apiVersion: v1
kind: Pod
metadata:
  annotations:
    kubernetes.io/psp: eks.privileged
  labels:
    app: provider-cost-server
  name: provider-cost-server
  namespace: liusx
spec:
  containers:
  - env:
    - name: CENTRAL_ROLE
      value: API_SERVICE
    - name: GCP_WORKLOAD_IDENTITY_AUDIENCE
      value: //iam.googleapis.com/projects/27323915999/locations/global/workloadIdentityPools/dev-dbaas/providers/dev-dbaas-eks-oidc
    - name: GCP_IMPERSONATE_SA
      value: dev-liusx-central@pingcap-gardener.iam.gserviceaccount.com
    - name: AWS_DEFAULT_REGION
      value: us-west-2
    - name: AWS_REGION
      value: us-west-2
    - name: ENABLE_TRACING
      value: "false"
    - name: LS_ACCESS_TOKEN
    - name: AWS_ROLE_ARN
      value: arn:aws:iam::385595570414:role/dbaas-central-role-dev
    - name: AWS_WEB_IDENTITY_TOKEN_FILE
      value: /var/run/secrets/eks.amazonaws.com/serviceaccount/token
    image: 385595570414.dkr.ecr.us-west-2.amazonaws.com/dbaas/prod/provider-cost-server:rc-v0.0.3
    imagePullPolicy: IfNotPresent
    #command: ["/bin/sleep"]
    #args: ["100000"]
    name: central
    resources:
      limits:
        cpu: 50m
        memory: 50Mi
      requests:
        cpu: 30m
        memory: 30Mi
    terminationMessagePath: /dev/termination-log
    terminationMessagePolicy: File
    volumeMounts:
    - mountPath: /etc/dbaas
      name: dbaas-central-config
      readOnly: true
    - mountPath: /var/run/secrets/kubernetes.io/serviceaccount
      name: central-token-78hsl
      readOnly: true
    - mountPath: /var/run/secrets/eks.amazonaws.com/serviceaccount
      name: aws-iam-token
      readOnly: true
    - mountPath: /etc/cost-collector.conf
      name: provider-cost-config
      subPath: cost-collector.conf
      readOnly: true
  dnsPolicy: ClusterFirst
  enableServiceLinks: true
  nodeName: ip-10-0-177-215.us-west-2.compute.internal
  preemptionPolicy: PreemptLowerPriority
  priority: 0
  restartPolicy: Always
  schedulerName: default-scheduler
  securityContext: {}
  serviceAccount: central
  serviceAccountName: central
  terminationGracePeriodSeconds: 30
  tolerations:
  - effect: NoExecute
    key: node.kubernetes.io/not-ready
    operator: Exists
    tolerationSeconds: 300
  - effect: NoExecute
    key: node.kubernetes.io/unreachable
    operator: Exists
    tolerationSeconds: 300
  volumes:
  - name: aws-iam-token
    projected:
      defaultMode: 420
      sources:
      - serviceAccountToken:
          audience: sts.amazonaws.com
          expirationSeconds: 86400
          path: token
  - configMap:
      defaultMode: 420
      name: central-conf-t9ungdr6
    name: dbaas-central-config
  - name: provider-cost-config
    configMap:
      defaultMode: 420
      name: provider-cost-config
  - name: central-token-78hsl
    secret:
      defaultMode: 420
      secretName: central-token-78hsl