# Committed, non-sensitive deployment parameters for the disposable E2E fixtures.

STATE_BUCKET := date-integration-tfstate-118688039167-us-west-2
STATE_REGION := us-west-2
STATE_USE_LOCKFILE := true

AWS_ACCOUNT_ID := 118688039167
AWS_PROFILE := 118688039167-cp9
AWS_REGION := us-west-2
AWS_INSTANCE_TYPE := c8g.large
AWS_ENABLE_PULSAR := true
AWS_ENABLE_SCHEMA_REGISTRY := true
# 118688039167: producer; 131464424160: qa-dbaas-prod;
# 143458967504: dbaas-prod-dataplane-000; 200683210682: dbaas-infra-dev;
# 380838443567: pingcap-dbaas; 385595570414: PingCAP;
# 676546228356: qa-dbaas-dev; 730335266318: dbaas-prod-dataplane-001;
# 024848481520: auto-deployment-test.
AWS_PRIVATELINK_ALLOWED_PRINCIPAL_ARNS := ["arn:aws:iam::024848481520:root","arn:aws:iam::118688039167:root","arn:aws:iam::131464424160:root","arn:aws:iam::143458967504:root","arn:aws:iam::200683210682:root","arn:aws:iam::380838443567:root","arn:aws:iam::385595570414:root","arn:aws:iam::676546228356:root","arn:aws:iam::730335266318:root"]
AWS_S3_BACKUP_EXPORT_ACCESS_GRANTS := {"batchops-production":{"account_id":"730335266318","role_arn_pattern":"arn:aws:iam::730335266318:role/batchops-role-1372813089454584031-*"},"batchops-staging":{"account_id":"385595570414","role_arn_pattern":"arn:aws:iam::385595570414:role/batchops-role-1369847559694044034-*"}}
# Each account/external-ID pair may use STS to assume the fixture bucket's
# pre-provisioned S3 access role. That role can discover the bucket and manage
# multipart objects (including ACLs and tags) only under cdc/, backup-export/,
# and cluster-export/; it has no access outside the fixture bucket.
AWS_S3_ASSUME_ROLE_GRANTS := {"auto-deployment-test":{"account_id":"024848481520","external_id":"1369847559694040894"},"tidbcloud-production":{"account_id":"730335266318","external_id":"1372813089454584031"},"tidbcloud-staging":{"account_id":"385595570414","external_id":"1369847559694044034"},"staging-essential":{"account_id":"385595570414","external_id":"696e6672612d6170692ad3e0eafa58e477fe2346d10bd1f824"}}

GCP_PROJECT_ID := data-integration-team-int-8f71
GCP_REGION := us-west1
GCP_ZONE := us-west1-a
GCP_MACHINE_TYPE := e2-custom-2-4096
GCP_ENABLE_PULSAR := true
GCP_ENABLE_SCHEMA_REGISTRY := false
GCP_PSC_CONSUMER_PROJECT_IDS := ["data-integration-team-int-8f71","pingcap-gardener","tidbcloud-dev-000","tidbcloud-prod-000","tidbcloud-stg-000"]
# GitHub Actions federates to this identity to grant and revoke temporary GCS IAM for CDC E2E cases.
GCP_GCS_E2E_RUNNER_SERVICE_ACCOUNT := ticdc-e2e-test@pingcap-gardener.iam.gserviceaccount.com
GCP_GCS_BACKUP_EXPORT_ACCESS_GRANTS := {"storage-transfer-production":{"service_account_email":"project-606523988151@storage-transfer-service.iam.gserviceaccount.com"},"storage-transfer-service":{"service_account_email":"project-847807235028@storage-transfer-service.iam.gserviceaccount.com"}}
GCP_GCS_CDC_ACCESS_GRANTS := {}

AZURE_SUBSCRIPTION_ID := 7f070020-6caa-4321-a999-2d9cce2a6c17
AZURE_SUBSCRIPTION_NAME := data-integration-team-internal-azure
AZURE_LOCATION := japaneast
AZURE_KAFKA_PRIVATELINK_AVAILABILITY_ZONE := 1
AZURE_VM_SIZE := Standard_D2pls_v6
AZURE_ENABLE_PULSAR := true
AZURE_ENABLE_SCHEMA_REGISTRY := false
AZURE_BLOB_SAS_EXPIRY := 2036-01-01T00:00:00Z
AZURE_PRIVATELINK_SUBSCRIPTION_IDS := ["7f070020-6caa-4321-a999-2d9cce2a6c17","85b598b9-a080-4476-bc96-ba89e64f92d1"]

ALICLOUD_ACCOUNT_ID := 5083883504403318
ALICLOUD_ACCOUNT_NAME := data-integration-team-internal-alicloud
ALICLOUD_PROFILE := 5083883504403318-poweruser
ALICLOUD_REGION := ap-southeast-1
ALICLOUD_INSTANCE_TYPE := ecs.c9i.large
ALICLOUD_ENABLE_PULSAR := true
ALICLOUD_ENABLE_SCHEMA_REGISTRY := false
ALICLOUD_PRIVATELINK_ACCOUNT_IDS := ["5083883504403318","5753857577068077","5841052134823325"]