#!/usr/bin/env bash
set -euo pipefail

source "$(dirname "${BASH_SOURCE[0]}")/common.sh"

export QOS="production"

cat <<EOF
landscape:
  ingressSourceRanges:
  # Bastion
  - 54.185.150.209/32
  # Base
  - 54.188.27.23/32
  - 44.231.162.131/32
  - 100.20.198.224/32
  # Seed AWS us-west-2
  - 44.228.18.33/32
  - 52.27.165.242/32
  - 44.229.240.125/32
  # Seed GCP us-west2
  - 34.82.228.7/32
  - 35.197.97.193/32
  # Seed AWS ap-southeast-1
  - 54.179.199.245/32
  - 54.179.200.40/32
  - 54.151.153.55/32
  # Seed AWS us-east-1
  - 54.160.183.243/32
  - 54.166.186.135/32
  - 54.91.191.4/32
  # Seed AWS eu-central-1
  - 18.198.94.7/32
  - 3.67.108.237/32
  - 3.69.209.34/32
  # Freetier AWS prod-us-east-1-f01
  - 18.232.214.42/32
  - 54.160.88.7/32
  - 18.204.147.39/32
  # Jenkins
  - 104.196.246.224/32
  - 35.233.250.206/32
  name: prod
  domain: prod.aws.tidbcloud.com
$(resource_base 2)
  cluster:
    kubeconfig: ./kubeconfig
    networks:
      nodes: "10.0.0.0/17"
      pods: "10.0.128.0/17"
      services: "172.20.0.0/16"
  etcd:
    backupBucket: $(garden_output prod backupBucketName)
    serviceAccount: $(garden_output prod etcdServiceAccount)
  iaas:
    - name: base
      type: aws
      region: us-west-2
      mode: soil
      zones:
        - us-west-2a
        - us-west-2b
        - us-west-2c
      credentials:
        accessKeyID: ""
        secretAccessKey: ""
      cluster:
        networks:
          nodes: "192.168.0.0/16"
          pods: "10.0.0.0/16"
          services: "172.20.0.0/16"
        kubeconfig:
$(eks_kubeconfig us-west-2 prod-base-us-west-2 10)

    - name: aws-us-west-2
      zones:
        - us-west-2c
        - us-west-2b
        - us-west-2a
$(eks_seed_spec us-west-2 prod-seed-us-west-2 6)

    - name: gcp-us-west1
      zones:
        - us-west1-a
        - us-west1-b
        - us-west1-c
$(gke_seed_spec prod us-west1 dbaas-prod prod-seed-us-west1-d5ae263 6)

    - name: aws-ap-southeast-1
      zones:
        - ap-southeast-1a
        - ap-southeast-1b
        - ap-southeast-1c
$(eks_seed_spec ap-southeast-1 prod-seed-ap-southeast-1 6)

    - name: aws-us-east-1
      zones:
        - us-east-1a
        - us-east-1b
        - us-east-1c
        - us-east-1d
        - us-east-1e
        - us-east-1f
$(eks_seed_spec us-east-1 prod-seed-us-east-1 6)

    - name: aws-eu-central-1
      zones:
        - eu-central-1a
        - eu-central-1b
        - eu-central-1c
$(eks_seed_spec eu-central-1 prod-seed-eu-central-1 6)

  cert-manager:
    email: cloud@pingcap.com
  dns:
    type: aws-route53
    roleArn: $(garden_output prod baseDnsControllerRole)
    credentials:
      accessKeyID: ""
      secretAccessKey: ""
EOF