encryptionsalt: v1:n/7G8nG6nME=:v1:XYyAXoCroPm8xOn8:ls4wihqTeOf0gb8osUgJ94x1swgFHg==
config:
  aws:region: us-west-2
  aws-accounts:management-account: 380838443567
  aws-accounts:env: prod
  aws-accounts:eso-managed-eks:
    - env: prod
      account: "380838443567"
      clusters:
        - name: prod-base-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/B933E10AF742B506E365CB052045CF6D" # prod base
        - name: prod-seed-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/BE31AF90BC4113A58EF8B1861EC830A3" # prod seed us-west-2
        - name: prod-seed-us-east-1
          oidc: "oidc.eks.us-east-1.amazonaws.com/id/4B574F928ED5282F7A7D53EA4BD948F7" # prod seed us-east-1
        - name: prod-seed-eu-central-1
          oidc: "oidc.eks.eu-central-1.amazonaws.com/id/5F5CDAF86343F5F3680C12B01548838A" # prod seed eu-central-1
        - name: prod-seed-ap-northeast-1
          oidc: "oidc.eks.ap-northeast-1.amazonaws.com/id/DE40FBFE7AA84D151763C9CA301FA998" # prod seed ap-northeast-1
        - name: prod-seed-ap-northeast-2
          oidc: "oidc.eks.ap-northeast-2.amazonaws.com/id/E8E5E1DB3FCF8F456D217BC11E90CB54" # prod seed ap-northeast-2
        - name: prod-seed-ap-south-1
          oidc: "oidc.eks.ap-south-1.amazonaws.com/id/C53B026D799EA012CA6482C852F0DB13" # prod seed ap-south-1
        - name: prod-seed-ap-southeast-1
          oidc: "oidc.eks.ap-southeast-1.amazonaws.com/id/CA6E2273610D22329D14FDC174F9A85D" # prod seed ap-southeast-1
        - name: prod-seed-ap-southeast-3
          oidc: "oidc.eks.ap-southeast-3.amazonaws.com/id/32E18455E4707048894830B827CE8BDD" # prod seed ap-southeast-3
        # - name: prod-seed-ap-southeast-2
        #   oidc: "oidc.eks.ap-southeast-2.amazonaws.com/id/DBE90047F3A2BE62A9F5766EF522C4CD" # prod seed ap-southeast-2
  aws-accounts:accounts: # dataplane aws account
    - "380838443567" # default account, this is also a dataplane account
    - "143458967504" # dbaas-prod-dataplane-000
    - "730335266318" # dbaas-prod-dataplane-001
  aws-accounts:regions: # enabled aws regions
    - name: us-west-2
      controlplaneEks:
        name: prod-seed-us-west-2
        oidc: "oidc.eks.us-west-2.amazonaws.com/id/BE31AF90BC4113A58EF8B1861EC830A3"
    - name: us-east-1
      controlplaneEks:
        name: prod-seed-us-east-1
        oidc: "oidc.eks.us-east-1.amazonaws.com/id/4B574F928ED5282F7A7D53EA4BD948F7"
    - name: eu-central-1
      controlplaneEks:
        name: prod-seed-eu-central-1
        oidc: "oidc.eks.eu-central-1.amazonaws.com/id/5F5CDAF86343F5F3680C12B01548838A"
    - name: ap-northeast-1
      controlplaneEks:
        name: prod-seed-ap-northeast-1
        oidc: "oidc.eks.ap-northeast-1.amazonaws.com/id/DE40FBFE7AA84D151763C9CA301FA998"
    - name: ap-northeast-2
      controlplaneEks:
        name: prod-seed-ap-northeast-2
        oidc: "oidc.eks.ap-northeast-2.amazonaws.com/id/E8E5E1DB3FCF8F456D217BC11E90CB54"
    - name: ap-south-1
      controlplaneEks:
        name: prod-seed-ap-south-1
        oidc: "oidc.eks.ap-south-1.amazonaws.com/id/C53B026D799EA012CA6482C852F0DB13"
    - name: ap-southeast-1
      controlplaneEks:
        name: prod-seed-ap-southeast-1
        oidc: "oidc.eks.ap-southeast-1.amazonaws.com/id/CA6E2273610D22329D14FDC174F9A85D"
    - name: ap-southeast-3
      controlplaneEks:
