provider: gke
providerConfig:
  crossplaneProvider: __CP9_GCP_PROJECT_ID__
  accountId: __CP9_GCP_DATAPLANE_PROJECT_ID__
regionConfig:
  name: us-west1
  zones:
    - us-west1-a
    - us-west1-b
    - us-west1-c
env: __CP9_SESSION_NAME__
appBoxConfig:
  nodeConfig:
    # set default maxPods for gke, can be override by nodepools
    maxPodsPerNode: 16
  k8sVersion: "1.35"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - "__CP9_GCP_RUNTIME_CIDR__"
  enableArtifactRegistry: true
  gkeMaintenanceExclusionTimeWindow:
    autoUpdate: true
  authorizedSubjects:
    - __CP9_GCP_SERVICE_ACCOUNT_EMAIL__
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: __CP9_SESSION_NAME__
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-seed
  tags.tidbcloud.com/cp9-managed: "true"
  tags.tidbcloud.com/cp9-owner: __CP9_OWNER__
  tags.tidbcloud.com/cp9-session: __CP9_SESSION_NAME__
  tags.tidbcloud.com/cp9-ttl: __CP9_TTL_EXPIRES_AT__
gcConfig:
  checkIdleInterval: 5m
  nodePoolGC:
    enabled: true
    autoApproveDeletion: true
    scanInterval: 1h
  idleTimeThreshold: 24h
  idleTimeRetention: 1h
componentPCAARN: "__CP9_SESSION_PRODUCT_PCA_ARN__"
clusterControlServiceEndpoint: "http://cluster-control-server:8080"
o11yRegionalServiceEndpoint: "http://o11y-agent-control-server:8082"
ticdcServiceEndpoint: "http://ticdc-service-server:8080"
o11yRegionalServerTestConfig:
  enable: false
globalCrossplaneProviderConfig: provider-aws-gr # used to provision global resources such as route53 recordset and pca certificate
publicHostedZoneDomain: "__CP9_DEDICATED_PUBLIC_DNS_DOMAIN__"
publicHostedZoneID: __CP9_DEDICATED_PUBLIC_DNS_ZONE_ID__
dataPlaneAccountNamespace: cp9-dedicated
featureGates:
  allocate_more_nats:
    all: true
  allocate_shared_bucket:
    all: false
  deploy_tidb_operator_v2:
    all: true
  o11y_new_agent_controller:
    all: true