apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: dp-eks-provider
  name: dp-eks-infra-provider
spec:
  replicas: 0
  selector:
    matchLabels:
      app: dp-eks-provider
  template:
    metadata:
      labels:
        app: dp-eks-provider
    spec:
      containers:
      - command:
        - /eks-provider
        - --namespace=infra
        - --root-config=/etc/infra-api/config.yaml
        - --enable-cm-controllers=false
        - --enable-dp-controllers=true
        - --leader-elect=true
        env:
        - name: COMPAT_XREGION_AUTH_KEY
          valueFrom:
            secretKeyRef:
              key: dp_compat_auth_key
              name: common-external-secrets
        - name: KUBECONFIG
          value: /.kube/config
        - name: O11Y_AUTH0_CLIENT_ID
          valueFrom:
            secretKeyRef:
              key: Auth0ClientID
              name: o11y-auth0-client
        - name: O11Y_AUTH0_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              key: Auth0ClientSecret
              name: o11y-auth0-client
        - name: PROXY_AUTH0_CLIENT_ID
          valueFrom:
            secretKeyRef:
              key: Auth0ClientID
              name: proxy-auth0-client
        - name: PROXY_AUTH0_CLIENT_SECRET
          valueFrom:
            secretKeyRef:
              key: Auth0ClientSecret
              name: proxy-auth0-client
        image: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/eks-provider:v0.138.0
        name: eks-provider
        resources:
          limits:
            cpu: 500m
            memory: 2Gi
          requests:
            cpu: 100m
            memory: 200Mi
        volumeMounts:
        - mountPath: /.kube
          name: kubeconfig
        - mountPath: /etc/infra-api
          name: root-config
      securityContext:
        fsGroup: 65532
      serviceAccountName: eks-infra-provider
      volumes:
      - name: kubeconfig
        secret:
          secretName: eks-provider-infra-kubeconfig
      - configMap:
          name: eks-provider-root-config
        name: root-config