        name: prod-seed-ap-southeast-3
        oidc: "oidc.eks.ap-southeast-3.amazonaws.com/id/32E18455E4707048894830B827CE8BDD"
    # - name: ap-southeast-2
    #   controlplaneEks:
    #     name: prod-seed-ap-southeast-2
    #     oidc: "oidc.eks.ap-southeast-2.amazonaws.com/id/DBE90047F3A2BE62A9F5766EF522C4CD"
  aws-accounts:gcp-regions:
    - name: asia-east1
      controlplaneEks:
        name: prod-seed-asia-east1
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-east1/clusters/prod-seed-asia-east1-a170eb2"
    - name: asia-east2
      controlplaneEks:
        name: prod-seed-asia-east2
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-east2/clusters/prod-seed-asia-east2-9f8bc1e"
    - name: asia-northeast1
      controlplaneEks:
        name: prod-seed-asia-northeast1
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-northeast1/clusters/prod-seed-asia-northeast1-85509b9"
    - name: asia-northeast2
      controlplaneEks:
        name: prod-seed-asia-northeast2
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-northeast2/clusters/prod-seed-asia-northeast2-26c8347"
    - name: asia-southeast1
      controlplaneEks:
        name: prod-seed-asia-southeast1
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-southeast1/clusters/prod-seed-asia-southeast1-f7a3983"
    - name: asia-southeast2
      controlplaneEks:
        name: prod-seed-asia-southeast2
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-southeast2/clusters/prod-seed-asia-southeast2-31e8208"
    - name: us-central1
      controlplaneEks:
        name: prod-seed-us-central1
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/us-central1/clusters/prod-seed-us-central1-e5cf570"
    - name: us-east4
      controlplaneEks:
        name: prod-seed-us-east4
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/us-east4/clusters/prod-seed-us-east4-3f0b01d"
    - name: us-west1
      controlplaneEks:
        name: prod-seed-us-west1
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/us-west1/clusters/prod-seed-us-west1-d5ae263"
    - name: europe-west3
      controlplaneEks:
        name: prod-seed-europe-west3
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/europe-west3/clusters/prod-seed-europe-west3-ae19d44"
    - name: asia-south1
      controlplaneEks:
        name: prod-seed-asia-south1
        oidc: "container.googleapis.com/v1/projects/dbaas-prod/locations/asia-south1/clusters/prod-seed-asia-south1-c9a942a"
    # Azure regions
    # oidc issuer url should end with / for aks oidc issuer
    - name: japaneast
      controlplaneEks:
        name: prod-japaneast
        oidc: "japaneast.oic.prod-aks.azure.com/6c865c34-8ff8-4792-bbca-8c9d15efb29d/37095495-4273-483d-8796-3d8dd2d82218/"
    - name: eastus2
      controlplaneEks:
        name: prod-eastus2
        oidc: "eastus2.oic.prod-aks.azure.com/6c865c34-8ff8-4792-bbca-8c9d15efb29d/b3857d37-1aa5-4373-9bb0-6ef9eba14ec2/"
    - name: southeastasia
      controlplaneEks:
        name: prod-southeastasia
        oidc: "southeastasia.oic.prod-aks.azure.com/6c865c34-8ff8-4792-bbca-8c9d15efb29d/46f0ff4a-7fa0-451b-9d9b-603c3ccaee61/"
  aws-accounts:base-cluster: organization/eks/prod-base-us-west-2
  aws-accounts:apiserver-stack: organization/infra-apiserver/prod
  aws-accounts:dbaas-dev-role-arn:
