apiVersion: apps/v1
kind: Deployment
metadata:
  name: regional-server
spec:
  replicas: 1
  template:
    metadata:
      annotations:
        kubectl.kubernetes.io/default-container: regional-server
      labels:
        app: regional-server
        azure.workload.identity/use: "true"
    spec:
      containers:
      - name: regional-server
        env:
        - name: AWS_STS_REGIONAL_ENDPOINTS
          value: regional
        - name: AWS_REGION
          value: us-west-2
        - name: AWS_ROLE_ARN
          value: arn:aws:iam::380838443567:role/prod-japaneast-drs
        - name: AWS_WEB_IDENTITY_TOKEN_FILE
          value: /var/run/secrets/kubernetes.io/serviceaccount/token
        volumeMounts:
          - name: tidb-server-cluster-issuer-ca
            mountPath: /etc/cluster-controller/issuer-ca
      volumes:
        - name: tidb-server-cluster-issuer-ca
          secret:
            secretName: tidb-server-cluster-issuer-ca