apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
metadata:
  name: tekton-pipelines

# Tekton release includes CRDs, RBAC, controllers, webhook
# We use a remote base to stay on the latest stable release
bases:
- https://storage.googleapis.com/tekton-releases/pipeline/latest/release.yaml?ref=main

# Add our local namespace override
resources:
- namespace.yaml

# Common labels for all resources
commonLabels:
  app: tekton
  component: pipelines
  managed-by: argocd

# Don't transform namespace - let the release define its own
# namespace: tekton-pipelines

patches:
  # Ensure webhook is properly configured for validation
  - target:
      kind: ValidatingWebhookConfiguration
      name: validation.webhook.pipeline.tekton.dev
    patch: |-
      - op: replace
        path: /webhooks/0/failurePolicy
        value: Fail
  # Ensure mutation webhook is properly configured
  - target:
      kind: MutatingWebhookConfiguration
      name: webhook.pipeline.tekton.dev
    patch: |-
      - op: replace
        path: /webhooks/0/failurePolicy
        value: Fail