provider: gke
controlplaneAWSProviderConfig: provider-aws
controlplaneGCPProviderConfig: provider-gcp
clusterController:
  tikvPreStopImage: gcr.io/pingcap-public/dbaas/tidb-operator-prestop-checker:v2.0.0-beta.9
  configChange:
    accountEnv: CONFIG_CHANGE_ENV
    activity:
      enabled: CONFIG_CHANGE_ACTIVITY_ENABLED
      activityHubEndpoint: CONFIG_CHANGE_ACTIVITY_HUB_EP
      activityHubSource: CONFIG_CHANGE_ACTIVITY_SOURCE_NAME
      clinicEndpoint: CONFIG_CHANGE_CLINIC_EP
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: IMAGE_REGISTRY/tidbcloud/cluster-agent
      tag: 4f164cbaa37f5d5e652d027de9da286f21be94ac
    pdPatrolImage:
      tag: master-c53f203
  mysqlProtocolProbe:
    image: IMAGE_REGISTRY/tidbcloud/mysql-readiness-probe:v0.1.0
    binaryName: mysql-readiness-probe
    timeoutSeconds: 5
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: gcr.io/pingcap-public/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand:
      - /audit
      - server
      - --config
      - /etc/audit/audit.yaml
    baseImage: IMAGE_REGISTRY/tidbcloud/audit
    defaultTag: v1.0.4
network:
  k8sVersion: "1.28"
  certmanager:
    chartPath: /etc/helm/certmanager/cert-manager-v1.10.0.tgz
    crdPaths:
      - /etc/helm/certmanager/cert-manager-crds-v1.10.0.yaml
    controllerImage:
      repo: quay.io/jetstack/cert-manager-controller
      tag: v1.10.0
    webhookImage:
      repo: quay.io/jetstack/cert-manager-webhook
      tag: v1.10.0
    cainjectorImage:
      repo: quay.io/jetstack/cert-manager-cainjector
      tag: v1.10.0
  clusterAutoscaler:
    chartPath: /etc/helm/aws-cluster-auto-scaler/
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-autoscaler
      tag: v1.25.0
  operator:
    advancedStatefulset:
      name: gcr.io/pingcap-public/dbaas/advanced-statefulset:v0.8.0
    chartPath: /etc/helm/tidb-operator/tidb-operator-v1.6.0-alpha.16
    crdPaths:
      - /etc/helm/tidb-operator/advanced-statefulset-crd.v1.yaml
      - /etc/helm/tidb-operator/tidb-operator-v1.6.0-alpha.16.yaml
    operator:
      name: gcr.io/pingcap-public/dbaas/tidb-operator
      tag: v1.6.0-alpha.16
    tidbBackupManager:
      name: gcr.io/pingcap-public/dbaas/tidb-backup-manager
      tag: v1.6.0-alpha.16
    dbMonitorProm:
      name: gcr.io/pingcap-public/dbaas/prometheus
      tag: v2.11.1
    dbMonitorGrafana:
      name: gcr.io/pingcap-public/dbaas/grafana
      tag: 6.0.1
  proxy:
    auth0Audience: PROXY_AUTH0_AUDIENCE
    auth0Domain: PROXY_AUTH0_DOMAIN
    enableDevMode: PROXY_ENABLE_DEV_MODE
  dataflowAgent:
    chartPath: /etc/helm/dataflow-agent/dataflow-agent.tgz
    dataflowAgentImage:
      repo: IMAGE_REGISTRY/dbaas/prod/dataflow-agent
      tag: release-v20250107
  tiflowOperator:
    chartPath: /etc/helm/tiflow-operator/tiflow-operator.tgz
    crdPaths:
      - /etc/helm/tiflow-operator/tiflow-operator/crds/pingcap.com_tiflowclusters.yaml
    tiflowOperatorImage:
      repo: IMAGE_REGISTRY/dbaas/prod/tiflow-operator
      tag: 9ab11c525e3693cc92199e344f0f394233800821
    enable: false
  pcaIssuer:
    chartPath: /etc/helm/pca-issuer/aws-privateca-issuer-1.2.0-fixed.tgz
    crdPaths:
      - /etc/helm/pca-issuer/aws-pca-issuer-crd.yaml
      - /etc/helm/pca-issuer/aws-pca-clusterissuer-crd.yaml
    image:
      repo: gcr.io/pingcap-public/dbaas/aws-pca-issuer
      tag: v1.2.2
  sliReporter:
    chartPath: /etc/helm/sli-reporter/sli-reporter.tgz
    image:
      repo: IMAGE_REGISTRY/dbaas/prod/sli-reporter
      tag: v2.3.1
    awsRegion: us-west-2
    deliveryStreamName: sli-prod-metrics
    deliveryStreamRoleArn: arn:aws:iam::557537366020:role/sli-cross-account-role
  region: REGION
  o11yConfig:
    env: prod
    seedVectorURL: http://seed-us-west-2-vector-aggregator.prod.shared.aws.tidbcloud.com:9090
    seedVectorEpSvcName: com.amazonaws.vpce.us-west-2.vpce-svc-001d51b454af1437b
    infraTenantID: infra-prod
    openAPIAddress: https://www.gs.us-west-2.aws.observability.tidbcloud.com
