provider: eks
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
amiConfig:
  supportedVersions:
    - "1.29"
    - "1.30"
    - "1.31"
    - "1.32"
    - "1.33"
    - "1.34"
    - "1.35"
    - "1.36"
clusterController:
  aws:
    nodeRolePolicyFile: /etc/cluster-controller/extra/node-policy-config.json
    nodeUserdataSystemConfigurationFile: /etc/cluster-controller/extra/node-userdata-system-configuration.toml
    nodeRoleManagedPolicies: # AWS managed policies to attach to node role
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      - "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/AmazonRoute53ResolverFullAccess"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  configChange:
    accountEnv: CONFIG_CHANGE_ENV
    activity:
      enabled: CONFIG_CHANGE_ACTIVITY_ENABLED
      activityHubEndpoint: CONFIG_CHANGE_ACTIVITY_HUB_EP
      activityHubSource: CONFIG_CHANGE_ACTIVITY_SOURCE_NAME
      clinicEndpoint: CONFIG_CHANGE_CLINIC_EP
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: IMAGE_REGISTRY/tidbcloud/cluster-agent
      tag: 79693f4888b58e220265c201278d0b1789095ab8
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
  tikvPreStopImage: IMAGE_REGISTRY/tidbcloud/tidb-operator-prestop-checker:v2.0.0-beta.9
  mysqlProtocolProbe:
    image: "IMAGE_REGISTRY/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 2
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: IMAGE_REGISTRY/tidbcloud/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
    defaultTag: v1.0.2
network:
  proxy:
    enableDevMode: PROXY_ENABLE_DEV_MODE
    auth0Audience: PROXY_AUTH0_AUDIENCE
    auth0Domain: PROXY_AUTH0_DOMAIN
  region: REGION
override:
  overrideHelperImage: "IMAGE_REGISTRY/third-party/busybox:1.34.1"
  overrideRegistry: "IMAGE_REGISTRY"
  overrideRepoPrefix: "tidbcloud"
  overrideThirdPartyRepoPrefix: "third-party"
# sentry:
#   dsn: https://e85c9a30f8b54ae39ecf4a7b63dea760@o226447.ingest.sentry.io/6688512
#   env: dev
# taskEvents:
#   projectID: "dbaas-eng-bi"
#   topicID: "dev-infra-provider"
featureGates:
  set_priority_class:
    all: true
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: eks
    cloud.pingcap.com/region: REGION
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: nightly
  publicHostedZoneDomain: FULL_MANAGE_HOSTED_ZONE_DOMAIN
  publicHostedZoneID: FULL_MANAGE_HOSTED_ZONE_ID
  serviceRoleARN: "arn:aws:iam::385595570414:role/full-manager-eks-role"
  serviceRoleName: "full-manager-eks-role"
  assumeRoleName: "dev-us-east-1-cluster-controller-assumed-role"
  componentPCAARN: FULL_MANAGE_PCA_ARN
  assumeRoleExternalID: "123"
maxConcurrentReconciles:
  cluster: 10
  clusterNodeProtector: 10
tiproxyConfig:
  projects:
    2833468:
      standalone: true
      replicas: 3
      instanceType: "c6g.large"
      tidbSSL: true
      crossaz: true
  clusters:
    3841911:
      standalone: true
      replicas: 3
      instanceType: "c6g.large"
      tidbSSL: true
      crossaz: true
dpCompatEnv: dev
dpCompatAssumeRole: full-manager-service-role
dpCompatAssumeExternalId: "123"
dpCompatDataPlaneRoleArn: arn:aws:iam::385595570414:role/full-manager-service-role