wallet/apps/web/k8s/overlays/lux/kustomization.yaml

# ---------------------------------------------------------------------------
# wallet-web — LUX brand overlay. Host wallet.lux.network, namespace
# lux-mainnet. The Lux brand.json (this dir's `brand.json` — the SINGLE source
# of truth for the Lux brand, also read by the brand-swap test) is mounted over
# /public/brand.json from a generated ConfigMap. Pin the image tag here.
# ---------------------------------------------------------------------------
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: lux-mainnet

resources:
  - ../../base

labels:
  - pairs:
      brand: lux
    includeSelectors: false

# Brand.json → ConfigMap. Key `brand.json` = the mount subPath. The hash suffix
# is disabled because the volume reference lives in a custom (lux.cloud/v1
# Service) CR that kustomize's nameReference transformer does not rewrite — a
# stable literal name keeps the patch correct.
configMapGenerator:
  - name: wallet-web-brand
    files:
      - brand.json
    options:
      disableNameSuffixHash: true

# Patch the Service CR: pinned image tag, ingress host, and the `volumes` entry
# that backs the /public/brand.json mount (the base declares the volumeMount by
# name `brand`). NOTE: the tag lives in the CR's structured `spec.image.tag`, so
# the kustomize `images:` transformer does NOT reach it — it is pinned here via a
# JSON patch (the one working mechanism). Bump `value` to the built git sha.
patches:
  - target:
      group: lux.cloud
      version: v1
      kind: Service
      name: wallet-web
    patch: |
      - op: replace
        path: /spec/image/tag
        value: "032e091d9"
      - op: add
        path: /spec/ingress/hosts
        value:
          - wallet.lux.network
      - op: add
        path: /spec/volumes
        value:
          - name: brand
            configMap:
              name: wallet-web-brand