apiVersion: v1
kind: ServiceAccount
metadata:
  name: access-s3-sa
  annotations:
    eks.amazonaws.com/role-arn: __CP9_RUNTIME_ROLE_ARN__
---
apiVersion: v1
kind: Secret
metadata:
  name: db-tidb-auth-token-jwks-secret
type: Opaque
stringData:
  tidb_auth_token_jwks.json: |-
    {
      "keys": [
        {
          "alg": "RS256",
          "e": "AQAB",
          "kid": "6418fdae-3af1-4be5-ab7b-cf1d0a27e906",
          "kty": "RSA",
          "n": "2LDxALzKtlV1_z2sqWJd3g3ys4n4EFrFr3z-EYJubhjv4a2n8Gi-s16t6-AzlPmhTcZASlAIMZfbC8aMCHACQSPmmkCnXiJELCFkaDpy_ujPUCUUZSOry3S4pV0oRafNtjINFTE9ESdlJ78YEQlBQTxlMif5L1Zi2AU6zwfEJaY_Gn-UDu_6z4ghrqzNj7HMQ_pga66I2KZGjhISXelTzhLBzjbO0hzZ9O-SEDiJmq2jc4tkqYYndHpRcQUtfHyjhI8_yIfD_qydgdo2GjUaFsTGMiKSbWjH5gccvickLoQlKOljNH2TXqLH4beuAuuZPZR54j3OoI2mRRDuA84rcpU4GRd68MzB49Nfkj-v64q_w_MDtWNu5Z4Mdw5_OhkjASlY2luXtIavdGdfw4wu1ReZQDJWxF7h3rTgmobus5ndmXNyWR0lPGLELNab2BOlmZYzpXhnDxIHtYTgySq1m9Yhj0FOfb99iZPxe2zWmRQ8Hg_vKjaa6m7Kk7_hmjclXvQKMlGUA4DsFeXBDLcWwxV0B21OSmyh0Q3DNhafLjVtXg3YvbMcBt68tC5JK51OYMubcB3VOW3c3ELJV2MVICFs04Re4SNbGmMao9Yv_ZWXeb-Ca3jH5Pmk491TG89mHB3_iCOVVtYzR6Yqlg_hGuD8d58eUglIBCAy0xEmr6s",
          "use": "sig"
        }
      ]
    }
---
apiVersion: v1
kind: Secret
metadata:
  name: db-tidb-inference-service-secret
type: Opaque
data:
  api_key: __CP9_INFERENCE_SERVICE_API_KEY_B64__
---
apiVersion: batch/v1
kind: Job
metadata:
  name: fake-tidb-server-job
spec:
  backoffLimit: 0
  template:
    spec:
      restartPolicy: Never
      containers:
        - name: fake-tidb
          image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: deny-metadata-access-network-policy
spec:
  podSelector: {}
  policyTypes:
    - Egress
  egress:
    - to:
        - ipBlock:
            cidr: 0.0.0.0/0
            except:
              - 169.254.169.254/32