apiVersion: apps/v1
kind: Deployment
metadata:
  name: account-acl
spec:
  # Local Premium OpenAPI traffic currently exercises account-provider only.
  # Keep Account ACL DNS present, but do not start the pod until Account's ACL
  # server honors local mode for Salesforce/job-queue dependency init.
  replicas: 0
  selector:
    matchLabels:
      app.kubernetes.io/name: account-acl
  template:
    metadata:
      labels:
        app.kubernetes.io/name: account-acl
    spec:
      containers:
        - name: account-acl
          image: cp9.local/account-acl:placeholder
          command: ["account-acl"]
          ports:
            - name: grpc
              containerPort: 10000
          env:
            - name: TIINF_POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
          volumeMounts:
            - name: dbaas-central-config
              mountPath: /etc/dbaas
              readOnly: true
      volumes:
        - name: dbaas-central-config
          configMap:
            name: account-central-conf
---
apiVersion: v1
kind: Service
metadata:
  name: account-acl-grpc
spec:
  selector:
    app.kubernetes.io/name: account-acl
  ports:
    - name: grpc
      port: 10000
      targetPort: grpc