apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: investibook-external-customer-prod
resources:
  - ../../base
  - namespace.yaml
  - agent-config.yaml
  - bedrock-secret-store.yaml
  - agent-external-secret.yaml
  - run9-external-secret.yaml
  - usage-bot-external-secret.yaml
  - usage-bot-serviceaccount.yaml
  - usage-bot-deployment.yaml
  - usage-bot-service.yaml
  - usage-bot-pvc.yaml
  - gateway-preview-ingress.yaml
  - usage-bot-cost-alerts-config.yaml
configMapGenerator:
  - name: investibook-backend-config
    literals:
      - CHAT_ENABLED_COMMANDS=
      - INVESTIBOOK_IMAGE_PARSE_PROVIDER=bedrock
      - INVESTIBOOK_IMAGE_PARSE_BEDROCK_REGION=ap-southeast-1
      - INVESTIBOOK_IMAGE_PARSE_BEDROCK_MODEL_ID=arn:aws:bedrock:ap-southeast-1:841162690310:application-inference-profile/2htv1ujn6mxt
      - >-
        AGENT_ORG_BEDROCK_PROFILES={"1372813089201051283":{"standard":"arn:aws:bedrock:ap-southeast-1:841162690310:application-inference-profile/z673vbxouoxm","pro":"arn:aws:bedrock:ap-southeast-1:841162690310:application-inference-profile/bgjaadmcu912"},"1372813089209061633":{"standard":"arn:aws:bedrock:ap-southeast-1:841162690310:application-inference-profile/rsz5xtcnlvm2","pro":"arn:aws:bedrock:ap-southeast-1:841162690310:application-inference-profile/bk1is8fwv44h"}}
      - LANGFUSE_ENABLED=false
      - LANGFUSE_ENVIRONMENT=external-customer-prod
      - INVESTIBOOK_IDENTITY_CONTEXT_MODE=gateway
      - TIDBCLOUD_CONSOLE_URL=https://tidbcloud.com/
      - INVESTIBOOK_EMBED_MESSAGE_ORIGINS=https://tidbcloud.com
      - INVESTIBOOK_ACCOUNT_USERINFO_URLS=https://us-west-2.prod.aws.tidbcloud.com/api/v1/user/me
      - INVESTIBOOK_ACCOUNT_ORGANIZATIONS_URLS=https://us-west-2.prod.aws.tidbcloud.com/api/v1/orgs
      - INVESTIBOOK_WORKSPACE_CREATOR_EMAIL_DOMAINS=pingcap.com
      - INVESTIBOOK_TIDBCLOUD_API_BASE_URLS=https://us-west-2.prod.aws.tidbcloud.com
      - INVESTIBOOK_ACCOUNT_RBAC_ENDPOINT=vpce-0a2e74e15956af01c-pjwbhrd8.vpce-svc-0a0529c42508b960e.us-west-2.vpce.amazonaws.com:10000
      - INVESTIBOOK_WEB_BASE_URL=https://external-customer.prod.investibook.tidbcloud.com
      - INVESTIBOOK_AIOPS_API_URL=http://aiops-server.aiops-prod:8090
      - INVESTIBOOK_S3_BUCKET=tidbcloud-aiops-assets-prod
      - INVESTIBOOK_AWS_REGION=us-west-2
      - INVESTIBOOK_EXPORT_S3_PREFIX=investibook_service_external_customer/export_workspaces
      - INVESTIBOOK_AGENT_SANDBOX_PROVIDERS=run9
      - RUN9_API_BASE_URL=https://api.run.sys9.ai
      - RUN9_PROJECT_CID=x0gjx5mw7sqh
      - RUN9_SOURCE_SNAP_ID=sloj1rbv5
      - RUN9_WORKSPACE_PREINITIALIZED=true
      - RUN9_ENVIRONMENT=external-customer-prod
      - RUN9_BOX_ID_PREFIX=ib
      - RUN9_SECRET_ENVIRONMENT=secret
      - RUN9_SECRET_BOX_ID_PREFIX=external-prod
      - RUN9_NETWORK_MODE=managed
      - >-
        RUN9_BOX_SECRET_RULES=[{"name":"bedrock-bearer-token","env_names":["AWS_BEARER_TOKEN_BEDROCK"],"allowed_hosts":["bedrock-runtime.ap-southeast-1.amazonaws.com"],"header_name":"Authorization"},{"name":"tidbcloud-data-session-id","env_names":["TIDBCLOUD_DATA_SESSION_ID"],"allowed_hosts":["us-west-2.prod.aws.tidbcloud.com"],"header_name":"x-session-id","immutable":true}]
      - RUN9_REMOTE_WORKSPACE_DIR=/workspace
      - RUN9_REMOTE_AGENTKIT_DIR=/opt/investibook/agentkit
      - RUN9_AGENT_PULL_WAIT_MS=500
      - AGENT_SESSION_PREWARM_ENABLED=true
      - AGENT_SESSION_PREWARM_MAX_CONCURRENCY=4
images:
  - name: investibook/frontend
    newName: 557537366020.dkr.ecr.us-west-2.amazonaws.com/investibook/prod/frontend
    newTag: 13a2cf494160b6ff57a6b6fa17180b251749225d
  - name: investibook/backend
    newName: 557537366020.dkr.ecr.us-west-2.amazonaws.com/investibook/prod/backend
    newTag: 13a2cf494160b6ff57a6b6fa17180b251749225d
  - name: investibook/usage-bot
    newName: 557537366020.dkr.ecr.us-west-2.amazonaws.com/investibook/prod/usage-bot
    newTag: 2c769804c35802d59062371c81cfb1d2edef54c8
patches:
  - path: backend-patch.yaml
  - path: frontend-patch.yaml
  - path: serviceaccount-patch.yaml
  - path: backend-scrape-patch.yaml
  - path: delete-kube-state-scrape.yaml
  - path: delete-kubelet-scrape.yaml