repositorySets: tidbRepos: - name: tidbcloud/aws-shared-provider-datacleaner-ng source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/aws-shared-provider-datacleaner-ng tags: allow: - 6c829a363e2a1d395985b1fac66022ff9d217c28 - name: third-party/amazon/aws-load-balancer-controller source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/amazon/aws-load-balancer-controller tags: allow: - v2.11.0 - v2.13.4 - v2.17.1 - name: third-party/bloomberg/goldpinger source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/bloomberg/goldpinger tags: allow: - 3.10.3 - name: third-party/tennix/node-pinger source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/tennix/node-pinger tags: allow: - v0.1.1 - v0.1.2 - name: third-party/autoscaling/cluster-autoscaler source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/autoscaling/cluster-autoscaler tags: allow: - v1.25.0 - v1.33.0 - v1.34.0 - name: third-party/busybox source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/busybox tags: allow: - 1.34.1 - name: third-party/jetstack/cert-manager-cainjector source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-cainjector tags: allow: - v1.18.2 - name: third-party/jetstack/cert-manager-controller source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-controller tags: allow: - v1.18.2 - name: third-party/jetstack/cert-manager-webhook source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-webhook tags: allow: - v1.18.2 - name: third-party/k1n1h4h4/cert-manager-aws-privateca-issuer source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/k1n1h4h4/cert-manager-aws-privateca-issuer tags: allow: - v1.6.0 - v1.7.0 - v1.7.1 - name: third-party/dns/k8s-dns-node-cache source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/dns/k8s-dns-node-cache tags: allow: - 1.23.1 - name: third-party/external-dns/external-dns source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/external-dns/external-dns tags: allow: - v0.20.0 - name: third-party/kong/kong source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/kong/kong tags: allow: - "3.6" - name: third-party/kong/kubernetes-ingress-controller source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/kong/kubernetes-ingress-controller tags: allow: - "3.1" - 3.5.3 - name: third-party/kube-state-metrics/kube-state-metrics source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/kube-state-metrics/kube-state-metrics tags: allow: - v2.10.0 - v2.16.0 - name: third-party/rancher/local-path-provisioner source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/rancher/local-path-provisioner tags: allow: - v0.0.32 - name: third-party/prometheus/node-exporter source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/prometheus/node-exporter tags: allow: - v1.9.1 - name: third-party/metrics-server/metrics-server source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/metrics-server/metrics-server tags: allow: - v0.7.2 - v0.8.0 - v0.8.1 - name: third-party/resmoio/kubernetes-event-exporter source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/resmoio/kubernetes-event-exporter tags: allow: - v1.0 - v1.7 - name: third-party/victoriametrics/operator source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/victoriametrics/operator tags: allow: - v0.62.0 - name: third-party/kaasops/vector-operator source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/kaasops/vector-operator tags: allow: - v0.3.0 - name: third-party/vbeaucha/kubelet-volume-stats-exporter source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/third-party/vbeaucha/kubelet-volume-stats-exporter tags: allow: - v1.0.0 - name: tidbcloud/audit-kong source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/audit-kong tags: allow: - v0.1.1 - v0.1.2 - name: tidbcloud/audit-ng source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/audit-ng tags: allow: - v0.12.0 - name: tidbcloud/cluster-agent-ng source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-agent-ng tags: allow: - v0.17.0 - name: tidbcloud/service-proxy source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/service-proxy tags: allow: - v0.7.0 - name: tidbcloud/dataplane-exporter source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/dataplane-exporter tags: allow: - v0.1.0 - name: tidbcloud/dataflow-agent-ng source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/dataflow-agent-ng tags: allow: - ng-agent-v20260721 - ng-agent-v20260825 - name: tidbcloud/pd source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/pd tags: allow: - v26.3.1-nextgen - name: tidbcloud/sli-reporter source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/sli-reporter tags: allow: - v2.4.0 - name: tidbcloud/tidb source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb tags: allow: - v26.3.3-nextgen - name: tidbcloud/tidb-operator source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-operator tags: allow: - v2.2.0-alpha.5 - v2.2.0-alpha.6 - v2.2.0-alpha.7 - v2.2.0-alpha.8 - name: tidbcloud/tidb-backup-manager source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-backup-manager tags: allow: - v2.2.0-alpha.5 - v2.2.0-alpha.6 - v2.2.0-alpha.7 - v2.2.0-alpha.8 - name: tidbcloud/tidb-operator-prestop-checker source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-operator-prestop-checker tags: allow: - v2.2.0-alpha.5 - v2.2.0-alpha.6 - v2.2.0-alpha.7 - v2.2.0-alpha.8 - name: tidbcloud/tiflash source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiflash tags: allow: - v26.3.1-nextgen - name: tidbcloud/tikv source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tikv tags: allow: - v26.3.4-nextgen - name: tidbcloud/ticdc source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/ticdc tags: allow: - ^v8[.]5[.]4-nextgen([.][a-zA-Z0-9]+)+$ deny: - .