apiVersion: apps/v1
kind: Deployment
metadata:
  name: dedicated-upbound-eks
spec:
  replicas: 1
  selector:
    matchLabels:
      app: dedicated-upbound-eks
  template:
    metadata:
      labels:
        app: dedicated-upbound-eks
    spec:
      containers:
        - name: provider-aws-eks
          image: cp9.local/dedicated-upbound-eks:placeholder
          envFrom:
            - secretRef:
                name: cp9-aws-credentials
          env:
            - name: KUBECONFIG
              value: /var/run/cp9/dedicated-api/classic-provider.kubeconfig
            - name: AWS_REGION
              value: us-west-2
            - name: AWS_DEFAULT_REGION
              value: us-west-2
            - name: AWS_SHARED_CREDENTIALS_FILE
              value: /var/run/cp9/aws/creds
            - name: AWS_WEB_IDENTITY_TOKEN_FILE
              value: /var/run/cp9/aws/creds
            - name: TLS_SERVER_CERTS_DIR
              value: /tls/server
          volumeMounts:
            - name: dedicated-api-kubeconfig
              mountPath: /var/run/cp9/dedicated-api
              readOnly: true
            - name: aws-creds
              mountPath: /var/run/cp9/aws
              readOnly: true
            - name: tls-server-certs
              mountPath: /tls/server
              readOnly: true
      volumes:
        - name: dedicated-api-kubeconfig
          secret:
            secretName: dedicated-api-kubeconfigs
            items:
              - key: classic-provider.kubeconfig
                path: classic-provider.kubeconfig
        - name: aws-creds
          secret:
            secretName: aws-creds
        - name: tls-server-certs
          secret:
            secretName: dedicated-upbound-tls