apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: tikv-r8gxl-34v260403-p0
  namespace: tidb-serverless
  labels:
    app.kubernetes.io/managed-by: cp9
spec:
  timezone: UTC
  version: v7.5.0
  cluster:
    name: serverless-cluster
    namespace: tidb-serverless
  pvReclaimPolicy: Delete
  enablePVReclaim: true
  enableDynamicConfiguration: true
  configUpdateStrategy: RollingUpdate
  clusterDeletionProtection: false
  multiAZ: true
  discovery: {}
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  tikv:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv
    version: 5b7adce957a177fdebfa4e32740f31ca92301195
    serviceAccount: backup-restore
    replicas: 1
    maxFailoverCount: 3
    groupName: standard
    storageClassName: gp3-500
    nodeSelector:
      cp9.tidbcloud.com/starter-role: tikv
      serverless.tidbcloud.com/tier: standard
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: tikv
        effect: NoSchedule
      - key: serverless.tidbcloud.com/tier
        operator: Equal
        value: standard
        effect: NoSchedule
    storeLabels:
      - serverless.tidbcloud.com/tier
      - serverless.tidbcloud.com/zone
    requests:
      storage: 1Ti
    limits:
      memory: 13Gi
    podSecurityContext:
      sysctls:
        - name: net.core.somaxconn
          value: "32768"
    annotations:
      tidb.pingcap.com/sysctl-init: "true"
    evictLeaderTimeout: 72h
    statefulSetUpdateStrategy: RollingUpdate
    priorityClassName: tikv-critical-priority
    scalePolicy:
      scaleInParallelism: 128
      scaleOutParallelism: 1
    scaleInProtectionForNode: true
    enableConfigRollback: false
    pvReclaimDelayDuration: 24h
    failover:
      replicasPerFailureStore: 2
    canaryUpgrade:
      enabled: true
      clusterReadySeconds: 900
      coordinationSeconds: 300
      clusterPriority: [witness, standby, primary, p2, p1, p0, p3]
      stageReadySeconds: 300
      stagePercents: [10, 67, 100]
    autoScaling:
      enabled: true
      paused: false
      maxReplicas: 9
      cpu:
        maxThreshold: 0.7
        minThreshold: 0.3
        scaleInIntervalSeconds: 900
        scaleOutIntervalSeconds: 600
      storage:
        maxThreshold: 0.8
        minThreshold: 0.6
        scaleInIntervalSeconds: 500
        scaleOutIntervalSeconds: 1
    scaleInProtection:
      enabled: false
      storageThreshold: 0.8
      minReplicas: 1
    storeLimit:
      enabled: true
      unbalanceThreshold: 0.7
      normalRate: 64
      scalingInRate: 128
      scalingOutRate: 128
    upgradeDelayAfterEvictLeader: 10m
    endEvictLeaderDelayAfterReady: 10m
    hotCluster:
      cluster:
        name: tikv-r8g2xl-34v260403-p3
      enabled: true
      scaleToZero: true
      initialReplicas: 1
      cpuThreshold: 0.5
      hotDurationSeconds: 120
      hotRegionSeconds: 180
      coldRegionSeconds: 480
    additionalContainers:
      - name: tikv-log
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - sh
          - -c
          - touch /var/lib/tikv-ebs/tikv.log; tail -n0 -F /var/lib/tikv-ebs/tikv.log;
        volumeMounts:
          - name: tikv-raft-db
            mountPath: /var/lib/tikv-ebs
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: tikv-r8gxl-34v260403-p0-tikv-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    storageVolumes:
      - name: raft-db
        storageClassName: ebs-sc
        storageSize: 30Gi
        mountPath: /var/lib/tikv-ebs
      - name: raft-wal
        storageClassName: ebs-sc
        storageSize: 5Gi
        mountPath: /var/lib/tikv-raft-wal
    env:
      - name: DFS_PREFIX
        value: CP9_STARTER_SERVERLESS_PREFIX
      - name: DFS_S3_BUCKET
        value: CP9_STARTER_SERVERLESS_BUCKET
      - name: DFS_S3_REGION
        value: CP9_STARTER_SERVERLESS_REGION
      - name: MALLOC_CONF
        value: prof:true,prof_active:true
      - name: DFS_ALLOW_FALLBACK_LOCAL
        value: "0"
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
    config: |
      enable-inner-key-offset = true

      [cdc]
        enable = true

      [coprocessor]
        enable-region-bucket = true
        region-split-keys = 50000000
        region-split-size = "500MiB"

      [dfs]
        remote-compactor-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/compact"

      [gc]
        disable-safe-point-fallback-v1 = true
        enable-safe-point-v2 = true

      [import]
        import-mode-timeout = "10m"
        num-threads = 1
        stream-channel-window = 128

      [kvengine]
        build-columnar = true
        build-fts-index = true
        gc-lock-extra-cf = true
        per-keyspace-configs = [{keyspace = 1, split-size-factor = 2.0}]
        remote-coprocessor-addr = "https://cop-worker-service.tidb-serverless.svc:19000/coprocessor"
        remote-worker-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/coprocessor"
        [kvengine.ia]
          mem-cap = "16%"
          disk-cap = "71%"