  - arn:aws:iam::380838443567:role/dbaas-central-role-prod
  # dedicated-regional-server need to assume to full-manager-service-role to AuthorizeSecurityGroupIngress for eks.
  - arn:aws:iam::380838443567:role/prod-ap-northeast-1-drs
  - arn:aws:iam::380838443567:role/prod-ap-northeast-2-drs
  - arn:aws:iam::380838443567:role/prod-ap-south-1-drs
  - arn:aws:iam::380838443567:role/prod-ap-southeast-1-drs
  # - arn:aws:iam::380838443567:role/prod-ap-southeast-2-drs
  - arn:aws:iam::380838443567:role/prod-eu-central-1-drs
  - arn:aws:iam::380838443567:role/prod-us-east-1-drs
  - arn:aws:iam::380838443567:role/prod-us-west-2-drs
  - arn:aws:iam::380838443567:role/prod-ap-southeast-3-def-drs
  aws-accounts:component-pca-arn: arn:aws:acm-pca:us-west-2:380838443567:certificate-authority/ed5106d3-0890-4af9-bd60-b6df4f6299ca
  aws-accounts:account-config.dedicated:
    - acctName: aws-380838443567
      projectIDs:
        - "1372813089206301327" # ossinsight
        - "1372813089198681286" # QA xaccount, reserved for testing
        # start all project exist network already run at this account.
        - "1"
        - "1311265642040528896"
        - "1323142873301913600"
        - "1326795615585177600"
        - "1369898587852378112"
        - "1372813089187041280"
        - "1372813089188151289"
        - "1372813089188211284"
        - "1372813089188931282"
        - "1372813089189081313"
        - "1372813089189141300"
        - "1372813089189561287"
        - "1372813089189711283"
        - "1372813089190071289"
        - "1372813089190401302"
        - "1372813089190551306"
        - "1372813089191151290"
        - "1372813089191241283"
        - "1372813089191811284"
        - "1372813089191931291"
        - "1372813089193131294"
        - "1372813089194541287"
        - "1372813089195741287"
        - "1372813089196011286"
        - "1372813089196101288"
        - "1372813089196101292"
        - "1372813089196101293"
        - "1372813089196881283"
        - "1372813089196911283"
        - "1372813089197451285"
        - "1372813089197991288"
        - "1372813089198021284"
        - "1372813089198591283"
        - "1372813089198591286"
        - "1372813089199281288"
        - "1372813089200331286"
        - "1372813089200781284"
        - "1372813089202191292"
        - "1372813089202371287"
        - "1372813089202701283"
        - "1372813089202851290"
        - "1372813089203451289"
        - "1372813089203691283"
        - "1372813089203901282"
        - "1372813089204171285"
        - "1372813089204201287"
        - "1372813089204291288"
        - "1372813089204351282"
        - "1372813089204501289"
        - "1372813089205701286"
        - "1372813089205761289"
        - "1372813089206001284"
        - "1372813089206301317"
        - "1372813089206301323"
        - "1372813089206331293"
        - "1372813089206331321"
        - "1372813089206331353"
        - "1372813089206331463"
        - "1372813089206331466"
        - "1372813089206361319"
        - "1372813089206361324"
        - "1372813089206361325"
        - "1372813089206421356"
        - "1372813089206451309"
