provider: eks
controlplaneAWSProviderConfig: provider-aws # used to provision global resources such as route53 recordset and pca certificate
# use spot instance for network/cluster to save cost in dev.
capacityType: SPOT
amiConfig:
  supportedVersions:
    - "1.30"
    - "1.31"
    - "1.32"
    - "1.33"
clusterController:
  aws:
    nodeRolePolicyFile: ./examples/eks-provider/node-policy.json
    nodeRoleManagedPolicies: # AWS managed policies to attach to node role
      - "arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy"
      - "arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly"
      - "arn:aws:iam::aws:policy/AWSDirectConnectFullAccess"
      - "arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy"
      # See https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-getting-started.html for more detail.
      - "arn:aws:iam::aws:policy/AmazonRoute53ResolverFullAccess"
    nodeUserdataSystemConfigurationFile: ./examples/eks-provider/node-userdata-system-configuration.toml
  clusterAgent:
    chartPath: ../helm-charts/cluster-agent
    agentImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-agent
      tag: efe328c7049c9c5a597b07eccc35303152d6beac
    pdPatrolImage:
      # only used to fetch pd-patrol.
      tag: master-c53f203
  configChange:
    accountEnv: dev
    activity:
      activityHubEndpoint: "https://b9u12esjuf.execute-api.us-west-2.amazonaws.com"
      activityHubSource: "gitops"
      activityHubSourceKey: "1017a0dafa234d0089be538661c5acef"
      clinicEndpoint: "http://clinic-dev-1923272735.us-west-2.elb.amazonaws.com:8085"
  tikvPreStopImage: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-operator-v2:prestop-checker-250226
  audit:
    sidecarImage: "385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/audit:81dc098e2ad54c6918e7c5aac80b052f532bc39f"
    sidecarCommand: ["/audit", "server", "--config", "/etc/audit/audit.yaml"]
network:
  k8sVersion: "1.31"
  certmanager:
    chartPath: ../helm-charts/certmanager/cert-manager-v1.10.0.tgz
    crdPaths:
      [../helm-charts/certmanager/cert-manager-crds-v1.10.0.yaml]
    controllerImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-controller
      tag: v1.10.0
    webhookImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-webhook
      tag: v1.10.0
    cainjectorImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/jetstack/cert-manager-cainjector
      tag: v1.10.0
  csi:
    attacher:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/sig-storage/csi-attacher
      tag: v3.1.0
    chartPath: ../helm-charts/csi/aws-ebs-csi-driver
    crdPaths: null
    driver:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/ebs-csi-driver/aws-ebs-csi-driver
      tag: "v1.6.1"
    livenessProbe:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/sig-storage/livenessprobe
      tag: v2.4.0
    nodeDriverRegistrar:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/sig-storage/csi-node-driver-registrar
      tag: v2.3.0
    provisioner:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/sig-storage/csi-provisioner
      tag: v2.2.2
    resizer:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/sig-storage/csi-resizer
      tag: v1.1.0
  awsLoadBalancerController:
    chartPath: ../helm-charts/aws-load-balancer-controller/aws-load-balancer-controller-1.6.2.tgz
    crdPaths:
      - ../helm-charts/aws-load-balancer-controller/aws-load-balancer-controller-crds.yaml
    controllerImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/amazon/aws-load-balancer-controller
      tag: v2.6.2
  clusterAutoscaler:
    chartPath: ../helm-charts/aws-cluster-auto-scaler/
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/autoscaling/cluster-autoscaler
      tag: "v1.25.0"
  ignoreDelete:
    - "Bucket"
  networkPolicyController:
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/network-policy-controller
      tag: "8f639e4d7a6a12428346adac577b9f3c432a94c5"
  podIdentityWebhook:
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/amazon/amazon-eks-pod-identity-webhook
      tag: v0.4.0
  calico:
    chartPath: ../helm-charts/calico/tigera-operator-v3.25.1.tgz
    registry: 385595570414.dkr.ecr.us-west-2.amazonaws.com
  elasticHTAP:
    namespace: tiflash-autoscale
