home-stack-kustomize/kustomize/overlays/prod/kustomization.yaml

bases:
  # - ../../namespaces/kubernetes-dashboard
  - ../../namespaces/gitea
  - ../../namespaces/grafana
  - ../../namespaces/monitoring
  - ../../namespaces/nextcloud

resources:
  - probes/external-services-bobcat-miner.yaml

images:
  - name: gitea/gitea
    newTag: 1.15.7
  - name: grafana/grafana
    newTag: 8.3.4
  - name: prom/node-exporter
    newTag: v0.18.1
  - name: prom/blackbox-exporter
    newName: badjware/blackbox-exporter-tweak
    newTag: 0.19.0-1
  - name: drone/drone
    newTag: 2.7.0
  - name: drone/drone-runner-kube
    newTag: 1.0.0-rc.2
  - name: nextcloud
    newName: badjware/nextcloud-tweak
    newTag: 22.2.3-3
  - name: postgres
    newTag: 9.6.23
  - name: redis
    newTag: 6.2.5

configMapGenerator: []

secretGenerator:
  - name: drone-secret
    type: Opaque
    namespace: gitea
    behavior: replace
    literals:
      - rpc_secret=${ssm:/k3s/prod/drone/gitea/rpc_secret}
      - database_secret=${ssm:/k3s/prod/drone/gitea/database_secret}
  # https://docs.drone.io/server/provider/gitea/
  - name: drone-gitea-oauth-secret
    type: Opaque
    namespace: gitea
    behavior: replace
    literals:
      - client_id=${ssm:/k3s/prod/drone/gitea/client_id}
      - client_secret=${ssm:/k3s/prod/drone/gitea/client_secret}
  - name: postgres-credentials
    type: Opaque
    namespace: nextcloud
    behavior: replace
    literals:
      - database=nextcloud
      - username=nextcloud
      - password=${ssm:/k3s/prod/nextcloud/postgres/password}
  - name: redis-credentials
    type: Opaque
    namespace: nextcloud
    behavior: replace
    literals:
      - password=${ssm:/k3s/prod/nextcloud/redis/password}

# allow "kubectl apply -l managed-by=kustomize --prune ..."
commonLabels:
  managed-by: kustomize

transformers:
  - transformers/placeholders.yaml
  - transformers/ssm-secrets.yaml

patchesJson6902:
  - target: 
      version: v1
      kind: Deployment
      name: nextcloud
    path: patches/nextcloud-deployment-patch.yaml

# patchesStrategicMerge:
#   - patches/blackbox-exporter-probe-patch.yaml