        - "1372813089188121282" # network deleted but bucket still use old aws account
        - "1372813089189231282" # network deleted but bucket still use old aws account
        - "1372813089193791289" # network deleted but bucket still use old aws account
        # end all project exist network already run at this account.
    - acctName: aws-143458967504
      tenantIDs:
        # tenants have cluster(s) which status is in cleared or deletecompleted on aws account 143458967504
        - "1372813089199011282"
        - "1372813089208281359"
        - "1372813089208341412"
        - "1372813089190911285"
        - "1372813089208221493"
        - "1372813089206001286"
        - "1372813089208611456"
        - "1372813089188151296"
        - "1372813089208311537"
        - "1372813089208821887"
        - "1372813089195441286"
        - "1372813089209001464"
        - "1372813089209031615"
        - "1372813089191601283"
        - "1372813089208251343"
        - "1372813089209062317"
        - "1372813089208341734"
        - "1372813089208521826"
        - "1372813089200871284"
        - "1372813089198261287"
        - "1372813089209212394"
        - "1372813089190491281"
        - "1372813089209213994"
        - "1372813089209061633"
        - "1372813089209212842"
        - "1372813089209216104"
        - "1372813089203451282"
        - "1372813089209216184"
        - "1372813089194211283"
        - "1372813089209216946"
        - "1372813089209214865"
        - "1372813089208851780"
        - "1372813089209216864"
        - "1372813089209215550"
        - "1372813089209214792"
        - "1372813089209216306"
        - "1372813089191661281"
        - "1372813089209031895"
        - "1372813089209218394"
        - "1372813089209219376"
        - "1372813089209218683"
        - "1372813089208281461"
        - "1372813089209213103"
        - "1372813089209221149"
        # tenants who have no cluster but vpc peering
        - "1"
        - "1311265642040528896"
        - "1323142873301913600"
        - "1326795615585177600"
        - "1369898587852378112"
        - "1372813089187041280"
        - "1372813089187791289"
        - "1372813089188241297"
        - "1372813089188271295"
        - "1372813089189201287"
        - "1372813089188451286"
        - "1372813089190191282"
        - "1372813089190731293"
        - "1372813089191091284"
        - "1372813089189951285"
        - "1372813089192111281"
        - "1372813089193131282"
        - "1372813089192111289"
        - "1372813089194331289"
        - "1372813089195471292"
        - "1372813089195921289"
        - "1372813089197961283"
        - "1372813089198981282"
        - "1372813089199491284"
        - "1372813089200031287"
        - "1372813089200631282"
        - "1372813089200631285"
        - "1372813089200751285"
        - "1372813089202041283"
        - "1372813089204561282"
        - "1372813089204711289"
        - "1372813089205971284"
        - "1372813089206151281"
        - "1372813089187971283"
        - "1372813089207501285"
        - "1372813089207561288"
        - "1372813089191271282"
        - "1372813089208221443"
        - "1372813089208251389"
        - "1372813089208311516"
        - "1372813089208311888"
        - "1372813089208431372"
        - "1372813089208521398"
        - "1372813089191061283"
        - "1372813089208491502"
        - "1372813089208822262"
        - "1372813089209031581"
        - "1372813089209061345"
        - "1372813089209151520"
        - "1372813089209181630"
        - "1372813089209214590"
        # tenants who have no cluster but backup(s)
        - "1311274104996761600"
        - "1372813089187491289"
        - "1372813089192651285"
        - "1372813089201471287"
        - "1326455380288475136"
        - "1372813089188691285"
        - "1372813089205701281"
        - "1372813089208311964"
        - "1372813089205491282"
        - "1372813089188871292"
        - "1372813089209212300"
        - "1372813089209212816"
        - "1372813089198321288"
        - "1372813089208821527"
        - "1372813089208881819"
        - "1372813089209216927"
        - "1372813089209215098"
        - "1372813089209212808"
  # aws-accounts:manage-ecr-repo: "true"
  aws-accounts:account-config.default: aws-730335266318
  aws-accounts:ecr-regions:
    - "us-west-2"
    - "us-east-1"
    - "ap-northeast-1"
    - "ap-northeast-2"
    - "ap-southeast-1"
    - "ap-southeast-3"
    - "eu-central-1"
    # - "ap-southeast-2"
    - "ap-south-1"
  aws-accounts:prod-o11y-regional-server-role-arn-map:
    us-east-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-us-east-1-e177148
    us-west-2: arn:aws:iam::557537366020:role/regional-server-role-7705a47
    ap-northeast-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-ap-northeast-1-14d21fb
    ap-northeast-2: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-ap-northeast-2-36e136b
    ap-southeast-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-ap-southeast-1-f6ac72a
    ap-southeast-2: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-ap-southeast-2
    eu-central-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-eu-central-1-75001cd
    ap-south-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-ap-south-1