repositorySets:
  kernel:
    - source: us.gcr.io/pingcap-public/tidbx/pd
      name: tidbcloud/pd
      tags: &kernel_tags
        allow:
          - ^master-nextgen$
          - ^master-[0-9a-f]{6,10}-nextgen$
          - ^release-nextgen-202[0-9]{3,5}$
          - ^release-nextgen-202[0-9]{3,5}-[0-9a-f]{6,10}$
          - ^v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+$
          - ^v26\.\d+\.\d+-nextgen$
    - source: us.gcr.io/pingcap-public/tidbx/tiflash
      name: tidbcloud/tiflash
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tidb
      name: tidbcloud/tidb
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/br
      name: tidbcloud/br
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/dumpling
      name: tidbcloud/dumpling
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tidb-lightning
      name: tidbcloud/tidb-lightning
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tikv
      name: tidbcloud/tikv
      tags:
        allow:
          - cloud-engine-nextgen
          - cloud-engine-[0-9a-f]{6,10}-nextgen
          - ^release-nextgen-(20251011|202603)$
          - ^release-nextgen-(20251011|202603)-[0-9a-f]{6,10}$
          - v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+
          - v26\.\d+\.\d+-nextgen
    - source: us.gcr.io/pingcap-public/tidbx/ticdc
      name: tidbcloud/ticdc
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/dm
      name: tidbcloud/dm
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tiproxy
      name: tidbcloud/tiproxy
      tags:
        allow:
          - ^release-nextgen-(20251023|202603)$
          - ^release-nextgen-(20251023|202603)-[0-9a-f]{6,10}$
          - v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+(-\d+-g[0-9a-f]+)?
          - ^v26\.\d+\.\d+(-nextgen)?(-\d+-g[0-9a-f]+)?$
  kernel-devbuild:
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/tikv/tikv/image
      name: tidbcloud/tikv
      tags:
        allow:
          - v8.5.4-nextgen.202510.1-70-.*
        deny:
          - ".*-dev$"
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/pingcap/tidb/images/tidb-server
      name: tidbcloud/tidb
      tags:
        allow:
          - pull-67412-next-gen # temporary tag for PR 67412; remove after rollout/validation (no later than 2026-04-30)
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/pingcap/tiflow/images/dm
      name: tidbcloud/dm
      tags:
        allow:
          - release-nextgen-202603-4ab31e9 # temporary tag for DM Premium regression; remove after validation
  kernel-fts:
    - source: us.gcr.io/pingcap-public/tidbx/tidb
      name: tidbcloud/tidb
      tags:
        allow:
          - feature-fts-nextgen
          - feature-fts-[0-9a-f]{6,10}-nextgen
    - source: us.gcr.io/pingcap-public/tidbx/tiflash
      name: tidbcloud/tiflash
      tags:
        allow:
          - feature-fts-nextgen
          - feature-fts-[0-9a-f]{6,10}-nextgen
targetRegistries:
  - name: 385595570414.dkr.ecr.us-west-2.amazonaws.com
    type: ECR
    includeRepositorySets:
      - kernel
      - kernel-fts
      - kernel-devbuild
  - name: tidbcloud-dev-registry.ap-southeast-1.cr.aliyuncs.com
    type: ACR
    includeRepositorySets:
      - kernel
      - kernel-devbuild
    repositories:
      - name: tidbcloud/dataservice-dataapp
        source: 552185537300.dkr.ecr.us-west-2.amazonaws.com/dataservice-dataapp
        tags:
          allow:
            - ".*-\\d{8}-.*"
          deny:
            - ".*-dev$"
      - name: tidbcloud/traffic-replay-controller
        source: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/traffic-replay-controller
      - name: tidbcloud/traffic-replay-server
        source: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/traffic-replay-server
  - name: tidbclouddev.azurecr.io
    type: AZCR
    includeRepositorySets:
      - kernel
      - kernel-devbuild

defaults:
  ratelimit:
    min: 100
    retry: 15m
  parallel: 5