apiVersion: apps/v1
kind: Deployment
metadata:
  name: dataplane-controller
spec:
  template:
    metadata:
      annotations:
        kubectl.kubernetes.io/default-container: controller
      labels:
        app: dataplane-controller
        azure.workload.identity/use: "true"
    spec:
      containers:
      - name: controller
        env:
          - name: AWS_STS_REGIONAL_ENDPOINTS
            value: regional
          - name: AWS_REGION
            value: us-west-2
          - name: AWS_ROLE_ARN
            value: TMPL_IRSA_ROLE_ARN
          - name: AWS_WEB_IDENTITY_TOKEN_FILE
            value: /var/run/secrets/kubernetes.io/serviceaccount/token