provider: eks
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
amiConfig:
  supportedVersions:
    - "1.29"
    - "1.30"
    - "1.31"
    - "1.32"
    - "1.33"
    - "1.34"
    - "1.35"
    - "1.36"
clusterController:
  aws:
    enableBatchOpsExport: true
    nodeRolePolicyFile: /etc/cluster-controller/extra/node-policy-config.json
    nodeUserdataSystemConfigurationFile: /etc/cluster-controller/extra/node-userdata-system-configuration.toml
    nodeRoleManagedPolicies: # AWS managed policies to attach to node role
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      - "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/AmazonRoute53ResolverFullAccess"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  configChange:
    accountEnv: dev
    activity:
      enabled: false
      activityHubEndpoint: "https://b9u12esjuf.execute-api.us-west-2.amazonaws.com"
      activityHubSource: "gitops"
      clinicEndpoint: "http://clinic-dev-1923272735.us-west-2.elb.amazonaws.com:8085"
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-agent
      tag: 79693f4888b58e220265c201278d0b1789095ab8
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
  tikvPreStopImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-operator-prestop-checker:v2.0.0-beta.9
  mysqlProtocolProbe:
    image: "385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 2
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
    defaultTag: v1.0.2
network:
  proxy:
    enableDevMode: true
    auth0Audience: "dev-proxy-service"
    auth0Domain: "tidb-dev.us.auth0.com"
  region: us-east-1
  zones:
    - us-east-1a
    - us-east-1b
    - us-east-1c
override:
  overrideHelperImage: "385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/busybox:1.34.1"
  overrideRegistry: "385595570414.dkr.ecr.us-west-2.amazonaws.com"
  overrideRepoPrefix: "tidbcloud"
  overrideThirdPartyRepoPrefix: "third-party"
# sentry:
#   dsn: https://e85c9a30f8b54ae39ecf4a7b63dea760@o226447.ingest.sentry.io/6688512
#   env: dev
# taskEvents:
#   projectID: "dbaas-eng-bi"
#   topicID: "dev-infra-provider"
featureGates:
  set_priority_class:
    all: true
  use_tidb_operator_v2:
    all: false
    enabledProjects:
      - 3200203 # dbaastest2/tidb-operator-v2
      - 3200331 # Dedicated Test/tidb-operator-v2
      - 3200228 # Dedicated Test/azure-tidb-operator-v2
      - 3200481 # Dedicated Test/tidb-operator-v2-cmek
  use_volume_attributes_class:
    all: false
    # enabledProjects:
    #  - 3200228 # Dedicated Test/azure-tidb-operator-v2
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: eks
    cloud.pingcap.com/region: us-east-1
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: nightly
  publicHostedZoneDomain: clusters.dev.tidb-cloud.com
  publicHostedZoneID: Z001609810TV4E79YOP22
  serviceRoleARN: "arn:aws:iam::385595570414:role/full-manager-eks-role"
  serviceRoleName: "full-manager-eks-role"
  assumeRoleName: "dev-us-east-1-cluster-controller-assumed-role"
  awsClusterServerRoleARN: "arn:aws:iam::385595570414:role/dev-us-east-1-cluster-server"
  componentPCAARN: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
  assumeRoleExternalID: "123"
maxConcurrentReconciles:
  cluster: 10
  clusterNodeProtector: 10
dpCompatEnv: dev
dpCompatAssumeRole: full-manager-service-role
dpCompatAssumeExternalId: "123"
dpCompatDataPlaneRoleArn: arn:aws:iam::385595570414:role/full-manager-service-role