- templateId: k8s-dp-template-v1 # template version string
  default: true
  supportedVersions:
    - "1.35"
    - "1.36"
    - "1.33"
    - "1.34"
  dataflowAgent:
    chartPath: /etc/helm/dataflow-agent/dataflow-agent
    releaseName: dataflow-agent
    namespace: tidb-admin
    helmValues:
      replicaCount: 1
      image:
        repository: 521909294940.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/dataflow-agent-ng
        tag: ng-agent-v20260825
      service:
        type: ClusterIP
        loadBalancerSourceRanges: []
      ingress:
        enabled: true
        plugins: auth-server,audit-kong
      resources:
        limits:
          cpu: "100m"
          memory: 2Gi
        requests:
          cpu: 20m
          memory: 80Mi
      podSecurityContext:
        fsGroup: 2000
      securityContext:
        runAsUser: 1000
        runAsGroup: 2000
        runAsNonRoot: true
        readOnlyRootFilesystem: true
        allowPrivilegeEscalation: false
        privileged: false
        capabilities:
          drop:
            - NET_RAW