provider: gke
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
controlplaneGCPProviderConfig: provider-gcp
clusterController:
  gcp:
    validationServerServiceAccount: iam-validator-server@pingcap-gardener.iam.gserviceaccount.com
  configChange:
    accountEnv: staging
    activity:
      enabled: false
      activityHubEndpoint: "https://b9u12esjuf.execute-api.us-west-2.amazonaws.com"
      activityHubSource: "gitops"
      clinicEndpoint: "http://clinic-staging-1072990385.us-west-2.elb.amazonaws.com:8085"
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: gcr.io/pingcap-gardener/tidbcloud/cluster-agent
      tag: a1d2dd549d2f77a2762885a9c6b87fc5d48a741f
  mysqlProtocolProbe:
    image: "gcr.io/pingcap-gardener/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 2
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: gcr.io/pingcap-public/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
network:
  k8sVersion: "1.31"
  k8sVersionConfig:
    projects:
      "1369847559693557289": "1.28" # huaxi test k8s upgrade
      "1369847559694040664": "1.29"
  gkeMaintenanceExclusionTimeWindow:
    startTime: "2024-04-07T00:00:00Z"
    endTime: "2024-05-06T00:00:00Z"
  certmanager:
    chartPath: /etc/helm/certmanager/cert-manager-v1.10.0.tgz
    crdPaths: [/etc/helm/certmanager/cert-manager-crds-v1.10.0.yaml]
    controllerImage:
      repo: quay.io/jetstack/cert-manager-controller
      tag: v1.10.0
    webhookImage:
      repo: quay.io/jetstack/cert-manager-webhook
      tag: v1.10.0
    cainjectorImage:
      repo: quay.io/jetstack/cert-manager-cainjector
      tag: v1.10.0
  clusterAutoscaler:
    chartPath: /etc/helm/aws-cluster-auto-scaler/
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-autoscaler
      tag: v1.25.0
  operator:
    advancedStatefulset:
      name: gcr.io/pingcap-public/dbaas/advanced-statefulset:v0.8.0
    chartPath: /etc/helm/tidb-operator/tidb-operator-v1.7.0-alpha.5
    crdPaths:
      - /etc/helm/tidb-operator/advanced-statefulset-crd.v1.yaml
      - /etc/helm/tidb-operator/tidb-operator-v1.7.0-alpha.5.yaml
    operator:
      name: gcr.io/pingcap-public/dbaas/tidb-operator
      tag: v1.7.0-alpha.5
    tidbBackupManager:
      name: gcr.io/pingcap-public/dbaas/tidb-backup-manager
      tag: v1.7.0-alpha.5
    dbMonitorProm:
      name: gcr.io/pingcap-public/dbaas/prometheus
      tag: v2.11.1
    dbMonitorGrafana:
      name: gcr.io/pingcap-public/dbaas/grafana
      tag: 6.0.1
  proxy:
    enableDevMode: true
    chartPath: /etc/helm/proxy/cluster-proxy
    proxyImage:
      repo: gcr.io/pingcap-gardener/dbaas/dev/cluster-proxy
      tag: 8e26a88fe079e11d72fba6a029875a3bbc600f99
    gottyImage:
      repo: gcr.io/pingcap-public/dbaas/gotty
      tag: "20211103"
    allowedCidrs: [
        "44.232.56.92/32",
        "44.234.235.72/32",
        "34.208.168.149/32",
        "35.247.11.91/32",
        "35.227.151.128/32",
        "35.83.225.251/32",
      ] # global controlplane & regional controlplane NAT IPs
    auth0Audience: "staging-proxy-service"
    auth0Domain: "tidb-staging.us.auth0.com"
  clusterGateway:
    chartPath: /etc/helm/kong
    crdPaths:
      - /etc/helm/kong/crds/custom-resource-definitions.yaml
      - /etc/helm/kong/crds/gateway-api-crd-standard-install.yaml
    kongImage:
      repo: gcr.io/pingcap-public/third-party/kong/kong
      tag: "3.6"
    kongIngressControllerImage:
      repo: gcr.io/pingcap-public/third-party/kong/kubernetes-ingress-controller
      tag: "3.1"
    allowedCidrs: [
        "44.232.56.92/32",
        "44.234.235.72/32",
        "34.208.168.149/32",
        "35.247.11.91/32",
        "35.227.151.128/32",
        "35.83.225.251/32",
        "44.245.243.63/32", # devops-server
      ] # global controlplane & regional controlplane NAT IPs
  dataflowAgent:
    chartPath: /etc/helm/dataflow-agent/dataflow-agent.tgz
    dataflowAgentImage:
      repo: gcr.io/pingcap-gardener/dbaas/dev/dataflow-agent
      tag: 2e7d5f5a1fc88872a0a8ee62e581d7e6a7b2ae4f
    allowedCidrs: [
        "44.232.56.92/32",
        "44.234.235.72/32",
        "34.208.168.149/32",
        "35.247.11.91/32",
        "35.227.151.128/32",
