apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: kube-system resources: - cloud-controller-manager - csi-driver - csi-driver/webhook generators: - secret-generator.yaml replacements: - source: kind: Certificate fieldPath: metadata.namespace targets: - select: kind: ValidatingWebhookConfiguration fieldPaths: - metadata.annotations.[cert-manager.io/inject-ca-from] options: delimiter: / - source: kind: Service fieldPath: metadata.namespace name: snapshot-validation-service targets: - select: kind: Certificate name: snapshot-validation fieldPaths: - spec.dnsNames.1 options: delimiter: . index: 1