eksctl create iamserviceaccount \\
    --name dynamodb-pull-sa \\
    --region=us-east-1 \\
    --cluster wsc2024-eks-cluster \\
    --namespace=wsc2024 \\
    --attach-policy-arn "arn:aws:iam::aws:policy/AmazonDynamoDBFullAccess" \\
    --override-existing-serviceaccounts \\
    --approve

apiVersion: apps/v1
kind: Deployment
metadata:
  name: order-deploy
  namespace: wsc2024
  labels:
    app: order
spec:
  replicas: 2
  selector:
    matchLabels:
      app: order
  template:
    metadata:
      labels:
        app: order
    spec:
      serviceAccount: dynamodb-pull-sa
      containers:
      - name: order-cnt
        image: IMAGE
        ports:
        - containerPort: 8080
        env:
        - name: AWS_REGION
          valueFrom:
            secretKeyRef:
              name: db-credentials
              key: REGION
      nodeSelector:
        app: db

IMAGE_URL=$(aws ecr describe-repositories --repository-name order-repo --query "repositories[].repositoryUri" --output text)
IMAGE_TAG=$(aws ecr describe-images --repository-name order-repo --query "imageDetails[].imageTags" --output text)
IMAGE="$IMAGE_URL:$IMAGE_TAG"

sed -i "s|IMAGE|$IMAGE|g" deployment.yaml

kubectl apply -f deployment.yaml

apiVersion: v1
kind: Service
metadata:
  name: order-svc
  namespace: wsc2024
spec:
  selector:
    app: order
  ports:
    - protocol: TCP
      port: 8080
      targetPort: 8080

kubectl apply -f service.yaml