encryptionsalt: v1:AhXhPx6cGnY=:v1:+hH6q5b0B1hRWuhf:UqbVE/D7yB6qV3LMUoHdAwV6Zx+ofg==
config:
  aws:region: us-west-2
  aws-accounts:management-account: 385595570414
  aws-accounts:env: staging
  aws-accounts:eso-managed-eks:
    - env: staging
      account: "385595570414"
      clusters:
        - name: staging-base-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/0566AE860409BCB9F6E591D32D2DBB43" # stg base
        - name: staging-seed-us-west-2
          oidc: "oidc.eks.us-west-2.amazonaws.com/id/08A3C9212150518ECA1B44480567F22C" # stg seed us-west-2
        - name: staging-seed-us-east-1
          oidc: "oidc.eks.us-east-1.amazonaws.com/id/EF045BFB7D7E418AEDF98C29C6334B49" # stg seed us-east-1
  aws-accounts:accounts: # dataplane aws accounts
    - "385595570414" # default account, this is also a dataplane account
    - "200683210682" # dbaas-infra-dev
    - "495580073302" # dp-infra-dev
    - "676546228356" # CLould QA
    - "448141240262" # qa-dp-testing-dev
    - "986330900858" # qa-system-testing-dev
    - "646528577659" # compute-dev
    - "013690006788" # qa-perf-testing-dev
    - "166681434446" # resilience-dev
    - "024848481520"
    - "487825215408" # aws-tidb-br-dev-test
    - "178851224597" # tikv-storage-dev
    - "804837308162" # dev-offline-afterworld
  aws-accounts:regions: # enabled aws regions
    - name: "us-west-2"
      controlplaneEks:
        name: staging-seed-us-west-2
        oidc: "oidc.eks.us-west-2.amazonaws.com/id/08A3C9212150518ECA1B44480567F22C"
    - name: "us-east-1"
      controlplaneEks:
        name: staging-seed-us-east-1
        oidc: "oidc.eks.us-east-1.amazonaws.com/id/EF045BFB7D7E418AEDF98C29C6334B49"
  aws-accounts:gcp-regions:
    - name: "us-central1"
      controlplaneEks:
        name: staging-seed-us-central1
        oidc: container.googleapis.com/v1/projects/pingcap-gardener/locations/us-central1/clusters/staging-seed-us-central1-6159679
    - name: "us-west1"
      controlplaneEks:
        name: staging-seed-us-west1
        oidc: container.googleapis.com/v1/projects/pingcap-gardener/locations/us-west1/clusters/staging-seed-us-west1-73cb72c
    # Azure regions
    # oidc issuer url should end with / for aks oidc issuer
    - name: eastus2
      controlplaneEks:
        name: staging-eastus2
        oidc: "eastus2.oic.prod-aks.azure.com/6c865c34-8ff8-4792-bbca-8c9d15efb29d/64732f9a-4718-4291-9119-9b2a156836d1/"
  aws-accounts:base-cluster: organization/eks/staging-base-us-west-2
  aws-accounts:staging-base-cluster: organization/eks/staging-base-us-west-2
  aws-accounts:apiserver-stack: organization/infra-apiserver/staging
  aws-accounts:staging-apiserver-stack: organization/infra-apiserver/staging
  aws-accounts:dbaas-dev-role-arn:
  - arn:aws:iam::385595570414:role/dbaas-dev
  # dataflow-service need assume to eks-full-manage role to access user's s3
  - arn:aws:iam::385595570414:role/dbaas-central-role-dev
  - arn:aws:iam::385595570414:role/dbaas-central-role-staging
  # regional-server need assume to full-manager-service-role to AuthorizeSecurityGroupIngress for eks
  - arn:aws:iam::385595570414:role/dev-us-west-2-drs
  - arn:aws:iam::385595570414:role/dev-us-east-1-drs
  - arn:aws:iam::385595570414:role/staging-us-west-2-drs
  - arn:aws:iam::385595570414:role/staging-us-east-1-drs
  aws-accounts:dev-o11y-regional-server-role-arn: arn:aws:iam::552185537300:role/regional-server-role-edf68ba
  aws-accounts:prod-o11y-regional-server-role-arn-map:
    us-east-1: arn:aws:iam::557537366020:role/regional-server-role-o11y-prod-regional-us-east-1-e177148
    us-west-2: arn:aws:iam::557537366020:role/regional-server-role-7705a47
  aws-accounts:component-pca-arn: arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545
  aws-accounts:sli-reporter-sqs-arn:
    - "arn:aws:sqs:us-west-2:385595570414:ingress-mim.fifo"
    - "arn:aws:sqs:us-west-2:385595570414:ingress-mim-tmp.fifo"
  aws-accounts:account-config.default: aws-385595570414
  aws-accounts:account-config.dedicated:
    - acctName: aws-200683210682 # TiDB Service Team
      projectIDs: []
      tenantIDs:
        - "1369847559691397265"
        - "1369847559692507481" # migration e2e
    - acctName: aws-495580073302
      projectIDs: []
      tenantIDs:
        - "1369847559691367424" # Data Platform Cloud
    - acctName: aws-676546228356 #cloud QA
      projectIDs: []
      tenantIDs:
        - "1369847559690857266"
    - acctName: aws-448141240262 # qa-dp-testing-dev
      projectIDs: []
      tenantIDs:
        - "1369847559691367433" # DP-QA
    - acctName: aws-986330900858 # qa-system-testing-dev
      projectIDs: []
      tenantIDs:
        - "1369847559691367400" # System Testing-QA
    - acctName: aws-646528577659 # compute-dev
      projectIDs: []
      tenantIDs:
        - "1369847559691397282" # TiDB cloud compute
    - acctName: aws-013690006788 # qa-perf-testing-dev
      projectIDs: []
      tenantIDs:
        - "1369847559691367379" # qa-Perf_test-1
        - "1369847559691367381" # qa-Perf_test-2
    - acctName: "aws-166681434446"
      projectIDs: []
      tenantIDs:
        - "1369847559691397297" # Resilience Team
  # aws-accounts:manage-ecr-repo: "true"
  #   aws-accounts:extra-principals:
  #     - "380838443567" # prod management account
  aws-accounts:ecr-regions:
    - "us-west-2"
    - "us-east-1"
  aws-accounts:sli-reporter-sqs-extra-principals:
    - "552185537300" # Autonomous team