apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
- https://github.com/cert-manager/cert-manager/releases/download/v1.16.4/cert-manager.yaml
- cluster-issuer.yaml
- certificates.yaml
- cert-exporter.yaml
- dch-ca-issuer.yaml
- secrets.yaml

configMapGenerator:
- name: cert-exporter
  namespace: cert-manager
  files:
  - config.yml=cert-exporter.config.yml
  options:
    disableNameSuffixHash: True

secretGenerator:
- name: zerossl-eab
  namespace: cert-manager
  envs:
  - zerossl.secret
  options:
    disableNameSuffixHash: true

- name: cert-exporter-sshkey
  namespace: cert-manager
  files:
  - cert-exporter.pem
  - ssh_known_hosts

- name: cloudflare
  namespace: cert-manager
  files:
  - cloudflare.api-token
  options:
    disableNameSuffixHash: true

patches:
- patch: |
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: cert-manager
      namespace: cert-manager
    spec:
      template:
        spec:
          dnsConfig:
            nameservers:
            - 172.30.0.1
          dnsPolicy: None