      [log]
        level = "info"
        [log.file]
          filename = "/var/lib/tikv-ebs/tikv.log"
          max-backups = 10
          max-days = 5
          max-size = 300

      [raftstore]
        enable-kv-engine-meta-diff = true
        raftdb-path = "/var/lib/tikv-ebs/raft-db"

      [raft-engine]
        target-file-size = "512MiB"

      [rfengine]
        lightweight-backup = true
        rlog-cache-size-threshold = "16KiB"
        wal-chunk-target-file-size = "64MiB"
        wal-sync-dir = "/var/lib/tikv-raft-wal"

      [rocksdb]
        [rocksdb.defaultcf]
          bottommost-level-compression = "no"
        [rocksdb.writecf]
          bottommost-level-compression = "no"

      [security]
        ca-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
        [security.master-key]
          cipher-text = "CP9_STARTER_CSE_KEY_CIPHERTEXT"
          key-id = "CP9_STARTER_CSE_MASTER_KEY_ID"
          vendor = "CP9_STARTER_CSE_KEY_VENDOR"

      [server]
        grpc-concurrent-stream = 10240
        push-metrics-addr = "http://serverless-metering.serverless-metering:9091"
        push-metrics-interval = "30s"
        status-thread-pool-size = 2

      [storage]
        api-version = 2
        enable-ttl = true
        reserve-space = "0KiB"
        scheduler-pending-write-threshold = "1GiB"
        ttl-check-poll-interval = "24h"
      [storage.flow-control]
        enable = true
        hard-region-mem-limit = "256MB"
        soft-region-mem-limit = "128MB"
---
apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: tikv-r8gxl-34v260403-standby
  namespace: tidb-serverless
  labels:
    app.kubernetes.io/managed-by: cp9
spec:
  timezone: UTC
  version: v7.5.0
  cluster:
    name: serverless-cluster
    namespace: tidb-serverless
  pvReclaimPolicy: Delete
  enablePVReclaim: true
  enableDynamicConfiguration: true
  configUpdateStrategy: RollingUpdate
  clusterDeletionProtection: false
  multiAZ: true
  discovery: {}
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  tikv:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv
    version: 5b7adce957a177fdebfa4e32740f31ca92301195
    serviceAccount: backup-restore
    replicas: 1
    maxFailoverCount: 3
    groupName: standard
    storageClassName: gp3-500
    nodeSelector:
      cp9.tidbcloud.com/starter-role: tikv
      serverless.tidbcloud.com/tier: standard
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: tikv
        effect: NoSchedule
      - key: serverless.tidbcloud.com/tier
        operator: Equal
        value: standard
        effect: NoSchedule
    storeLabels:
      - serverless.tidbcloud.com/tier
      - serverless.tidbcloud.com/zone
    requests:
      storage: 1Ti
    limits:
      memory: 13Gi
    podSecurityContext:
      sysctls:
        - name: net.core.somaxconn
          value: "32768"
    annotations:
      tidb.pingcap.com/sysctl-init: "true"
    evictLeaderTimeout: 72h
    statefulSetUpdateStrategy: RollingUpdate
    priorityClassName: tikv-critical-priority
    scalePolicy:
      scaleInParallelism: 128
      scaleOutParallelism: 1
    scaleInProtectionForNode: true
    enableConfigRollback: false
    pvReclaimDelayDuration: 24h
    failover:
      replicasPerFailureStore: 2
    canaryUpgrade:
      enabled: true
      clusterReadySeconds: 900
      coordinationSeconds: 300
      clusterPriority: [witness, standby, primary, p2, p1, p0, p3]
      stageReadySeconds: 300
      stagePercents: [10, 67, 100]
    autoScaling:
      enabled: true
      paused: false
      maxReplicas: 9
      cpu:
        maxThreshold: 0.7
        minThreshold: 0.3
        scaleInIntervalSeconds: 900
        scaleOutIntervalSeconds: 600
      storage:
        maxThreshold: 0.8
        minThreshold: 0.6
        scaleInIntervalSeconds: 500
        scaleOutIntervalSeconds: 1
    scaleInProtection:
      enabled: false
      storageThreshold: 0.8
      minReplicas: 1
    storeLimit:
      enabled: true
      unbalanceThreshold: 0.7
      normalRate: 64
      scalingInRate: 128
      scalingOutRate: 128
    upgradeDelayAfterEvictLeader: 10m
    endEvictLeaderDelayAfterReady: 10m
    additionalContainers:
      - name: tikv-log
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - sh
          - -c
          - touch /var/lib/tikv-ebs/tikv.log; tail -n0 -F /var/lib/tikv-ebs/tikv.log;
        volumeMounts:
          - name: tikv-raft-db
            mountPath: /var/lib/tikv-ebs
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: tikv-r8gxl-34v260403-standby-tikv-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    storageVolumes:
      - name: raft-db
        storageClassName: ebs-sc
        storageSize: 30Gi
        mountPath: /var/lib/tikv-ebs
      - name: raft-wal
        storageClassName: ebs-sc
        storageSize: 5Gi
        mountPath: /var/lib/tikv-raft-wal
    env:
      - name: DFS_PREFIX
        value: CP9_STARTER_SERVERLESS_PREFIX
      - name: DFS_S3_BUCKET
        value: CP9_STARTER_SERVERLESS_BUCKET
      - name: DFS_S3_REGION
        value: CP9_STARTER_SERVERLESS_REGION
      - name: MALLOC_CONF
        value: prof:true,prof_active:true
      - name: DFS_ALLOW_FALLBACK_LOCAL
        value: "0"
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
    config: |
      enable-inner-key-offset = true

