provider: aks
regionConfig:
  logicalRegionName: TMPL_LOGICAL_REGION
  name: TMPL_REGION
  zones:
    - TMPL_REGION-1
    - TMPL_REGION-2
    - TMPL_REGION-3
env: dev
dnsProviderConfig:
  provider: azureDNSZone
  azureDNSZone:
    subscriptionID: TMPL_CONTROL_PLANE_SUBSCRIPTION_ID
    tenantID: TMPL_AZURE_WORKLOAD_IDENTITY_TENANT_ID
    clientID: TMPL_AZURE_WORKLOAD_IDENTITY_CLIENT_ID
    resourceGroup: TMPL_HOSTED_ZONE_RESOURCE_GROUP
    domain: TMPL_PUBLIC_HOSTED_ZONE_DOMAIN
namespace: dataplane-metadata
appBoxConfig:
  disableClusterProxy: true
  pcaConfig:
    caIdentifier: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
    region: us-west-2
  serviceRoleName: TMPL_EKS_SERVICE_ROLE_NAME
  adminGroupObjectIDs:
    - a422f92e-abb6-4706-8ee7-995c7dc79ce3 # pingcap.com
    - 323794ee-f686-4a5c-979f-3798e71a23fa # dev-control-plane-services
  nodeConfig:
    capacityType: ON_DEMAND
    adminNodesAMIType: BOTTLEROCKET_x86_64
    systemVolumeSize: 30
  adminNodeConfig:
    systemVolumeSize: 30
    instanceType: Standard_D2s_v6
    minSize: 2
    maxSize: 10
  workerNodeConfig:
    systemVolumeSize: 50
  nodePools:
    - instanceType: Standard_D2als_v7
      systemVolumeSize: 50
      cpu: 2
      availableCpu: 1
      memoryGi: 4
      availableMemoryMi: 3584
    - instanceType: Standard_D2ads_v7
      systemVolumeSize: 50
      cpu: 2
      availableCpu: 1
      memoryGi: 8
      availableMemoryMi: 7680
    - instanceType: Standard_D4als_v7
      systemVolumeSize: 50
      cpu: 4
      availableCpu: 3
      memoryGi: 8
      availableMemoryMi: 7680
    - instanceType: Standard_D8ads_v7
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      memoryGi: 32
      availableMemoryMi: 32256
    - instanceType: Standard_D8alds_v7
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      memoryGi: 16
      availableMemoryMi: 15872
    - instanceType: Standard_D16s_v6
      systemVolumeSize: 50
      cpu: 16
      availableCpu: 15
      memoryGi: 64
      availableMemoryMi: 65024
    - instanceType: Standard_E4s_v6
      systemVolumeSize: 100
      cpu: 4
      availableCpu: 3
      memoryGi: 32
      availableMemoryMi: 32256
    - instanceType: Standard_E8s_v6
      systemVolumeSize: 100
      cpu: 8
      availableCpu: 7
      memoryGi: 64
      availableMemoryMi: 65024
    - instanceType: Standard_E16s_v6
      systemVolumeSize: 100
      cpu: 16
      availableCpu: 15
      memoryGi: 128
      availableMemoryMi: 130560
    - instanceType: Standard_E32s_v6
      systemVolumeSize: 100
      cpu: 32
      availableCpu: 31
      memoryGi: 256
      availableMemoryMi: 261632
  k8sVersion: "1.34"
  enableK8sPublicAccess: true
  # add cidr list from deployment script
  apiserverPublicAccessCidrs:
    - 0.0.0.0/0
  apiGateway:
    enablePublicAccess: true
    # add cidr list from deployment script
    publicAccessCidrs:
  nodeUserDataConfig: /etc/configs/node-userdata-config.toml
  localDiskNodeUserDataConfig: /etc/configs/local-disk-node-userdata-config.toml
  adminNodeRoleConfig:
    loadBalancerControllerPolicyTemplateFile: /etc/configs/load-balancer-controller-policy-template.json
    # See https://docs.aws.amazon.com/eks/latest/best-practices/cas.html#_employ_least_privileged_access_to_the_iam_role
    clusterAutoscalerPolicyTemplateFile: /etc/configs/cluster-autoscaler-policy-template.json
    # See https://github.com/cert-manager/aws-privateca-issuer#configuration
    certManagerPolicyTemplateFile: /etc/configs/cert-manager-policy-template.json
    # all tidb cluster components, including br, cdc, data import, auditlog etc
    tidbClusterPolicyTemplateFile: /etc/configs/tidb-cluster-policy-template.json
    # o11y agent includes vector, sli-reporter
    o11yAgentPolicyTemplateFile: /etc/configs/o11y-agent-policy-template.json
    managedPolicies:
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  o11yBizType: dev-tidbcloud-nextgen
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceNamePrefix: TMPL_RESOURCE_NAME_PREFIX
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: dev
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
additionalCloudTags:
  ManagedBy: PingCAP
controlPlaneCrossplaneProviderConfig: TMPL_CONTROL_PLANE_CROSSPLANE_PROVIDER_CONFIG
awsCrossplaneProviderConfig: TMPL_AWS_CROSSPLANE_PROVIDER_CONFIG
acrResourceGroup: TMPL_ACR_RESOURCE_GROUP
accountListPath: /etc/configs/account-list.yaml
awsDataPlaneExternalID: ""
disableProxyProtocol: TMPL_DISABLE_PROXY_PROTOCOL