    tiflashAutoscaler:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiflash-autoscaler
        tag: 7f22a5419c4f70c579927f1c0b96258adfdca7af
      supervisorImage:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiflash-autoscale-supervisor
        tag: dedicated-f27d650357ded5b410f6df7235d90625081f4fd5
    prometheus:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/prom/prometheus
        tag: v2.11.1
    openKruise:
      chartPath: ../helm-charts/openkruise/kruise-1.3.0.tgz
      managerImage:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/openkruise/kruise-manager
        tag: v1.3.0

  operator:
    advancedStatefulset:
      name: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/advanced-statefulset:v0.8.0
    chartPath: ../helm-charts/tidb-operator/tidb-operator-v1.7.0-alpha.7
    crdPaths:
      - ../helm-charts/tidb-operator/advanced-statefulset-crd.v1.yaml
      - ../helm-charts/tidb-operator/tidb-operator-v1.7.0-alpha.7.yaml
    operator:
      name: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-operator
      tag: v1.7.0-alpha.7
    tidbBackupManager:
      name: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tidb-backup-manager
      tag: v1.7.0-alpha.7
    dbMonitorProm:
      name: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/prom/prometheus
      tag: v2.11.1
    dbMonitorGrafana:
      name: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/grafana/grafana
      tag: 6.0.1
  proxy:
    enableDevMode: true
    chartPath: ../helm-charts/proxy/cluster-proxy
    proxyImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/cluster-proxy
      tag: 4744f94439eb94afedc9de3fcea550f7ec2d0d01
    gottyImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/gotty
      tag: "20211103"
    auth0Audience: "dev-proxy-service"
    auth0Domain: "tidb-dev.us.auth0.com"
    resources:
      memoryRequests: "100Mi"
      memoryLimits: "500Mi"
  clusterGateway:
    chartPath: ../helm-charts/kong
    crdPaths:
      - ../helm-charts/kong/crds/custom-resource-definitions.yaml
      - ../helm-charts/kong/crds/gateway-api-crd-standard-install.yaml
    allowedCidrs:
      - "0.0.0.0/0"
    kongImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/kong/kong
      tag: "3.6"
    kongIngressControllerImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/kong/kubernetes-ingress-controller
      tag: "3.1"
  dataflowAgent:
    chartPath: ../helm-charts/dataflow-agent/dataflow-agent.tgz
    dataflowAgentImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/dataflow-agent
      tag: 90ff1f3f07e31434a6e3f9fbc130513b5473c741
  tiflowOperator:
    chartPath: ../helm-charts/tiflow-operator/tiflow-operator.tgz
    crdPaths:
      - ../helm-charts/tiflow-operator/tiflow-operator/crds/pingcap.com_tiflowclusters.yaml
    tiflowOperatorImage:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiflow-operator
      tag: a901a8c04c789e00b9bb3bc752d63cc882b2fc95
    enable: true
  pcaIssuer:
    chartPath: ../helm-charts/pca-issuer/aws-privateca-issuer-1.2.0-fixed.tgz
    crdPaths:
      - ../helm-charts/pca-issuer/aws-pca-issuer-crd.yaml
      - ../helm-charts/pca-issuer/aws-pca-clusterissuer-crd.yaml
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/aws-pca-issuer
      tag: latest
  sliReporter:
    chartPath: ../helm-charts/sli-reporter/sli-reporter.tgz
    image:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/sli-reporter
      tag: v2.0.1
    awsRegion: "us-west-2"
    deliveryStreamName: "sli-dev-metrics"
    deliveryStreamRoleArn: "arn:aws:iam::552185537300:role/sli-cross-account-role"
  kubeStateMetrics:
    chartPath: ../helm-charts/kube-state-metrics/kube-state-metrics.tgz
    image:
      registry: 385595570414.dkr.ecr.us-west-2.amazonaws.com
      repo: third-party/kube-state-metrics/kube-state-metrics
      tag: v2.10.0
  nodeExporter:
    chartPath: ../helm-charts/node-exporter/node-exporter.tgz
    image:
      registry: 385595570414.dkr.ecr.us-west-2.amazonaws.com
      repo: third-party/prom/node-exporter
      tag: v1.6.1
  enableEksPublicAccess: true
  region: "us-west-2"
  zones:
    - "us-west-2a"
    - "us-west-2b"
    - "us-west-2c"
  o11yConfig:
    env: dev
    seedVectorURL: "http://seed-us-west-2-vector-aggregator.dev.shared.aws.tidbcloud.com:9090"
