apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - ../../base

labels:
  - pairs:
      app.kubernetes.io/part-of: certificate-platform
      app.kubernetes.io/managed-by: kustomize
    includeSelectors: false
    includeTemplates: true

patches:
  - target:
      kind: Deployment
      name: cert-manager
    patch: |-
      - op: add
        path: /spec/revisionHistoryLimit
        value: 5
      - op: add
        path: /spec/progressDeadlineSeconds
        value: 600
      - op: add
        path: /spec/template/spec/securityContext/runAsUser
        value: 1000
      - op: add
        path: /spec/template/spec/securityContext/runAsGroup
        value: 1000
      - op: add
        path: /spec/template/spec/securityContext/fsGroup
        value: 1000
      - op: add
        path: /spec/template/spec/containers/0/resources
        value:
          requests:
            cpu: 10m
            memory: 64Mi
          limits:
            memory: 256Mi
  - target:
      kind: Deployment
      name: cert-manager-cainjector
    patch: |-
      - op: add
        path: /spec/revisionHistoryLimit
        value: 5
      - op: add
        path: /spec/progressDeadlineSeconds
        value: 600
      - op: add
        path: /spec/template/spec/securityContext/runAsUser
        value: 1000
      - op: add
        path: /spec/template/spec/securityContext/runAsGroup
        value: 1000
      - op: add
        path: /spec/template/spec/securityContext/fsGroup
        value: 1000
      - op: add
        path: /spec/template/spec/containers/0/resources
        value:
          requests:
            cpu: 10m
            memory: 64Mi
          limits:
            memory: 256Mi
  - target:
      kind: Deployment
      name: cert-manager-webhook
    patch: |-
      - op: add
        path: /spec/revisionHistoryLimit
        value: 5
      - op: add
        path: /spec/progressDeadlineSeconds
        value: 600
      - op: add
        path: /spec/template/spec/securityContext/runAsUser
        value: 1000
      - op: add
        path: /spec/template/spec/securityContext/runAsGroup
        value: 1000
      - op: add
        path: /spec/template/spec/securityContext/fsGroup
        value: 1000
      - op: add
        path: /spec/template/spec/containers/0/resources
        value:
          requests:
            cpu: 10m
            memory: 64Mi
          limits:
            memory: 128Mi