provider: eks
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
amiConfig:
  supportedVersions:
    - "1.27"
    - "1.28"
    - "1.29"
    - "1.30"
    - "1.31"
    - "1.32"
    - "1.33"
    - "1.34"
    - "1.35"
    - "1.36"
clusterController:
  aws:
    nodeRolePolicyFile: /etc/cluster-controller/extra/node-policy-config.json
    nodeUserdataSystemConfigurationFile: /etc/cluster-controller/extra/node-userdata-system-configuration.toml
    nodeRoleManagedPolicies: # AWS managed policies to attach to node role
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      - "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/AmazonRoute53ResolverFullAccess"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  configChange:
    accountEnv: CONFIG_CHANGE_ENV
    activity:
      enabled: CONFIG_CHANGE_ACTIVITY_ENABLED
      activityHubEndpoint: CONFIG_CHANGE_ACTIVITY_HUB_EP
      activityHubSource: CONFIG_CHANGE_ACTIVITY_SOURCE_NAME
      clinicEndpoint: CONFIG_CHANGE_CLINIC_EP
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: IMAGE_REGISTRY/tidbcloud/cluster-agent
      tag: 4f164cbaa37f5d5e652d027de9da286f21be94ac
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
  mysqlProtocolProbe:
    image: "IMAGE_REGISTRY/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 5
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: IMAGE_REGISTRY/tidbcloud/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
    defaultTag: v1.0.4
network:
  proxy:
    enableDevMode: PROXY_ENABLE_DEV_MODE
    auth0Audience: PROXY_AUTH0_AUDIENCE
    auth0Domain: PROXY_AUTH0_DOMAIN
  region: REGION
override:
  overrideHelperImage: "IMAGE_REGISTRY/third-party/busybox:1.34.1"
  overrideRegistry: "IMAGE_REGISTRY"
  overrideRepoPrefix: "tidbcloud"
  overrideThirdPartyRepoPrefix: "third-party"
featureGates:
  set_priority_class:
    all: true
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: eks
    cloud.pingcap.com/region: REGION
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: prod
  publicHostedZoneDomain: FULL_MANAGE_HOSTED_ZONE_DOMAIN
  publicHostedZoneID: FULL_MANAGE_HOSTED_ZONE_ID
  serviceRoleARN: "arn:aws:iam::380838443567:role/full-manager-eks-role"
  serviceRoleName: "full-manager-eks-role"
  assumeRoleName: "dev-us-east-1-cluster-controller-assumed-role"
  componentPCAARN: FULL_MANAGE_PCA_ARN
  assumeRoleExternalID: "123"
maxConcurrentReconciles:
  cluster: 10
  clusterNodeProtector: 5
ticdcServiceEndpoint: "http://ticdc-service-server.ticdc-service"