regions:
  us-east-2-staging:
    account:
      aws-role: arn:aws:iam::380838443567:role/auto-deploy-cli
    cloud-provider: aws
    region: us-east-2
    k8s:
      name: prod-seed-us-east-2-staging
      template-path: etc/k8s-templates/eks-v1.yaml
      version: "1.30"
      oidc-issuer: https://oidc.eks.us-east-2.amazonaws.com/id/B33E20A9A68D9DF4D893625CF2F8AEFE
      endpoint: https://B33E20A9A68D9DF4D893625CF2F8AEFE.gr7.us-east-2.eks.amazonaws.com
      public-ips:
        - 13.58.93.227
        - 3.133.64.4
        - 3.21.48.136
      admin-roles:
        - cicd-role
        - argocd-oidc-role
        - bastion-5fddc83
        - dbaas-prod-devops
        - dbaas-central-role-prod
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: HighlyAvailable
        publicAccessCIDRs:
          - 54.185.150.209/32
          - 104.196.246.224/32
          - 35.233.250.206/32
          - 34.69.36.199/32
          - 35.80.240.167/32
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
      node-groups:
        - amiFamily: Bottlerocket
          desiredCapacity: 1
          instanceType: m5.large
          maxSize: 10
          name: worker
          privateNetworking: true
    latest-run-id: "10488811691"
    output-bucket: prod-auto-deploy-3567
    tf-state-bucket: prod-auto-deploy-tf-state-3567
    job-path: etc/deploy-jobs/aws-region-control
    job-outputs: {}
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::886436925895:role/auto-deploy-cli
    image-registry: 380838443567.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      clusterServer:
        clusterProxy:
          auth0Audience: prod-proxy-service
          auth0Domain: tidb.auth0.com
          enableDevMode: false
        configChange:
          activityClinicEp: https://clinic.pingcap.com
          activityEnabled: false
          activityHubEp: https://e4hr1v4oqh.execute-api.us-west-2.amazonaws.com
          activitySource: gitops
          env: prod
        fullManage:
          pcaArn: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
        secrets:
          clusterProxyAuth0SecretKey: prod-proxy-auth0-client
          configManagerAuthKey: prod-config-manager-account-xregion-auth-key
          configManagerClinicActivityKey: prod-config-manager-clinic-activity-key
          o11yAuth0SecretKey: prod-o11y-auth0-client
      dpProvider:
        disabled: true
        secretManager:
          apiGatewayKey: prod-dp-compat-xregion-auth-key
          infraAPIServerKey: prod-dedicated-infra-kubeconfig
        wafIpSetName: DBaas-Whitelist-For-Prod-Inner
      jumpServer:
        enabled: true
        role: arn:aws:iam::380838443567:role/dbaas-prod-devops
      regionalServer:
        auth0Audience: prod-proxy-service
        auth0Domain: tidb.auth0.com
        authorizedSubjects:
          - arn:aws:iam::380838443567:role/devops-server-prod
        availabilityZones: us-east-2a,us-east-2b,us-east-2c
        bastionIPs:
          - 54.185.150.209/32
        clinicIPs:
          - 52.41.43.61/32
        defaultDataplaneAccount: "886436925895"
        dnsName: us-east-2-staging.regional-api.prod.aws.tidbcloud.com
        globalControlplaneIPs:
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
        hostedZone: prod.aws.tidbcloud.com
        hostedZoneId: Z08648051F27XQI0DF51K
        loadBalancerHostedZoneId: ZLMOA37VPKANP
        o11yRegionalServiceEndpoint: https://www.rs.us-east-2.aws.observability.tidbcloud.com
        o11yRegionalServiceIPs: []
        publicHostedZoneDomain: clusters.tidb-cloud.com
        publicHostedZoneID: Z09521541042LFILW1KL4
    global-options:
      env: prod
  us-east-2-staging-0822:
    account:
      aws-role: arn:aws:iam::380838443567:role/auto-deploy-cli
    cloud-provider: aws
    region: us-east-2
    k8s:
      name: prod-seed-us-east-2-staging-0822
      template-path: etc/k8s-templates/eks-v1.yaml
      version: "1.30"
      oidc-issuer: https://oidc.eks.us-east-2.amazonaws.com/id/1AB864D7BCC76FC4F2F9B4A278F45269
      endpoint: https://1AB864D7BCC76FC4F2F9B4A278F45269.gr7.us-east-2.eks.amazonaws.com
      public-ips:
        - 18.216.120.106
        - 3.20.228.47
        - 52.15.158.229
      admin-roles:
        - cicd-role
        - argocd-oidc-role
        - bastion-5fddc83
        - dbaas-prod-devops
        - dbaas-central-role-prod
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: HighlyAvailable
        publicAccessCIDRs:
          - 54.185.150.209/32
          - 104.196.246.224/32
          - 35.233.250.206/32
          - 34.69.36.199/32
          - 35.80.240.167/32
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
      node-groups:
        - amiFamily: Bottlerocket
          desiredCapacity: 1
          instanceType: m5.large
          maxSize: 10
          name: worker
          privateNetworking: true
    latest-run-id: "10518816235"
    output-bucket: prod-auto-deploy-3567
    tf-state-bucket: prod-auto-deploy-tf-state-3567
    job-path: etc/deploy-jobs/aws-region-control
    job-outputs: {}
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::886436925895:role/auto-deploy-cli
    image-registry: 380838443567.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      clusterServer:
        clusterProxy:
          auth0Audience: prod-proxy-service
          auth0Domain: tidb.auth0.com
          enableDevMode: false
        configChange:
          activityClinicEp: https://clinic.pingcap.com
          activityEnabled: false
          activityHubEp: https://e4hr1v4oqh.execute-api.us-west-2.amazonaws.com
          activitySource: gitops
          env: prod
        fullManage:
          pcaArn: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
        secrets:
          clusterProxyAuth0SecretKey: prod-proxy-auth0-client
          configManagerAuthKey: prod-config-manager-account-xregion-auth-key
          configManagerClinicActivityKey: prod-config-manager-clinic-activity-key
          o11yAuth0SecretKey: prod-o11y-auth0-client
      dpProvider:
        disabled: true
        secretManager:
          apiGatewayKey: prod-dp-compat-xregion-auth-key
          infraAPIServerKey: prod-dedicated-infra-kubeconfig
        wafIpSetName: DBaas-Whitelist-For-Prod-Inner
      jumpServer:
        enabled: true
        role: arn:aws:iam::380838443567:role/dbaas-prod-devops
      regionalServer:
        auth0Audience: prod-proxy-service
        auth0Domain: tidb.auth0.com
        authorizedSubjects:
          - arn:aws:iam::380838443567:role/devops-server-prod
        availabilityZones: us-east-2a,us-east-2b,us-east-2c
        bastionIPs:
          - 54.185.150.209/32
        clinicIPs:
          - 52.41.43.61/32
        defaultDataplaneAccount: "886436925895"
        dnsName: us-east-2-staging-0822.regional-api.prod.aws.tidbcloud.com
        globalControlplaneIPs:
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
        hostedZone: prod.aws.tidbcloud.com
        hostedZoneId: Z08648051F27XQI0DF51K
        loadBalancerHostedZoneId: ZLMOA37VPKANP
        o11yRegionalServiceEndpoint: https://www.rs.us-east-2.aws.observability.tidbcloud.com
        o11yRegionalServiceIPs: []
        publicHostedZoneDomain: clusters.tidb-cloud.com
        publicHostedZoneID: Z09521541042LFILW1KL4
    global-options:
      env: prod