      [cdc]
        enable = true

      [coprocessor]
        enable-region-bucket = true
        region-split-keys = 50000000
        region-split-size = "500MiB"

      [dfs]
        remote-compactor-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/compact"

      [gc]
        disable-safe-point-fallback-v1 = true
        enable-safe-point-v2 = true

      [import]
        import-mode-timeout = "10m"
        num-threads = 1
        stream-channel-window = 128

      [kvengine]
        build-columnar = true
        build-fts-index = true
        gc-lock-extra-cf = true
        per-keyspace-configs = [{keyspace = 1, split-size-factor = 2.0}]
        remote-coprocessor-addr = "https://cop-worker-service.tidb-serverless.svc:19000/coprocessor"
        remote-worker-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/coprocessor"
        [kvengine.ia]
          mem-cap = "16%"
          disk-cap = "71%"

      [log]
        level = "info"
        [log.file]
          filename = "/var/lib/tikv-ebs/tikv.log"
          max-backups = 10
          max-days = 5
          max-size = 300

      [raftstore]
        enable-kv-engine-meta-diff = true
        raftdb-path = "/var/lib/tikv-ebs/raft-db"

      [raft-engine]
        target-file-size = "512MiB"

      [rfengine]
        lightweight-backup = true
        rlog-cache-size-threshold = "16KiB"
        wal-chunk-target-file-size = "64MiB"
        wal-sync-dir = "/var/lib/tikv-raft-wal"

      [rocksdb]
        [rocksdb.defaultcf]
          bottommost-level-compression = "no"
        [rocksdb.writecf]
          bottommost-level-compression = "no"

      [security]
        ca-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
        [security.master-key]
          cipher-text = "CP9_STARTER_CSE_KEY_CIPHERTEXT"
          key-id = "CP9_STARTER_CSE_MASTER_KEY_ID"
          vendor = "CP9_STARTER_CSE_KEY_VENDOR"

      [server]
        grpc-concurrent-stream = 10240
        push-metrics-addr = "http://serverless-metering.serverless-metering:9091"
        push-metrics-interval = "30s"
        status-thread-pool-size = 2

      [storage]
        api-version = 2
        enable-ttl = true
        reserve-space = "0KiB"
        scheduler-pending-write-threshold = "1GiB"
        ttl-check-poll-interval = "24h"
        [storage.flow-control]
          enable = true
          hard-region-mem-limit = "256MB"
          soft-region-mem-limit = "128MB"
---
apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: tikv-r8gxl-34v260403-witness
  namespace: tidb-serverless
  labels:
    app.kubernetes.io/managed-by: cp9
spec:
  timezone: UTC
  version: v7.5.0
  cluster:
    name: serverless-cluster
    namespace: tidb-serverless
  pvReclaimPolicy: Delete
  enablePVReclaim: true
  enableDynamicConfiguration: true
  configUpdateStrategy: RollingUpdate
  clusterDeletionProtection: false
  multiAZ: true
  discovery: {}
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  tikv:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv
    version: 5b7adce957a177fdebfa4e32740f31ca92301195
    serviceAccount: backup-restore
    replicas: 1
    maxFailoverCount: 3
    groupName: standard
    storageClassName: gp3-500
    nodeSelector:
      cp9.tidbcloud.com/starter-role: tikv
      serverless.tidbcloud.com/tier: standard
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: tikv
        effect: NoSchedule
      - key: serverless.tidbcloud.com/tier
        operator: Equal
        value: standard
        effect: NoSchedule
    storeLabels:
      - serverless.tidbcloud.com/tier
      - serverless.tidbcloud.com/zone
    requests:
      storage: 1Ti
    limits:
      memory: 13Gi
    podSecurityContext:
      sysctls:
        - name: net.core.somaxconn
          value: "32768"
    annotations:
      tidb.pingcap.com/sysctl-init: "true"
    evictLeaderTimeout: 72h
    statefulSetUpdateStrategy: RollingUpdate
    priorityClassName: tikv-critical-priority
    scalePolicy:
      scaleInParallelism: 128
      scaleOutParallelism: 1
    scaleInProtectionForNode: true
    enableConfigRollback: false
    pvReclaimDelayDuration: 24h
    failover:
      replicasPerFailureStore: 2
    canaryUpgrade:
      enabled: true
      clusterReadySeconds: 900
      coordinationSeconds: 300
      clusterPriority: [witness, standby, primary, p2, p1, p0, p3]
      stageReadySeconds: 300
      stagePercents: [10, 67, 100]
    autoScaling:
      enabled: true
      paused: false
      maxReplicas: 9
      cpu:
        maxThreshold: 0.7
        minThreshold: 0.3
        scaleInIntervalSeconds: 900
        scaleOutIntervalSeconds: 600
      storage:
        maxThreshold: 0.8
        minThreshold: 0.6
        scaleInIntervalSeconds: 500
        scaleOutIntervalSeconds: 1
    scaleInProtection:
      enabled: false
      storageThreshold: 0.8
      minReplicas: 1
    storeLimit:
      enabled: true
      unbalanceThreshold: 0.7
      normalRate: 64
      scalingInRate: 128
      scalingOutRate: 128
    upgradeDelayAfterEvictLeader: 10m
    endEvictLeaderDelayAfterReady: 10m
    additionalContainers:
      - name: tikv-log
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - sh
          - -c
          - touch /var/lib/tikv-ebs/tikv.log; tail -n0 -F /var/lib/tikv-ebs/tikv.log;
        volumeMounts:
          - name: tikv-raft-db
            mountPath: /var/lib/tikv-ebs
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: tikv-r8gxl-34v260403-witness-tikv-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    storageVolumes:
      - name: raft-db
        storageClassName: ebs-sc
        storageSize: 30Gi
        mountPath: /var/lib/tikv-ebs
      - name: raft-wal
        storageClassName: ebs-sc
        storageSize: 5Gi
        mountPath: /var/lib/tikv-raft-wal
    env:
      - name: DFS_PREFIX
        value: CP9_STARTER_SERVERLESS_PREFIX
      - name: DFS_S3_BUCKET
        value: CP9_STARTER_SERVERLESS_BUCKET
      - name: DFS_S3_REGION
        value: CP9_STARTER_SERVERLESS_REGION
      - name: MALLOC_CONF
        value: prof:true,prof_active:true
      - name: DFS_ALLOW_FALLBACK_LOCAL
        value: "0"
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
    config: |
      enable-inner-key-offset = true

