provider: eks resourceTaggerConfig: enabled: true regionConfig: logicalRegionName: TMPL_LOGICAL_REGION name: TMPL_REGION zones: - TMPL_REGIONa - TMPL_REGIONb - TMPL_REGIONc env: dev dnsProviderConfig: provider: awsRoute53 awsRoute53: accountID: TMPL_DNS_MANAGER_ACCOUNT_ID roleArn: TMPL_DNS_MANAGER_ROLE_ARN zoneId: TMPL_PUBLIC_HOSTED_ZONE_ID domain: TMPL_PUBLIC_HOSTED_ZONE_DOMAIN namespace: dataplane-metadata internetConfig: enableECRInterfaceEndpoints: false ecrServiceRegion: "" appBoxConfig: disableClusterProxy: true pcaConfig: caIdentifier: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545 region: us-west-2 serviceRoleName: TMPL_EKS_SERVICE_ROLE_NAME nodeConfig: capacityType: ON_DEMAND adminNodesAMIType: BOTTLEROCKET_x86_64 systemVolumeSize: 20 adminNodeConfig: amiType: BOTTLEROCKET_x86_64 systemVolumeSize: 20 instanceType: t3.medium minSize: 3 maxSize: 10 workerNodeConfig: systemVolumeSize: 50 nodePools: - instanceType: m8g.large amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 2 availableCpu: 1 memoryGi: 8 availableMemoryMi: 4812 - instanceType: m8g.xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 4 availableCpu: 3 memoryGi: 16 availableMemoryMi: 13208 - instanceType: m8g.2xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 8 availableCpu: 7 memoryGi: 32 availableMemoryMi: 27585 - instanceType: m8g.4xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 16 availableCpu: 15 memoryGi: 64 availableMemoryMi: 58387 - instanceType: m8g.8xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 32 availableCpu: 31 memoryGi: 128 availableMemoryMi: 119991 - instanceType: m8g.16xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 64 availableCpu: 63 memoryGi: 256 availableMemoryMi: 239983 # - instanceType: i8g.large # amiType: BOTTLEROCKET_ARM_64 # systemVolumeSize: 50 # cpu: 2 # availableCpu: 1 # memoryGi: 16 # availableMemoryMi: 15000 # hasLocalDisk: true # localDiskSize: 468 # - instanceType: i8g.xlarge # amiType: BOTTLEROCKET_ARM_64 # systemVolumeSize: 50 # cpu: 4 # availableCpu: 3 # memoryGi: 32 # availableMemoryMi: 30900 # hasLocalDisk: true # localDiskSize: 937 # - instanceType: i8g.2xlarge # amiType: BOTTLEROCKET_ARM_64 # systemVolumeSize: 50 # cpu: 8 # availableCpu: 7 # memoryGi: 64 # availableMemoryMi: 61909 # hasLocalDisk: true # localDiskSize: 1875 # - instanceType: i8g.4xlarge # amiType: BOTTLEROCKET_ARM_64 # systemVolumeSize: 50 # cpu: 16 # availableCpu: 15 # memoryGi: 128 # availableMemoryMi: 122000 # hasLocalDisk: true # localDiskSize: 3750 # - instanceType: i8g.8xlarge # amiType: BOTTLEROCKET_ARM_64 # systemVolumeSize: 50 # cpu: 32 # availableCpu: 31 # memoryGi: 256 # availableMemoryMi: 240000 # hasLocalDisk: true # localDiskSize: 7500 # - instanceType: i8g.16xlarge # amiType: BOTTLEROCKET_ARM_64 # systemVolumeSize: 50 # cpu: 64 # availableCpu: 63 # memoryGi: 512 # availableMemoryMi: 480000 # hasLocalDisk: true # localDiskSize: 15000 - instanceType: r8g.xlarge amiType: BOTTLEROCKET_ARM_64 placementGroupEnabled: true systemVolumeSize: 100 cpu: 4 availableCpu: 3 memoryGi: 32 availableMemoryMi: 30900 - instanceType: r8g.2xlarge amiType: BOTTLEROCKET_ARM_64 placementGroupEnabled: true systemVolumeSize: 100 cpu: 8 availableCpu: 7 memoryGi: 64 availableMemoryMi: 61909 - instanceType: r8g.4xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 16 availableCpu: 15 memoryGi: 128 availableMemoryMi: 124464 - instanceType: r8g.8xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 32 availableCpu: 31 memoryGi: 256 availableMemoryMi: 250237 - instanceType: c8g.large amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 2 availableCpu: 1 memoryGi: 4 availableMemoryMi: 2039 - instanceType: c8g.xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 4 availableCpu: 3 memoryGi: 8 availableMemoryMi: 4812 - instanceType: c8g.2xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 8 availableCpu: 7 memoryGi: 16 availableMemoryMi: 13208 - instanceType: c8g.4xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 16 availableCpu: 15 memoryGi: 32 availableMemoryMi: 27585 - instanceType: c8g.8xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 32 availableCpu: 31 memoryGi: 64 availableMemoryMi: 58387 - instanceType: c8g.16xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 50 cpu: 64 availableCpu: 63 memoryGi: 128 availableMemoryMi: 119991 k8sVersion: "1.35" enableK8sPublicAccess: true apiserverPublicAccessCidrs: - "0.0.0.0/0" apiGateway: enablePublicAccess: true publicAccessCidrs: - "54.148.240.60/32" - "54.71.2.116/32" - "52.13.110.238/32" - "54.156.147.26/32" - "54.81.145.46/32" - "107.22.53.149/32" - "35.83.225.251/32" authorizedSubjects: - arn:aws:iam::385595570414:role/full-manager-service-role - arn:aws:iam::385595570414:role/devops-server-dev - arn:aws:iam::552185537300:role/devops-server-dev nodeUserDataConfig: /etc/configs/node-userdata-config.toml localDiskNodeUserDataConfig: /etc/configs/local-disk-node-userdata-config.toml adminNodeRoleConfig: loadBalancerControllerPolicyTemplateFile: /etc/configs/load-balancer-controller-policy-template.json # See https://docs.aws.amazon.com/eks/latest/best-practices/cas.html#_employ_least_privileged_access_to_the_iam_role clusterAutoscalerPolicyTemplateFile: /etc/configs/cluster-autoscaler-policy-template.json # See https://github.com/cert-manager/aws-privateca-issuer#configuration certManagerPolicyTemplateFile: /etc/configs/cert-manager-policy-template.json # all tidb cluster components, including br, cdc, data import, auditlog etc tidbClusterPolicyTemplateFile: /etc/configs/tidb-cluster-policy-template.json # o11y agent includes vector, sli-reporter o11yAgentPolicyTemplateFile: /etc/configs/o11y-agent-policy-template.json managedPolicies: - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy" - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly" - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy" - "arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy" # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail. - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore" o11yBizType: dev-tidbcloud-nextgen predicate: matchExpressions: - key: "cloud.pingcap.com/reconciler" operator: "NotIn" values: - e2e-test resourceNamePrefix: TMPL_RESOURCE_NAME_PREFIX resourceLabels: cloud.pingcap.com/bizType: dedicated tags.tidbcloud.com/environment: dev tags.tidbcloud.com/servicetype: dedicated tags.tidbcloud.com/usedby: dbaas-control-plane-shoot additionalCloudTags: ManagedBy: PingCAP controlPlaneCrossplaneProviderConfig: provider-aws dataPlaneRoleName: TMPL_DATAPLANE_ROLE_NAME accountListPath: /etc/configs/account-list.yaml awsDataPlaneExternalID: "" disableProxyProtocol: TMPL_DISABLE_PROXY_PROTOCOL