apiVersion: apps/v1
kind: Deployment
metadata:
  name: meta-store
  labels:
    control-plane: meta-store
spec:
  replicas: 1
  selector:
    matchLabels:
      control-plane: meta-store
  template:
    metadata:
      labels:
        control-plane: meta-store
    spec:
      serviceAccountName: meta-store
      containers:
        - name: meta-store
          image: 380838443567.dkr.ecr.us-east-1.amazonaws.com/dbaas/aws-shared-provider-meta-server:bcb4feeac21bebb3a0353a9f3310a42bec2ae19f
          args:
            - -endpoints=serverless-cluster-pd.tidb-serverless.svc:2379
            - -key=/server-cert/tls.key
            - -cert=/server-cert/tls.crt
            - -cacert=/server-cert/ca.crt
            - -server-addr=:9088
            # branch mysql face: polls branch_events on the regional serverless_infra
            # RDS (tables created by the regional serverless-regional-service with
            # --enable-branch-api) and serves /api/v1/branches + /api/v1/branch-events
            # to the manager/gateway cache clients. All four flags must be set
            # together or none at all (meta-server fails fast on partial config).
            - -region=sa-east-1
            - -cloud-provider-type=aws-free-tier
            - -kube-cluster-name=prod-sa-east-1-f01
            - -rds-secret-arn=arn:aws:secretsmanager:sa-east-1:380838443567:secret:prod-sa-east-1-serverless-infra-rds-secret-7PEjhx
          ports:
            - containerPort: 9088
              name: meta-store
              protocol: TCP
          resources:
            requests:
              cpu: 500m
              memory: 500Mi
            limits:
              cpu: 1000m
              memory: 2Gi
          volumeMounts:
            - name: server-cert
              mountPath: /server-cert
              readOnly: true
      volumes:
        - name: server-cert
          secret:
            secretName: meta-store-secret