encryptionsalt: v1:WEyw21vCJAE=:v1:xXNfll5iMFevJrjw:AnQ6sENmfZInFXuH18EonUQOFuL04g==
config:
  aws:region: us-west-2
  aws-accounts:management-account: "385595570414"
  aws-accounts:env: dev
  aws-accounts:eso-managed-eks:
    - env: dev
      account: "385595570414"
      clusters:
        - name: dev-base-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/000BD46AE9B425477A559A1381C535C0" # dev base
        - name: dev-seed-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/08A90AF17F4B5D536F92CE37E4B2BCF5" # dev seed us-west-2
        - name: dev-seed-us-east-1
          oidc: "oidc.eks.us-east-1.amazonaws.com/id/4114CF02B6F6B871FE44C55E50AC0E99" # dev seed us-east-1
    - env: staging
      account: "385595570414"
      clusters:
        - name: staging-base-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/0566AE860409BCB9F6E591D32D2DBB43" # stg base
        - name: staging-seed-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/08A3C9212150518ECA1B44480567F22C" # stg seed us-west-2
        - name: staging-us-east-1
          oidc: "oidc.eks.us-east-1.amazonaws.com/id/EF045BFB7D7E418AEDF98C29C6334B49" # stg seed us-east-1
  aws-accounts:accounts: # dataplane aws accounts
    - "385595570414" # default account, this is also a dataplane account
    - "200683210682" # dbaas-infra-dev
    - "495580073302" # dp-infra-dev
    - "676546228356" # CLould QA
    - "448141240262" # qa-dp-testing-dev
    - "986330900858" # qa-system-testing-dev
    - "646528577659" # compute-dev
    - "013690006788" # qa-perf-testing-dev
    - "166681434446" # resilience-dev
    - "487825215408" # aws-tidb-br-dev-test
    - "178851224597" # tikv-storage-dev
    - "804837308162" # dev-offline-afterworld
  aws-accounts:regions: # enabled aws regions
    - name: "us-west-2"
      controlplaneEks:
        name: dev-seed-us-west-2
        oidc: "oidc.eks.us-west-2.amazonaws.com/id/08A90AF17F4B5D536F92CE37E4B2BCF5"
    - name: "us-east-1"
      controlplaneEks:
        name: dev-seed-us-east-1
        oidc: "oidc.eks.us-east-1.amazonaws.com/id/4114CF02B6F6B871FE44C55E50AC0E99"
  aws-accounts:gcp-regions:
    - name: "us-west2"
      controlplaneEks:
        name: dev-seed-us-west2-9f7b847
        oidc: "container.googleapis.com/v1/projects/pingcap-gardener/locations/us-west2/clusters/dev-seed-us-west2-9f7b847"
    - name: "us-west1"
      controlplaneEks:
        name: dev-seed-us-west1
        oidc: "container.googleapis.com/v1/projects/pingcap-gardener/locations/us-west1/clusters/dev-seed-us-west1-3137aff"
    # Azure regions
    # oidc issuer url should end with / for aks oidc issuer
    - name: eastus
      controlplaneEks:
        name: dev-eastus
        oidc: "eastus.oic.prod-aks.azure.com/6c865c34-8ff8-4792-bbca-8c9d15efb29d/caed7640-89a5-45b1-8f67-3bb590430970/"
  aws-accounts:base-cluster: organization/eks/dev-base-us-west-2
  aws-accounts:staging-base-cluster: organization/eks/staging-base-us-west-2
  aws-accounts:apiserver-stack: organization/infra-apiserver/dev
  aws-accounts:staging-apiserver-stack: organization/infra-apiserver/staging
  aws-accounts:dbaas-dev-role-arn:
  - arn:aws:iam::385595570414:role/dbaas-dev
  # dataflow-service need assume to eks-full-manage role to access user's s3
  - arn:aws:iam::385595570414:role/dbaas-central-role-dev
  - arn:aws:iam::385595570414:role/dbaas-central-role-staging
  # dedicated-regional-server needs to assume to full-manager-service-role to AuthorizeSecurityGroupIngress for eks.
  - arn:aws:iam::385595570414:role/dev-us-west-2-drs
  - arn:aws:iam::385595570414:role/dev-us-east-1-drs
  - arn:aws:iam::385595570414:role/staging-us-west-2-drs
  - arn:aws:iam::385595570414:role/staging-us-east-1-drs
  aws-accounts:dev-o11y-regional-server-role-arn: arn:aws:iam::552185537300:role/regional-server-role-edf68ba
  aws-accounts:prod-o11y-regional-server-role-arn-map:
    us-east-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-us-east-1-e177148
    us-west-2: arn:aws:iam::557537366020:role/regional-server-role-7705a47
  aws-accounts:component-pca-arn: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
  aws-accounts:sli-reporter-sqs-arn:
    - "arn:aws:sqs:us-west-2:385595570414:ingress-mim.fifo"
    - "arn:aws:sqs:us-west-2:385595570414:ingress-mim-tmp.fifo"
  aws-accounts:account-config.dedicated:
    - acctName: aws-200683210682 # TiDB Service Team
      projectIDs: []
      tenantIDs:
        - "30060"
    - acctName: aws-495580073302 # dp-infra-dev
      projectIDs: []
      tenantIDs:
        - "30073" # Cai's Org
    - acctName: "aws-646528577659" # compute-dev
      projectIDs: []
      tenantIDs:
        - "60179" # TiDB Cloud Elastic Compute Team
    - acctName: "aws-166681434446"
      projectIDs: []
      tenantIDs:
        - "60178" # Resilience Team
  aws-accounts:account-config.default: aws-385595570414
  # aws-accounts:manage-ecr-repo: "true"
  #   aws-accounts:extra-principals:
  #     - "380838443567" # prod management account
  aws-accounts:ecr-regions:
    - "us-west-2"
    - "us-east-1"
  aws-accounts:sli-reporter-sqs-extra-principals:
    - "552185537300" # Autonomous team