apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - ./resources/deployment.yaml
  - ./resources/service.yaml

configMapGenerator:
  - name: werther-env
    literals:
      - WERTHER_DEV_MODE=false
      - WERTHER_LDAP_ROLE_CLAIM="https://hydra/claims/roles"
      - WERTHER_SKIP_SSL_VERIFICATIONS=false
      - WERTHER_IDENTP_CLAIM_SCOPES="name:profile,family_name:profile,given_name:profile,email:email,https%3A%2F%2Fhydra%2Fclaims%2Froles:roles"
      - WERTHER_IDENTP_HYDRA_URL="http://hydra:4444"
      - WERTHER_LDAP_ENDPOINTS="ldap.test.fr:636"
      - WERTHER_LDAP_IS_TLS=true
      - WERTHER_LDAP_BASEDN="o=test,c=fr"
      - WERTHER_LDAP_ROLE_BASEDN="ou=groups,o=test,c=fr"

secretGenerator:
  - name: werther-ldap-sc
    literals:
      - WERTHER_LDAP_BINDDN="cn=reader,o=test,c=fr"
      - WERTHER_LDAP_BINDPW=ThisMustBeAbsolutelyChanged