apiVersion: kind.x-k8s.io/v1alpha4
kind: Cluster
kubeadmConfigPatches:
- |-
  kind: ClusterConfiguration
  apiServer:
    extraArgs:
      oidc-issuer-url: https://${GITLAB_HOST}
      oidc-client-id: ${CLIENT_ID}
      oidc-username-claim: email

auth:
  environment: development
  providers:
    gitlab:
      development:
        audience: https://${GITLAB_HOST}
        clientId: ${CLIENT_ID}
        clientSecret: ${CLIENT_SECRET}
kubernetes:
  serviceLocatorMethod:
    type: 'multiTenant'
  clusterLocatorMethods:
    - type: 'config'
      clusters:
        - name: kind-kind
          url: $(kubectl config view --raw -o jsonpath='{.clusters[?(@.name=="kind-kind")].cluster.server}')
          authProvider: oidc
          oidcTokenProvider: gitlab
          skipTLSVerify: true
          skipMetricsLookup: true
catalog:
  locations:
    - type: file
      target: ../../kubernetes.yaml
      rules:
        - allow: [User, Component]

---
apiVersion: backstage.io/v1alpha1
kind: User
metadata:
  name: "${GITLAB_USERID}"
spec:
  memberOf: []
---
apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
  name: demo-k8s-service
  annotations:
    'backstage.io/kubernetes-label-selector': 'k8s-app=kube-dns'
spec:
  type: service
  lifecycle: stable
  owner: user:${GITLAB_USERID}