apiVersion: apps/v1
kind: Deployment
metadata:
  name: cse-backup
  namespace: tidb-serverless
spec:
  replicas: 0
  selector:
    matchLabels:
      app.kubernetes.io/name: cse-backup
  strategy:
    type: Recreate
  template:
    metadata:
      annotations:
        cluster-autoscaler.kubernetes.io/safe-to-evict: "false"
      labels:
        app.kubernetes.io/name: cse-backup
    spec:
      imagePullSecrets:
        - name: cp9-ecr-pull-385595570414
      nodeSelector:
        cp9.tidbcloud.com/starter-role: tikv
      tolerations:
        - key: cp9.tidbcloud.com/starter-role
          operator: Equal
          value: tikv
          effect: NoSchedule
      serviceAccountName: backup-restore
      containers:
        - name: cse-backup
          image: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv:5b7adce957a177fdebfa4e32740f31ca92301195
          imagePullPolicy: IfNotPresent
          command:
            - /cse-ctl
            - backup
            - --pd
            - serverless-cluster-pd.tidb-serverless.svc:2379
            - --lightweight
            - --interval
            - "60"
            - --tolerate-err
            - "1"
            - --cacert
            - /server-cert/ca.crt
            - --cert
            - /server-cert/tls.crt
            - --key
            - /server-cert/tls.key
          env:
            - name: DFS_PREFIX
              value: CP9_STARTER_SERVERLESS_PREFIX
            - name: DFS_S3_BUCKET
              value: CP9_STARTER_SERVERLESS_BUCKET
            - name: DFS_S3_REGION
              value: CP9_STARTER_SERVERLESS_REGION
            - name: CSE_MASTER_KEY_ID
              value: CP9_STARTER_CSE_MASTER_KEY_ID
            - name: CSE_MASTER_KEY_CIPHER_TEXT
              value: CP9_STARTER_CSE_KEY_CIPHERTEXT
            - name: CSE_MASTER_KEY_VENDOR
              value: CP9_STARTER_CSE_KEY_VENDOR
            - name: CA_PATH
              value: /server-cert/ca.crt
            - name: CERT_PATH
              value: /server-cert/tls.crt
            - name: KEY_PATH
              value: /server-cert/tls.key
          resources:
            limits:
              cpu: "4"
              memory: 8Gi
            requests:
              cpu: 500m
              memory: 2Gi
          volumeMounts:
            - name: server-cert
              mountPath: /server-cert
      volumes:
        - name: server-cert
          secret:
            secretName: cse-backup-cluster-secret