apiVersion: v1
kind: Pod
metadata:
  name: o11ycost-pod-ali
  namespace: o11ycost
spec:
  restartPolicy: Never
  serviceAccountName: o11ycost-sa
  containers:
  - name: o11ycost-container
    image: 557537366020.dkr.ecr.us-west-2.amazonaws.com/o11y_cloud_cost:v3
    imagePullPolicy: Always
    args: ["--start_day=2025-03-01","length=1", "config=./config.yaml"]
    env:
    - name: GOOGLE_APPLICATION_CREDENTIALS
      value: "/clientLibraryConfig.json"
    - name: ALIBABA_CLOUD_ROLE_ARN
      value: acs:ram::5480039859161595:role/o11ycost-role
    - name: ALIBABA_CLOUD_OIDC_PROVIDER_ARN
      value: acs:ram::5480039859161595:oidc-provider/o11y-global-server
    - name: ALIBABA_CLOUD_OIDC_TOKEN_FILE
      value: /var/run/secrets/ack-token/ack-token
    volumeMounts:
    - name: config-volume
      mountPath: /config.yaml
      subPath: config.yaml
    - mountPath: /var/run/secrets/ack-token
      name: ack-token
  volumes:
  - name: config-volume
    configMap:
      name: o11ycost-config-ali
      items:
      - key: "config.yaml"
        path: "config.yaml"
  - name: ack-token
    projected:
      sources:
      - serviceAccountToken:
          audience: observability
          expirationSeconds: 7200
          path: ack-token