apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - ../../base

patchesStrategicMerge:
  - serviceaccount.yaml
  - toleration.yaml

patches:
  - target:
      group: rbac.authorization.k8s.io
      version: v1
      kind: ClusterRole
      name: cluster-control-server
    patch: |-
      - op: add
        path: /rules/-
        value:
          apiGroups: [container.gcp.crossplane.io]
          resources: [nodepools]
          verbs: [create, delete, get, list, patch, update]