    createO11yInfraPath: /api/v1/clusters
    deleteO11yInfraPath: /api/v1/clusters
    getO11yInfraPath: /api/v1/clusters
    pauseO11yInfraPath: /api/v1/clusters
    resumeO11yInfraPath: /api/v1/clusters
    auth0GetTokenURL: https://tidb-soc2.us.auth0.com/oauth/token
    auth0Audience: https://tidb-soc2.us.auth0.com/api/v2/
    lokiServerDns: a5bb1e2a8625f4a28b44ff9ee740ec3a-1136545906.us-west-2.elb.amazonaws.com
    version: 20221126
    eventExporter:
      image:
        repo: gcr.io/pingcap-public/third-party/resmoio/kubernetes-event-exporter
        tag: v1.0
      chartPath: /etc/helm/event-exporter/event-exporter.tgz
    metricsAgent:
      image:
        repo: victoriametrics/vmagent
        tag: v1.78.0
      chartPath: /etc/helm/vmagent/victoria_metrics_agent.tgz
    clusterAgent:
      image:
        repo: gcr.io/pingcap-public/dbaas/vector
        tag: 0.23.X-2-debian
    logAgent:
      image:
        repo: gcr.io/pingcap-public/dbaas/vector
        tag: 0.23.X-2-debian
      chartPath: /etc/helm/vector/vector.tgz
    loki:
      image:
        repo: gcr.io/pingcap-public/fluent-bit-plugin-loki
        tag: main-8c1095a55-1.8.15-final-multi-arch
      chartPath: /etc/helm/fluent-bit
    so11y:
      image:
        repo: prom/prometheus
        tag: v2.38.0
      chartPath: /etc/helm/prometheus/prometheus.tgz
  kubeStateMetrics:
    chartPath: /etc/helm/kube-state-metrics/kube-state-metrics.tgz
    image:
      registry: registry.k8s.io
      repo: kube-state-metrics/kube-state-metrics
      tag: v2.10.0
  nodeExporter:
    chartPath: /etc/helm/node-exporter/node-exporter.tgz
    image:
      registry: quay.io
      repo: prometheus/node-exporter
      tag: v1.6.1
tiflowCluster:
  master:
    defaultSpecCode: master-share-2c2g
    expirationMinute: 120
    shareDb:
      privateLinkServiceName: com.amazonaws.vpce.us-west-2.vpce-svc-0ed6bddacf42948b1
      port: 3306
      user: admin
      password: dataflow
    imageConfig:
      repo: gcr.io/pingcap-public/tidbcloud/tiflow
      tag: de06be9be58e3f78564b4b37f94ee72206300762
  executor:
    imageConfig:
      repo: gcr.io/pingcap-public/tidbcloud/tiflow
      tag: de06be9be58e3f78564b4b37f94ee72206300762
configServiceEndpoint: http://adffa969f7149406b84145c461c3670a-344077277.us-west-2.elb.amazonaws.com:8090
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: gke
    cloud.pingcap.com/region: REGION
  matchExpressions:
    - key: cloud.pingcap.com/reconciler
      operator: DoesNotExist
fullManage:
  project: prod
  publicHostedZoneDomain: FULL_MANAGE_HOSTED_ZONE_DOMAIN
  publicHostedZoneID: FULL_MANAGE_HOSTED_ZONE_ID
  componentPCAARN: FULL_MANAGE_PCA_ARN
  gcpProjectID: GCP_CONTROLPLANE_PROJECT_PLACEHOLDER
  gcpClusterServerSAName: GCP_CLUSTER_SERVER_SA_PLACEHOLDER
featureGates:
  network_hibernation:
    all: true
  tidb_add_index:
    all: true
  tidb_expose_oom_path_for_new_cluster:
    all: true
  tidb_expose_oom_path_for_existing_cluster:
    all: false
  tidb_expose_replayer_path_for_new_cluster:
    all: true
  tidb_expose_replayer_path_for_existing_cluster:
    all: false
  tidb_enable_audit_log:
    all: true
  o11y_deploy_crd:
    all: true
  o11y_deploy_crd_tiflow:
    all: true
  tls_cluster:
    all: true
  tidb_enable_bootstrap_sql:
    all: true
  disable_nodepool_data_plane_label:
    all: false
  tidb_monitor_disabled:
    all: true
  disable_gke_logging:
    all: true
  disable_gke_monitoring:
    all: true
  independent_config_change:
    all: false
  scale_out_tidb_in_parallel:
    all: true
  set_priority_class:
    all: true
  use_tidb_operator_v2:
    all: false
maxConcurrentReconciles:
  network: 5
  cluster: 10
  networkPeer: 5
  clusterNodeProtector: 5
  clusterNodeTagger: 5
  eksConnection: 5
  frpServer: 5
  privateLink: 5
  privateLinkEndpoint: 5
hibernation:
  enabled: true
ticdcServiceEndpoint: http://ticdc-service-server.ticdc-service
