67 lines
1.4 KiB
YAML
67 lines
1.4 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
transformers:
|
|
- |
|
|
apiVersion: builtin
|
|
kind: NamespaceTransformer
|
|
metadata:
|
|
name: namespace-transformer
|
|
namespace: receipts
|
|
setRoleBindingSubjects: none
|
|
fieldSpecs:
|
|
- path: metadata/namespace
|
|
create: true
|
|
|
|
labels:
|
|
- pairs:
|
|
app.kubernetes.io/instance: receipts
|
|
includeSelectors: true
|
|
- pairs:
|
|
app.kubernetes.io/part-of: receipts
|
|
includeTemplates: true
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- secrets.yaml
|
|
- receipts.yaml
|
|
- postgres-cert.yaml
|
|
- ../dch-root-ca
|
|
- jenkins.yaml
|
|
|
|
configMapGenerator:
|
|
- name: receipts-config
|
|
files:
|
|
- config.toml
|
|
options:
|
|
labels:
|
|
app.kubernetes.io/name: receipts
|
|
app.kubernetes.io/component: receipts
|
|
|
|
patches:
|
|
- patch: |-
|
|
apiVersion: apps/v1
|
|
kind: Deployment
|
|
metadata:
|
|
name: receipts
|
|
spec:
|
|
template:
|
|
spec:
|
|
containers:
|
|
- name: receipts
|
|
volumeMounts:
|
|
- mountPath: /run/dch-ca
|
|
name: dch-root-ca
|
|
readOnly: true
|
|
- mountPath: /run/secrets/receipts/postgresql
|
|
name: postgresql-cert
|
|
readOnly: true
|
|
volumes:
|
|
- name: dch-root-ca
|
|
configMap:
|
|
name: dch-root-ca
|
|
- name: postgresql-cert
|
|
secret:
|
|
secretName: postgres-client-cert
|
|
defaultMode: 0640
|