      [cdc]
        enable = true

      [coprocessor]
        enable-region-bucket = true
        region-split-keys = 50000000
        region-split-size = "500MiB"

      [dfs]
        remote-compactor-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/compact"

      [gc]
        disable-safe-point-fallback-v1 = true
        enable-safe-point-v2 = true

      [import]
        import-mode-timeout = "10m"
        num-threads = 1
        stream-channel-window = 128

      [kvengine]
        build-columnar = true
        build-fts-index = true
        gc-lock-extra-cf = true
        per-keyspace-configs = [{keyspace = 1, split-size-factor = 2.0}]
        remote-coprocessor-addr = "https://cop-worker-service.tidb-serverless.svc:19000/coprocessor"
        remote-worker-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/coprocessor"
        [kvengine.ia]
          mem-cap = "16%"
          disk-cap = "71%"

      [log]
        level = "info"
        [log.file]
          filename = "/var/lib/tikv-ebs/tikv.log"
          max-backups = 10
          max-days = 5
          max-size = 300

      [raftstore]
        enable-kv-engine-meta-diff = true
        raftdb-path = "/var/lib/tikv-ebs/raft-db"

      [raft-engine]
        target-file-size = "512MiB"

      [rfengine]
        lightweight-backup = true
        rlog-cache-size-threshold = "16KiB"
        wal-chunk-target-file-size = "64MiB"
        wal-sync-dir = "/var/lib/tikv-raft-wal"

      [rocksdb]
        [rocksdb.defaultcf]
          bottommost-level-compression = "no"
        [rocksdb.writecf]
          bottommost-level-compression = "no"

      [security]
        ca-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
        [security.master-key]
          cipher-text = "CP9_STARTER_CSE_KEY_CIPHERTEXT"
          key-id = "CP9_STARTER_CSE_MASTER_KEY_ID"
          vendor = "CP9_STARTER_CSE_KEY_VENDOR"

      [server]
        grpc-concurrent-stream = 10240
        push-metrics-addr = "http://serverless-metering.serverless-metering:9091"
        push-metrics-interval = "30s"
        status-thread-pool-size = 2

