tiinf:
  localMode: true
  grpc:
    enable: true
    port: 11001
  gin:
    enable: true
    port: 11000
  metrics:
    enable: true
    port: 9090
  trace:
    enable: true
  logger:
    enable: true
    level: "debug"

server:
  #  logLevel: debug
  enableSwaggerUI: true
  enableDBQueryLog: true
  enableMySQLTLS: true
  stage: nightly
  centralCIDR: [ 0.0.0.0/0 ]
  #  grpcPort: 11001
  #  metricsPort: 9090
  managementPortalInitUserEmail: cloud@pingcap.com
  saltSecret: Y3uFTK8CEcHvYE67
  secret:
    secretKey: arn:aws:secretsmanager:us-west-2:385595570414:secret:nightly-ms-secret-config-yaml-c076f30-CFsbcf
    region: us-west-2
  mockAuditLogSDK: true

proxy:
  auth0Domain: tidb-dev.us.auth0.com
  auth0ClientID: qetSCop5DfAOsK2S7WKTCre9iBvSdNmo
  auth0Audience: dev-proxy-service

grpc:
  coreSvcAddr: "localhost:20000"
  accountProviderSvcAddr: localhost:10000
  accountAclSvcAddr: localhost:10001
  rbacServerAddr: localhost:10000
mysql:
  host: gateway01.us-west-2.prod.aws.tidbcloud.com
  port: 4000
  user: R9ez7VWZfnXH5Lw.nightly_cm
  database: nightly_ms_central
  logLevel: info

grafana:
  server: https://grafana.oauth.dev.shared.aws.tidbcloud.com

gardener:
  gardenerProjectName: nightly-ms

aws:
  pcaArn: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
  accountID: 385595570414

infraAPI:
  # NOTE: directly specify kubeconfig file of infra-api
  # follow this article to get base eks kubeconfig file: https://github.com/tidbcloud/infra/blob/master/docs/operation-101.md#2-retrieve-kubeconfig
  kubeConfigPath: "/Users/chenfei/.infra-api/infra-api-kubeconfig.yaml"
  projectIDAsInfraProjectID: true

infra:
  region: us-west-2
  cmkArn: arn:aws:kms:us-west-2:385595570414:key/50148414-99da-4009-810c-aaf87b4d4bac

auth0:
  auth0ManagementClientID: 2N1OzujS8JMz5IZF2uico2kBIXquVrwA

  auth0Domain: tidb-dev.us.auth0.com
  auth0Audience: KiwWajLJ3pto8SsZ7F35NaqNhwnoRh1c

  managementPortalAuth0Domain: tidb-dev.us.auth0.com
  managementPortalAuth0Audience: Z9mfdhVe0Nh3ylm6gr7OkwSUGLfToiux
  managementPortalAuth0ClientAudience: dev-management-portal-service

rbacConfig:
  enable: true
  dryrun: true

degradation:
  enable: true
  disabled_rpc_methods:
    - "/central.ClusterService/CheckAuditLogPluginStatus"