home-stack-kustomize/kustomize/overlays/prod-cluster/kustomization.yaml

resources:
  - ../../namespaces/kube-system
  - ../../bases/longhorn

buildMetadata:
  - originAnnotations

commonLabels:
  app.kubernetes.io/managed-by: kustomize-cluster

transformers:
  - transformers/ssm-secrets.yaml

configMapGenerator:
  - name: cluster-replacements
    namespace: default
    literals:
      - TRAEFIK_EXTERNAL_HOST=traefik.badjnet.home
      - LONGHORN_EXTERNAL_HOST=longhorn.badjnet.home

secretGenerator:
  - name: s3-backupstore-credentials
    type: Opaque
    namespace: longhorn-system
    behavior: replace
    literals:
      - AWS_ACCESS_KEY_ID=${ssm:/k3s/prod/longhorn/s3_access_key_id}
      - AWS_SECRET_ACCESS_KEY=${ssm:/k3s/prod/longhorn/s3_secret_access_key}
      - AWS_ENDPOINTS=https://s3.badjware.dev

replacements:
  - source:
      kind: ConfigMap
      name: cluster-replacements
      namespace: default
      fieldPath: data.TRAEFIK_EXTERNAL_HOST
    targets:
      - select:
          kind: Ingress
          name: traefik
          namespace: kube-system
        fieldPaths:
          - spec.rules.0.host
  - source:
      kind: ConfigMap
      name: cluster-replacements
      namespace: default
      fieldPath: data.LONGHORN_EXTERNAL_HOST
    targets:
      - select:
          kind: HelmChart
          name: longhorn
          namespace: kube-system
        fieldPaths:
          - spec.set.[ingress.host]
        options:
            create: true