provider: eks
regionConfig:
  name: TMPL_REGION
  zones:
    - TMPL_REGIONa
    - TMPL_REGIONb
    - TMPL_REGIONc
env: dev
namespace: dataplane-metadata
appBoxConfig:
  serviceRoleName: TMPL_EKS_SERVICE_ROLE_NAME
  nodeConfig:
    capacityType: ON_DEMAND
    adminNodesAMIType: BOTTLEROCKET_x86_64
    systemVolumeSize: 20
  nodePools:
    - instanceType: m8g.large
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 2
      availableCpu: 1
      memoryGi: 8
      availableMemoryMi: 4812
    - instanceType: m8g.xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 4
      availableCpu: 3
      memoryGi: 16
      availableMemoryMi: 13208
    - instanceType: m8g.2xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      memoryGi: 32
      availableMemoryMi: 27585
    - instanceType: m8g.4xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 16
      availableCpu: 15
      memoryGi: 64
      availableMemoryMi: 58387
    - instanceType: m8g.8xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 32
      availableCpu: 31
      memoryGi: 128
      availableMemoryMi: 119991
    - instanceType: m8g.16xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 64
      availableCpu: 63
      memoryGi: 256
      availableMemoryMi: 239983
    - instanceType: c8g.xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 4
      availableCpu: 3
      memoryGi: 8
      availableMemoryMi: 4812
    - instanceType: c8g.2xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      memoryGi: 16
      availableMemoryMi: 13208
    - instanceType: c8g.4xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 16
      availableCpu: 15
      memoryGi: 32
      availableMemoryMi: 27585
    - instanceType: c8g.8xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 32
      availableCpu: 31
      memoryGi: 64
      availableMemoryMi: 58387
    - instanceType: c8g.16xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 64
      availableCpu: 63
      memoryGi: 128
      availableMemoryMi: 119991
  sharedNodePools:
    - instanceType: m8g.large
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 2
      availableCpu: 1
      memoryGi: 8
      availableMemoryMi: 4812
    - instanceType: m8g.xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 4
      availableCpu: 3
      memoryGi: 16
      availableMemoryMi: 13208
    - instanceType: m8g.2xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      memoryGi: 32
      availableMemoryMi: 27585
  k8sVersion: "1.32"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - "0.0.0.0/0"
  authorizedSubjects:
    - arn:aws:iam::552185537300:role/regional-server-role-edf68ba
    - arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-us-east-1-e177148
    - arn:aws:iam::385595570414:role/full-manager-service-role
    - arn:aws:iam::385595570414:role/dev-TMPL_REGION-cluster-controller
    - arn:aws:iam::385595570414:role/dev-TMPL_REGION-cluster-controller-assumed-role
    - arn:aws:iam::385595570414:role/devops-server-dev
    - arn:aws:iam::552185537300:role/devops-server-dev
  adminNodeRoleConfig:
    trustPolicyFile: /etc/configs/admin-node-role-trust-policy.json
    policyTemplateFile: /etc/configs/admin-node-role-policy-template.json
    awsLBControllerPolicyFile: /etc/configs/aws-lb-controller-policy.json
    managedPolicies:
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      - "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/AmazonRoute53ResolverFullAccess"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
componentPCAARN: TMPL_PCA_ARN
clusterControllerAssumeRoleName: TMPL_CLUSTER_CONTROLLER_ASSUME_ROLE_NAME
readonlyClusterControllerAssumeRoleName: TMPL_READONLY_CLUSTER_CONTROLLER_ASSUME_ROLE_NAME
dpControllerAssumeRoleName: TMPL_DP_CONTROLLER_ASSUME_ROLE_NAME
ticdcControllerAssumeRoleName: TMPL_TICDC_SERVICE_CONTROLLER_ASSUME_ROLE_NAME
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: dev
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
additionalCloudTags:
  ManagedBy: PingCAP
gcConfig:
  checkIdleInterval: 5m
  idleTimeThreshold: 24h
  idleTimeRetention: 1h
clusterControlServiceEndpoint: "http://cluster-ng-server.cluster-ng-service"
o11yRegionalServiceEndpoint: TMPL_O11Y_REGIONAL_SERVICE_ENDPOINT
o11ySeedClusterID: TMPL_O11Y_SEED_CLUSTER_ID
globalCrossplaneProviderConfig: provider-aws-gr # used to provision global resources such as route53 recordset and pca certificate
publicHostedZoneDomain: TMPL_PUBLIC_HOSTED_ZONE_DOMAIN
publicHostedZoneID: TMPL_PUBLIC_HOSTED_ZONE_ID
dataPlaneAccountNamespace: regional-server-system
featureGates:
  allocate_shared_bucket:
    all: true
  deploy_tidb_operator_v2:
    all: true