provider: aks
providerConfig:
  crossplaneProvider: 85b598b9-a080-4476-bc96-ba89e64f92d1
  accountId: 85b598b9-a080-4476-bc96-ba89e64f92d1
acrResourceGroup: "container_registry_rg"
regionConfig:
  name: southeastasia
  zones:
    - southeastasia-1
    - southeastasia-2
    - southeastasia-3
env: dev
appBoxConfig:
  nodeConfig:
    # set default maxPods for gke, can be override by nodepools
    maxPodsPerNode: 16
  k8sVersion: "1.36"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - 0.0.0.0/0
    - 54.148.240.60/32
    - 54.71.2.116/32
    - 52.13.110.238/32
    - 44.245.243.63/32
    - 4.194.33.111/32
    - 172.188.161.137/32
  enableArtifactRegistry: false
  adminGroupObjectIDs:
    - a422f92e-abb6-4706-8ee7-995c7dc79ce3
    - 323794ee-f686-4a5c-979f-3798e71a23fa
  authorizedSubjects: null
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: dev
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
gcConfig:
  nodePoolGC:
    enabled: true
    autoApproveDeletion: true
    scanInterval: 1h
  checkIdleInterval: 5m
  idleTimeThreshold: 24h
  idleTimeRetention: 1h
componentPCAARN: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
clusterControlServiceEndpoint: "http://cluster-control-service.cluster-service"
o11yRegionalServiceEndpoint: https://www.rs.southeastasia.azure.observability.tidbcloud.com
o11ySeedClusterID: d0c5209b-6c79-4a44-845e-9dc15be4c535
globalCrossplaneProviderConfig: provider-aws-gr # used to provision global resources such as route53 recordset and pca certificate
publicHostedZoneDomain: clusters.southeastasia-chengfei.dev.azure.tidb-cloud.com
publicHostedZoneID: null
publicHostedZoneResourceGroup: dev-southeastasia-chengfei-controlplane
dataPlaneAccountNamespace: regional-server-system
selfSignedCAConfig:
  tidbServerSelfSignedCAPath: /etc/cluster-controller/issuer-ca/tidb-server-cluster-issuer-ca
featureGates:
  deploy_tidb_operator_v2:
    all: true
cmekConfig:
  appRegistrationId: 083f6ff8-5fd5-4f4c-bf7d-9ae193518c49
  appRegistrationName: TiDB Cloud CMK Broker - southeastasia-chengfei
  appRegistrationUmi: /subscriptions/85b598b9-a080-4476-bc96-ba89e64f92d1/resourceGroups/dev-southeastasia-chengfei-controlplane/providers/Microsoft.ManagedIdentity/userAssignedIdentities/uami-cmek-broker-southeastasia-chengfei