regions:
  ap-east-1:
    account:
      aws-role: arn:aws:iam::552185537300:role/auto-deploy-cli
    cloud-provider: aws
    region: ap-east-1
    k8s:
      name: o11y-staging-regional-ap-east-1
      version: "1.30"
      oidc-issuer: https://oidc.eks.ap-east-1.amazonaws.com/id/BDECAF5F03CA4409B98681B0787DD161
      endpoint: https://BDECAF5F03CA4409B98681B0787DD161.yl4.ap-east-1.eks.amazonaws.com
      public-ips:
        - 16.162.179.160
      addons:
        - attachPolicyARNs:
            - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
          configurationValues: "{ \"env\": { \"ENABLE_PREFIX_DELEGATION\": \"true\"\n} } "
          name: vpc-cni
          version: latest
        - name: coredns
          version: latest
        - name: kube-proxy
          version: latest
        - name: aws-ebs-csi-driver
          version: latest
          wellKnownPolicies:
            ebsCSIController: true
      admin-roles:
        - autonomous-cent-stor-dev
        - cicd-role
        - autonomous-o11y-sre
        - autonomous-oncall
      node-groups:
        - amiFamily: Bottlerocket
          availabilityZones:
            - ap-east-1a
          desiredCapacity: 3
          iam:
            attachPolicyARNs:
              - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
              - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
              - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
              - arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore
              - arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
              - arn:aws:iam::552185537300:policy/autonomous-o11y-rs-data
              - arn:aws:iam::552185537300:policy/autonomous-o11y-rs-control
          instanceType: m5.large
          labels:
            node_type: worker
          maxPodsPerNode: 110
          maxSize: 10
          name: worker
          privateNetworking: true
      tags:
        servicetype: o11y
        tenant: admin
        usedby: o11y-region-control
      template-path: etc/k8s-templates/eks-v1.yaml
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: Single
        publicAccessCIDRs:
          - 0.0.0.0/0
    latest-run-id: "11398718560"
    output-bucket: staging-auto-deploy-o11y-7300
    job-path: etc/deploy-jobs/o11y-aws-region-control
    job-outputs: {}
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::385595570414:role/auto-deploy-cli
      - aws-role: arn:aws:iam::200683210682:role/auto-deploy-cli
    image-registry: 552185537300.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      jumpServer:
        enabled: true
        role: arn:aws:iam::552185537300:role/jump-service-role
      o11y:
        elbAccountIdForS3BucketPolicy: "754344448648"
        nlbAllowedPrincipals:
          - arn:aws:iam::385595570414:root
          - arn:aws:iam::385595570414:role/root
        zone: ap-east-1a