preConfigKeys:
  pd:
    - dashboard.public-path-prefix
    # only set enable-placement-rules to true when tiflash enable
    - replication.enable-placement-rules
    - security.cacert-path
    - security.cert-allowed-cn
    - security.cert-path
    - security.key-path
  tidb:
    - security.cluster-ssl-ca
    - security.cluster-ssl-cert
    - security.cluster-ssl-key
    - security.cluster-verify-cn
    - security.ssl-ca
    - security.ssl-cert
    - security.ssl-key
    - log.file.max-backups
  tikv:
    - security.ca-path
    - security.cert-allowed-cn
    - security.cert-path
    - security.key-path
    - security.encryption.data-encryption-method
    - security.encryption.data-key-rotation-period
    - security.encryption.master-key.key-id
    - security.encryption.master-key.region
    - security.encryption.master-key.type
  tiflash:
    - security.cert_allowed_cn
  tiflash-learner:
    - security.cert-allowed-cn
    - security.encryption.data-encryption-method
    - security.encryption.data-key-rotation-period
    - security.encryption.master-key.type
    - security.encryption.master-key.key-id
    - security.encryption.master-key.region