- templateId: k8s-dedicated-template-v1 # template version string
  default: true
  supportedVersions:
    - "1.29"
    - "1.30"
    - "1.31"
    - "1.32"
    - "1.33"
    - "1.34"
  tidbOperatorV2:
    releaseName: tidb-operator-v2
    namespace: tidb-admin
    helmValues:
      image:
        repository: tidbclouddev.azurecr.io/tidbcloud/tidb-operator
        tag: v2.2.0-alpha.8
      args:
        - --backup-manager-image=tidbclouddev.azurecr.io/tidbcloud/tidb-backup-manager:v2.2.0-alpha.8
      env:
        - name: AWS_REGION
          value: us-west-2
      resources:
        limits:
          cpu: "2"
          memory: 2Gi
        requests:
          cpu: 80m
          memory: 50Mi
    chartPath: /etc/helm/tidb-operator-v2/
    crdVersion: v2.2.0-alpha.8
  serviceProxy:
    chartPath: /etc/helm/service-proxy
    releaseName: service-proxy
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      image:
        repository: tidbclouddev.azurecr.io/tidbcloud/service-proxy
        tag: 048ca7454d5860d5f55495e088f87d891f117230
      ingress:
        enabled: true
        paths:
          - path: /@/proxy/cluster/\d+/(pd|tibr|ticdc|dm)(/.*)?
      resources:
        limits:
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 20Mi
  clusterGateway:
    namespace: tidb-admin
    chartPath: /etc/helm/kong
    crdPaths:
      - /etc/helm/kong/crds/custom-resource-definitions.yaml
      - /etc/helm/kong/crds/gateway-api-crd-standard-install.yaml
    helmValues:
      image:
        repository: tidbclouddev.azurecr.io/third-party/kong/kong
        tag: "3.6"
      ingressController:
        image:
          repository: tidbclouddev.azurecr.io/third-party/kong/kubernetes-ingress-controller
          tag: "3.1"
      replicaCount: 2
      admin:
        enabled: true
        http:
          enabled: true
        type: ClusterIP
      proxy:
        enabled: true
        type: ClusterIP
      securityContext:
        fsGroup: 2000
        runAsGroup: 2000
        runAsNonRoot: true
        runAsUser: 1000
      containerSecurityContext:
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        privileged: false
        capabilities:
          drop:
            - NET_RAW
  sliReporter:
    chartPath: /etc/helm/sli-reporter/sli-reporter
    releaseName: reporter
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      image:
        repository: tidbclouddev.azurecr.io/tidbcloud/sli-reporter
        tag: 7cf836f815623bb318ae20559e97892cac0a2b27
      aws:
        region: TMPL_SLI_AWS_REGION
        deliveryStreamName: TMPL_SLI_FIREHOSE_NAME
        deliveryStreamRoleArn: TMPL_SLI_FIREHOSE_ROLE_ARN
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 100m
          memory: 80Mi
      securityContext:
        runAsUser: 1000
        runAsGroup: 2000
        fsGroup: 2000
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        privileged: false
        capabilities:
          drop:
            - NET_RAW
  capacityPlanner:
    chartPath: /etc/helm/capacity-planner
    crdPaths:
      - /etc/helm/capacity-planner/crds/autoscaling.pingcap.com_autoscalers.yaml
    releaseName: capacity-planner
    namespace: tidb-admin
    helmValues:
      image:
        repository: tidbclouddev.azurecr.io/tidbcloud/capacity-planner
        tag: a1fd5b14fbdefd6ae0da76469c3301b10b011428
  ngAutoScaler:
    chartPath: /etc/helm/ng-autoscaler
    releaseName: ng-autoscaler
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      autoScalerImage: tidbclouddev.azurecr.io/tidbcloud/ng-autoscaler:main-659b9119f6873a000f50872f146dd901d5a2b71c
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 100m
          memory: 80Mi
      securityContext:
        runAsUser: 1000
        runAsGroup: 2000
        fsGroup: 2000
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        privileged: false
        capabilities:
          drop:
            - NET_RAW