    seedVectorEpSvcName: "com.amazonaws.vpce.us-west-2.vpce-svc-08e7c21cd1e10efc1"
    openAPIAddress: "https://www.gs.us-west-2.aws.observability.tidbcloud.com"
    createO11yInfraPath: "/api/v1/clusters"
    deleteO11yInfraPath: "/api/v1/clusters"
    getO11yInfraPath: "/api/v1/clusters"
    pauseO11yInfraPath: "/api/v1/clusters"
    resumeO11yInfraPath: "/api/v1/clusters"
    auth0GetTokenURL: "https://tidb-soc2.us.auth0.com/oauth/token"
    auth0Audience: "https://tidb-soc2.us.auth0.com/api/v2/"
    infraTenantID: "infra-dev"
    effectiveRegion:
      - aws-us-west-2-*
      - aws-eu-central-1-*
      - aws-ap-south-1-*
      - aws-ap-southeast-1-*
      - aws-ap-northeast-1-*
      - aws-ap-northeast-2-*
      - aws-us-east-1-*
      - gcp-us-west1-*
      - gcp-asia-east1-*
      - gcp-us-central1-*
      - gcp-asia-northeast1-*
      - gcp-asia-southeast1-*
      - gcp-asia-northeast2-*
    lokiServerDns: "ab38fa67a29b444b2923a6713bde1db1-595817497.us-west-2.elb.amazonaws.com"
    eventExporter:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/resmoio/kubernetes-event-exporter
        tag: v1.0
      chartPath: ../helm-charts/event-exporter/event-exporter.tgz
    metricsAgent:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/victoriametrics/vmagent
        tag: v1.78.0
      chartPath: ../helm-charts/vmagent/victoria_metrics_agent.tgz
    clusterAgent:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/vector
        tag: 0.23.X-2-debian
    logAgent:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/vector
        tag: 0.23.X-2-debian
      chartPath: ../helm-charts/vector/vector.tgz
    loki:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/grafana/fluent-bit-plugin-loki
        tag: "main-8c1095a55-1.8.15-final-multi-arch"
      chartPath: ../helm-charts/fluent-bit
    so11y:
      image:
        repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/prom/prometheus
        tag: "v2.38.0"
      chartPath: ../helm-charts/prometheus/prometheus.tgz
  selfSignedCAConfig:
    tidbServerSelfSignedCAPath: examples/common/tidb-cluster-issuer-ca.yaml
configServiceEndpoint: "http://localhost:8090"
storageClassConfigFile: ./examples/eks-provider/aws-extra-storageclass.yaml
instanceTypeConfigFile: ./examples/eks-provider/aws-instance-type.yaml
predicate:
  matchLabels:
    cloud.pingcap.com/provider-type: eks
    cloud.pingcap.com/region: us-west-2
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "In"
      values:
        - "<YourName>"
override:
  overrideHelperImage: "385595570414.dkr.ecr.us-west-2.amazonaws.com/third-party/busybox:1.34.1"
  overrideRegistry: "385595570414.dkr.ecr.us-west-2.amazonaws.com"
  overrideRepoPrefix: "tidbcloud"
  overrideThirdPartyRepoPrefix: "third-party"
fullManage:
  project: "nightly"
  publicHostedZoneDomain: "clusters.dev.tidb-cloud.com"
  publicHostedZoneID: "Z001609810TV4E79YOP22"
  serviceRoleName: "full-manager-eks-role"
  assumeRoleName: "full-manager-service-role"
  assumeRoleExternalID: "123"
  readonlyAssumeRoleName: "readonly-dev-us-west-2-cluster-controller-assumed-role"
  awsClusterServerRoleARN: "arn:aws:iam::385595570414:role/dev-us-west-2-cluster-server"
  componentPCAARN: "arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545"
tiflowCluster:
  disableLocalConfig: false
  localConfigRevisionRef:
  master:
    defaultSpecCode: master-share-2c2g
    expirationMinute: 10
    shareDb:
      enableProxy: false
      proxyImage: "gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.1.0"
      # set your rds service name and password
      # 'privateLinkServiceName' is deprecated, use 'serviceName' instead.
      privateLinkServiceName: com.amazonaws.vpce.us-west-2.vpce-svc-0ed6bddacf42948b1
      serviceName: com.amazonaws.vpce.us-west-2.vpce-svc-0ed6bddacf42948b1
      port: 3306
      user: admin
      password:
    imageConfig:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiflow
      tag: fbe610f1840dc62f1a61205d44fa7f06d1a1a595
  executor:
    imageConfig:
      repo: 385595570414.dkr.ecr.us-west-2.amazonaws.com/tidbcloud/tiflow
      tag: fbe610f1840dc62f1a61205d44fa7f06d1a1a595
maxConcurrentReconciles:
  network: 10
  cluster: 10
  networkPeer: 10
  clusterNodeProtector: 10
  eksConnection: 10
  frpServer: 10
  privateLink: 10
  privateLinkEndpoint: 10