encryptionsalt: v1:XUg2JmuZqsU=:v1:L7/Wf9RvytRTyavq:b+m2Fi7WZYlZlyzt2Q9Arj6eYkxgsw==
config:
  aws:region: us-west-2

  eks:basicInfo:
    product: observability
    service: no-service-for-global
    env: dev
    region: us-west-2
    amiId: ami-05e18b6e52b45091e
    elbAccountIdForS3BucketPolicy: 797873946194
    clusterType: global
    clusterNamePrefix: o11y
    awsTenant: autonomous-service-observability
    awsProfile: o11y-storage-dev
    primaryDomain: pingcap.cloud
  
  eks:admin-roles:
    - autonomous-cent-stor-dev
    - cicd-role
    - autonomous-o11y-sre
  eks:eksAddonCoreDnsVersion: v1.8.7-eksbuild.1
  eks:eksAddonKubeProxyVersion: v1.22.6-eksbuild.1
  eks:eksAddonVPCCNIVersion: v1.11.0-eksbuild.1
  eks:eksAddonAwsEbsCsiDriver: v1.6.1-eksbuild.1
  eks:enabled-apiserver-audit-log: "true"
  eks:k8s-version: "1.22"

  eks:eksServiceIamRoleArgs:
    roleNamePrefix: autonomous-o11y-gs
    managedPolicyArns:
      - arn:aws:iam::aws:policy/AmazonEKSClusterPolicy
    services:
      - eks.amazonaws.com
  eks:clusterControlNodeGroupIamRoleArgs:
    roleNamePrefix: autonomous-o11y-gs-control
    policyName: autonomous-o11y-gs-control
    managedPolicyArns:
      - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
      - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
      - arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
      - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
    services:
      - ec2.amazonaws.com
  eks:clusterDataNodeGroupIamRoleArgs:
    roleNamePrefix: autonomous-o11y-gs-data
    policyName: autonomous-o11y-gs-data
    managedPolicyArns:
      - arn:aws:iam::aws:policy/AmazonEKSWorkerNodePolicy
      - arn:aws:iam::aws:policy/AmazonEC2ContainerRegistryReadOnly
      - arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy
      - arn:aws:iam::aws:policy/AmazonEKS_CNI_Policy
    services:
      - ec2.amazonaws.com
  eks:controlNodeGroupConfig:
    instanceType: m5.xlarge
    desiredCapacity: 2
    minSize: 2
    maxSize: 26
    nodeUserData: |
      #!/bin/bash -xe
      # install ssm-agent
      yum install -y https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm
      # set ulimits
      cat <<EOF > /etc/security/limits.d/99-tidb.conf
      root        soft        nofile        1000000
      root        hard        nofile        1000000
      root        soft        core          unlimited
      root        soft        stack         10240
      EOF
    labels:
      node_type: control
    type: controlplane
  eks:dataNodeGroupConfig:
    instanceType: m5.xlarge
    desiredCapacity: 0
    minSize: 0
    maxSize: 0
    nodeUserData: |
      #!/bin/bash -xe
      # install ssm-agent
      yum install -y https://s3.amazonaws.com/ec2-downloads-windows/SSMAgent/latest/linux_amd64/amazon-ssm-agent.rpm
      # set ulimits
      cat <<EOF > /etc/security/limits.d/99-tidb.conf
      root        soft        nofile        1000000
      root        hard        nofile        1000000
      root        soft        core          unlimited
      root        soft        stack         10240
      EOF
    labels:
      node_type: worker
    type: dataplane

  eks:nginxServiceNLBAllowedPrincipals:
    - arn:aws:iam::385595570414:root
    - arn:aws:iam::385595570414:role/root