apiVersion: apps/v1
kind: Deployment
metadata:
  name: sli-reporter
  namespace: sli-reporter
spec:
  replicas: 0
  selector:
    matchLabels:
      app: sli-reporter
  template:
    metadata:
      labels:
        app: sli-reporter
    spec:
      containers:
        - env:
            - name: AWS_DELIVERY_STREAM_NAME
              value: sli-prod-metrics
            - name: AWS_SQS_URL
              value: https://sqs.us-west-2.amazonaws.com/380838443567/ingress-mim.fifo
            - name: AWS_REGION
              value: us-west-2
            - name: AWS_ROLE_ARN
              value: arn:aws:iam::557537366020:role/o11y-gke-regional-server-role-us-central1
            - name: AWS_STS_REGIONAL_ENDPOINTS
              value: regional
            - name: AWS_WEB_IDENTITY_TOKEN_FILE
              value: /var/run/secrets/token/gke-token
            - name: REGION
              value: us-central1
            - name: VENDOR
              value: gcp
            - name: ENV
              value: prod
            - name: REGION_DOMAIN
              value: https://www.ds.us-central1.gcp.observability.tidbcloud.com/internal/metrics/
            - name: USER_ARN
              value: regional-server@gcp-autonomous-dev.iam.gserviceaccount.com
          image: {image}
          imagePullPolicy: Always
          name: sli-reporter
          ports:
            - containerPort: 8080
          resources:
            limits:
              cpu: 500m
              memory: 512Mi
            requests:
              cpu: 10m
              memory: 64Mi
          volumeMounts:
            - mountPath: /var/run/secrets/token
              name: gke-token
      serviceAccount: sli-reporter
      serviceAccountName: sli-reporter
      volumes:
        - name: gke-token
          projected:
            sources:
              - serviceAccountToken:
                  audience: observability.pingcap.cloud
                  expirationSeconds: 7200
                  path: gke-token
---

apiVersion: v1
kind: Service
metadata:
  name: sli-reporter-service
  namespace: sli-reporter
  labels:
    app: sli-reporter
spec:
  selector:
    app: sli-reporter
  ports:
    - name: metrics
      port: 8081
      protocol: TCP
      targetPort: 8081
