bases:
  - ../../namespaces/kubernetes-dashboard
  - ../../namespaces/gitea
  - ../../namespaces/grafana
  # - ../../namespaces/nextcloud

# resources:
#   - cert-manager/clusterissuer.yaml

images:
  - name: gitea/gitea
    newtag: 1.15.0
  - name: drone/drone
    newtag: 2.0.6
  - name: drone/drone-runner-kube
    newtag: 1.0.0-beta.9


secretGenerator:
#   - name: digitalocean-api-key
#     type: Opaque
#     namespace: cert-manager
#     literals:
#       - access-token=${ssm:/prod/digitalocean/api_token}
  - name: drone-secret
    type: Opaque
    namespace: gitea
    behavior: replace
    literals:
      - rpc_secret=9128146e66f104873df80dad3ef12cf0
  # https://docs.drone.io/server/provider/gitea/
  - name: drone-gitea-oauth-secret
    type: Opaque
    namespace: gitea
    behavior: replace
    literals:
      - client_id=6c0c6878-baf1-4648-b0cf-69eeae69e692
      - client_secret=Q78VsgyfgTzKrvQEmokEMj84g7epKrlBpmDjcbhKXCIh

# allow "kubectl apply -l managed-by=kustomize --prune ..."
commonlabels:
  managed-by: kustomize

transformers:
  - transformers/placeholders.yaml
  - transformers/ssm-secrets.yaml

# configurations:
#   - cert-manager/kustomizeconfig.yaml