apiVersion: apps/v1
kind: Deployment
metadata:
  name: cluster-controller
spec:
  template:
    metadata:
      labels:
        app: cluster-controller
        azure.workload.identity/use: "true"
    spec:
      containers:
        - name: controller
          resources:
            requests:
              cpu: 100m
              memory: 100Mi
            limits:
              cpu: 500m
              memory: 2000Mi
          volumeMounts:
            - name: tidb-server-cluster-issuer-ca
              mountPath: /etc/cluster-controller/issuer-ca
      volumes:
        - name: tidb-server-cluster-issuer-ca
          secret:
            secretName: tidb-server-cluster-issuer-ca