- templateId: k8s-dedicated-template-v1 # template version string
  default: true
  supportedVersions:
    - "1.34.3-aliyun.1"
    - "1.36.1-aliyun.1"
    - "1.36.2-aliyun.1"
    - "1.34.1-aliyun.1"
  tidbOperatorV2:
    releaseName: tidb-operator-v2
    namespace: tidb-admin
    helmValues:
      image:
        repository: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/tidb-operator
        tag: v2.2.0-alpha.7
      args:
        - --backup-manager-image=tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/tidb-backup-manager:v2.2.0-alpha.7
      resources:
        limits:
          cpu: "2"
          memory: 2Gi
        requests:
          cpu: 80m
          memory: 50Mi
    chartPath: /etc/helm/tidb-operator-v2/
    crdVersion: v2.2.0-alpha.7
  clusterProxy:
    chartPath: /etc/helm/proxy/cluster-proxy
    releaseName: proxy
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      env:
        - name: AUTH0-AUDIENCE
          value: prod-proxy-service
        - name: AUTH0-DOMAIN
          value: tidb.auth0.com
      image:
        repository: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/cluster-proxy
        tag: v1.2.57
      gotty:
        repository: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/gotty
        tag: "20211103"
      service:
        type: ClusterIP
        loadBalancerSourceRanges: []
      ingress:
        enabled: true
      resources:
        limits:
          cpu: 500m
          memory: 256Mi
        requests:
          cpu: 20m
          memory: 80Mi
      deployment:
        proxyArgs:
          enableDevMode: true
  serviceProxy:
    chartPath: /etc/helm/service-proxy
    releaseName: service-proxy
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      image:
        repository: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/service-proxy
        tag: v0.7.0
      ingress:
        enabled: true
        paths:
          - path: /@/proxy/cluster/\d+/(pd|tibr|ticdc|dm|tidb-worker)(/.*)?
      resources:
        limits:
          memory: 256Mi
        requests:
          cpu: 10m
          memory: 20Mi
  clusterGateway:
    namespace: tidb-admin
    chartPath: /etc/helm/kong
    crdPaths:
      - /etc/helm/kong/crds/custom-resource-definitions.yaml
      - /etc/helm/kong/crds/gateway-api-crd-standard-install.yaml
    helmValues:
      image:
        repository: docker.io/library/kong
        tag: "3.6"
      ingressController:
        image:
          repository: docker.io/kong/kubernetes-ingress-controller
          tag: "3.1"
      replicaCount: 2
      admin:
        enabled: true
        http:
          enabled: true
        type: ClusterIP
      proxy:
        enabled: true
        type: ClusterIP
  ngAutoScaler:
    chartPath: /etc/helm/ng-autoscaler
    releaseName: ng-autoscaler
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      autoScalerImage: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/ng-autoscaler:release-v0.25.0-c8d8bbb2598e3fafe3cb62c23fe04a01aae06b43
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 100m
          memory: 80Mi
  sliReporter:
    chartPath: /etc/helm/sli-reporter/sli-reporter
    releaseName: reporter
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      image:
        repository: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com/tidbcloud/sli-reporter
        tag: v2.4.0
      aws:
        region: us-west-2
        deliveryStreamName: sli-prod-metrics
        deliveryStreamRoleArn: arn:aws:iam::557537366020:role/sli-cross-account-role
      resources:
        limits:
          cpu: 500m
          memory: 1Gi
        requests:
          cpu: 100m
          memory: 80Mi
      podSecurityContext:
        fsGroup: 2000
      securityContext:
        runAsGroup: 2000
        runAsUser: 1000
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        privileged: false
        capabilities:
          drop:
            - NET_RAW