provider: gke
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
controlplaneGCPProviderConfig: provider-gcp
clusterController:
  gcp:
    validationServerServiceAccount: iam-validator-server@pingcap-gardener.iam.gserviceaccount.com
  tikvPreStopImage: gcr.io/pingcap-public/dbaas/tidb-operator-prestop-checker:v2.0.0-beta.9
  configChange:
    accountEnv: dev
    activity:
      enabled: false
      activityHubEndpoint: "https://b9u12esjuf.execute-api.us-west-2.amazonaws.com"
      activityHubSource: "gitops"
      clinicEndpoint: "http://clinic-dev-1923272735.us-west-2.elb.amazonaws.com:8085"
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: gcr.io/pingcap-gardener/tidbcloud/cluster-agent
      tag: 79693f4888b58e220265c201278d0b1789095ab8
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
    autoUnlockPending: true
    autoUnlockMinPendingAge: 20m
  mysqlProtocolProbe:
    image: "gcr.io/pingcap-gardener/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 2
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: gcr.io/pingcap-public/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
    baseImage: gcr.io/pingcap-gardener/tidbcloud/audit
    defaultTag: v1.0.2
network:
  k8sVersion: "1.28"
  gkeMaintenanceExclusionTimeWindow:
    startTime: "2024-04-07T00:00:00Z"
    endTime: "2024-05-06T00:00:00Z"
  proxy:
    auth0Audience: "dev-proxy-service"
    auth0Domain: "tidb-dev.us.auth0.com"
    enableDevMode: true
  region: us-west2
  o11yConfig:
    env: dev
    infraTenantID: infra-dev
    openAPIAddress: https://www.gs.us-west-2.aws.observability.tidbcloud.com
    createO11yInfraPath: /api/v1/clusters
    deleteO11yInfraPath: /api/v1/clusters
    getO11yInfraPath: /api/v1/clusters
    pauseO11yInfraPath: /api/v1/clusters
    resumeO11yInfraPath: /api/v1/clusters
    auth0GetTokenURL: https://tidb-soc2.us.auth0.com/oauth/token
    auth0Audience: https://tidb-soc2.us.auth0.com/api/v2/
configServiceEndpoint: http://a1cc36eb6d91b4af9b2632e8af3da058-168134981.us-west-2.elb.amazonaws.com:8090
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: gke
    cloud.pingcap.com/region: us-west2
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: nightly
  publicHostedZoneDomain: clusters.dev.tidb-cloud.com
  publicHostedZoneID: Z001609810TV4E79YOP22
  serviceRoleARN: "arn:aws:iam::385595570414:role/full-manager-eks-role"
  serviceRoleName: "full-manager-eks-role"
  assumeRoleARN: "arn:aws:iam::385595570414:role/full-manager-service-role"
  componentPCAARN: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
  assumeRoleExternalID: "123"
  gcpProjectID: pingcap-gardener
  gcpClusterServerSAName: "dev-cluster-server"
featureGates:
  set_priority_class:
    all: true
  use_tidb_operator_v2:
    all: false
  remove_neg_annotation_for_existing_clusters:
    all: true
maxConcurrentReconciles:
  network: 10
  cluster: 10
  networkPeer: 10
  clusterNodeProtector: 10
  clusterNodeTagger: 10
  eksConnection: 10
  frpServer: 10
  privateLink: 10
  privateLinkEndpoint: 10
hibernation:
  enabled: true
  idleTimeThreshold: "30m"
dpCompatEnv: dev