      [storage]
        api-version = 2
        enable-ttl = true
        reserve-space = "0KiB"
        scheduler-pending-write-threshold = "1GiB"
        ttl-check-poll-interval = "24h"
        [storage.flow-control]
          enable = true
          hard-region-mem-limit = "256MB"
          soft-region-mem-limit = "128MB"
---
apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: tikv-r8g2xl-34v260403-p3
  namespace: tidb-serverless
  labels:
    app.kubernetes.io/managed-by: cp9
spec:
  timezone: UTC
  version: v7.5.0
  cluster:
    name: serverless-cluster
    namespace: tidb-serverless
  pvReclaimPolicy: Delete
  enablePVReclaim: true
  enableDynamicConfiguration: true
  configUpdateStrategy: RollingUpdate
  clusterDeletionProtection: false
  multiAZ: true
  discovery: {}
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  tikv:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv
    version: 5b7adce957a177fdebfa4e32740f31ca92301195
    serviceAccount: backup-restore
    replicas: 0
    maxFailoverCount: 3
    groupName: standard
    storageClassName: gp3-500
    nodeSelector:
      cp9.tidbcloud.com/starter-role: tikv-hot
      serverless.tidbcloud.com/tier: hot
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: tikv-hot
        effect: NoSchedule
      - key: serverless.tidbcloud.com/tier
        operator: Equal
        value: hot
        effect: NoSchedule
    storeLabels:
      - serverless.tidbcloud.com/tier
      - serverless.tidbcloud.com/zone
    requests:
      storage: 500Gi
    limits:
      memory: 13Gi
    podSecurityContext:
      sysctls:
        - name: net.core.somaxconn
          value: "32768"
    annotations:
      tidb.pingcap.com/sysctl-init: "true"
    evictLeaderTimeout: 72h
    statefulSetUpdateStrategy: RollingUpdate
    priorityClassName: tikv-critical-priority
    scalePolicy:
      scaleInParallelism: 128
      scaleOutParallelism: 1
    scaleInProtectionForNode: true
    enableConfigRollback: false
    pvReclaimDelayDuration: 24h
    failover:
      replicasPerFailureStore: 2
    canaryUpgrade:
      enabled: true
      clusterReadySeconds: 900
      coordinationSeconds: 300
      clusterPriority: [witness, standby, primary, p2, p1, p0, p3]
      stageReadySeconds: 300
      stagePercents: [10, 67, 100]
    autoScaling:
      enabled: true
      paused: false
      maxReplicas: 9
      cpu:
        maxThreshold: 0.6
        minThreshold: 0.4
        scaleInIntervalSeconds: 600
        scaleOutIntervalSeconds: 180
      storage:
        maxThreshold: 0.8
        minThreshold: 0.6
        scaleInIntervalSeconds: 500
        scaleOutIntervalSeconds: 1
    scaleInProtection:
      enabled: false
      storageThreshold: 0.8
      minReplicas: 1
    storeLimit:
      enabled: true
      unbalanceThreshold: 0.7
      normalRate: 64
      scalingInRate: 128
      scalingOutRate: 128
    upgradeDelayAfterEvictLeader: 10m
    endEvictLeaderDelayAfterReady: 10m
    hotCluster:
      cluster:
        name: tikv-r8g2xl-34v260403-p3
      enabled: true
      maxHotRegionsCount: 1024
      scaleToZero: true
      initialReplicas: 1
      cpuThreshold: 0.5
      hotDurationSeconds: 120
      hotRegionSeconds: 180
      coldRegionSeconds: 480
    additionalContainers:
      - name: tikv-log
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - sh
          - -c
          - touch /var/lib/tikv-ebs/tikv.log; tail -n0 -F /var/lib/tikv-ebs/tikv.log;
        volumeMounts:
          - name: tikv-raft-db
            mountPath: /var/lib/tikv-ebs
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: tikv-r8g2xl-34v260403-p3-tikv-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    storageVolumes:
      - name: raft-db
        storageClassName: ebs-sc
        storageSize: 30Gi
        mountPath: /var/lib/tikv-ebs
      - name: raft-wal
        storageClassName: ebs-sc
        storageSize: 5Gi
        mountPath: /var/lib/tikv-raft-wal
    env:
      - name: DFS_PREFIX
        value: CP9_STARTER_SERVERLESS_PREFIX
      - name: DFS_S3_BUCKET
        value: CP9_STARTER_SERVERLESS_BUCKET
      - name: DFS_S3_REGION
        value: CP9_STARTER_SERVERLESS_REGION
      - name: MALLOC_CONF
        value: prof:true,prof_active:true
      - name: DFS_ALLOW_FALLBACK_LOCAL
        value: "0"
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
    config: |
      enable-inner-key-offset = true

      [cdc]
        enable = true

      [coprocessor]
        enable-region-bucket = true
        region-split-keys = 50000000
        region-split-size = "500MiB"

      [dfs]
        remote-compactor-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/compact"

      [gc]
        disable-safe-point-fallback-v1 = true
        enable-safe-point-v2 = true

      [import]
        import-mode-timeout = "10m"
        num-threads = 1
        stream-channel-window = 128

      [kvengine]
        build-columnar = true
        build-fts-index = true
        gc-lock-extra-cf = true
        per-keyspace-configs = [{keyspace = 1, split-size-factor = 2.0}]
        remote-coprocessor-addr = "https://cop-worker-service.tidb-serverless.svc:19000/coprocessor"
        remote-worker-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/coprocessor"
        [kvengine.ia]
          mem-cap = "16%"
          disk-cap = "71%"

      [log]
        level = "info"
        [log.file]
          filename = "/var/lib/tikv-ebs/tikv.log"
          max-backups = 10
          max-days = 5
          max-size = 300

      [raftstore]
        enable-kv-engine-meta-diff = true
        raftdb-path = "/var/lib/tikv-ebs/raft-db"

      [raft-engine]
        target-file-size = "512MiB"

      [rfengine]
        lightweight-backup = true
        rlog-cache-size-threshold = "16KiB"
        wal-chunk-target-file-size = "64MiB"
        wal-sync-dir = "/var/lib/tikv-raft-wal"

      [rocksdb]
        [rocksdb.defaultcf]
          bottommost-level-compression = "no"
        [rocksdb.writecf]
          bottommost-level-compression = "no"

