regions:
  us-east-2-on-prod:
    account:
      aws-role: arn:aws:iam::380838443567:role/auto-deploy-cli
    cloud-provider: aws
    region: us-east-2
    k8s:
      name: staging-seed-us-east-2-on-prod
      version: "1.30"
      oidc-issuer: https://oidc.eks.us-east-2.amazonaws.com/id/21773E5C64BE32D91DA2F46031A0AC9E
      endpoint: https://21773E5C64BE32D91DA2F46031A0AC9E.gr7.us-east-2.eks.amazonaws.com
      public-ips:
        - 13.58.246.202
        - 3.12.110.248
        - 3.131.139.196
      admin-roles:
        - cicd-role
        - argocd-oidc-role
        - bastion-5fddc83
        - dbaas-prod-devops
        - dbaas-central-role-prod
      node-groups:
        - amiFamily: Bottlerocket
          desiredCapacity: 1
          instanceType: m5.large
          maxSize: 10
          name: worker
          privateNetworking: true
      template-path: etc/k8s-templates/eks-v1.yaml
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: HighlyAvailable
        publicAccessCIDRs:
          - 54.185.150.209/32
          - 104.196.246.224/32
          - 35.233.250.206/32
          - 34.69.36.199/32
          - 35.80.240.167/32
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
    latest-run-id: "10471451739"
    output-bucket: staging-auto-deploy
    tf-state-bucket: staging-auto-deploy-tf-state
    job-path: etc/deploy-jobs/aws-region-control
    job-outputs: {}
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::886436925895:role/auto-deploy-cli
    image-registry: 380838443567.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      clusterServer:
        clusterProxy:
          auth0Audience: prod-proxy-service
          auth0Domain: tidb.auth0.com
          enableDevMode: true
        configChange:
          activityClinicEp: https://clinic.pingcap.com
          activityEnabled: false
          activityHubEp: https://e4hr1v4oqh.execute-api.us-west-2.amazonaws.com
          activitySource: gitops
          env: prod
        fullManage:
          pcaArn: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
        secrets:
          clusterProxyAuth0SecretKey: prod-proxy-auth0-client
          configManagerAuthKey: prod-config-manager-account-xregion-auth-key
          configManagerClinicActivityKey: prod-config-manager-clinic-activity-key
          o11yAuth0SecretKey: prod-o11y-auth0-client
      dpProvider:
        disabled: true
        secretManager:
          apiGatewayKey: prod-dp-compat-xregion-auth-key
          infraAPIServerKey: prod-dedicated-infra-kubeconfig
        wafIpSetName: DBaas-Whitelist-For-Prod-Inner
      jumpServer:
        enabled: true
        env: prod
        role: arn:aws:iam::380838443567:role/dbaas-prod-devops
      regionalServer:
        auth0Audience: prod-proxy-service
        auth0Domain: tidb.auth0.com
        authorizedSubjects:
          - arn:aws:iam::380838443567:role/devops-server-prod
        availabilityZones: us-east-2a,us-east-2b,us-east-2c
        bastionIPs:
          - 54.185.150.209/32
        clinicIPs:
          - 52.41.43.61/32
        defaultDataplaneAccount: "886436925895"
        dnsName: us-east-2-on-prod.regional-api.prod.aws.tidbcloud.com
        globalControlplaneIPs:
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
        hostedZone: prod.aws.tidbcloud.com
        hostedZoneId: Z08648051F27XQI0DF51K
        loadBalancerHostedZoneId: ZLMOA37VPKANP
        o11yRegionalServiceEndpoint: https://www.rs.us-east-2.aws.observability.tidbcloud.com
        o11yRegionalServiceIPs: []
        publicHostedZoneDomain: clusters.tidb-cloud.com
        publicHostedZoneID: Z09521541042LFILW1KL4
    global-options:
      env: prod
  us-west-2-on-prod:
    account:
      aws-role: arn:aws:iam::380838443567:role/auto-deploy-cli
    cloud-provider: aws
    region: us-west-2
    k8s:
      name: staging-seed-us-west-2-on-prod
      version: "1.30"
      oidc-issuer: https://oidc.eks.us-west-2.amazonaws.com/id/81322E57FE9B1D5B645A4AD6C92B2EBF
      endpoint: https://81322E57FE9B1D5B645A4AD6C92B2EBF.gr7.us-west-2.eks.amazonaws.com
