provider: eks
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
amiConfig:
  supportedVersions:
    - "1.27"
    - "1.28"
    - "1.29"
    - "1.30"
    - "1.31"
    - "1.32"
    - "1.33"
    - "1.34"
    - "1.35"
    - "1.36"
clusterController:
  aws:
    enableBatchOpsExport: true
    nodeRolePolicyFile: /etc/cluster-controller/extra/node-policy-config.json
    nodeUserdataSystemConfigurationFile: /etc/cluster-controller/extra/node-userdata-system-configuration.toml
    nodeRoleManagedPolicies: # AWS managed policies to attach to node role
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      - "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/AmazonRoute53ResolverFullAccess"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  configChange:
    accountEnv: prod
    activity:
      enabled: false
      activityHubEndpoint: https://e4hr1v4oqh.execute-api.us-west-2.amazonaws.com
      activityHubSource: gitops
      clinicEndpoint: https://clinic.pingcap.com
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-agent
      tag: 4f164cbaa37f5d5e652d027de9da286f21be94ac
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
  mysqlProtocolProbe:
    image: "380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 5
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
    defaultTag: v1.0.4
network:
  proxy:
    enableDevMode: false
    auth0Audience: prod-proxy-service
    auth0Domain: tidb.auth0.com
  region: ap-southeast-3
  zones:
    - ap-southeast-3a
    - ap-southeast-3b
    - ap-southeast-3c
override:
  overrideHelperImage: "380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/busybox:1.34.1"
  overrideRegistry: "380838443567.dkr.ecr.us-west-2.amazonaws.com"
  overrideRepoPrefix: "tidbcloud"
  overrideThirdPartyRepoPrefix: "third-party"
featureGates:
  tidb_add_index:
    all: true
  tidb_expose_oom_path_for_new_cluster:
    all: true
    enabledProjects: []
    enabledTenants: []
    disabledProjects: []
    disabledTenants: []
  tidb_expose_oom_path_for_existing_cluster:
    all: false
    enabledProjects:
      - 1372813089206301327 # ossinsight
    enabledTenants: []
    disabledProjects: []
    disabledTenants: []
  tidb_dedicated_sg:
    all: true
    enabledTenants: []
    disabledProjects:
      - 1372813089206721432
    disabledTenants: []
  tidb_expose_replayer_path_for_new_cluster:
    all: true
    enabledProjects: []
    enabledTenants: []
    disabledProjects: []
    disabledTenants: []
  tidb_expose_replayer_path_for_existing_cluster:
    all: false
    enabledProjects:
      - 1372813089206301327  # ossinsight
    enabledTenants: []
    disabledProjects: []
    disabledTenants: []
  tidb_enable_audit_log:
    all: true
  o11y_deploy_crd:
    all: true
    enabledProjects: []
    enabledTenants: []
    disabledProjects: []
    disabledTenants: []
  o11y_deploy_crd_tiflow:
    all: true
  tls_cluster:
    all: true
  tidb_enable_bootstrap_sql:
    all: true
  tiproxy_gateway:
    all: false
    enabledProjects:
      - 1372813089206481407 # Certik
      - 1372813089191811284 # PingCAP_Japan
      - 1372813089454312249 # NA Customer Success
      - 1372813089372681283 # NA Customer Success
  tidb_self_managed_node_group:
    all: true
  tidb_monitor_disabled:
    all: true
  use_bottlerocker_for_admin_nodes:
    all: true
  enable_ethtool_collecter:
    all: true
  independent_config_change:
    all: false
    enabledTenants:
      - 1372813089187791289 # dbaastest3
  scale_out_tidb_in_parallel:
    all: true
  set_priority_class:
    all: true
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: eks
    cloud.pingcap.com/region: ap-southeast-3
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: prod
  publicHostedZoneDomain: clusters.tidb-cloud.com
  publicHostedZoneID: Z09521541042LFILW1KL4
  serviceRoleARN: "arn:aws:iam::385595570414:role/full-manager-eks-role"
  serviceRoleName: "full-manager-eks-role"
  awsClusterServerRoleName: "prod-ap-southeast-3-def-cluster-server"
  awsClusterServerRoleARN: "arn:aws:iam::380838443567:role/prod-ap-southeast-3-def-cluster-server"
  componentPCAARN: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
  assumeRoleExternalID: "123"
maxConcurrentReconciles:
  cluster: 10
  clusterNodeProtector: 5