provider: eks resourceTaggerConfig: enabled: true regionConfig: logicalRegionName: ap-southeast-2-ng name: ap-southeast-2 zones: - ap-southeast-2a - ap-southeast-2c - ap-southeast-2b env: staging dnsProviderConfig: provider: awsRoute53 awsRoute53: accountID: 380838443567 roleArn: arn:aws:iam::380838443567:role/prod-ap-southeast-2-ng-dataplane-manager zoneId: Z09521541042LFILW1KL4 domain: clusters.tidb-cloud.com namespace: dataplane-metadata appBoxConfig: disableClusterProxy: true pcaConfig: caIdentifier: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ca67c3ab-ec4b-44ba-974e-97d6b88e7e26 region: us-west-2 serviceRoleName: tidbcloud-eks-service-role nodeConfig: capacityType: ON_DEMAND adminNodesAMIType: BOTTLEROCKET_x86_64 systemVolumeSize: 100 adminNodeConfig: amiType: BOTTLEROCKET_x86_64 systemVolumeSize: 100 instanceType: t3.medium minSize: 3 maxSize: 10 workerNodeConfig: systemVolumeSize: 100 nodePools: - instanceType: m8g.large amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 2 availableCpu: 1 availableCpuMilli: 1480 maxCpuMilli: 1930 memoryGi: 8 availableMemoryMi: 6488 maxMemoryMi: 6488 - instanceType: m8g.xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 4 availableCpu: 3 availableCpuMilli: 3470 maxCpuMilli: 3920 memoryGi: 16 availableMemoryMi: 14079 maxMemoryMi: 14079 - instanceType: m8g.2xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 8 availableCpu: 7 availableCpuMilli: 7460 maxCpuMilli: 7910 memoryGi: 32 availableMemoryMi: 29899 maxMemoryMi: 29899 - instanceType: m8g.4xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 16 availableCpu: 15 availableCpuMilli: 15440 maxCpuMilli: 15890 memoryGi: 64 availableMemoryMi: 60966 maxMemoryMi: 60966 - instanceType: m8g.8xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 32 availableCpu: 31 availableCpuMilli: 31400 maxCpuMilli: 31850 memoryGi: 128 availableMemoryMi: 122978 maxMemoryMi: 122978 - instanceType: m8g.16xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 64 availableCpu: 63 availableCpuMilli: 63320 maxCpuMilli: 63770 memoryGi: 256 availableMemoryMi: 249457 maxMemoryMi: 249457 - instanceType: r8g.xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 4 availableCpu: 3 availableCpuMilli: 3470 maxCpuMilli: 3920 memoryGi: 32 availableMemoryMi: 29899 maxMemoryMi: 29899 - instanceType: r8g.2xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 8 availableCpu: 7 availableCpuMilli: 7460 maxCpuMilli: 7910 memoryGi: 64 availableMemoryMi: 61539 maxMemoryMi: 61539 - instanceType: r8g.4xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 16 availableCpu: 15 availableCpuMilli: 15440 maxCpuMilli: 15890 memoryGi: 128 availableMemoryMi: 124344 maxMemoryMi: 124344 - instanceType: r8g.8xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 32 availableCpu: 31 availableCpuMilli: 31400 maxCpuMilli: 31850 memoryGi: 256 availableMemoryMi: 249637 maxMemoryMi: 249637 - instanceType: c8g.large amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 2 availableCpu: 1 availableCpuMilli: 1480 maxCpuMilli: 1930 memoryGi: 4 availableMemoryMi: 2532 maxMemoryMi: 2532 - instanceType: c8g.xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 4 availableCpu: 3 availableCpuMilli: 3470 maxCpuMilli: 3920 memoryGi: 8 availableMemoryMi: 6169 maxMemoryMi: 6169 - instanceType: c8g.2xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 8 availableCpu: 7 availableCpuMilli: 7460 maxCpuMilli: 7910 memoryGi: 16 availableMemoryMi: 14078 maxMemoryMi: 14078 - instanceType: c8g.4xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 16 availableCpu: 15 availableCpuMilli: 15440 maxCpuMilli: 15890 memoryGi: 32 availableMemoryMi: 29326 maxMemoryMi: 29326 - instanceType: c8g.8xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 32 availableCpu: 31 availableCpuMilli: 31400 maxCpuMilli: 31850 memoryGi: 64 availableMemoryMi: 59600 maxMemoryMi: 59600 - instanceType: c8g.16xlarge amiType: BOTTLEROCKET_ARM_64 systemVolumeSize: 100 cpu: 64 availableCpu: 63 availableCpuMilli: 63320 maxCpuMilli: 63770 memoryGi: 128 availableMemoryMi: 122798 maxMemoryMi: 122798 k8sVersion: "1.36" enableK8sPublicAccess: true apiserverPublicAccessCidrs: - 54.185.150.209/32 - 54.188.27.23/32 - 44.231.162.131/32 - 100.20.198.224/32 - 35.82.108.84/32 - 13.210.230.102/32 apiGateway: enablePublicAccess: true publicAccessCidrs: - 54.188.27.23/32 - 44.231.162.131/32 - 100.20.198.224/32 - 35.82.108.84/32 - 13.210.230.102/32 - 52.41.43.61/32 authorizedSubjects: - arn:aws:iam::557537366020:role/devops-server-prod - arn:aws:iam::380838443567:role/prod-ap-southeast-2-ng-dataplane-manager - arn:aws:iam::632330501419:role/tidbcloud-dataplane-manager-assumed-role nodeUserDataConfig: /etc/configs/node-userdata-config.toml localDiskNodeUserDataConfig: /etc/configs/local-disk-node-userdata-config.toml adminNodeRoleConfig: roleName: tidbcloud-eks-node-role loadBalancerControllerPolicyTemplateFile: /etc/configs/load-balancer-controller-policy-template.json # See https://docs.aws.amazon.com/eks/latest/best-practices/cas.html#_employ_least_privileged_access_to_the_iam_role clusterAutoscalerPolicyTemplateFile: /etc/configs/cluster-autoscaler-policy-template.json # See https://github.com/cert-manager/aws-privateca-issuer#configuration certManagerPolicyTemplateFile: /etc/configs/cert-manager-policy-template.json # all tidb cluster components, including br, cdc, data import, auditlog etc tidbClusterPolicyTemplateFile: /etc/configs/tidb-cluster-policy-template.json # o11y agent includes vector, sli-reporter o11yAgentPolicyTemplateFile: /etc/configs/o11y-agent-policy-template.json managedPolicies: - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy" - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly" - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy" - "arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy" # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail. - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore" o11yBizType: prod-tidbcloud-nextgen predicate: matchExpressions: - key: "cloud.pingcap.com/reconciler" operator: "NotIn" values: - e2e-test resourceNamePrefix: tidbcloud resourceLabels: cloud.pingcap.com/bizType: dedicated tags.tidbcloud.com/environment: prod tags.tidbcloud.com/usedby: dbaas-control-plane-shoot additionalCloudTags: ManagedBy: PingCAP controlPlaneCrossplaneProviderConfig: provider-aws dataPlaneRoleName: tidbcloud-dataplane-manager-assumed-role accountListPath: /etc/configs/account-list.yaml awsDataPlaneExternalID: ""