apiVersion: v1
kind: ConfigMap
metadata:
  name: account-central-conf
data:
  config.yaml: |
    tiinf:
      grpc:
        enable: true
        port: 10000
      gin:
        enable: true
        port: 11000
      metrics:
        enable: true
        port: 9090
    server:
      logLevel: debug
      enableDBQueryLog: true
      frontendDNS: http://127.0.0.1
      backendDNS: http://127.0.0.1
      stage: local
      grpcPort: 10000
      openApiGrpcPort: 11010
      metricsPort: 9090
      pocManualBackupReservedDays: 7
      managementPortalInitUserEmail: cloud@pingcap.com
      adminListenAddr: 0.0.0.0:11000
      metricsListenAddr: 0.0.0.0:9090
      saltSecret: "12345678901234561234567890123456"
      mailGunApiKey: cp9-local
      sendgridApiKey: cp9-local
      recaptchaSecret: cp9-local
      sentry:
        env: local
        logLevel: warn
      bizOpsTeamEmail: cloud@pingcap.com
      cdnBucket: cp9-local
      stressTest: false
    grpc:
      aclSvcAddr: account-acl-grpc:10000
      accountSvcAddr: account-provider-grpc:10000
      authServerAddr: authserver-provider:50051
      coreSvcAddr: tidb-management-service:10001
      devopsSvcAddr: cluster-service-ng:10000
      mgmtSvcAddr: tidb-management-service:10001
    mysql:
      host: account-metadb
      user: root
      port: 3306
      database: account
      password: cp9-local
      disableNestedTransaction: true
    billing:
      billing2BaseURL: http://billing-svc:8080
      billing2URLPrefix: /api/v1/billing
      billingPackageIDs:
        onDemand: 2
        poc: 1
        devTier: 3
    auth0:
      auth0ManagementClientID: cp9-local
      auth0ManagementClientSecret: cp9-local
      auth0DatabaseConnectionName: custom-email
      auth0Domain: tidb-dev.us.auth0.com
      auth0Audience: KiwWajLJ3pto8SsZ7F35NaqNhwnoRh1c
      auth0Secret: cp9-local
      managementPortalAuth0Domain: tidb-dev.us.auth0.com
      managementPortalAuth0Audience: Z9mfdhVe0Nh3ylm6gr7OkwSUGLfToiux
      managementPortalAuth0Secret: cp9-local
      managementPortalAuth0ClientAudience: cp9-local
    zendesk:
      enableZendesk: false
      zendeskDomain: cp9-local
      zendeskEmail: cp9-local
      zendeskSecret: cp9-local
    proxy:
      auth0Domain: tidb-dev.us.auth0.com
      auth0ClientID: cp9-local
      auth0ClientSecret: cp9-local
      auth0Audience: cp9-local
    sso:
      auth0Domain: tidb-dev.us.auth0.com
      m2mAppClientID: cp9-local
      m2mAppClientSecret: cp9-local
      enableClients: ""
      actionKey: cp9-local
      claimIss: cp9.local
      auth0Tenant: cp9-local
      iamOpenApiDomain: http://127.0.0.1
      auth0CallbackDomain: http://127.0.0.1
    salesforce:
      enableSalesforce: false
      salesforceDomain: cp9-local
      salesforceClientID: cp9-local
      salesforceClientSecret: cp9-local
      salesforceUsername: cp9-local
      salesforcePassword: cp9-local
    grafana:
      server: http://grafana.local
      apiKey: cp9-local
    marketPlace:
      marketplaceBackground: false
      awsBackground: false
      gcpBackground: false
    jobQueue:
      jobQueueURL: ""
      jobQueueDLURL: ""
      jobQueueRegion: us-west-2
      jobQueueTimeout: 300
    openapi:
      openapiGatewayRedisMasterAddress: account-redis:6379
      openapiGatewayRedisReplicaAddresses: []
      openapiSecretKey: "12345678901234561234567890123456"
      openapiSecretIv: "1234567890123456"
    dynamodb:
      region: us-west-2
      apiKeyTableName: cp9_account_uni_api_keys
      privilegeRoleTableName: cp9_account_privilege_role
      privilegeRoleGSIName: cp9_account_privilege_role_gsi
      disableWrite: true
    redis:
      redisHost: account-redis:6379
      redisDB: 4
    rateControl:
      sendPasswordVerifyCode:
        scene:
          sceneKey: sendPasswordVerifyCode
          capacity: 1000
          ttl: 24h
        rates:
          - period: 58s
            limit: 1
      inviteUser:
        scene:
          sceneKey: inviteUser
          capacity: 1000
          ttl: 24h
        rates:
          - period: 60s
            limit: 3
      registrationVerification:
        scene:
          sceneKey: registrationVerification
          capacity: 100
          ttl: 1h
        rates:
          - period: 58s
            limit: 1
      registration:
        scene:
          sceneKey: registration
          capacity: 30
          ttl: 1h
        rates:
          - period: 60s
            limit: 5