      [security]
        ca-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
        [security.master-key]
          cipher-text = "CP9_STARTER_CSE_KEY_CIPHERTEXT"
          key-id = "CP9_STARTER_CSE_MASTER_KEY_ID"
          vendor = "CP9_STARTER_CSE_KEY_VENDOR"

      [server]
        grpc-concurrent-stream = 10240
        push-metrics-addr = "http://serverless-metering.serverless-metering:9091"
        push-metrics-interval = "30s"
        status-thread-pool-size = 2

      [storage]
        api-version = 2
        enable-ttl = true
        reserve-space = "0KiB"
        scheduler-pending-write-threshold = "1GiB"
        ttl-check-poll-interval = "24h"
        [storage.flow-control]
          enable = true
          hard-region-mem-limit = "256MB"
          soft-region-mem-limit = "128MB"
---
apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: tikv-r8gxl-34v260403-p1
  namespace: tidb-serverless
  labels:
    app.kubernetes.io/managed-by: cp9
spec:
  timezone: UTC
  version: v7.5.0
  cluster:
    name: serverless-cluster
    namespace: tidb-serverless
  pvReclaimPolicy: Delete
  enablePVReclaim: true
  enableDynamicConfiguration: true
  configUpdateStrategy: RollingUpdate
  clusterDeletionProtection: false
  multiAZ: true
  discovery: {}
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  tikv:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv
    version: 5b7adce957a177fdebfa4e32740f31ca92301195
    serviceAccount: backup-restore
    replicas: 1
    maxFailoverCount: 3
    groupName: standard
    storageClassName: gp3-500
    nodeSelector:
      cp9.tidbcloud.com/starter-role: tikv
      serverless.tidbcloud.com/tier: standard
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: tikv
        effect: NoSchedule
      - key: serverless.tidbcloud.com/tier
        operator: Equal
        value: standard
        effect: NoSchedule
    storeLabels:
      - serverless.tidbcloud.com/tier
      - serverless.tidbcloud.com/zone
    requests:
      storage: 1Ti
    limits:
      memory: 13Gi
    podSecurityContext:
      sysctls:
        - name: net.core.somaxconn
          value: "32768"
    annotations:
      tidb.pingcap.com/sysctl-init: "true"
    evictLeaderTimeout: 72h
    statefulSetUpdateStrategy: RollingUpdate
    priorityClassName: tikv-critical-priority
    scalePolicy:
      scaleInParallelism: 128
      scaleOutParallelism: 1
    scaleInProtectionForNode: true
    enableConfigRollback: false
    pvReclaimDelayDuration: 24h
    failover:
      replicasPerFailureStore: 2
    canaryUpgrade:
      enabled: true
      clusterReadySeconds: 900
      coordinationSeconds: 300
      clusterPriority: [witness, standby, primary, p2, p1, p0, p3]
      stageReadySeconds: 300
      stagePercents: [10, 67, 100]
    autoScaling:
      enabled: true
      paused: false
      maxReplicas: 9
      cpu:
        maxThreshold: 0.7
        minThreshold: 0.3
        scaleInIntervalSeconds: 900
        scaleOutIntervalSeconds: 600
      storage:
        maxThreshold: 0.8
        minThreshold: 0.6
        scaleInIntervalSeconds: 500
        scaleOutIntervalSeconds: 1
    scaleInProtection:
      enabled: false
      storageThreshold: 0.8
      minReplicas: 1
    storeLimit:
      enabled: true
      unbalanceThreshold: 0.7
      normalRate: 64
      scalingInRate: 128
      scalingOutRate: 128
    upgradeDelayAfterEvictLeader: 10m
    endEvictLeaderDelayAfterReady: 10m
    hotCluster:
      cluster:
        name: tikv-r8g2xl-34v260403-p3
      enabled: true
      scaleToZero: true
      initialReplicas: 1
      cpuThreshold: 0.5
      hotDurationSeconds: 120
      hotRegionSeconds: 180
      coldRegionSeconds: 480
    additionalContainers:
      - name: tikv-log
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - sh
          - -c
          - touch /var/lib/tikv-ebs/tikv.log; tail -n0 -F /var/lib/tikv-ebs/tikv.log;
        volumeMounts:
          - name: tikv-raft-db
            mountPath: /var/lib/tikv-ebs
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: tikv-r8gxl-34v260403-p1-tikv-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    storageVolumes:
      - name: raft-db
        storageClassName: ebs-sc
        storageSize: 30Gi
        mountPath: /var/lib/tikv-ebs
      - name: raft-wal
        storageClassName: ebs-sc
        storageSize: 5Gi
        mountPath: /var/lib/tikv-raft-wal
    env:
      - name: DFS_PREFIX
        value: CP9_STARTER_SERVERLESS_PREFIX
      - name: DFS_S3_BUCKET
        value: CP9_STARTER_SERVERLESS_BUCKET
      - name: DFS_S3_REGION
        value: CP9_STARTER_SERVERLESS_REGION
      - name: MALLOC_CONF
        value: prof:true,prof_active:true
      - name: DFS_ALLOW_FALLBACK_LOCAL
        value: "0"
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
    config: |
      enable-inner-key-offset = true

