apiVersion: apps/v1
kind: Deployment
metadata:
  name: ops-service
  labels:
    control-plane: ops-service
spec:
  replicas: 2
  selector:
    matchLabels:
      control-plane: ops-service
  template:
    metadata:
      labels:
        control-plane: ops-service
    spec:
      serviceAccountName: ops-service
      containers:
        - name: ops-service
          image: tidbcloud-registry.ap-southeast-1.cr.aliyuncs.com/dbaas/aws-shared-provider-ops-service:f97d83cb1a4989e62114293d8a292b6eb32da2db
          ports:
            - containerPort: 9088
              name: ops-service
              protocol: TCP
          resources:
            requests:
              cpu: 500m
              memory: 500Mi
            limits:
              cpu: 1000m
              memory: 1Gi
          volumeMounts:
            - name: server-cert
              mountPath: /server-cert
              readOnly: true
            - name: cluster-cert
              mountPath: /cluster-cert
              readOnly: true
      volumes:
        - name: server-cert
          secret:
            secretName: ops-service-cluster-secret
        - name: cluster-cert
          secret:
            secretName: manager-cluster-client-secret
            optional: true