apiVersion: apps/v1
kind: Deployment
metadata:
  name: dbaas-proxy
spec:
  replicas: 1
  selector:
    matchLabels:
      app.kubernetes.io/name: dbaas-proxy
  template:
    metadata:
      labels:
        app.kubernetes.io/name: dbaas-proxy
    spec:
      serviceAccountName: dbaas-proxy
      containers:
        - name: proxy
          image: cp9.local/cluster-proxy:placeholder
          command:
            - /proxy
            - --port
            - "4430"
            - --tls-dir
            - /proxy-tls
            - --dev
            - --gotty-image
            - 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/gotty:20211103
            - --gotty-cmd
            - /gotty -w --max-connection 1 --timeout 60 --reconnect /usql --password
            - --watch-serverless-cr
          env:
            - name: AUTH0-AUDIENCE
              value: staging-proxy-service
            - name: AUTH0-DOMAIN
              value: tidb-staging.us.auth0.com
            - name: ProxyAuth0ClientSecret
              value: cp9-local-devmode
            - name: CentralSaltSecret
              value: cp9-local-salt
          volumeMounts:
            - name: proxy-tls
              mountPath: /proxy-tls
          ports:
            - name: https
              containerPort: 4430
          readinessProbe:
            httpGet:
              scheme: HTTPS
              path: /readyz
              port: https
            initialDelaySeconds: 5
            periodSeconds: 10
      volumes:
        - name: proxy-tls
          secret:
            secretName: proxy-certificate-secret