apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

transformers:
- |
  apiVersion: builtin
  kind: NamespaceTransformer
  metadata:
    name: namespace-transformer
    namespace: receipts
  setRoleBindingSubjects: none
  fieldSpecs:
  - path: metadata/namespace
    create: true

labels:
- pairs:
    app.kubernetes.io/instance: receipts
  includeSelectors: true
- pairs:
    app.kubernetes.io/part-of: receipts
  includeTemplates: true

resources:
- namespace.yaml
- secrets.yaml
- receipts.yaml
- postgres-cert.yaml
- ../dch-root-ca
- jenkins.yaml

configMapGenerator:
- name: receipts-config
  files:
  - config.toml
  options:
    labels:
      app.kubernetes.io/name: receipts
      app.kubernetes.io/component: receipts

patches:
- patch: |-
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: receipts
    spec:
      template:
        spec:
          containers:
          - name: receipts
            volumeMounts:
            - mountPath: /run/dch-ca
              name: dch-root-ca
              readOnly: true
            - mountPath: /run/secrets/receipts/postgresql
              name: postgresql-cert
              readOnly: true
          volumes:
          - name: dch-root-ca
            configMap:
              name: dch-root-ca
          - name: postgresql-cert
            secret:
              secretName: postgres-client-cert
              defaultMode: 0640