apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization transformers: - |- apiVersion: builtin kind: NamespaceTransformer metadata: name: notImportantHere namespace: monitoring unsetOnly: true namePrefix: umami- resources: - ../../../kustomize/bases/public-oidc/ replacements: - source: kind: Service name: svc targets: - select: kind: HTTPRoute options: create: true fieldPaths: - spec.rules.0.backendRefs.0.name - source: kind: Deployment name: app fieldPath: metadata.labels.[app.kubernetes.io/appName] targets: - select: kind: HTTPRoute options: create: true delimiter: "." index: 0 fieldPaths: - spec.hostnames.0 - select: kind: InfisicalSecret options: delimiter: "-" index: 0 fieldPaths: - spec.managedSecretReference.secretName - select: kind: InfisicalSecret options: delimiter: "/" index: 2 fieldPaths: - spec.authentication.universalAuth.secretsScope.secretsPath - select: kind: Service fieldPaths: - spec.ports.0.name - spec.ports.0.targetPort - source: kind: Deployment name: app fieldPath: metadata.labels.[app.kubernetes.io/appNamespace] targets: - select: kind: InfisicalSecret fieldPaths: - spec.managedSecretReference.secretNamespace - select: kind: InfisicalSecret options: delimiter: "/" index: 1 fieldPaths: - spec.authentication.universalAuth.secretsScope.secretsPath patches: - path: patches/deployment.yaml target: kind: Deployment name: app - path: patches/delete-pvc.yaml target: kind: PersistentVolumeClaim name: pvc labels: - includeSelectors: true pairs: app.kubernetes.io/appName: umami - pairs: app.kubernetes.io/appNamespace: monitoring configMapGenerator: - name: config literals: - DATABASE_TYPE=postgresql