      [cdc]
        enable = true

      [coprocessor]
        enable-region-bucket = true
        region-split-keys = 50000000
        region-split-size = "500MiB"

      [dfs]
        remote-compactor-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/compact"

      [gc]
        disable-safe-point-fallback-v1 = true
        enable-safe-point-v2 = true

      [import]
        import-mode-timeout = "10m"
        num-threads = 1
        stream-channel-window = 128

      [kvengine]
        build-columnar = true
        build-fts-index = true
        gc-lock-extra-cf = true
        per-keyspace-configs = [{keyspace = 1, split-size-factor = 2.0}]
        remote-coprocessor-addr = "https://cop-worker-service.tidb-serverless.svc:19000/coprocessor"
        remote-worker-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/coprocessor"
        [kvengine.ia]
          mem-cap = "16%"
          disk-cap = "71%"

      [log]
        level = "info"
        [log.file]
          filename = "/var/lib/tikv-ebs/tikv.log"
          max-backups = 10
          max-days = 5
          max-size = 300

      [raftstore]
        enable-kv-engine-meta-diff = true
        raftdb-path = "/var/lib/tikv-ebs/raft-db"

      [raft-engine]
        target-file-size = "512MiB"

      [rfengine]
        lightweight-backup = true
        rlog-cache-size-threshold = "16KiB"
        wal-chunk-target-file-size = "64MiB"
        wal-sync-dir = "/var/lib/tikv-raft-wal"

      [rocksdb]
        [rocksdb.defaultcf]
          bottommost-level-compression = "no"
        [rocksdb.writecf]
          bottommost-level-compression = "no"

      [security]
        ca-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
        [security.master-key]
          cipher-text = "CP9_STARTER_CSE_KEY_CIPHERTEXT"
          key-id = "CP9_STARTER_CSE_MASTER_KEY_ID"
          vendor = "CP9_STARTER_CSE_KEY_VENDOR"

      [server]
        grpc-concurrent-stream = 10240
        push-metrics-addr = "http://serverless-metering.serverless-metering:9091"
        push-metrics-interval = "30s"
        status-thread-pool-size = 2

      [storage]
        api-version = 2
        enable-ttl = true
        reserve-space = "0KiB"
        scheduler-pending-write-threshold = "1GiB"
        ttl-check-poll-interval = "24h"
        [storage.flow-control]
          enable = true
          hard-region-mem-limit = "256MB"
          soft-region-mem-limit = "128MB"
---
apiVersion: pingcap.com/v1alpha1
kind: TidbCluster
metadata:
  name: tikv-r8gxl-34v260403-p2
  namespace: tidb-serverless
  labels:
    app.kubernetes.io/managed-by: cp9
spec:
  timezone: UTC
  version: v7.5.0
  cluster:
    name: serverless-cluster
    namespace: tidb-serverless
  pvReclaimPolicy: Delete
  enablePVReclaim: true
  enableDynamicConfiguration: true
  configUpdateStrategy: RollingUpdate
  clusterDeletionProtection: false
  multiAZ: true
  discovery: {}
  tlsCluster:
    enabled: true
  imagePullPolicy: IfNotPresent
  imagePullSecrets:
    - name: cp9-ecr-pull-385595570414
  helper:
    image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
  tikv:
    baseImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/serverless/tikv
    version: 5b7adce957a177fdebfa4e32740f31ca92301195
    serviceAccount: backup-restore
    replicas: 1
    maxFailoverCount: 3
    groupName: standard
    storageClassName: gp3-500
    nodeSelector:
      cp9.tidbcloud.com/starter-role: tikv
      serverless.tidbcloud.com/tier: standard
    tolerations:
      - key: cp9.tidbcloud.com/starter-role
        operator: Equal
        value: tikv
        effect: NoSchedule
      - key: serverless.tidbcloud.com/tier
        operator: Equal
        value: standard
        effect: NoSchedule
    storeLabels:
      - serverless.tidbcloud.com/tier
      - serverless.tidbcloud.com/zone
    requests:
      storage: 1Ti
    limits:
      memory: 13Gi
    podSecurityContext:
      sysctls:
        - name: net.core.somaxconn
          value: "32768"
    annotations:
      tidb.pingcap.com/sysctl-init: "true"
    evictLeaderTimeout: 72h
    statefulSetUpdateStrategy: RollingUpdate
    priorityClassName: tikv-critical-priority
    scalePolicy:
      scaleInParallelism: 128
      scaleOutParallelism: 1
    scaleInProtectionForNode: true
    enableConfigRollback: false
    pvReclaimDelayDuration: 24h
    failover:
      replicasPerFailureStore: 2
    canaryUpgrade:
      enabled: true
      clusterReadySeconds: 900
      coordinationSeconds: 300
      clusterPriority: [witness, standby, primary, p2, p1, p0, p3]
      stageReadySeconds: 300
      stagePercents: [10, 67, 100]
    autoScaling:
      enabled: true
      paused: false
      maxReplicas: 9
      cpu:
        maxThreshold: 0.7
        minThreshold: 0.3
        scaleInIntervalSeconds: 900
        scaleOutIntervalSeconds: 600
      storage:
        maxThreshold: 0.8
        minThreshold: 0.6
        scaleInIntervalSeconds: 500
        scaleOutIntervalSeconds: 1
    scaleInProtection:
      enabled: false
      storageThreshold: 0.8
      minReplicas: 1
    storeLimit:
      enabled: true
      unbalanceThreshold: 0.7
      normalRate: 64
      scalingInRate: 128
      scalingOutRate: 128
    upgradeDelayAfterEvictLeader: 10m
    endEvictLeaderDelayAfterReady: 10m
    hotCluster:
      cluster:
        name: tikv-r8g2xl-34v260403-p3
      enabled: true
      scaleToZero: true
      initialReplicas: 1
      cpuThreshold: 0.5
      hotDurationSeconds: 120
      hotRegionSeconds: 180
      coldRegionSeconds: 480
    additionalContainers:
      - name: tikv-log
        image: gcr.io/pingcap-public/dbaas/busybox:1.31.1
        command:
          - sh
          - -c
          - touch /var/lib/tikv-ebs/tikv.log; tail -n0 -F /var/lib/tikv-ebs/tikv.log;
        volumeMounts:
          - name: tikv-raft-db
            mountPath: /var/lib/tikv-ebs
    additionalVolumes:
      - name: server-cert
        secret:
          secretName: tikv-r8gxl-34v260403-p2-tikv-cluster-secret
    additionalVolumeMounts:
      - name: server-cert
        mountPath: /server-cert
    storageVolumes:
      - name: raft-db
        storageClassName: ebs-sc
        storageSize: 30Gi
        mountPath: /var/lib/tikv-ebs
      - name: raft-wal
        storageClassName: ebs-sc
        storageSize: 5Gi
        mountPath: /var/lib/tikv-raft-wal
    env:
      - name: DFS_PREFIX
        value: CP9_STARTER_SERVERLESS_PREFIX
      - name: DFS_S3_BUCKET
        value: CP9_STARTER_SERVERLESS_BUCKET
      - name: DFS_S3_REGION
        value: CP9_STARTER_SERVERLESS_REGION
      - name: MALLOC_CONF
        value: prof:true,prof_active:true
      - name: DFS_ALLOW_FALLBACK_LOCAL
        value: "0"
      - name: CA_PATH
        value: /server-cert/ca.crt
      - name: CERT_PATH
        value: /server-cert/tls.crt
      - name: KEY_PATH
        value: /server-cert/tls.key
    config: |
      enable-inner-key-offset = true