      ] # global controlplane & regional controlplane NAT IPs
  tiflowOperator:
    chartPath: /etc/helm/tiflow-operator/tiflow-operator.tgz
    crdPaths:
      - /etc/helm/tiflow-operator/tiflow-operator/crds/pingcap.com_tiflowclusters.yaml
    tiflowOperatorImage:
      repo: gcr.io/pingcap-public/tidbcloud/tiflow-operator
      tag: 9ab11c525e3693cc92199e344f0f394233800821
    enable: true
  pcaIssuer:
    chartPath: /etc/helm/pca-issuer/aws-privateca-issuer-1.2.0-fixed.tgz
    crdPaths:
      - /etc/helm/pca-issuer/aws-pca-issuer-crd.yaml
      - /etc/helm/pca-issuer/aws-pca-clusterissuer-crd.yaml
    image:
      # TODO(tennix): this used a fork version of aws-pca-issuer https://github.com/tidbcloud/aws-pca-issuer
      # We need to update to the upstream version
      repo: gcr.io/pingcap-public/dbaas/aws-pca-issuer
      # we should use v1.2.2
      tag: v1.2.2
  sliReporter:
    chartPath: /etc/helm/sli-reporter/sli-reporter.tgz
    image:
      repo: gcr.io/pingcap-gardener/dbaas/dev/sli-reporter
      tag: 2e60ffa57c2e61df290fa826b8e954f56afae1a8
    awsRegion: us-west-2
    deliveryStreamName: "sli-dev-metrics"
    deliveryStreamRoleArn: "arn:aws:iam::552185537300:role/sli-cross-account-role"
  region: us-west1
  zones:
    - us-west1-a
    - us-west1-b
    - us-west1-c
  apiserverPublicAccessCidrs: ["0.0.0.0/0"]
  o11yConfig:
    env: staging
    seedVectorURL: "http://seed-us-west-2-vector-aggregator.staging.shared.aws.tidbcloud.com:9090"
    seedVectorEpSvcName: com.amazonaws.vpce.us-west-2.vpce-svc-001d51b454af1437b
    infraTenantID: infra-staging
    openAPIAddress: https://www.gs.us-west-2.aws.observability.tidbcloud.com
    createO11yInfraPath: /api/v1/clusters
    deleteO11yInfraPath: /api/v1/clusters
    getO11yInfraPath: /api/v1/clusters
    pauseO11yInfraPath: /api/v1/clusters
    resumeO11yInfraPath: /api/v1/clusters
    auth0GetTokenURL: https://tidb-soc2.us.auth0.com/oauth/token
    auth0Audience: https://tidb-soc2.us.auth0.com/api/v2/
    effectiveRegion:
      - aws-us-west-2-*
      - aws-eu-central-1-*
      - aws-ap-south-1-*
      - aws-ap-southeast-1-*
      - aws-ap-northeast-1-*
      - aws-ap-northeast-2-*
      - aws-us-east-1-*
      - gcp-us-west1-*
      - gcp-asia-east1-*
      - gcp-us-central1-*
      - gcp-asia-northeast1-*
      - gcp-asia-southeast1-*
      - gcp-asia-northeast2-*
    lokiServerDns: a8412cffa65054b32820b520f6906224-258512369.us-west-2.elb.amazonaws.com
    version: 20221126
    eventExporter:
      image:
        repo: gcr.io/pingcap-public/third-party/resmoio/kubernetes-event-exporter
        tag: v1.0
      chartPath: /etc/helm/event-exporter/event-exporter.tgz
    metricsAgent:
      image:
        repo: victoriametrics/vmagent
        tag: v1.78.0
      chartPath: /etc/helm/vmagent/victoria_metrics_agent.tgz
    clusterAgent:
      image:
        repo: gcr.io/pingcap-public/dbaas/vector
        tag: 0.23.X-2-debian
    logAgent:
      image:
        repo: gcr.io/pingcap-public/dbaas/vector
        tag: 0.23.X-2-debian
      chartPath: /etc/helm/vector/vector.tgz
    loki:
      image:
        repo: gcr.io/pingcap-public/fluent-bit-plugin-loki
        tag: main-8c1095a55-1.8.15-final-multi-arch
      chartPath: /etc/helm/fluent-bit
    so11y:
      image:
        repo: prom/prometheus
        tag: v2.38.0
      chartPath: /etc/helm/prometheus/prometheus.tgz
  kubeStateMetrics:
    chartPath: /etc/helm/kube-state-metrics/kube-state-metrics.tgz
    image:
      registry: registry.k8s.io
      repo: kube-state-metrics/kube-state-metrics
      tag: v2.10.0
  nodeExporter:
    chartPath: /etc/helm/node-exporter/node-exporter.tgz
    image:
      registry: quay.io
      repo: prometheus/node-exporter
      tag: v1.6.1
# sentry:
#   dsn: https://e85c9a30f8b54ae39ecf4a7b63dea760@o226447.ingest.sentry.io/6688512
#   env: staging
mixedDeployPDWithTiKV:
  enabled: true
  affectClusterCreatedAfter: "2022-11-03T00:00:00Z"
  affectNamespaceAllowList: [all]
tiflowCluster:
  master:
    defaultSpecCode: master-share-2c2g
    expirationMinute: 120
    shareDb:
      enableProxy: true
