apiVersion: apps/v1
kind: Deployment
metadata:
  name: eks-infra-provider
spec:
  template:
    spec:
      containers:
        - name: eks-provider
          volumeMounts:
          - name: kubeconfig
            mountPath: /.kube
          - name: root-config
            mountPath: /etc/infra-api
          - mountPath: /.gcp
            name: gcp
          env:
          - name: KUBECONFIG
            value: /.kube/config
          - name: O11Y_AUTH0_CLIENT_ID
            valueFrom:
              secretKeyRef:
                name: o11y-auth0-client
                key: Auth0ClientID
          - name: O11Y_AUTH0_CLIENT_SECRET
            valueFrom:
              secretKeyRef:
                name: o11y-auth0-client
                key: Auth0ClientSecret
          - name: PROXY_AUTH0_CLIENT_ID
            valueFrom:
              secretKeyRef:
                name: proxy-auth0-client
                key: Auth0ClientID
          - name: PROXY_AUTH0_CLIENT_SECRET
            valueFrom:
              secretKeyRef:
                name: proxy-auth0-client
                key: Auth0ClientSecret
          - name: GOOGLE_APPLICATION_CREDENTIALS
            value: /.gcp/credentials.json
      volumes:
        - name: kubeconfig
          secret:
            secretName: eks-provider-infra-kubeconfig
        - name: root-config
          configMap:
            name: eks-provider-root-config
        - name: gcp
          secret:
            defaultMode: 420
            secretName: eks-infra-provider-gcp-secret