distrust-stack/kustomizations/digitalocean/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: kube-system
resources:
- cloud-controller-manager
- csi-driver
- csi-driver/webhook
generators:
- secret-generator.yaml
replacements:
- source:
    kind: Certificate
    fieldPath: metadata.namespace
  targets:
  - select:
      kind: ValidatingWebhookConfiguration
    fieldPaths:
    - metadata.annotations.[cert-manager.io/inject-ca-from]
    options:
      delimiter: /
- source:
    kind: Service
    fieldPath: metadata.namespace
    name: snapshot-validation-service
  targets:
  - select:
      kind: Certificate
      name: snapshot-validation
    fieldPaths:
    - spec.dnsNames.1
    options:
      delimiter: .
      index: 1