provider: aks
regionConfig:
  logicalRegionName: TMPL_LOGICAL_REGION
  name: TMPL_REGION
  zones:
    - TMPL_REGION-1
    - TMPL_REGION-2
    - TMPL_REGION-3
env: prod
dnsProviderConfig:
  provider: azureDNSZone
  azureDNSZone:
    subscriptionID: TMPL_CONTROL_PLANE_SUBSCRIPTION_ID
    tenantID: TMPL_AZURE_WORKLOAD_IDENTITY_TENANT_ID
    clientID: TMPL_AZURE_WORKLOAD_IDENTITY_CLIENT_ID
    resourceGroup: TMPL_HOSTED_ZONE_RESOURCE_GROUP
    domain: TMPL_PUBLIC_HOSTED_ZONE_DOMAIN
namespace: dataplane-metadata
appBoxConfig:
  disableClusterProxy: true
  pcaConfig:
    caIdentifier: TMPL_PCA_ARN
    region: us-west-2
  adminGroupObjectIDs:
    - 69500f83-4674-4aad-b082-7d95d93f8c2c
  nodeConfig:
    capacityType: ON_DEMAND
    adminNodesAMIType: BOTTLEROCKET_x86_64
    systemVolumeSize: 30
  adminNodeConfig:
    systemVolumeSize: 50
    instanceType: Standard_D2s_v6
    minSize: 2
    maxSize: 10
  workerNodeConfig:
    systemVolumeSize: 50
  nodePools:
    - instanceType: Standard_D2als_v7
      systemVolumeSize: 50
      cpu: 2
      availableCpu: 1
      availableCpuMilli: 1000
      maxCpuMilli: 1000
      memoryGi: 4
      availableMemoryMi: 3584
      maxMemoryMi: 3584
    - instanceType: Standard_D2ads_v7
      systemVolumeSize: 50
      cpu: 2
      availableCpu: 1
      availableCpuMilli: 1000
      maxCpuMilli: 1000
      memoryGi: 8
      availableMemoryMi: 7680
      maxMemoryMi: 7680
    - instanceType: Standard_D4als_v7
      systemVolumeSize: 50
      cpu: 4
      availableCpu: 3
      availableCpuMilli: 3000
      maxCpuMilli: 3000
      memoryGi: 8
      availableMemoryMi: 7680
      maxMemoryMi: 7680
    - instanceType: Standard_D4ads_v7
      systemVolumeSize: 50
      cpu: 4
      availableCpu: 3
      availableCpuMilli: 3000
      maxCpuMilli: 3000
      memoryGi: 16
      availableMemoryMi: 13208
      maxMemoryMi: 13208
    - instanceType: Standard_D8ads_v7
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      availableCpuMilli: 7000
      maxCpuMilli: 7000
      memoryGi: 32
      availableMemoryMi: 32256
      maxMemoryMi: 32256
    - instanceType: Standard_D8alds_v7
      systemVolumeSize: 50
      cpu: 8
      availableCpu: 7
      availableCpuMilli: 7000
      maxCpuMilli: 7000
      memoryGi: 16
      availableMemoryMi: 15872
      maxMemoryMi: 15872
    - instanceType: Standard_D16s_v6
      systemVolumeSize: 50
      cpu: 16
      availableCpu: 15
      availableCpuMilli: 15000
      maxCpuMilli: 15000
      memoryGi: 64
      availableMemoryMi: 65024
      maxMemoryMi: 65024
    - instanceType: Standard_E4s_v6
      systemVolumeSize: 100
      cpu: 4
      availableCpu: 3
      availableCpuMilli: 3000
      maxCpuMilli: 3000
      memoryGi: 32
      availableMemoryMi: 32256
      maxMemoryMi: 32256
    - instanceType: Standard_E8s_v6
      systemVolumeSize: 100
      cpu: 8
      availableCpu: 7
      availableCpuMilli: 7000
      maxCpuMilli: 7000
      memoryGi: 64
      availableMemoryMi: 65024
      maxMemoryMi: 65024
    - instanceType: Standard_E16s_v6
      systemVolumeSize: 100
      cpu: 16
      availableCpu: 15
      availableCpuMilli: 15000
      maxCpuMilli: 15000
      memoryGi: 128
      availableMemoryMi: 130560
      maxMemoryMi: 130560
    - instanceType: Standard_E32s_v6
      systemVolumeSize: 100
      cpu: 32
      availableCpu: 31
      availableCpuMilli: 31000
      maxCpuMilli: 31000
      memoryGi: 256
      availableMemoryMi: 261632
      maxMemoryMi: 261632
  k8sVersion: "1.36"
  enableK8sPublicAccess: true
  # add cidr list from deployment script
  apiserverPublicAccessCidrs:
  apiGateway:
    enablePublicAccess: true
    # add cidr list from deployment script
    publicAccessCidrs:
  nodeUserDataConfig: /etc/configs/node-userdata-config.toml
  localDiskNodeUserDataConfig: /etc/configs/local-disk-node-userdata-config.toml
  adminNodeRoleConfig:
    loadBalancerControllerPolicyTemplateFile: /etc/configs/load-balancer-controller-policy-template.json
    # See https://docs.aws.amazon.com/eks/latest/best-practices/cas.html#_employ_least_privileged_access_to_the_iam_role
    clusterAutoscalerPolicyTemplateFile: /etc/configs/cluster-autoscaler-policy-template.json
    # See https://github.com/cert-manager/aws-privateca-issuer#configuration
    certManagerPolicyTemplateFile: /etc/configs/cert-manager-policy-template.json
    # all tidb cluster components, including br, cdc, data import, auditlog etc
    tidbClusterPolicyTemplateFile: /etc/configs/tidb-cluster-policy-template.json
    # o11y agent includes vector, sli-reporter
    o11yAgentPolicyTemplateFile: /etc/configs/o11y-agent-policy-template.json
    managedPolicies:
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryPullOnly"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      - "arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
  o11yBizType: prod-tidbcloud-nextgen
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceNamePrefix: TMPL_RESOURCE_NAME_PREFIX
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: prod
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
additionalCloudTags:
  ManagedBy: PingCAP
controlPlaneCrossplaneProviderConfig: TMPL_CONTROL_PLANE_CROSSPLANE_PROVIDER_CONFIG
awsCrossplaneProviderConfig: TMPL_AWS_CROSSPLANE_PROVIDER_CONFIG
acrResourceGroup: TMPL_ACR_RESOURCE_GROUP
accountListPath: /etc/configs/account-list.yaml
disableProxyProtocol: TMPL_DISABLE_PROXY_PROTOCOL