provider: aks
providerConfig:
  crossplaneProvider: "85b598b9-a080-4476-bc96-ba89e64f92d1"
  accountId: "85b598b9-a080-4476-bc96-ba89e64f92d1"
acrResourceGroup: "container_registry_rg"
regionConfig:
  name: eastus
  zones:
    - "1"
    - "2"
    - "3"
env: dev
appBoxConfig:
  nodeConfig:
    # set default maxPods for gke, can be override by nodepools
    maxPodsPerNode: 16
  k8sVersion: "1.30"
  enableK8sPublicAccess: true
  apiserverPublicAccessCidrs:
    - "0.0.0.0/0"
  enableArtifactRegistry: false
  adminGroupObjectIDs:
    - a422f92e-abb6-4706-8ee7-995c7dc79ce3 # pingcap group
    - 4ebb0811-d1ee-47a9-a46a-8ebb23e1fcd6 # tidbcloud-dev group
predicate:
  matchExpressions:
    - key: "cloud.pingcap.com/reconciler"
      operator: "NotIn"
      values:
        - e2e-test
resourceLabels:
  cloud.pingcap.com/bizType: dedicated
  tags.tidbcloud.com/environment: dev
  tags.tidbcloud.com/servicetype: dedicated
  tags.tidbcloud.com/usedby: dbaas-control-plane-shoot
gcConfig:
  checkIdleInterval: 5m
  idleTimeThreshold: 24h
  idleTimeRetention: 1h
componentPCAARN: "arn:aws:acm-pca:us-west-2:385595570414:certificate-authority/4668d5cc-1042-4371-9ff4-72ab9493c545"
clusterControlServiceEndpoint: "http://cluster-control-service.cluster-service"
globalCrossplaneProviderConfig: provider-aws-gr # used to provision global resources such as route53 recordset and pca certificate
publicHostedZoneDomain: "clusters.eastus.dev.azure.tidb-cloud.com"
publicHostedZoneID: "Z001609810TV4E79YOP22"
publicHostedZoneResourceGroup: "dev-eastus-controlplane"
dataPlaneAccountNamespace: regional-server-system
selfSignedCAConfig:
  tidbServerSelfSignedCAPath: /etc/configs/tidb-server-cluster-issuer-ca.yaml