name: central
namespace:
enableBlackbox: false

url:
  grafanaServer: https://grafana.oauth.dev.shared.aws.tidbcloud.com
  billingBaseURL: http://billing:18888

cloud:
  aws:
    pcaArn: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
    pcaRegion: us-west-2
    phzId: Z329W86VRKILYT
    route53Secret: aws-route53-credentials
    account: "385595570414"
    dnsZone: shared.aws.tidbcloud.com
    region: us-west-2
    billingSqsID: <-- add it -->
    encryptionCmkArn: <-- add it -->
    dbaasBillingRoleArn: <-- add it -->
    certificateArn: <-- add it -->
    dbaasWebAclArn: <-- add it -->
  gcp:
    dnsZoneGCP: dev.gcp.tidbcloud.com
    phzIdGCP: "557076687191963248"
    gcpProject: pingcap-gardener
    gcpCertManagerRole: projects/pingcap-gardener/roles/devCertManager
    gcpWorkloadIdentityAudience: //iam.googleapis.com/projects/27323915999/locations/global/workloadIdentityPools/dev-dbaas/providers/dev-dbaas-eks-oidc
    gcpCentralSa: dev-nightly-central@pingcap-gardener.iam.gserviceaccount.com
    gcpBillingSa: dev-nightly-central@pingcap-gardener.iam.gserviceaccount.com
  Auth0Management:
    auth0ManagementClientID: 2N1OzujS8JMz5IZF2uico2kBIXquVrwA
  Auth0:
    auth0Domain: tidb-dev.us.auth0.com
    auth0Audience:
  BillingM2M:
    billingM2MAudience:
    billingM2MClientId:
  ProxyM2M:
    proxyM2MAudience:
    proxyM2MClientId:
  ManagementPortal:
    managementPortalAuth0Domain: tidb-dev.us.auth0.com
    managementPortalAuth0Audience: Z9mfdhVe0Nh3ylm6gr7OkwSUGLfToiux
    managementPortalAuth0ClientAudience: dev-management-portal-service
    managementPortalM2MServiceClientID: 24Nmxbw4i82eMBBdLzC8T0bgl0QuMQug
    managementPortalM2MServiceClientSecret: oVcvekNLJPyOtiICr9cFz8qgFVbHxruQjqZ4LyTyBCuv5-fCJlcMmz4xqSVE2fuW


image:
  certManagerRepository: gcr.io/pingcap-public/cert-manager
  centralImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/dbaas/xufei4/dbaas-central-server:4ef21e21
  lightningImage: gcr.io/pingcap-public/dbaas/tidb-lightning:v4.0-dbaas
  identityImage: gcr.io/pingcap-gardener/jenkins/gcp-web-identity:20201201
  billingImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/dbaas/xufei4/dbaas-billing:4ef21e21
  reporterImage: dbaas/nightly/dbaas-reporter:caefebcd3d0a6871d9921709a1e4462df5a58226
  proxyImage: dbaas/nightly/dbaas-proxy:caefebcd3d0a6871d9921709a1e4462df5a58226

resources:
  central:
    cpu: 500m
    memory: 500Mi
  billing:
    cpu: 100m
    memory: 200Mi

central:
  logLevel: debug
  enablePublicCloudCrd: false
  enableDBQueryLog: false
  frontendDNS: dev.tidbcloud.com
  centralCIDR: [0.0.0.0/0]
  snowflakeNodeId: 1
  autoBackupReservedDays: 7
  manualBackupReservedDays: 30
  managementPortalInitUserEmail: cloud@pingcap.com
  enableGracefulShutdownWebhookOnAWS: false
  centralRoleARN: arn:aws:iam::385595570414:role/dbaas-central-role-dev
  # centralAwsSecretId is the aws kms key id
  centralAwsSecretId: <--add it-->
  skipBanMyBuckets: false
  pocManualBackupReservedDays: 7
  pocAutoBackupReservedDays: 7
  onDemandAutoBackupReservedDays: 7

billing:
  stripeSecretKey: sk_test_wYPGpMKp7CmtKHMxV9XP4n4X00ko5fdgCW
  stripePublicKey: pk_test_gWaiNPVfkyvszRouS1SPQwcZ00lPITJYZY

mysql:
  host: db-tidb.nightly
  centralDbPassword: centraltest
  billingDbPassword: billingtest
  centralDbUser: centraltest
  billingDbUser: billingtest
  centralDB: centraltest
  billingDB: billingtest
  backupDbPassword: centraltest

gardener:
  env: dev
  gcpMasterType: n1-standard-2
  gcpMasterCount: 2
  awsMasterType: t3.medium
  awsMasterCount: 2
  nodeImage: ubuntu
  storageNodeImage: centos-tidb
  awsShootVpcCidr: 10.250.0.0/16
  awsWorkerCidr: 10.250.0.0/19,10.250.64.0/19,10.250.128.0/19
  awsPublicLBCidr: 10.250.32.0/20,10.250.96.0/20,10.250.160.0/20
  awsInternalLBCidr: 10.250.48.0/20,10.250.112.0/20,10.250.176.0/20
  gcpShootVpcCidr: 10.250.0.0/16
  gcpInternalLBCidr: 10.251.0.0/16

salesforce:
  enableSalesforce: false
  salesforceDomain: pingcap--sandbox1.my.salesforce.com
  salesforceUsername: integration@pingcap.com.sandbox1