apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: serverless-cluster-standby
  namespace: tidb-serverless
spec:
  cluster:
    name: serverless-cluster
  timezone: UTC
  version: v7.5.0
  pvReclaimPolicy: Retain
  enablePVReclaim: true
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  pd:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/pd
    version: 20260507-c7b45b8cf72f9337eb99a981a327218e614a67d3
    replicas: 1
    maxFailoverCount: 0
    groupName: serverless-cluster
    leaderPriority: 2
    storageClassName: ebs-sc
    nodeSelector:
      cp9.tidbcloud.com/starter-role: pd
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: pd
        effect: NoSchedule
    requests:
      cpu: "1"
      memory: 12Gi
      storage: 50Gi
    limits:
      cpu: "7"
      memory: 12Gi
    env:
      - name: PD_SERVICE_MODE
        value: api
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
      - name: PD_ADDR
        value: https://127.0.0.1:2379
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: serverless-cluster-standby-pd-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    config: |
      [dashboard]
        enable-telemetry = false
        internal-proxy = true
      [replication]
        enable-placement-rules = true
        max-replicas = 3
      [security]
        enable-sem = true
        cacert-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
      [keyspace]
        enable-global-safe-point-v2 = true
        disable-raw-kv-region-split = true
        wait-region-split = true
        wait-region-split-timeout = "120s"
        check-region-split-interval = "1s"
      [micro-service]
        enable-resource-manager-fallback = false
      [controller.request-unit]
        write-base-cost = 0.5
        write-per-batch-base-cost = 0.5
        write-cost-per-byte = 0.00048828
      [pd-server]
        enable-grpc-client-metrics = true
---
apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: serverless-cluster-witness
  namespace: tidb-serverless
spec:
  cluster:
    name: serverless-cluster
  timezone: UTC
  version: v7.5.0
  pvReclaimPolicy: Retain
  enablePVReclaim: true
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  pd:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/pd
    version: 20260507-c7b45b8cf72f9337eb99a981a327218e614a67d3
    replicas: 1
    maxFailoverCount: 0
    groupName: serverless-cluster
    leaderPriority: 1
    storageClassName: ebs-sc
    nodeSelector:
      cp9.tidbcloud.com/starter-role: pd
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: pd
        effect: NoSchedule
    requests:
      cpu: "1"
      memory: 12Gi
      storage: 50Gi
    limits:
      cpu: "7"
      memory: 12Gi
    env:
      - name: PD_SERVICE_MODE
        value: api
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
      - name: PD_ADDR
        value: https://127.0.0.1:2379
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: serverless-cluster-witness-pd-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    config: |
      [dashboard]
        enable-telemetry = false
        internal-proxy = true
      [replication]
        enable-placement-rules = true
        max-replicas = 3
      [security]
        enable-sem = true
        cacert-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
      [keyspace]
        enable-global-safe-point-v2 = true
        disable-raw-kv-region-split = true
        wait-region-split = true
        wait-region-split-timeout = "120s"
        check-region-split-interval = "1s"
      [micro-service]
        enable-resource-manager-fallback = false
      [controller.request-unit]
        write-base-cost = 0.5
        write-per-batch-base-cost = 0.5
        write-cost-per-byte = 0.00048828
      [pd-server]
        enable-grpc-client-metrics = true