---
apiVersion: packaging.carvel.dev/v1alpha1
kind: PackageInstall
metadata:
    # name, does not have to be versioned, versionSelection.constraints below will handle
    name: "local-user-authenticator-package-install"
    namespace: "local-user-authenticator-install-ns"
spec:
  serviceAccountName: "pinniped-package-rbac-local-user-authenticator-sa-superadmin-dangerous"
  packageRef:
    refName: "local-user-authenticator.pinniped.dev"
    versionSelection:
      constraints: "0.0.0-EEE84AC0-DE44-425C-8785-4C6DD92307F7"
  values:
  - secretRef:
      name: "local-user-authenticator-package-install-secret"
---
apiVersion: v1
kind: Secret
metadata:
  name: "local-user-authenticator-package-install-secret"
  namespace: "local-user-authenticator-install-ns"
stringData:
  values.yml: |
    ---
    app_name: pinniped-concierge
    namespace: concierge
    api_group_suffix: pinniped.dev
    log_level: debug

    image_repo: kind-registry.local:5000/test/build
    image_tag: 0.0.0-EEE84AC0-DE44-425C-8785-4C6DD92307F7