provider: eks
resourceTaggerConfig:
  enabled: true
regionConfig:
  logicalRegionName: use1-byoc-jpg-test
  name: us-east-1
  zones:
    - us-east-1a
    - us-east-1b
    - us-east-1c
  nodeZones:
    - us-east-1a # user side logic az in use1-az1
env: staging
dnsProviderConfig:
  provider: awsRoute53
  awsRoute53:
    accountID: 729581434105
    roleArn: arn:aws:iam::729581434105:role/tidbcloud-dataplane-manager-assumed-role
    zoneId: Z06034473KF340GO5KLIH
    domain: tidbkit.com
namespace: dataplane-metadata
internetConfig:
  enableECRInterfaceEndpoints: true
  ecrServiceRegion: "us-east-1"
appBoxConfig:
  disableClusterProxy: true
  pcaConfig:
    caIdentifier: arn:aws:acm-pca:us-east-1:729581434105:certificate-authority/19169232-2c76-40ba-b4eb-cacf258dfd36
    region: us-east-1
  serviceRoleName: tidbcloud-eks-service-role
  nodeConfig:
    capacityType: ON_DEMAND
    adminNodesAMIType: BOTTLEROCKET_x86_64
    systemVolumeSize: 100
  adminNodeConfig:
    amiType: BOTTLEROCKET_x86_64
    systemVolumeSize: 100
    instanceType: t3.medium
    minSize: 3
    maxSize: 10
  workerNodeConfig:
    systemVolumeSize: 100
  nodePools:
    - instanceType: m8g.large
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 2
      availableCpu: 1
      availableCpuMilli: 1480
      maxCpuMilli: 1930
      memoryGi: 8
      availableMemoryMi: 6488
      maxMemoryMi: 6488
    - instanceType: m8g.xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 4
      availableCpu: 3
      availableCpuMilli: 3470
      maxCpuMilli: 3920
      memoryGi: 16
      availableMemoryMi: 14079
      maxMemoryMi: 14079
    - instanceType: m8g.2xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 8
      availableCpu: 7
      availableCpuMilli: 7460
      maxCpuMilli: 7910
      memoryGi: 32
      availableMemoryMi: 29899
      maxMemoryMi: 29899
    - instanceType: m8g.4xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 16
      availableCpu: 15
      availableCpuMilli: 15440
      maxCpuMilli: 15890
      memoryGi: 64
      availableMemoryMi: 60966
      maxMemoryMi: 60966
    - instanceType: m8g.8xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 32
      availableCpu: 31
      availableCpuMilli: 31400
      maxCpuMilli: 31850
      memoryGi: 128
      availableMemoryMi: 122978
      maxMemoryMi: 122978
    - instanceType: m8g.16xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 64
      availableCpu: 63
      availableCpuMilli: 63320
      maxCpuMilli: 63770
      memoryGi: 256
      availableMemoryMi: 249457
      maxMemoryMi: 249457
    - instanceType: r8g.xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 4
      availableCpu: 3
      availableCpuMilli: 3470
      maxCpuMilli: 3920
      memoryGi: 32
      availableMemoryMi: 29899
      maxMemoryMi: 29899
    - instanceType: r8g.2xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 8
      availableCpu: 7
      availableCpuMilli: 7460
      maxCpuMilli: 7910
      memoryGi: 64
      availableMemoryMi: 61539
      maxMemoryMi: 61539
    - instanceType: r8g.4xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 16
      availableCpu: 15
      availableCpuMilli: 15440
      maxCpuMilli: 15890
      memoryGi: 128
      availableMemoryMi: 124344
      maxMemoryMi: 124344
    - instanceType: r8g.8xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 32
      availableCpu: 31
      availableCpuMilli: 31400
      maxCpuMilli: 31850
      memoryGi: 256
      availableMemoryMi: 249637
      maxMemoryMi: 249637
    - instanceType: c8g.large
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 2
      availableCpu: 1
      availableCpuMilli: 1480
      maxCpuMilli: 1930
      memoryGi: 4
      availableMemoryMi: 2532