      public-ips:
        - 44.236.198.83
        - 52.11.46.66
        - 52.34.35.238
      addons:
        - attachPolicyARNs:
            - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
          name: vpc-cni
          version: v1.18.3-eksbuild.3
        - name: coredns
          version: v1.11.3-eksbuild.1
        - name: kube-proxy
          version: v1.30.3-eksbuild.5
        - name: aws-ebs-csi-driver
          version: v1.34.0-eksbuild.1
          wellKnownPolicies:
            ebsCSIController: true
      admin-roles:
        - cicd-role
        - argocd-oidc-role
        - bastion-5fddc83
        - dbaas-prod-devops
        - dbaas-central-role-prod
      node-groups:
        - amiFamily: Bottlerocket
          desiredCapacity: 1
          instanceType: m5.large
          maxSize: 10
          name: worker
          privateNetworking: true
      tags:
        environment: staging
        servicetype: dedicated
        tenant: admin
        usedby: dbaas-control-plane-seed
      template-path: etc/k8s-templates/eks-v1.yaml
      vpc:
        cidr: 10.1.0.0/16
        clusterEndpoints:
          privateAccess: true
          publicAccess: true
        nat:
          gateway: HighlyAvailable
        publicAccessCIDRs:
          - 54.185.150.209/32
          - 104.196.246.224/32
          - 35.233.250.206/32
          - 34.69.36.199/32
          - 35.80.240.167/32
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
    latest-run-id: "10845177090"
    output-bucket: staging-auto-deploy
    tf-state-bucket: staging-auto-deploy-tf-state
    job-path: etc/deploy-jobs/aws-region-control
    job-outputs: {}
    tidb-cluster-accounts:
      - aws-role: arn:aws:iam::886436925895:role/auto-deploy-cli
    image-registry: 385595570414.dkr.ecr.us-west-2.amazonaws.com
    job-options:
      clusterServer:
        clusterProxy:
          auth0Audience: prod-proxy-service
          auth0Domain: tidb.auth0.com
          enableDevMode: true
        configChange:
          activityClinicEp: https://clinic.pingcap.com
          activityEnabled: false
          activityHubEp: https://e4hr1v4oqh.execute-api.us-west-2.amazonaws.com
          activitySource: gitops
          env: prod
        fullManage:
          pcaArn: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
        secrets:
          clusterProxyAuth0SecretKey: prod-proxy-auth0-client
          configManagerAuthKey: prod-config-manager-account-xregion-auth-key
          configManagerClinicActivityKey: prod-config-manager-clinic-activity-key
          o11yAuth0Secret: prod-o11y-auth0-client
      dpProvider:
        disabled: true
        secretManager:
          apiGatewayKey: prod-dp-compat-xregion-auth-key
          infraAPIServerKey: prod-dedicated-infra-kubeconfig
        wafIpSetName: DBaas-Whitelist-For-Prod-Inner
      jumpServer:
        enabled: true
        env: prod
        role: arn:aws:iam::380838443567:role/dbaas-prod-devops
      regionalServer:
        auth0Audience: prod-proxy-service
        auth0Domain: tidb.auth0.com
        authorizedSubjects:
          - arn:aws:iam::557537366020:role/regional-server-role-7705a47
          - arn:aws:iam::380838443567:role/devops-server-prod
        availabilityZones: us-west-2a,us-west-2b,us-west-2c
        bastionIPs:
          - 54.185.150.209/32
        clinicIPs:
          - 52.41.43.61/32
        defaultDataplaneAccount: "886436925895"
        dnsName: us-west-2-on-prod.regional-api.prod.aws.tidbcloud.com
        globalControlplaneIPs:
          - 54.188.27.23/32
          - 44.231.162.131/32
          - 100.20.198.224/32
        hostedZone: prod.aws.tidbcloud.com
        hostedZoneId: Z08648051F27XQI0DF51K
        loadBalancerHostedZoneId: Z18D5FSROUN65G
        o11yRegionalServiceEndpoint: https://www.rs.us-west-2.aws.observability.tidbcloud.com
        o11yRegionalServiceIPs:
          - 54.148.161.241/32
        publicHostedZoneDomain: clusters.tidb-cloud.com
        publicHostedZoneID: Z09521541042LFILW1KL4
    global-options:
      env: prod