provider: gke
providerConfig:
  crossplaneProvider: TMPL_CONTROLPLANE_PROJECT
  accountId: TMPL_CONTROLPLANE_PROJECT
regionConfig:
  name: TMPL_REGION
  zones:
    - TMPL_REGION-a
    - TMPL_REGION-b
    - TMPL_REGION-c
env: dev
appBoxConfig:
  nodeConfig:
    # set default maxPods for gke, can be override by nodepools
    maxPodsPerNode: 16
  k8sVersion: "1.35"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - "0.0.0.0/0"
  enableArtifactRegistry: true
  gkeMaintenanceExclusionTimeWindow:
    autoUpdate: true
  gkeMaintenanceExclusionRequeueAfter: 10m
  authorizedSubjects:
    - dev-gke-provider@pingcap-gardener.iam.gserviceaccount.com
    - regional-server@gcp-autonomous-dev.iam.gserviceaccount.com
    - regional-server@gcp-autonomous-prod.iam.gserviceaccount.com
    - devops-server@gcp-resilience-dev.iam.gserviceaccount.com
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: dev
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
gcConfig:
  nodePoolGC:
    enabled: true
    autoApproveDeletion: true
    scanInterval: 1h
  checkIdleInterval: 5m
  idleTimeThreshold: 24h
  idleTimeRetention: 1h
componentPCAARN: TMPL_PCA_ARN
clusterControlServiceEndpoint: "http://cluster-control-service.cluster-service"
o11yRegionalServiceEndpoint: TMPL_O11Y_REGIONAL_SERVICE_ENDPOINT
globalCrossplaneProviderConfig: provider-aws-gr # used to provision global resources such as route53 recordset and pca certificate
publicHostedZoneDomain: TMPL_PUBLIC_HOSTED_ZONE_DOMAIN
publicHostedZoneID: TMPL_PUBLIC_HOSTED_ZONE_ID
dataPlaneAccountNamespace: regional-server-system
featureGates:
  allocate_more_nats:
    all: true
  allocate_shared_bucket:
    all: true
  deploy_tidb_operator_v2:
    all: true
  o11y_new_agent_controller:
    all: true
    enabledProjects:
      - "3200226"
      - "3200515"
ticdcServiceEndpoint: "http://ticdc-service-server.ticdc-service"