apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: serverless-metering-worker
spec:
  replicas: 1
  template:
    spec:
      containers:
        - name: serverless-metering
          image: tidbcloud-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/dbaas/nightly/serverless-metering:3ec382eda378c6ff2698c238a240c10ff7a55b28
          resources:
            limits:
              cpu: 400m
              memory: 1Gi
            requests:
              cpu: 400m
              memory: 512Mi
          env:
          - name: AWS_ROLE_ARN
            value: arn:aws:iam::385595570414:role/ali-metering-access-sqs-role-dev-ap-southeast-1-f01
          - name: AWS_WEB_IDENTITY_TOKEN_FILE
            value: /var/run/secrets/eks.amazonaws.com/serviceaccount/token
          volumeMounts:
            - mountPath: /var/run/secrets/eks.amazonaws.com/serviceaccount
              name: aws-iam-token
              readOnly: true
      volumes:
        - name: aws-iam-token
          projected:
            defaultMode: 420
            sources:
            - serviceAccountToken:
                audience: sts.amazonaws.com
                expirationSeconds: 86400
                path: token