volumes:
      - name: kubeconfig
        secret:
          secretName: migrate-server-kubeconfig
      - name: token
        projected:
          sources:
          - serviceAccountToken:
              audience: sts.amazonaws.com
              expirationSeconds: 3600
              path: token
      - name: gcp-credential
        configMap:
          name: migrate-server-gcp-credential