      proxyImage: "gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.1.0"
      serviceName: "tidbcloud-dp-dev-000:us-west1:tiflow-dev-us-west1-0dd9829"
      port: 3306
      user: dataflow
      password:
    imageConfig:
      repo: gcr.io/pingcap-public/tidbcloud/tiflow
      tag: de06be9be58e3f78564b4b37f94ee72206300762
  executor:
    imageConfig:
      repo: gcr.io/pingcap-public/tidbcloud/tiflow
      tag: de06be9be58e3f78564b4b37f94ee72206300762
configServiceEndpoint: http://abc985fe5fbd54df88a9d7f474fd5b84-866333859.us-west-2.elb.amazonaws.com:8090
storageClassConfigFile: /etc/cluster-controller/storageclass/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/instancetype/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: gke
    cloud.pingcap.com/region: us-west1
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: staging
  publicHostedZoneDomain: clusters.staging.tidb-cloud.com
  publicHostedZoneID: Z00154202ZKX8EDHH1I3T
  serviceRoleARN: "arn:aws:iam::385595570414:role/full-manager-eks-role"
  serviceRoleName: "full-manager-eks-role"
  assumeRoleARN: "arn:aws:iam::385595570414:role/full-manager-service-role"
  componentPCAARN: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
  assumeRoleExternalID: "123"
  gcpProjectID: pingcap-gardener
  gcpClusterServerSAName: "staging-cluster-server"
featureGates:
  network_hibernation:
    all: true
    disabledProjects:
      - 99999999
      - 1369847559693197287 # QA-TestInfra-New
      - 1369847559693797288 # QA-Scalability-Test
      - 1369847559692807289 # QA-TestInfra-AutoTest-EKS-GKE
  tidb_add_index:
    all: true
  tidb_expose_oom_path_for_new_cluster:
    all: true
  tidb_expose_oom_path_for_existing_cluster:
    all: false
  tidb_expose_replayer_path_for_new_cluster:
    all: true
  tidb_expose_replayer_path_for_existing_cluster:
    all: false
  o11y_deploy_crd:
    all: true
  o11y_deploy_crd_tiflow:
    all: true
  tls_cluster:
    all: true
  tidb_enable_audit_log:
    all: true
  tidb_enable_bootstrap_sql:
    all: true
  extend_gke_cidr_per_node_to_16:
    all: false
    enabledProjects: [1369847559691487325, 1369847559692807289]
  tidb_monitor_disabled:
    all: true
  disable_gke_logging:
    all: true
  disable_gke_monitoring:
    all: true
  independent_config_change:
    all: true
    disabledTenants:
      - 1369847559691367379 # QA-Perf-Test-1
      - 1369847559691367400 # QA-DBass-POC-Auto
      - 1369847559691367419 # test-infra
  enable_dp_compatibility_mode:
    all: true
  scale_out_tidb_in_parallel:
    all: true
  set_priority_class:
    all: true
expFeatureGates:
  - name: "AnalyzeVersion2"
    minSupportVersion: "v6.5.0"
    command: "SET GLOBAL tidb_analyze_version=2;"
    featureGate:
      all: true
      enabledProjects: []
      enabledTenants: []
      disabledProjects: []
      disabledTenants: []
  - name: "ColumnTracking"
    minSupportVersion: "v5.4.0"
    command: "SET GLOBAL tidb_enable_column_tracking=ON;"
    featureGate:
      all: true
      enabledProjects: []
      enabledTenants: []
      disabledProjects: []
      disabledTenants: []
  - name: "OnlyFullGroupByCheck"
    minSupportVersion: "v6.1.0"
    command: "SET GLOBAL tidb_enable_new_only_full_group_by_check=ON;"
    featureGate:
      all: true
      enabledProjects: []
      enabledTenants: []
      disabledProjects: []
      disabledTenants: [1369847559691367379]
  - name: "MemQuotaStatsCache"
    minSupportVersion: "v6.2.0"
    command: "SET GLOBAL tidb_stats_cache_mem_quota=2147483648;"
    featureGate:
      all: true
      enabledProjects: []
      enabledTenants: []
      disabledProjects: []
      disabledTenants: []
  - name: "RuntimeFilterMode"
    minSupportVersion: "v7.3.0"
    command: "SET GLOBAL tidb_runtime_filter_mode=LOCAL;"
    featureGate:
      all: true
      enabledProjects: []
      enabledTenants: []
      disabledProjects: []
      disabledTenants: []
maxConcurrentReconciles:
  network: 10
  cluster: 10
  networkPeer: 10
  clusterNodeProtector: 10
  eksConnection: 10
  frpServer: 10
  privateLink: 10
  privateLinkEndpoint: 10
hibernation:
  enabled: true
  idleTimeThreshold: "30m"
dpCompatEnv: staging