apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# The namespace of the resources
namespace: regional-server-system
configMapGenerator:
- files:
  - config/root-config.yaml
  name: regional-server-root-config
- files:
  - config/k8s-addon-templates.yaml
  name: regional-server-addon-template-config
- files:
  - config/k8s-infra-templates.yaml
  name: regional-server-infra-template-config
- files:
  - config/k8s-dedicated-templates.yaml
  name: regional-server-dedicated-template-config
- files:
  - config/k8s-dp-templates.yaml
  name: regional-server-dp-template-config

labels:
- includeTemplates: true
  pairs:
    tags.tidbcloud.com/environment: dev
    tags.tidbcloud.com/servicetype: dedicated
    tags.tidbcloud.com/usedby: dbaas-control-plane-seed

resources:
- namespace.yaml
- ../../base
- account/account-list.yaml
- account/providerconfig.yaml

patches:
- path: version.yaml
- path: deployment.yaml
- path: service_account.yaml
- target:
    group: rbac.authorization.k8s.io
    version: v1
    kind: ClusterRole
    name: dedicated-regional-server-manager-role
  patch: |-
    - op: add
      path: /rules/-
      value:
        apiGroups: [cloud.pingcap.com]
        resources: [clusters]
        verbs: [get, list, watch]