regions:
  ap-east-1:
    account:
      aws-role: arn:aws:iam::557537366020:role/auto-deploy-cli
    cloud-provider: aws
    region: ap-east-1
    k8s:
      name: o11y-prod-regional-ap-east-1
      version: "1.30"
      oidc-issuer: https://oidc.eks.ap-east-1.amazonaws.com/id/50454306E9BB46671FACCD4B9E9C17FA
      endpoint: https://50454306E9BB46671FACCD4B9E9C17FA.sk1.ap-east-1.eks.amazonaws.com
      public-ips:
        - 43.199.128.33
      addons:
        - attachPolicyARNs:
            - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
          configurationValues: "{ \"env\": { \"ENABLE_PREFIX_DELEGATION\": \"true\"\n} } "
          name: vpc-cni
          version: latest
        - name: coredns
          version: latest
        - name: kube-proxy
          version: latest
        - name: aws-ebs-csi-driver
          version: latest
          wellKnownPolicies:
            ebsCSIController: true
      admin-roles:
        - cicd-role
        - autonomous-oncall
      node-groups:
        - amiFamily: Bottlerocket
          availabilityZones:
            - ap-east-1a
          desiredCapacity: 3
          iam:
            attachPolicyARNs:
              - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
              - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
              - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
              - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
              - arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
              - arn:aws:iam::557537366020:policy/autonomous-o11y-rs-data
              - arn:aws:iam::557537366020:policy/autonomous-o11y-rs-control
          instanceType: r6i.2xlarge
          labels:
            node_type: worker
          maxPodsPerNode: 110
          maxSize: 10
          name: worker
          privateNetworking: true
      tags:
        servicetype: o11y
        tenant: admin
        usedby: o11y-region-control
      template-path: etc/k8s-templates/eks-v1.yaml
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: Single
        publicAccessCIDRs:
          - 0.0.0.0/0
    latest-run-id: "11093463120"
    output-bucket: prod-ap-east-1-auto-deploy-o11y-6020
    job-path: etc/deploy-jobs/o11y-aws-region-control
    job-outputs:
      agent-controller:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/agent-controller/11093463120-output.yaml
      basic-addon:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/basic-addon/11093463120-output.yaml
      basic-iam:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/basic-iam/11093463120-output.yaml
      basic-ingress:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/basic-ingress/11093463120-output.yaml
      basic-nodegroup:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/basic-nodegroup/11093463120-output.yaml
      basic-validate:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/basic-validate/11093463120-output.yaml
      dataplane:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/dataplane/11093463120-output.yaml
      infra:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/infra/11093463120-output.yaml
      regional-server:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/regional-sever/11093463120-output.yaml
      register-jump-server-dst:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/register-jump-server-dst/11093463120-output.yaml
      register-region-global:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/register-region-global/11093463120-output.yaml
      register-region-meta:
        version: v1
        output: s3://prod-ap-east-1-auto-deploy-o11y-6020/register-region-meta/11093463120-output.yaml
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::143458967504:role/auto-deploy-cli
      - aws-role: arn:aws:iam::730335266318:role/auto-deploy-cli
    image-registry: 557537366020.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      jumpServer:
        enabled: true
        role: arn:aws:iam::557537366020:role/jump-service-role
      o11y:
        elbAccountIdForS3BucketPolicy: "754344448648"
        nlbAllowedPrincipals:
          - arn:aws:iam::143458967504:root
          - arn:aws:iam::730335266318:root
          - arn:aws:iam::380838443567:root
          - arn:aws:iam::385595570414:root
        zone: ap-east-1a