*-dev$ - name: tidbcloud/br source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/br tags: allow: - ^v8[.]5[.]4-nextgen([.][a-zA-Z0-9]+)+$ deny: - .*-dev$ - name: tidbcloud/dm source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/dm tags: allow: - feature-importinto - name: tidbcloud/tiproxy source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiproxy tags: allow: - v26.3.1 - name: tidbcloud/vmagent source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/vmagent tags: allow: - v1.122.2-cluster - name: tidbcloud/vector source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/vector tags: allow: - 0.37.1-2d79df-debian - 0.37.1-2d79df-debian-perl-nice - 0.37.1-nextgen-505e5a-debian - 0.37.1-nextgen-505e5a-debian-perl-nice - 0.49-copr-1120-4-st-ng-debian - 0.49-1124-ng-conprof-debian - 0.49-0331-feec02b-ng - 0.49-0720-4c68515 - 0.49-0720-4c68515-ng - 0.49-0820-c465793 - 0.49-0820-c465793-ng o11yRepos: - name: third-party/jimmidyson/configmap-reload source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/jimmidyson/configmap-reload tags: allow: - v0.3.0 - name: third-party/victoriametrics/operator source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/victoriametrics/operator tags: allow: - v0.62.0 - name: third-party/devopsnirvana/kubernetes-volume-autoscaler source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/devopsnirvana/kubernetes-volume-autoscaler tags: allow: - 1.0.8 - name: third-party/grafana/loki source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/grafana/loki tags: allow: - 3.5.3 - name: third-party/kiwigrid/k8s-sidecar source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/kiwigrid/k8s-sidecar tags: allow: - 1.30.9 - name: third-party/external-dns/external-dns source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/external-dns/external-dns tags: allow: - v0.18.0 - name: tidbcloud/eventrouter source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/eventrouter tags: allow: - v0.5.1 - name: third-party/jetstack/cert-manager-cainjector source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-cainjector tags: allow: - v1.17.4 - v1.19.3 - name: third-party/jetstack/cert-manager-controller source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-controller tags: allow: - v1.17.4 - v1.19.3 - name: third-party/jetstack/cert-manager-webhook source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-webhook tags: allow: - v1.17.4 - v1.19.3 - name: third-party/jetstack/cert-manager-acmesolver source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-acmesolver tags: allow: - v1.17.4 - v1.19.3 - name: third-party/jetstack/cert-manager-startupapicheck source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-startupapicheck tags: allow: - v1.17.4 - name: third-party/prometheus-operator/prometheus-config-reloader source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/prometheus-operator/prometheus-config-reloader tags: allow: - v0.84.1 - name: third-party/prometheus-operator/prometheus-operator source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/prometheus-operator/prometheus-operator tags: allow: - v0.57.0 - name: third-party/prometheus/alertmanager source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/prometheus/alertmanager tags: allow: - v0.28.1 - name: third-party/prometheus/node-exporter source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/prometheus/node-exporter tags: allow: - v1.9.1 - name: third-party/prometheus/prometheus source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/prometheus/prometheus tags: allow: - v2.53.5 - name: third-party/autoscaling/cluster-autoscaler source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/autoscaling/cluster-autoscaler tags: allow: - v1.33.0 - name: third-party/kube-state-metrics/kube-state-metrics source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/kube-state-metrics/kube-state-metrics tags: allow: - v2.16.0 - v2.18.0 - name: third-party/velero/velero source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/velero/velero tags: allow: - v1.16.2 - name: third-party/velero/velero-plugin-for-aws source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/velero/velero-plugin-for-aws tags: allow: - v1.12.2 - name: third-party/velero/velero-plugin-for-microsoft-azure source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/velero/velero-plugin-for-microsoft-azure tags: allow: - v1.12.2 - name: third-party/bitnami/kubectl source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/bitnami/kubectl tags: allow: - 1.33-debian-12 - name: third-party/fluxcd/helm-controller source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/fluxcd/helm-controller tags: allow: - v1.3.0 - v1.5.4 - name: third-party/fluxcd/source-controller source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/third-party/fluxcd/source-controller tags: allow: - v1.7.4 - name: deadmanswatch source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/deadmanswatch tags: allow: - sha-891e26c - v1.0.1-e7bfbe5 - name: ingress-nginx/controller source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/ingress-nginx/controller tags: allow: - v1.11.1 - v1.12.5-0e51fd5e4 - v1.12.5-63ffa460a - name: ingress-nginx/kube-webhook-certgen source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/ingress-nginx/kube-webhook-certgen tags: allow: - v1.4.1 - v1.6.1 - name: azure-application-gateway/kubernetes-ingress source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/azure-application-gateway/kubernetes-ingress tags: allow: - 1.9.8 - name: observability-regional-data-server source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-regional-data-server