# This configmap will be auto loaded by core-svc
# So the configmap name is fixed
apiVersion: v1
kind: ConfigMap
metadata:
  name: oneconfig-core-portal
data:
  config.yaml: |
    logLevel: info
    server:
      forbidM2mRequest: false
    featureGates:
      new_rbac:
        all: true
        enabledTenants:
          - 1372813089188691290
      dedicated_tidb_mgmt:
        all: true
        affectOrgCreatedAfter: '2024-07-02T18:00:00+08:00'
        disabledTenants: []
        disabledProjects: []
        enabledProjects: []
        enabledTenants: []
      enable_tempo_proxy:
        all: true
      disable_clean_resource:
        enabledTenants: []
        enabledProjects: []
        all: false
    rbacConfig:
      enable: true
      dryrun: false
    degradation:
      enable: false
      disabled_rpc_methods:
        #- "/central.ClusterService/CreateClusterV2"
        - "/central.ClusterService/ScaleClusterV2"
        - "/central.ClusterService/PauseCluster"
        - "/central.ClusterService/ResumeCluster"
        - "/central.ClusterService/Delete"
        - "/central.ClusterService/ChangePassword"
        - "/central.ClusterService/ChangeClusterName"
        - "/central.ClusterService/MakeClusterWritable"
        - "/central.ClusterService/CreateAWSVpcPeering"
        - "/central.ClusterService/CreateGcpVpcPeering"
        - "/central.ClusterService/DeleteAwsVpcPeering"
        - "/central.ClusterService/DeleteGcpVpcPeering"
        - "/central.ClusterService/CreatePrivateEndpoint"
        - "/central.ClusterService/CreatePrivateLinkService"
        - "/central.ClusterService/DeletePrivateLinkService"
        - "/central.ClusterService/CreatePrivateLinkEndpoint"
        - "/central.ClusterService/DeletePrivateLinkEndpoint"
        - "/central.ClusterService/UpdateTrafficFilter"
        - "/central.ClusterService/CreateProjectCIDR"
        - "/central.ClusterService/UpdateAuditLogStatus"
        - "/central.ClusterService/PrecheckAuditLogConfig"
        - "/central.ClusterService/CreateAuditLogAccessRecord"
        - "/central.ClusterService/DeleteAuditLogAccessRecord"
        - "/central.ClusterService/UpdateProjectMaintenanceWindow"
        - "/central.ClusterService/DeferMaintenanceTask"
        - "/central.ClusterService/CreateAwsCmek"
        - "/central.TenantService/CreateIamRole"
        - "/central.TenantService/DeleteIamRole"
        - "/central.TenantService/CreateCrossAccountDeployment"
        - "/central.TenantService/DeleteCrossAccountDeployment"
    grpc:
      devopsSvcAddr: "vpce-0aaf6b83e8e5fd8b3-8r9sulzm.vpce-svc-06cf5ad1fddef11b6.us-west-2.vpce.amazonaws.com:8089"