apiVersion: eks.infra.pingcap.com/v1alpha1
kind: Privatelink
metadata:
  name: privatelink-sample
spec:
  region: us-west-2
  vpcID: vpc-xxxxxxxxxx
  securityGroupIDs:
  - sg-xxxxxxxxxx
  subnetIDs:
  - subnet-xxxxxxxxxx
  service:
    target:
      name: nginx-test
      namespace: hanlins
  client:
    providerConfigRef: tenant-provider
    assumeRole: "arn:aws:iam::123456789012:role/tenant-role"
    externalID: "xxxxxx"