basic:
  imageRegistry: o11yprod.azurecr.io
  outputBlobEndpoint: https://[[ output_storage_account ]].blob.core.windows.net/job-input-output
aks:
  # see https://learn.microsoft.com/en-us/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep#managedclusteraadprofile
  # 'managed' is set to true default
  aadProfile:
    adminGroupObjectIDs:
      - 69500f83-4674-4aad-b082-7d95d93f8c2c # prod-control-plane-services
  agentPools:
  # see https://learn.microsoft.com/en-us/azure/templates/microsoft.containerservice/managedclusters?pivots=deployment-language-bicep#managedclusteragentpoolprofile
  # default values:
  #   count: 1
  #   vmSize: Standard_D4ds_v5
  #   osDiskSizeGB: 32
  #   osSKU: 'AzureLinux'
  #   type: 'VirtualMachineScaleSets'
  #   upgradeSettings:
  #     maxSurge: '10%'
    - name: 'control'
      mode: 'System' # at least one pool mode is System
      vmSize: Standard_E4s_v6
      osDiskSizeGB: 128
      count: 2
      enableAutoScaling: true
      minCount: 2
      maxCount: 20
      availabilityZones:
        - '1'
      nodeLabels: 
        node_type: worker
  nodeGroupSuffix: infra
  publicAccessCidrs:
    - 0.0.0.0/0
  tags:
    environment: prod
    servicetype: o11y
    usedby: o11y-region-control
    tenant: admin
  templatePath: etc/k8s-templates/aks-v1.bicep
  version: '1.35'
  vnet:
    addressSpace: 10.224.0.0/12
    dnsServiceIp: 10.0.0.10
    serviceCidr: 10.0.0.0/16
    subnets:
      - name: aks-subnet
        addressPrefix: 10.224.0.0/16
      - name: appgw-subnet
        addressPrefix: 10.225.0.0/16
    outboundType: loadBalancer
jobOptions:
  awsAccountRole: arn:aws:iam::[[ o11y_account ]]:role/auto-deploy-cli
  awsSNSARN: arn:aws:sns:us-west-2:[[ o11y_account ]]:[[ dms_sns_topic ]]
  jumpServer:
    enabled: true
    clientId: b35845ec-9f1d-4ac1-a2d3-8d565b093699 # Managed Identity: jump-service
  o11y:
    zone: '[[ region ]]-1'
    route53ZoneId: Z06264701JS6DZG9GF4NU # observability.tidbcloud.com
  iam:
    aadGroups:
      - dev-control-plane-services
      - staging-control-plane-services
      - prod-control-plane-services