repositorySets:
  kernel:
    - source: us.gcr.io/pingcap-public/tidbx/pd
      name: tidbcloud/pd
      tags: &kernel_tags
        allow:
          - ^v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+$
          - ^v26\.\d+\.\d+-nextgen$
        deny:
          - ".*-dev$"
    - source: us.gcr.io/pingcap-public/tidbx/tiflash
      name: tidbcloud/tiflash
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tidb
      name: tidbcloud/tidb
      tags:
        allow:
          - master-next-gen
          - master-b94006d-nextgen # temporary tag for PR 69606; remove after rollout/validation (no later than 2026-08-12)
          - v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+
          - v26\.\d+\.\d+-nextgen
          - release-nextgen-202603
          - v26.3.4-5-g874fe7500a-nextgen  # for poc, can be delete after 7.30
        deny:
          - ".*-dev$"
    - source: us.gcr.io/pingcap-public/tidbx/br
      name: tidbcloud/br
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/dumpling
      name: tidbcloud/dumpling
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tidb-lightning
      name: tidbcloud/tidb-lightning
      tags: *kernel_tags
    - source: us.gcr.io/pingcap-public/tidbx/tikv
      name: tidbcloud/tikv
      tags:
        allow:
          - ^v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+$
          - ^v26\.\d+\.\d+-nextgen$
          - release-nextgen-20251011-86c776d
        deny:
          - ".*-dev$"
    - source: us.gcr.io/pingcap-public/tidbx/ticdc
      name: tidbcloud/ticdc
      tags:
        allow:
          - ^v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+$
          - ^v26\.\d+\.\d+-nextgen$
          - pull-5551-9b337c7-nextgen-testing # temporary tag; remove after rollout/validation (no later than 2026-08-30)
        deny:
          - ".*-dev$"
    - source: us.gcr.io/pingcap-public/tidbx/dm
      name: tidbcloud/dm
      tags:
        allow:
          - ^v26\.\d+\.\d+-nextgen$
          - release-nextgen-202603-9fbdebe
    - source: us.gcr.io/pingcap-public/tidbx/tiproxy
      name: tidbcloud/tiproxy
      tags:
        allow:
          - ^v\d+\.\d+\.\d+-nextgen\.\d{6}\.\d+$
          - ^v26\.\d+\.\d+(-nextgen)?$
        deny:
          - ".*-dev$"
  kernel-devbuild:
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/pingcap/tidb/images/tidb-server
      name: tidbcloud/tidb
      tags:
        allow:
          - v26\.3\.4-1-gcdf93b8c96-nextgen
          - v26\.3\.4-5-g874fe7500a-nextgen
          - pull-67412-next-gen # temporary tag for PR 67412; remove after rollout/validation (no later than 2026-04-30)
          - pull-67431-next-gen # temporary tag for PR 67431; remove after rollout/validation (no later than 2026-04-30)
          - v26\.3\.4-8-g5468ebd703-nextgen
          - v26\.3\.4-9-g9896721309-nextgen
          - v26\.3\.4-10-g033266574b-nextgen
          - v26\.3\.4-13-g7f617ade05-nextgen
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/pingcap/tidb/images/dumpling
      name: tidbcloud/dumpling
      tags:
        allow:
          - exp-export-packed-aws-profile-proof-3f1742a # image used for batch exporting
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/tikv/tikv/image
      name: tidbcloud/tikv
      tags:
        allow:
          - pull-5645-41af0d7-nextgen # image used for batch exporting
          - juncen-exp-export-packed-csv-aws-profile-proof-21e88dd-nextgen # image used for batch exporting
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/pingcap/ticdc/image
      name: tidbcloud/ticdc
      tags:
        allow:
          - pull-5591-1aa8064-nextgen # temporary tag for PR 5551; remove after rollout/validation (no later than 2026-08-30)
        deny:
          - ".*-dev$"

  feature-importinto:
    - source: us-docker.pkg.dev/pingcap-testing-account/dev/pingcap/tiflow/images/dm
      name: tidbcloud/dm
      tags:
        allow:
          - feature-importinto
  o11y-vector:
    - source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/vector
      name: tidbcloud/vector
      tags:
        allow:
          - "0.49-0331-feec02b-ng"
          - "0.49-0331-feec02b"
          - "0.49-0605-6865bfc"
          - "0.49-0605-6865bfc-ng"
          - "0.49-0720-4c68515"
          - "0.49-0720-4c68515-ng"
          - "0.49-0820-c465793"
          - "0.49-0820-c465793-ng"
  prometheus-config-reloader:
    - source: quay.io/prometheus-operator/prometheus-config-reloader
      name: third-party/prometheus-operator/prometheus-config-reloader
      tags:
        allow:
          - v0.82.1
          - v0.84.1
  replace-node-warmup:
    - source: registry.k8s.io/pause
      name: third-party/pause
      tags:
        allow:
          - "3.9"

targetRegistries:
  - name: 380838443567.dkr.ecr.us-west-2.amazonaws.com
    type: ECR
    includeRepositorySets:
      - kernel
      - kernel-devbuild
      - feature-importinto
  - name: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com
    type: ACR
    includeRepositorySets:
      - kernel
      - kernel-devbuild
      - o11y-vector
      - prometheus-config-reloader
      - replace-node-warmup
  - name: tidbcloud-prod-registry.ap-southeast-1.cr.aliyuncs.com
    type: ACR
    repositories:
      - name: tidbcloud/dataservice-dataapp
        source: 557537366020.dkr.ecr.us-west-2.amazonaws.com/dataservice-dataapp
      - name: tidbcloud/traffic-replay-controller
        source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/traffic-replay-controller
      - name: tidbcloud/traffic-replay-server
        source: 380838443567.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/traffic-replay-server
  - name: tidbcloudprod.azurecr.io
    type: AZCR
    includeRepositorySets:
      - kernel
      - kernel-devbuild

defaults:
  ratelimit:
    min: 100
    retry: 15m
  parallel: 5