apiVersion: apps/v1
kind: Deployment
metadata:
  name: aws-provider-upstream
spec:
  template:
    spec:
      containers:
        - name: aws-provider-upstream
          env:
            - name: AWS_SHARED_CREDENTIALS_FILE
              $patch: delete
            - name: AWS_REGION
              value: __CP9_PRIMARY_AWS_REGION__
            - name: AWS_DEFAULT_REGION
              value: __CP9_PRIMARY_AWS_REGION__
            - name: AWS_ROLE_ARN
              value: __CP9_GCP_AWS_ROLE_ARN__
            - name: AWS_WEB_IDENTITY_TOKEN_FILE
              value: /var/run/cp9/aws-web-identity/token
            - name: KUBECONFIG
              value: /var/run/cp9/dedicated-api/classic-provider.kubeconfig
          volumeMounts:
            - name: aws-creds
              $patch: delete
            - name: aws-web-identity
              mountPath: /var/run/cp9/aws-web-identity
              readOnly: true
            - name: dedicated-api-kubeconfig
              mountPath: /var/run/cp9/dedicated-api
              readOnly: true
      volumes:
        - name: aws-creds
          $patch: delete
        - name: aws-web-identity
          hostPath:
            path: __CP9_GCP_AWS_IDENTITY_DIR__
            type: Directory
        - name: dedicated-api-kubeconfig
          secret:
            secretName: dedicated-api-kubeconfigs
            items:
              - key: classic-provider.kubeconfig
                path: classic-provider.kubeconfig