tags: allow: - 2026-01-06-cd1be767782bcc96f4ac4028373956b57bedc3c7 - 2026-02-11-35aa19aa243282a1a32e5064cd1cdd8be25a51e3 - 2026-05-12-e5a584a06d6f922746fabf068ac0f17be7876c6e - name: observability-regional-server source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-regional-server tags: allow: - 2026-01-06-cd1be767782bcc96f4ac4028373956b57bedc3c7 - 2026-02-11-35aa19aa243282a1a32e5064cd1cdd8be25a51e3 - 2026-05-12-e5a584a06d6f922746fabf068ac0f17be7876c6e - name: observability-ops-server source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-ops-server tags: allow: - e5a584a - name: observability-regional-server/vmbackup source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/vmbackup tags: allow: - v3-base-1.102.1 - name: observability/vmbackupmanager source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability/vmbackupmanager tags: allow: - f82e69ce98fb871f5996a1f9ea92e4480943b68c - name: victoriametrics/vminsert source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/victoriametrics/vminsert tags: allow: - v1.122.2-cluster - v1.122.2-cluster-hotfix-20260305 - name: victoriametrics/vmselect source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/victoriametrics/vmselect tags: allow: - v1.122.2-cluster - v1.122.2-cluster-hotfix-20260305 - name: victoriametrics/vmstorage source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/victoriametrics/vmstorage tags: allow: - v1.122.2-cluster - v1.122.2-cluster-hotfix-20260305 - name: victoriametrics/vmalert source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/victoriametrics/vmalert tags: allow: - v1.122.2-cluster - v1.122.2-cluster-hotfix-20260305 - name: deltalake-ops-server source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/deltalake-ops-server tags: allow: - "20251226" - name: diagnosis-query source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/diagnosis-query tags: allow: - 20260728-dc2404d - 20260810-5bc3c23 - 20260828-bb10b4b - name: o11ydiagnosis source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/o11ydiagnosis tags: allow: - 20260720-82a7153 - 20260813-e5738d5 - 20260828-5e27027 - name: diagnosis-compute source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/diagnosis-compute tags: allow: - 20260817-f1880477 - 20260826-d74d8770 - name: observability-regional-task-collector source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-regional-task-collector tags: allow: - v24 - v25 - v26 - name: observability-charts/alertmanager-regional source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/alertmanager-regional tags: allow: - 0.1.1 - name: observability-charts/aws-load-balancer-controller source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/aws-load-balancer-controller tags: allow: - 1.13.4 - name: observability-charts/cert-manager source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/cert-manager tags: allow: - v1.15.3-pingcap.1 - name: observability-charts/cluster-autoscaler source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/cluster-autoscaler tags: allow: - 9.46.6 - name: observability-charts/diagnosis-query source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/diagnosis-query tags: allow: - 0.1.2 - 0.1.5 - name: observability-charts/eventrouter source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/eventrouter tags: allow: - 0.1.1 - name: observability-charts/external-dns source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/external-dns tags: allow: - 1.18.0 - name: observability-charts/ingress-azure source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/ingress-azure tags: allow: - 1.9.8 - name: observability-charts/ingress-nginx source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/ingress-nginx tags: allow: - 4.12.6 - name: observability-charts/kube-prometheus-stack source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/kube-prometheus-stack tags: allow: - 36.2.2 - 36.2.3 - 36.2.4 - name: observability-charts/loki source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/loki tags: allow: - 6.29.0 - 6.55.0 - name: observability-charts/o11y-mixin source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/o11y-mixin tags: allow: - 1.0.6 - 1.0.7 - name: observability-charts/o11ydiagnosis-deltalake source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/o11ydiagnosis-deltalake tags: allow: - 0.1.3 - name: observability-charts/ops-server source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/ops-server tags: allow: - 0.2.7 - 0.2.8 - name: observability-charts/regional-server source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/regional-server tags: allow: - 1.0.11 - 1.0.12 - 1.0.13 - name: observability-charts/vector source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/vector tags: allow: - 0.12.0 - name: observability-charts/velero source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/velero tags: allow: - 10.1.1 - name: observability-charts/victoria-metrics-operator source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/victoria-metrics-operator tags: allow: - 0.51.4 - 0.66.2 - name: observability-charts/vmcluster source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/vmcluster tags: allow: - 0.1.6 - 0.1.5 - name: observability-charts/volume-autoscaler source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/observability-charts/volume-autoscaler tags: allow: - 1.0.7 - name: metrics-status-collector source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/metrics-status-collector tags: allow: - 20260311 targetRegistries: - name: type: ACR includeRepositorySets: - tidbRepos - o11yRepos defaults: ratelimit: min: 100 retry: 15m parallel: 10