apiVersion: v1
data:
  config.yaml: |-
    server:
      addr: 0.0.0.0:8085
      list-files-limit: 3
      rebuild: false
      rbac-model-path: /etc/clinic
      apis-limit: "*:50:20"
      accounts:
        users:
        - name: clinic@pingcap.com
          password: pingcap-clinic!@#
        - name: Asktug
          password: Asktug
        admins:
        - name: clinic-admin@pingcap.com
          password: pingcap-clinic)!(
      oauthes: 
      - name: tidbcloud
        enabled: true
        api-url: https://us-west-2.nightly.shared.aws.tidbcloud.com  
      - name: internal 
        client-id: yM5XymvbsU6kHakC5dx3aUA6tSLcdW2B
        client-secret: ThmwNfRFUgo_4ISAjP0SgfB-DKiCoVJX8g7GmzJB1BRm64YyLO83WQC8gBDUvSgk
        enabled: true
        api-url: https://tidb-soc2.us.auth0.com/userinfo
        auth-url: https://tidb-soc2.us.auth0.com/authorize
        token-url: https://tidb-soc2.us.auth0.com/oauth/token
        scopes: openid,profile,email
        redirect: https://clinic-staging-133559976.cn-north-1.elb.amazonaws.com.cn:8085/login/callback
      - name: ask_tug
        enabled: true
        auth-url: https://accounts.pingcap.cn/o/auth
        token-url: https://accounts.pingcap.cn/o/token
        scopes: openid,profile
        client-id: clinic-staging
        client-secret: Miwhc8BEjSxOdyi5rWtyR5AZEoGw2fut1hstCyjWt26FAcswS8
        redirect: http://clinic-staging-133559976.cn-north-1.elb.amazonaws.com.cn:8085/clinic/api/v1/login/callback
      session:
        secret: yM5XymvbsU6kH!@#
        disabled: true
    sink:
      metric:
        host: clinic-victoria-metrics-cluster-vminsert
        port: 8480
        vm-cluster-mode: true
        select-addr:
          cloud:
            host: 
            port: 0
            vm-cluster-mode: false
          op:
            host: clinic-victoria-metrics-cluster-vmselect
            port: 8481
            vm-cluster-mode: true
        dashboard-path: /dashboards
      log:
        endpoint: https://vpc-es-staging-env-g5ik5cpyzamj2cnuetvswp6epi.cn-north-1.es.amazonaws.com.cn
        user: admin
        password: "Pingcap123!@#"
        kibana:
          host: opensearch-dashboards
          port: 5601
    diagnosis:
      metric:
        host: clinic-victoria-metrics-cluster-vminsert
        port: 8480
        vm-cluster-mode: true
        select-addr:
          host: clinic-victoria-metrics-cluster-vmselect
          port: 8481
          vm-cluster-mode: true
      log:
        endpoint: https://vpc-es-staging-env-g5ik5cpyzamj2cnuetvswp6epi.cn-north-1.es.amazonaws.com.cn
        user: admin
        password: Pingcap123!@#
    upload-config:
      host: clinic-uploader
      port: 80
    task-manager-config:
      host: clinic-taskmanager
      port: 80
    datasource:
      metric:
        select-addr:
          cloud:
            host: 
            port: 0
            vm-cluster-mode: false
          op:
            host: clinic-victoria-metrics-cluster-vmselect
            port: 8481
            vm-cluster-mode: true
      log:
        cloud:
          endpoint: 
          user: 
          password: 
        op:
          endpoint: https://search-dbaas-user-log-ebs2blyhxkvnafprpcnqo6cvmu.us-west-2.es.amazonaws.com
          user: elastic
          password: nBgtuy9.YnZbViM@t*_7
    db:
      user: root
      host: clinic-mysql-primary
      port: 3306
      password: Pingcap123!@#
      database: clinic
      init-database: clinic
    file-storage:
      key: /etc/key/crt.key
      aws:
        bucket: clinic-staging
        region: cn-north-1
    k8s-config:
      namespace: clinic
      in-cluster: true
      image-name: 350982700484.dkr.ecr.cn-north-1.amazonaws.com.cn/importer:master-42b8ea314d700cbecdcebdeb49d31a85b7373dc4
    ebs-filter-tags:
        "KubernetesCluster:clinic-staging"
    report-config:
      compute-engine-end-point: https://gvvkyinf53.execute-api.us-west-2.amazonaws.com
init_policy.toml: |-
  [[policy]]
  role = "admin"
  resource = "user"
  acting = 7

  [[policy]]
  role = "admin"
  resource = "tenant"
  acting = 7

  [[policy]]
  role = "editor"
  resource = "cluster"
  acting = 6

  [[policy]]
  role = "viewer"
  resource = "cluster"
  acting = 1

  [[rbac]]
  crole = "editor"
  prole = "viewer"

  [[rbac]]
  crole = "admin"
  prole = "editor"

  [[internal]]
  resource = "oncall"
  acting = 3

  [[internal]]
  resource = "rebuild"
  acting = 3

  [[internal]]
  resource = "report"
  acting = 3

  [[internal]]
  resource = "cluster"
  acting = 1
rbac_model.conf: |-

  [request_definition]
  r = sub, dom, obj, act

  [policy_definition]
  p = sub, dom, obj, act

  [role_definition]
  g = _, _, _
  g2 = _, _, _

  [policy_effect]
  e = some(where (p.eft == allow))

  [matchers]
  m = g(r.sub, p.sub, r.dom) && g2(r.obj, p.obj, r.dom) && actMatch(r.act, p.act) || r.sub == "root"
kind: ConfigMap
metadata:
  name: clinic-service-ts2t8pcr
  namespace: clinic