apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    sidecar.jaegertracing.io/inject: jaeger
  name: dataflow-ng-grpc
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dataflow-ng-grpc
  strategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: dataflow-ng-grpc
    spec:
      containers:
        - args:
            - grpc
            - --config=/etc/dataflow/config.yaml
          command:
            - /dataflow
          image: 385595570414.dkr.ecr.us-west-2.amazonaws.com/dbaas/dev/dataflow-service-ng:FIXME
          imagePullPolicy: IfNotPresent
          name: dataflow-ng-grpc
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /.gcp/credentials.json #  this secret is created by pulumi https://github.com/tidbcloud/dataflow-service/commit/46805530b58677a4a1da44a4ef4c503d5ff397bc
          readinessProbe:
            failureThreshold: 10
            initialDelaySeconds: 5
            periodSeconds: 5
            successThreshold: 1
            tcpSocket:
              port: 10000
            timeoutSeconds: 1
          volumeMounts:
            - mountPath: /etc/dataflow
              name: dataflow-ng-conf
              readOnly: true
            - mountPath: /.gcp
              name: gcp
      serviceAccountName: central
      volumes:
        - configMap:
            name: dataflow-ng-conf
          name: dataflow-ng-conf
        - name: gcp
          secret:
            defaultMode: 420
            secretName: dataflow-ng-gcp-secret