provider: gke
controlplaneAWSProviderConfig: provider-aws-gr
controlplaneGCPProviderConfig: __CP9_GCP_PROJECT_ID__
clusterController:
  gcp:
    validationServerServiceAccount: __CP9_GCP_SERVICE_ACCOUNT_EMAIL__
  tikvPreStopImage: gcr.io/pingcap-public/dbaas/tidb-operator-prestop-checker:v2.0.0-beta.9
  configChange:
    accountEnv: __CP9_SESSION_NAME__
    activity:
      enabled: false
      activityHubEndpoint: "https://b9u12esjuf.execute-api.us-west-2.amazonaws.com"
      activityHubSource: "gitops"
      clinicEndpoint: "http://clinic-staging-1072990385.us-west-2.elb.amazonaws.com:8085"
  clusterAgent:
    chartPath: /etc/helm/cluster-agent
    agentImage:
      repo: gcr.io/pingcap-gardener/tidbcloud/cluster-agent
      tag: 6d8d69018efc1e714c79b5687e98afb4930405d6
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
  mysqlProtocolProbe:
    image: "gcr.io/pingcap-gardener/tidbcloud/mysql-readiness-probe:latest"
    binaryName: "mysql-readiness-probe"
    timeoutSeconds: 2
    # Will have a maximum of 150 minutes (900 * 10 = 9000s = 150m) to finish its startup
    periodSeconds: 10
    failureThreshold: 900
  audit:
    sidecarImage: gcr.io/pingcap-public/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
    baseImage: gcr.io/pingcap-gardener/tidbcloud/audit
    defaultTag: v1.0.3
network:
  k8sVersion: "1.35"
  proxy:
    auth0Audience: "staging-proxy-service"
    auth0Domain: "tidb-staging.us.auth0.com"
    enableDevMode: true
  region: us-west1
  zones:
    - us-west1-a
    - us-west1-b
    - us-west1-c
  o11yConfig:
    env: __CP9_SESSION_NAME__
    infraTenantID: infra-__CP9_SESSION_NAME__
    openAPIAddress: http://o11y-agent-control-server:8082
    createO11yInfraPath: /clusters
    deleteO11yInfraPath: /clusters
    getO11yInfraPath: /clusters
    pauseO11yInfraPath: /clusters
    resumeO11yInfraPath: /clusters
    auth0GetTokenURL: https://tidb-soc2.us.auth0.com/oauth/token
    auth0Audience: https://tidb-soc2.us.auth0.com/api/v2/
  configServiceEndpoint: __CP9_PRIMARY_CONFIG_CENTER_URL__
storageClassConfigFile: /etc/cluster-controller/extra/storageclass-config.yaml
instanceTypeConfigFile: /etc/cluster-controller/extra/instancetype-config.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: gke
    cloud.pingcap.com/region: us-west1
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "DoesNotExist"
fullManage:
  project: __CP9_SESSION_NAME__
  publicHostedZoneDomain: __CP9_DEDICATED_PUBLIC_DNS_DOMAIN__
  publicHostedZoneID: __CP9_DEDICATED_PUBLIC_DNS_ZONE_ID__
  serviceRoleARN: __CP9_GCP_AWS_ROLE_ARN__
  serviceRoleName: __CP9_GCP_AWS_ROLE_NAME__
  assumeRoleARN: __CP9_GCP_AWS_ROLE_ARN__
  componentPCAARN: __CP9_SESSION_PRODUCT_PCA_ARN__
  assumeRoleExternalID: __CP9_SESSION_NAME__
  gcpProjectID: __CP9_GCP_DATAPLANE_PROJECT_ID__
  gcpClusterServerSAName: __CP9_GCP_SERVICE_ACCOUNT_NAME__
featureGates:
  set_priority_class:
    all: true
  use_tidb_operator_v2:
    all: false
  remove_neg_annotation_for_existing_clusters:
    all: true
maxConcurrentReconciles:
  network: 10
  cluster: 10
  networkPeer: 10
  clusterNodeProtector: 10
  clusterNodeTagger: 10
  eksConnection: 10
  frpServer: 10
  privateLink: 10
  privateLinkEndpoint: 10
hibernation:
  enabled: false
  idleTimeThreshold: "30m"
ticdcServiceEndpoint: "http://ticdc-service-server:8080"