# E2E Test Configuration Template
# Copy this file to e2e_config.yaml and fill in the values before running e2e tests.

service:
  # serverURL: The Global Server (GS) URL for the observability platform.
  # This is the main API endpoint for cluster management and integration task APIs.
  serverURL: https://www.gs.us-west-2.aws.observability-staging.pingcap.cloud

  # regionalURL: The Regional Server (RS) URL.
  # Used for region-specific APIs like alert rules and external cluster operations.
  regionalURL: https://www.rs.us-west-2.aws.observability-staging.pingcap.cloud

  # dsURL: The Data Server (DS) URL.
  # Used for data-plane operations. Not the same as dsAuth URL.
  dsURL: https://www.ds.us-west-2.aws.observability-staging.pingcap.cloud

  # vendor: Cloud provider identifier (e.g., gcp, aws, azure).
  vendor: gcp

  # region: Cloud region where the test cluster resides (e.g., us-west1, us-west-2).
  region: us-west1

  # userARN: The IAM identity (ARN or service account) used for agent access.
  # For GCP this is a service account email; for AWS this is an IAM role ARN.
  userARN: regional-server@<project>.iam.gserviceaccount.com

  # enableNextGen: Whether to enable NextGen (TiDB-X) cluster tests.
  enableNextGen: false

  # agentAccessAccount: The agent access account ID for NextGen clusters.
  # Leave empty if enableNextGen is false.
  agentAccessAccount: ""

  # enableServerless: Whether to enable serverless cluster tests.
  enableServerless: false

  # specs: List of monitor spec IDs to use in tests.
  # At least one spec is required for cluster creation tests.
  specs: ["spec.for.test", "t1g.micro"]

# auth0: Auth0 credentials for obtaining an access token.
# The token is used as the Authorization header for API requests.
auth0:
  # grantType: OAuth2 grant type. Typically "client_credentials" for M2M auth.
  grantType: client_credentials

  # clientID: Auth0 application client ID.
  clientID: ""

  # clientSecret: Auth0 application client secret.
  clientSecret: ""

  # audience: Auth0 API audience URL.
  audience: https://tidb-soc2.us.auth0.com/api/v2/

# dsAuth: DS (Data Server) authentication configuration.
# Used for integration task (monitoring pipeline) e2e tests.
# The test authenticates via DS /client/auth using a GitHub PAT
# to obtain a bearer token for all integration task API calls.
dsAuth:
  # url: The DS auth base URL. The /client/auth path is appended automatically.
  # For production: https://www.ds.us-west-2.aws.observability.tidbcloud.com/
  url: https://www.ds.us-west-2.aws.observability.tidbcloud.com/

  # githubToken: A GitHub Personal Access Token (PAT) with sufficient permissions.
  # This token is sent to DS /client/auth to obtain a bearer token.
  # IMPORTANT: Do not commit real tokens. Use environment variables or secrets management.
  githubToken: ""

# rdsConfig: (Optional) MySQL/RDS connection config for database-level test verification.
# Uncomment and fill in if you need database checks in tests.
# rdsConfig:
#   host: ""
#   port: 3306
#   user: ""
#   password: ""
#   database: ""