apps/replikate/kustomize/gcp/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

bases:
- ../hub

configMapGenerator:
- name: manifests
  behavior: merge
  files:
  - generated/profile.yaml
  - generated/pd-gcp.yaml
  - generated/gsa.yaml
  - generated/iam-policy.yaml
  # - generated/gcp-secret.yaml
  # - generated/sa-default-editor.yaml
  # - generated/sa-default-viewer.yaml

patchesJson6902:
- target:
    group: rbac.authorization.k8s.io
    version: v1
    kind: ClusterRole
    name: app
  patch: |
    - op: add
      path: /rules/0
      value:
        apiGroups: [""]
        resources: ["serviceaccounts"]
        verbs: ["create", "get", "update", "patch"]
    - op: add
      path: /rules/0
      value:
        apiGroups: ["iam.cnrm.cloud.google.com"]
        resources: ["iamserviceaccounts", "iampolicies"]
        verbs: ["create", "get", "update", "patch"]