tiinf:
  grpc:
    enable: true
    port: 10000
  gin:
    enable: true
    port: 11000
  metrics:
    enable: true
    port: 9090
  trace:
    enable: true
  logger:
    enable: true
    level: "info"
    sentryDsn:
    sentryEnv: prod
    sentryLevel: warn

server:
  usePrivilegedTiDB: false
  logLevel: info
  enableDBQueryLog: false
  stage: prod
  grpcPort: 10000
  metricsPort: 9090
  managementPortalInitUserEmail: cloud@pingcap.com
  limitedProjectCIDR:
    [
      10.250.0.0/16,
      10.250.0.0/17,
      10.250.128.0/17,
      172.30.0.0/16,
      172.30.0.0/17,
      172.30.128.0/17,
    ]
  secret:
    # TODO: we should decouple application with aws secret manager, and using external-secrets-operator to manage secrets
    secretKey: arn:aws:secretsmanager:us-west-2:380838443567:secret:prod-ms-secret-config-yaml-a9ccd02-VMBtcO
    region: us-west-2
  sentry:
    # TODO: this should be stored in secret
    dsn: https://403c483a65bd45688d05475200dfbe6e@o226447.ingest.sentry.io/6767445
    env: prod
    logLevel: warn
grpc:
  coreSvcAddr: "kubernetes:///dbaas-core-svc-server-grpc:8888"
  dataflowSvcAddr: "kubernetes:///dataflow-grpc:10000"
  accountAclSvcAddr: "kubernetes:///account-acl-grpc:10000"
  accountProviderSvcAddr: "kubernetes:///account-provider-grpc:10000"
mysql:
  host: prod-core-svc-metadb.cluster-czw95mtqfw67.us-west-2.rds.amazonaws.com
  user: prod_cm_rw
  port: 3306
  database: prod_core
grafana:
  server: https://grafana.oauth.prod.aws.tidbcloud.com
gardener:
  gardenerProjectName: prod
  kubeConfigPath: ""
aws:
  pcaArn: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
  pcaRegion: us-west-2
  region: ""
  accountID: 380838443567
  projectID: ""
proxy:
  auth0Domain: tidb.auth0.com
  auth0ClientID: AeCC7RpayJUDtxY8ADyQlPBXZ0OFfqgV
  auth0Audience: prod-proxy-service
infraAPI:
  projectIDAsInfraProjectID: true
  kubeConfigPath: /kube/config
infra:
  region: us-west-2
  cmkArn: arn:aws:kms:us-west-2:380838443567:key/6a3f87f3-d032-414b-870f-458979546c97
  gcpPublicHZDomain: prod.gcp.tidbcloud.com
  gcpProject: dbaas-prod
  configServiceURL: http://config-service.gitops:8090
auth0:
  auth0ManagementClientID: isfDh5Y3PpgbDwaa9YusPOeilTuq2Row
  auth0DatabaseConnectionName: custom-email
  auth0Domain: tidb.auth0.com
  auth0Audience: 6IZthCfmRKIPEnQST8aDbtM7SGdMniRl
  managementPortalAuth0Domain: tidb.auth0.com
  managementPortalAuth0Audience: OF4OJi6l03va3mCaBVDxU1Ndy92lw2MX
  managementPortalAuth0ClientAudience: prod-management-portal-service
session:
  ipAllowList: [52.41.43.61]