home-stack-kustomize/kustomize/overlays/prod/kustomization.yaml

resources:
  # - ../../namespaces/kubernetes-dashboard
  - ../../namespaces/gitea
  - ../../namespaces/grafana
  - ../../namespaces/monitoring
  - ../../namespaces/nextcloud

# resources:
#   - probes/external-services-bobcat-miner.yaml

images:
  - name: gitea/gitea
    newTag: 1.16.9
  - name: grafana/grafana
    newTag: 9.2.1
  # - name: prom/node-exporter
  #   newTag: v0.18.1
  - name: prom/blackbox-exporter
    newName: badjware/blackbox-exporter-tweak
    newTag: 0.21.1 
  - name: drone/drone
    newTag: 2.14.0
  - name: drone/drone-runner-kube
    newTag: 1.0.0-rc.3
  - name: nextcloud
    newName: badjware/nextcloud-tweak
    newTag: 24.0.6
  - name: postgres
    newTag: 9.6.23
  - name: redis
    newTag: 6.2.5

secretGenerator:
  - name: drone-secret
    type: Opaque
    namespace: gitea
    behavior: replace
    literals:
      - rpc_secret=${ssm:/k3s/prod/drone/gitea/rpc_secret}
      - database_secret=${ssm:/k3s/prod/drone/gitea/database_secret}
  # https://docs.drone.io/server/provider/gitea/
  - name: drone-gitea-oauth-secret
    type: Opaque
    namespace: gitea
    behavior: replace
    literals:
      - client_id=${ssm:/k3s/prod/drone/gitea/client_id}
      - client_secret=${ssm:/k3s/prod/drone/gitea/client_secret}
  - name: postgres-credentials
    type: Opaque
    namespace: nextcloud
    behavior: replace
    literals:
      - database=nextcloud
      - username=nextcloud
      - password=${ssm:/k3s/prod/nextcloud/postgres/password}
  - name: redis-credentials
    type: Opaque
    namespace: nextcloud
    behavior: replace
    literals:
      - password=${ssm:/k3s/prod/nextcloud/redis/password}
  - name: grafana-agent
    namespace: monitoring
    behavior: replace
    files:
      - agent.yaml=configurations/grafana-agent/agent.yaml
  - name: grafana-config
    type: Opaque
    namespace: grafana
    behavior: replace
    files:
      - custom.ini=configurations/grafana/custom.ini
  # - name: grafana-cloud-credentials
  #   type: Opaque
  #   namespace: monitoring
  #   behavior: replace
  #   literals:
  #     - username=${ssm:/k3s/prod/monitoring/grafana-cloud/username}
  #     - password=${ssm:/k3s/prod/monitoring/grafana-cloud/password}
  - name: additional-scrape-configs
    type: Opaque
    namespace: monitoring
    behavior: replace
    files:
      - prometheus-additional.yaml=configurations/prometheus/prometheus-additional.yaml

# allow "kubectl apply -l managed-by=kustomize --prune ..."
commonLabels:
  managed-by: kustomize

transformers:
  - transformers/placeholders.yaml
  - transformers/ssm-secrets.yaml

patchesJson6902:
  - target: 
      version: v1
      kind: Deployment
      name: nextcloud
    path: patches/nextcloud-deployment-patch.yaml
  # - target:
  #     version: v1
  #     kind: Prometheus
  #     name: prometheus
  #   path: patches/prometheus-patch.yaml

# patchesStrategicMerge:
#   - patches/blackbox-exporter-probe-patch.yaml