apiVersion: apps/v1
kind: Deployment
metadata:
  name: regional-server
spec:
  template:
    spec:
      containers:
      - name: regional-server
        env:
        - name: AWS_STS_REGIONAL_ENDPOINTS
          value: regional
        - name: AWS_REGION
          value: us-west-2
        # allowing assume to the specified aws role from gcp
        - name: AWS_ROLE_ARN
          value: arn:aws:iam::552185537300:role/data-plane-for-regional-server
        - name: AWS_WEB_IDENTITY_TOKEN_FILE
          value: /var/run/secrets/kubernetes.io/serviceaccount/token