file.yaml

#@ load("@ytt:overlay", "overlay")
#@ load("@ytt:data", "data")

---
apiVersion: sso.apps.tanzu.vmware.com/v1alpha1
kind: ClientRegistration
metadata:
  name: boats-appsso
  namespace: boats
spec:
  authServerSelector:
    matchLabels:
      oidc: "true"
      provider: "gitlab"
  clientAuthenticationMethod: basic
  authorizationGrantTypes:
    - authorization_code
  redirectURIs:
    - https://spring-sensors-boats.swf.tanzuplatform.com/login/oauth2/code/gitlab
  scopes:
    - name: openid



#@ def kapp_config():
apiVersion: sso.apps.tanzu.vmware.com/v1alpha1
kind: ClientRegistration
#@ end

#@overlay/match by=overlay.subset(kapp_config()), expects="0+"
---
spec:
  #@overlay/match by=overlay.all, expects="0+"
  redirectURIs:
    #@overlay/replace via=lambda left, right: left.replace("swf.tanzuplatform.com", right.strip())
    #@overlay/match by=overlay.all, expects="0+"
    -
      #@ data.values.tap.shared.ingress_domain

values.yaml

#@data/values
---
tap:
    shared:
        ingress_domain: stuff.com