apiVersion: apps/v1
kind: Deployment
metadata:
  name: new-serverless-regional-service
spec:
  replicas: 2
  template:
    spec:
      nodeSelector:
        $patch: delete
      containers:
      - name: new-serverless-regional-service
        args:
        - --tiinf-config=/etc/new-serverless-regional-service/config.yaml
        - --ns-prefix=prod-
        - --cloud-provider=alicloud
        - --region=na-south-1
        - --infra-cluster-table=serverless_cluster_prod
        - --kubernetes=prod-na-south-1-a01
        - --tidb-version=v7.5.6
        ports:
        - name: metrics
          containerPort: 9090
          protocol: TCP
        readinessProbe:
          failureThreshold: 10
          initialDelaySeconds: 5
          periodSeconds: 5
          successThreshold: 1
          tcpSocket:
            port: 8083
          timeoutSeconds: 1
        env:
          - name: AWS_ROLE_ARN
            value: arn:aws:iam::380838443567:role/ali-access-aws-regional-infra-role-prod-na-south-1-a01
          - name: AWS_WEB_IDENTITY_TOKEN_FILE
            value: /var/run/secrets/eks.amazonaws.com/serviceaccount/token
          - name: AWS_REGION
            value: us-west-2
        volumeMounts:
          - mountPath: /var/run/secrets/eks.amazonaws.com/serviceaccount
            name: aws-iam-token
            readOnly: true
      volumes:
        - name: aws-iam-token
          projected:
            defaultMode: 420
            sources:
              - serviceAccountToken:
                  audience: sts.amazonaws.com
                  expirationSeconds: 86400
                  path: token