apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- https://github.com/cert-manager/cert-manager/releases/download/v1.16.4/cert-manager.yaml
- cluster-issuer.yaml
- certificates.yaml
- dch-ca-issuer.yaml
- secrets.yaml
- jenkins.yaml

secretGenerator:
- name: zerossl-eab
  namespace: cert-manager
  envs:
  - zerossl.secret
  options:
    disableNameSuffixHash: true

- name: cloudflare
  namespace: cert-manager
  files:
  - cloudflare.api-token
  options:
    disableNameSuffixHash: true

patches:
- patch: |
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: cert-manager
      namespace: cert-manager
    spec:
      template:
        spec:
          dnsConfig:
            nameservers:
            - 172.30.0.1
          dnsPolicy: None
- patch: |
    - op: add
      path: /spec/template/spec/containers/0/args/-
      value: >-
        --dns01-recursive-nameservers-only
  target:
    group: apps
    version: v1
    kind: Deployment
    name: cert-manager