apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources: [../../base]
images:
  - { name: rarelens/api, newName: europe-west2-docker.pkg.dev/PROJECT/rarelens/api, newTag: latest }
  - { name: rarelens/web, newName: europe-west2-docker.pkg.dev/PROJECT/rarelens/web, newTag: latest }
patches:
  - target: { kind: ServiceAccount, name: rarelens-api }
    patch: |
      - op: add
        path: /metadata/annotations
        value: { iam.gke.io/gcp-service-account: rarelens-api@PROJECT.iam.gserviceaccount.com }
  - target: { kind: Deployment, name: api }
    patch: |
      - op: add
        path: /spec/template/spec/containers/-
        value:
          name: cloud-sql-proxy
          image: gcr.io/cloud-sql-connectors/cloud-sql-proxy:2.13.0
          args: ["--structured-logs", "--port=5432", "PROJECT:europe-west2:rarelens-pg"]
          securityContext: { runAsNonRoot: true }