# The services of a dev box. Optional services are components in ../../components, which
# the dev-box root Application selects per target (PROFILES=zammad). A reviewed composition is
# never one of them: an environment enables it through its reviewed delivery policy (ADR-0067
# §9), and the dev box has no OIDC binding to feed the composition's login yet.
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - ../../base
# The cloud Site Agent and its Waldur offering are qualified here first (project provisioning 5.1).
components:
  - ../../components/site-agent
patches:
  - target: {kind: Application, name: pharos-platform-routes}
    patch: |-
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/values.yaml
  - target: {kind: Application, name: argocd}
    patch: |-
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/values.yaml
  - target: {kind: Application, name: gitlab}
    patch: |-
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/values.yaml
  - target: {kind: Application, name: waldur}
    patch: |-
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/values.yaml
      # The offering's models and prices, rendered from the dev-box catalogue: applied last, so the catalogue wins.
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/catalogue.yaml
  # The dev box's Site Agent keeps Waldur's own IDs (`waldur-stand-in`). A site whose policy names `metallo` gets the
  # same setting from the root, which passes it from the environment.
  - target: {kind: Application, name: waldur-site-agent}
    patch: |-
      - op: add
        path: /spec/source/kustomize/patches
        value:
          - target: {kind: Job, name: waldur-site-agent-credentials}
            patch: '[{"op":"add","path":"/spec/template/spec/containers/0/env","value":[{"name":"SITE_AGENT_IDENTITY_SOURCE","value":"waldur-stand-in"}]}]'
  - target: {kind: Application, name: llm}
    patch: |-
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/values.yaml
      # The CPU model and its gateway entry, rendered from the dev-box catalogue.
      - op: add
        path: /spec/source/helm/valueFiles/-
        value: ../overlays/devbox/catalogue.yaml
  - target: {kind: Application, name: themelio-compat}
    patch: |-
      - op: add
        path: /spec/source/path
        value: gitops/manifests/themelio-compat/overlays/devbox
  - target: {kind: Application, name: pharos}
    patch: |-
      - op: add
        path: /spec/source/path
        value: gitops/manifests/pharos/overlays/devbox
  # The dev box's Site Agent takes its identities from Metallo; the shared manifests keep Waldur's own.
  - target: {kind: Application, name: waldur-site-agent}
    patch: |-
      - op: add
        path: /spec/source/path
        value: gitops/manifests/waldur-site-agent-devbox
  - target: {kind: Application, name: pharos-site-runtime}
    patch: |-
      - op: add
        path: /spec/source/path
        value: gitops/manifests/pharos-site-runtime/overlays/devbox
      # Delivery starts the Runtime once its trust ConfigMaps exist (themelio_dx/compat.py); Argo keeps the rest.
      - op: add
        path: /spec/ignoreDifferences
        value:
          - {group: apps, kind: Deployment, name: kubernetes-runtime, jsonPointers: [/spec/replicas]}
      - op: add
        path: /spec/syncPolicy/syncOptions/-
        value: RespectIgnoreDifferences=true