regions:
  ap-east-1:
    account:
      aws-role: arn:aws:iam::552185537300:role/auto-deploy-cli
    cloud-provider: aws
    region: ap-east-1
    k8s:
      name: o11y-dev-regional-ap-east-1
      version: "1.30"
      oidc-issuer: https://oidc.eks.ap-east-1.amazonaws.com/id/B43D5D07C2241BCCABCFC73F8C739B8B
      endpoint: https://B43D5D07C2241BCCABCFC73F8C739B8B.sk1.ap-east-1.eks.amazonaws.com
      public-ips:
        - 43.199.174.25
      addons:
        - attachPolicyARNs:
            - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
          configurationValues: |
            env:
              ENABLE_PREFIX_DELEGATION: "true"
          name: vpc-cni
          version: v1.18.5-eksbuild.1
        - name: coredns
          version: v1.11.3-eksbuild.1
        - name: kube-proxy
          version: v1.30.3-eksbuild.9
        - configurationValues: |
            controller: # set extral tags on pvc
              extraVolumeTags:
                environment: dev
                servicetype: o11y
                usedby: o11y-region-control
                tenant: admin
          name: aws-ebs-csi-driver
          version: v1.36.0-eksbuild.1
          wellKnownPolicies:
            ebsCSIController: true
      admin-roles:
        - autonomous-cent-stor-dev
        - cicd-role
        - autonomous-o11y-sre
        - autonomous-oncall
      node-groups:
        - amiFamily: Bottlerocket
          availabilityZones:
            - ap-east-1a
          desiredCapacity: 3
          iam:
            attachPolicyARNs:
              - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
              - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
              - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
              - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
              - arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
              - arn:aws:iam::552185537300:policy/autonomous-o11y-rs-data
              - arn:aws:iam::552185537300:policy/autonomous-o11y-rs-control
          instanceType: r6i.2xlarge
          labels:
            node_type: worker
          maxPodsPerNode: 110
          maxSize: 10
          name: worker
          privateNetworking: true
      tags:
        environment: dev
        servicetype: o11y
        tenant: admin
        usedby: o11y-region-control
      template-path: etc/k8s-templates/eks-v1.yaml
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: Single
        publicAccessCIDRs:
          - 0.0.0.0/0
    latest-run-id: "11626638415"
    output-bucket: dev-auto-deploy-o11y-7300
    job-path: etc/deploy-jobs/o11y-aws-region-control
    job-outputs:
      agent-controller:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/agent-controller/11626638415-output.yaml
      basic-addon:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-addon/11626638415-output.yaml
      basic-iam:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-iam/11626638415-output.yaml
      basic-ingress:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-ingress/11626638415-output.yaml
      basic-nodegroup:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-nodegroup/11626638415-output.yaml
      basic-validate:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-validate/11626638415-output.yaml
      dataplane:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/dataplane/11626638415-output.yaml
      infra:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/infra/11626638415-output.yaml
      regional-server:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/regional-sever/11626638415-output.yaml
      register-jump-server-dst:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/register-jump-server-dst/11626638415-output.yaml
      register-region-global:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/register-region-global/11626638415-output.yaml
      register-region-meta:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/register-region-meta/11626638415-output.yaml
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::024848481520:role/auto-deploy-cli
    image-registry: 552185537300.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      jumpServer:
        enabled: true
        role: arn:aws:iam::552185537300:role/jump-service-role
      o11y:
        elbAccountIdForS3BucketPolicy: "754344448648"
        nlbAllowedPrincipals:
          - arn:aws:iam::024848481520:root
        zone: ap-east-1a
  ap-northeast-1:
    account:
      aws-role: arn:aws:iam::552185537300:role/auto-deploy-cli
    cloud-provider: aws
    region: ap-northeast-1
    k8s:
      name: o11y-dev-regional-ap-northeast-1
      version: "1.30"
      oidc-issuer: https://oidc.eks.ap-northeast-1.amazonaws.com/id/60584A0A1045740779FF8651E109A46F
      endpoint: https://60584A0A1045740779FF8651E109A46F.sk1.ap-northeast-1.eks.amazonaws.com
      public-ips:
        - 52.196.218.15
      addons:
        - attachPolicyARNs:
            - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
          configurationValues: "{ \"env\": { \"ENABLE_PREFIX_DELEGATION\": \"true\"\n} } "
          name: vpc-cni
          version: latest
        - name: coredns
          version: latest
        - name: kube-proxy
          version: latest
        - name: aws-ebs-csi-driver
          version: latest
          wellKnownPolicies:
            ebsCSIController: true
      admin-roles:
        - autonomous-cent-stor-dev
        - cicd-role
        - autonomous-o11y-sre
        - autonomous-oncall
      node-groups:
        - amiFamily: Bottlerocket
          availabilityZones:
            - ap-northeast-1a
          desiredCapacity: 3
          iam:
            attachPolicyARNs:
              - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
              - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
              - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
              - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
              - arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
              - arn:aws:iam::552185537300:policy/autonomous-o11y-rs-data
              - arn:aws:iam::552185537300:policy/autonomous-o11y-rs-control
          instanceType: m5.large
          labels:
            node_type: worker
          maxPodsPerNode: 110
          maxSize: 10
          name: worker
          privateNetworking: true
      tags:
        servicetype: o11y
        tenant: admin
        usedby: o11y-region-control
      template-path: etc/k8s-templates/eks-v1.yaml
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: Single
        publicAccessCIDRs:
          - 0.0.0.0/0
    latest-run-id: "11085172648"
    output-bucket: dev-auto-deploy-o11y-7300
    job-path: etc/deploy-jobs/o11y-aws-region-control
    job-outputs:
      agent-controller:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/agent-controller/11085172648-output.yaml
      basic-addon:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-addon/11085172648-output.yaml
      basic-iam:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-iam/11085172648-output.yaml
      basic-ingress:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-ingress/11085172648-output.yaml
      basic-nodegroup:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-nodegroup/11085172648-output.yaml
      basic-validate:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/basic-validate/11085172648-output.yaml
      dataplane:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/dataplane/11085172648-output.yaml
      infra:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/infra/11085172648-output.yaml
      regional-server:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/regional-sever/11085172648-output.yaml
      register-jump-server-dst:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/register-jump-server-dst/11085172648-output.yaml
      register-region-global:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/register-region-global/11085172648-output.yaml
      register-region-meta:
        version: v1
        output: s3://dev-auto-deploy-o11y-7300/register-region-meta/11085172648-output.yaml
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::385595570414:role/auto-deploy-cli
      - aws-role: arn:aws:iam::200683210682:role/auto-deploy-cli
    image-registry: 552185537300.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      jumpServer:
        enabled: true
        role: arn:aws:iam::552185537300:role/jump-service-role
      o11y:
        elbAccountIdForS3BucketPolicy: "582318560864"
        nlbAllowedPrincipals:
          - arn:aws:iam::385595570414:root
          - arn:aws:iam::385595570414:role/root
        zone: ap-northeast-1a