cloud: update the network steps according to the latest UI

[qiancai]

First-time contributors' checklist

• I've signed the Contributor License Agreement, which is required for the repository owners to accept my contribution.

What is changed, added or deleted? (Required)

Update the private endpoint steps for external services

Which TiDB version(s) do your changes apply to? (Required)

Tips for choosing the affected version(s):

By default, CHOOSE MASTER ONLY so your changes will be applied to the next TiDB major or minor releases. If your PR involves a product feature behavior change or a compatibility change, CHOOSE THE AFFECTED RELEASE BRANCH(ES) AND MASTER.

For details, see tips for choosing the affected versions.

• master (the latest development version)
• v9.0 (TiDB 9.0 versions)
• v8.5 (TiDB 8.5 versions)
• v8.1 (TiDB 8.1 versions)
• v7.5 (TiDB 7.5 versions)
• v7.1 (TiDB 7.1 versions)
• v6.5 (TiDB 6.5 versions)

What is the related PR or file link(s)?

• This PR is translated from:
• Other reference link(s):

AI agent involvement

• The changes in this PR were primarily made by an AI agent on behalf of the PR author.

Do your changes match any of the following descriptions?

• Delete files
• Change aliases
• Need modification after applied to another branch
• Might cause conflicts after applied to another branch

Summary by CodeRabbit

• Documentation
  • Updated IP access list instructions with clearer steps for adding, editing, and deleting entries.
  • Revised private endpoint setup guides across AWS, Alibaba Cloud, Google Cloud, and Azure to reflect the current console workflow.
  • Clarified endpoint sharing modes, account-prefix requirements, and domain management procedures.
  • Updated private link connection prerequisites and navigation for external services.
  • Updated Kafka configuration terminology and private endpoint references in data migration guides.
  • Simplified VPC peering terminology for consistency.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

The documentation updates add IP access-list procedures, replace legacy Dataflow private-link instructions with external-services private endpoint workflows, document endpoint modes and lifecycle actions, and simplify VPC peering terminology.

Changes

IP access-list documentation

Layer / File(s)	Summary
IP access-list operations tidb-cloud/configure-ip-access-list.md	The guide now documents adding custom, current, or unrestricted IP entries, editing entries, and deleting entries with confirmation.

Private endpoint workflow documentation

Layer / File(s)	Summary
External-services endpoint creation workflows tidb-cloud/premium/set-up-sink-private-endpoint-premium.md, tidb-cloud/set-up-sink-private-endpoint.md, tidb-cloud/serverless-private-link-connection-to-*.md, tidb-cloud/serverless-private-link-connection-to-self-hosted-*.md, tidb-cloud/migrate-from-mysql-using-data-migration.md, tidb-cloud/migrate-incremental-data-from-mysql-using-data-migration.md	The guides now reference provider-specific external-services private endpoint areas, actions, and dialogs.
Endpoint modes and lifecycle operations tidb-cloud/serverless-private-link-connection.md	The guide now describes exclusive and shared endpoint behavior and updates attachment, detachment, and deletion instructions.

VPC peering terminology

Layer / File(s)	Summary
VPC peering definition tidb-cloud/set-up-vpc-peering-connections.md	The definition now uses “VPC peering” instead of “VPC peering connection.”

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• pingcap/docs#23361: Updates the same premium private endpoint workflow documentation, including AWS MSK Provisioned guidance.

Suggested reviewers: lilin90

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: updating cloud network steps to match the latest UI.
Description check	✅ Passed	The description states the change, identifies TiDB 8.5 as the target version, and includes all required template sections.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 2

⚔️ Resolve merge conflicts 💡

• Resolve merge conflict in branch unify-networking-UI-naming

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 4

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 067fd9ba-c219-4e32-a609-b67469ef8dbf

📥 Commits

Reviewing files that changed from the base of the PR and between 9c03d3a and d727ed7.

📒 Files selected for processing (11)

• tidb-cloud/configure-ip-access-list.md
• tidb-cloud/premium/set-up-sink-private-endpoint-premium.md
• tidb-cloud/serverless-private-link-connection-to-alicloud-rds.md
• tidb-cloud/serverless-private-link-connection-to-amazon-msk.md
• tidb-cloud/serverless-private-link-connection-to-aws-confluent.md
• tidb-cloud/serverless-private-link-connection-to-aws-rds.md
• tidb-cloud/serverless-private-link-connection-to-self-hosted-kafka-in-alicloud.md
• tidb-cloud/serverless-private-link-connection-to-self-hosted-kafka-in-aws.md
• tidb-cloud/serverless-private-link-connection.md
• tidb-cloud/set-up-sink-private-endpoint.md
• tidb-cloud/set-up-vpc-peering-connections.md

[coderabbitai]

Actionable comments posted: 2

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: a4f08b80-b9f7-4699-95d8-91cd697cb79e

📥 Commits

Reviewing files that changed from the base of the PR and between 8cd2fc1 and 07526e9.

📒 Files selected for processing (5)

• tidb-cloud/migrate-from-mysql-using-data-migration.md
• tidb-cloud/migrate-incremental-data-from-mysql-using-data-migration.md
• tidb-cloud/premium/set-up-sink-private-endpoint-premium.md
• tidb-cloud/serverless-private-link-connection.md
• tidb-cloud/set-up-sink-private-endpoint.md

[sanshuiyijing]

lgtm

[ti-chi-bot]

@sanshuiyijing: adding LGTM is restricted to approvers and reviewers in OWNERS files.

Details

In response to this:

lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[qiancai]

/approve

[ti-chi-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: qiancai

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [qiancai]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment