apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: grafana

labels:
- pairs:
    app.kubernetes.io/instance: grafana
  includeSelectors: true
- pairs:
    app.kubernetes.io/part-of: grafana
  includeSelectors: false

resources:
- namespace.yaml
- grafana.yaml
- ingress.yaml
- secrets.yaml
- loki-cert.yaml
- ../dch-root-ca

configMapGenerator:
- name: grafana
  files:
  - grafana.ini
  - ldap.toml

- name: datasources
  files:
  - datasources/loki.yml
  - datasources/victoria-logs.yml

patches:
- patch: |-
    apiVersion: apps/v1
    kind: StatefulSet
    metadata:
      name: grafana
    spec:
      template:
        spec:
          containers:
          - name: grafana
            volumeMounts:
            - mountPath: /run/dch-ca
              name: dch-ca
              readOnly: true
            - mountPath: /run/secrets/du5t1n.me/loki
              name: loki-client-cert
              readOnly: true
          volumes:
          - name: dch-ca
            configMap:
              name: dch-root-ca
          - name: loki-client-cert
            secret:
              secretName: loki-client-cert

images:
- name: docker.io/grafana/grafana
  newTag: 11.5.5