      [cdc]
        enable = true

      [coprocessor]
        enable-region-bucket = true
        region-split-keys = 50000000
        region-split-size = "500MiB"

      [dfs]
        remote-compactor-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/compact"

      [gc]
        disable-safe-point-fallback-v1 = true
        enable-safe-point-v2 = true

      [import]
        import-mode-timeout = "10m"
        num-threads = 1
        stream-channel-window = 128

      [kvengine]
        build-columnar = true
        build-fts-index = true
        gc-lock-extra-cf = true
        per-keyspace-configs = [{keyspace = 1, split-size-factor = 2.0}]
        remote-coprocessor-addr = "https://cop-worker-service.tidb-serverless.svc:19000/coprocessor"
        remote-worker-addr = "https://tikv-worker-service.tidb-serverless.svc:19000/coprocessor"
        [kvengine.ia]
          mem-cap = "16%"
          disk-cap = "71%"

      [log]
        level = "info"
        [log.file]
          filename = "/var/lib/tikv-ebs/tikv.log"
          max-backups = 10
          max-days = 5
          max-size = 300

      [raftstore]
        enable-kv-engine-meta-diff = true
        raftdb-path = "/var/lib/tikv-ebs/raft-db"

      [raft-engine]
        target-file-size = "512MiB"

      [rfengine]
        lightweight-backup = true
        rlog-cache-size-threshold = "16KiB"
        wal-chunk-target-file-size = "64MiB"
        wal-sync-dir = "/var/lib/tikv-raft-wal"

      [rocksdb]
        [rocksdb.defaultcf]
          bottommost-level-compression = "no"
        [rocksdb.writecf]
          bottommost-level-compression = "no"

      [security]
        ca-path = "/server-cert/ca.crt"
        cert-path = "/server-cert/tls.crt"
        key-path = "/server-cert/tls.key"
        [security.master-key]
          cipher-text = "CP9_STARTER_CSE_KEY_CIPHERTEXT"
          key-id = "CP9_STARTER_CSE_MASTER_KEY_ID"
          vendor = "CP9_STARTER_CSE_KEY_VENDOR"

      [server]
        grpc-concurrent-stream = 10240
        push-metrics-addr = "http://serverless-metering.serverless-metering:9091"
        push-metrics-interval = "30s"
        status-thread-pool-size = 2

      [storage]
        api-version = 2
        enable-ttl = true
        reserve-space = "0KiB"
        scheduler-pending-write-threshold = "1GiB"
        ttl-check-poll-interval = "24h"
        [storage.flow-control]
          enable = true
          hard-region-mem-limit = "256MB"
          soft-region-mem-limit = "128MB"
