provider: aks
providerConfig:
  crossplaneProvider: "85b598b9-a080-4476-bc96-ba89e64f92d1"
  accountId: "85b598b9-a080-4476-bc96-ba89e64f92d1"
acrResourceGroup: "container_registry_rg"
regionConfig:
  name: eastus
  zones:
    - "eastus-1"
    - "eastus-2"
    - "eastus-3"
env: dev
appBoxConfig:
  nodeConfig:
    # set default maxPods for gke, can be override by nodepools
    maxPodsPerNode: 16
  k8sVersion: "1.36"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - "0.0.0.0/0"
  enableArtifactRegistry: false
  adminGroupObjectIDs:
    - a422f92e-abb6-4706-8ee7-995c7dc79ce3 # pingcap group
    - 323794ee-f686-4a5c-979f-3798e71a23fa # dev-control-plane-services
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: dev
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
gcConfig:
  nodePoolGC:
    enabled: true
    autoApproveDeletion: true
    scanInterval: 1h
  checkIdleInterval: 5m
  idleTimeThreshold: 24h
  idleTimeRetention: 1h
componentPCAARN: "arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545"
clusterControlServiceEndpoint: "http://cluster-control-service.cluster-service"
o11yRegionalServiceEndpoint: "https://www.rs.eastus.azure.observability-dev.pingcap.cloud"
globalCrossplaneProviderConfig: provider-aws-gr # used to provision global resources such as route53 recordset and pca certificate
publicHostedZoneDomain: "clusters.eastus.dev.azure.tidb-cloud.com"
publicHostedZoneID: "Z001609810TV4E79YOP22"
publicHostedZoneResourceGroup: "dev-eastus-controlplane"
dataPlaneAccountNamespace: regional-server-system
selfSignedCAConfig:
  tidbServerSelfSignedCAPath: /etc/cluster-controller/issuer-ca/tidb-server-cluster-issuer-ca
featureGates:
  deploy_tidb_operator_v2:
    all: true
  o11y_new_agent_controller:
    all: true
    enabledProjects:
      - "3200226"
      - "3200515"
cmekConfig:
  appRegistrationId: 5d9498fa-0375-47cc-a762-cfb7fe702fe6
  appRegistrationName: cmek-test
  appRegistrationUmi: /subscriptions/99549169-6cee-4263-8491-924a3011ee31/resourcegroups/chenfei-test/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uami-cmek-test