apiVersion: apps/v1
kind: Deployment
metadata:
  name: regional-server
spec:
  template:
    spec:
      containers:
        - name: regional-server
          env:
            - name: KUBECONFIG
              value: /var/run/cp9/dedicated-api/regional-server.kubeconfig
            - name: AWS_REGION
              value: __CP9_PRIMARY_AWS_REGION__
            - name: AWS_DEFAULT_REGION
              value: __CP9_PRIMARY_AWS_REGION__
            - name: AWS_ROLE_ARN
              value: __CP9_GCP_AWS_ROLE_ARN__
            - name: AWS_WEB_IDENTITY_TOKEN_FILE
              value: /var/run/cp9/aws-web-identity/token
          volumeMounts:
            - name: dedicated-api-kubeconfig
              mountPath: /var/run/cp9/dedicated-api
              readOnly: true
            - name: aws-web-identity
              mountPath: /var/run/cp9/aws-web-identity
              readOnly: true
            - mountPath: /etc/configs/admin-node-role-policy-template.json
              $patch: delete
            - mountPath: /etc/configs/admin-node-role-trust-policy.json
              $patch: delete
            - mountPath: /etc/configs/aws-lb-controller-policy.json
              $patch: delete
            - mountPath: /etc/configs/ticdc-node-role-policy-template.json
              $patch: delete
      volumes:
        - name: dedicated-api-kubeconfig
          secret:
            secretName: dedicated-api-kubeconfigs
            items:
              - key: regional-server.kubeconfig
                path: regional-server.kubeconfig
        - name: aws-web-identity
          hostPath:
            path: __CP9_GCP_AWS_IDENTITY_DIR__
            type: Directory
        - name: regional-server-admin-node-role-policy-template
          $patch: delete
        - name: regional-server-admin-node-role-trust-policy
          $patch: delete
        - name: regional-server-aws-lb-controller-policy
          $patch: delete
        - name: regional-server-ticdc-node-role-policy-template
          $patch: delete