apiVersion: apps/v1
kind: Deployment
metadata:
  name: regional-server
spec:
  replicas: 3
  template:
    spec:
      nodeSelector:
        iam.gke.io/gke-metadata-server-enabled: "true"
      tolerations:
      - effect: NoSchedule
        key: iam.gke.io/gke-metadata-server-enabled
        operator: Exists
      containers:
      - name: regional-server
        env:
        - name: AWS_STS_REGIONAL_ENDPOINTS
          value: regional
        - name: AWS_REGION
          value: us-west-2
        - name: AWS_ROLE_ARN
          value: arn:aws:iam::380838443567:role/prod-asia-east1-drs
        - name: AWS_WEB_IDENTITY_TOKEN_FILE
          value: /var/run/secrets/kubernetes.io/serviceaccount/token