      maxMemoryMi: 2532
    - instanceType: c8g.xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 4
      availableCpu: 3
      availableCpuMilli: 3470
      maxCpuMilli: 3920
      memoryGi: 8
      availableMemoryMi: 6169
      maxMemoryMi: 6169
    - instanceType: c8g.2xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 8
      availableCpu: 7
      availableCpuMilli: 7460
      maxCpuMilli: 7910
      memoryGi: 16
      availableMemoryMi: 14078
      maxMemoryMi: 14078
    - instanceType: c8g.4xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 16
      availableCpu: 15
      availableCpuMilli: 15440
      maxCpuMilli: 15890
      memoryGi: 32
      availableMemoryMi: 29326
      maxMemoryMi: 29326
    - instanceType: c8g.8xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 32
      availableCpu: 31
      availableCpuMilli: 31400
      maxCpuMilli: 31850
      memoryGi: 64
      availableMemoryMi: 59600
      maxMemoryMi: 59600
    - instanceType: c8g.16xlarge
      amiType: BOTTLEROCKET_ARM_64
      systemVolumeSize: 100
      cpu: 64
      availableCpu: 63
      availableCpuMilli: 63320
      maxCpuMilli: 63770
      memoryGi: 128
      availableMemoryMi: 122798
      maxMemoryMi: 122798
  k8sVersion: "1.36"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - 35.82.108.84/32
    - 44.231.162.131/32
    - 100.20.198.224/32
    - 54.188.27.23/32
    - 3.217.185.160/32
  apiGateway:
    enablePublicAccess: true
    publicAccessCidrs:
      - 44.231.162.131/32
      - 100.20.198.224/32
      - 54.188.27.23/32
      - 3.217.185.160/32
      - 52.41.43.61/32
  authorizedSubjects:
    - arn:aws:iam::380838443567:role/prod-use1-byoc-jpg-test-dataplane-manager
    - arn:aws:iam::380838443567:role/tidbcloud-dataplane-manager-assumed-role
  nodeUserDataConfig: /etc/configs/node-userdata-config.toml
  localDiskNodeUserDataConfig: /etc/configs/local-disk-node-userdata-config.toml
  adminNodeRoleConfig:
    roleName: tidbcloud-eks-node-role
    loadBalancerControllerPolicyTemplateFile: /etc/configs/load-balancer-controller-policy-template.json
    # See https://docs.aws.amazon.com/eks/latest/best-practices/cas.html#_employ_least_privileged_access_to_the_iam_role
    clusterAutoscalerPolicyTemplateFile: /etc/configs/cluster-autoscaler-policy-template.json
    # See https://github.com/cert-manager/aws-privateca-issuer#configuration
    certManagerPolicyTemplateFile: /etc/configs/cert-manager-policy-template.json
    # all tidb cluster components, including br, cdc, data import, auditlog etc
    tidbClusterPolicyTemplateFile: /etc/configs/tidb-cluster-policy-template.json
    # o11y agent includes vector, sli-reporter
    o11yAgentPolicyTemplateFile: /etc/configs/o11y-agent-policy-template.json
    managedPolicies:
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  o11yBizType: prod-tidbcloud-nextgen
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceNamePrefix: tidbcloud
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: prod
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
additionalCloudTags:
  ManagedBy: PingCAP
controlPlaneCrossplaneProviderConfig: provider-aws
dataPlaneRoleName: tidbcloud-dataplane-manager-assumed-role
accountListPath: /etc/configs/account-list.yaml
awsDataPlaneExternalID: ""
disableProxyProtocol: true
byoc:
  nodeRoleName: tidbcloud-eks-node-role
  privateLink:
    controlPlaneSecurityGroupIDs:
      - sg-0b88733edab2f207a
    controlPlaneSubnetIDs:
      - subnet-06caee4e24ceda1ac
      - subnet-009d46108850556e2
      - subnet-0c5f78d0c7858952f
    controlPlaneVPCID: vpc-08b3d725abd47f0fe
o11y:
  vpcCIDR: 10.1.0.0/16
  vpcID: vpc-04413b2a95578748a
  accountID: "729581434105"
  region: us-east-1