base_objects.yml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: demo-app-00001-deployment
  namespace: tdp
spec:
  template:
    spec:
      containers:
      - image: harbor.vrabbi.cloud/tap/workloads/demo-app-tdp@sha256:2ce13838a7a47a80543b167c834010559852da80dfbf3ca0edae6474cbec552e
        imagePullPolicy: IfNotPresent
        name: workload
      - image: harbor.vrabbi.cloud/tap/tap-packages@sha256:6ed40a9178890d8d4bf1791179f69135d31f9772fc0cb4c629a6ea4e6d0a7115
        imagePullPolicy: IfNotPresent
        name: queue-proxy
      dnsPolicy: ClusterFirst
      enableServiceLinks: false
---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: antrea-agent
  namespace: kube-system
spec:
  template:
    spec:
      containers:
      - image: projects.registry.vmware.com/tkg/antrea-advanced-debian@sha256:2a7c736d2872265c3d22eece2247d1ac69e8596a40020bb92c09dfd15512ef24
        name: antrea-agent
      - image: projects.registry.vmware.com/tkg/antrea-advanced-debian@sha256:2a7c736d2872265c3d22eece2247d1ac69e8596a40020bb92c09dfd15512ef24
        imagePullPolicy: IfNotPresent
        name: antrea-ovs
      initContainers:
      - image: projects.registry.vmware.com/tkg/antrea-advanced-debian@sha256:2a7c736d2872265c3d22eece2247d1ac69e8596a40020bb92c09dfd15512ef24
        imagePullPolicy: IfNotPresent
        name: antrea-agent-tweaker
      - image: projects.registry.vmware.com/tkg/antrea-advanced-debian@sha256:2a7c736d2872265c3d22eece2247d1ac69e8596a40020bb92c09dfd15512ef24
        imagePullPolicy: IfNotPresent
        name: install-cni
      nodeSelector:
        kubernetes.io/os: linux

overlay.yml

#@ load("@ytt:overlay","overlay")

#@ dep = overlay.subset({"kind": "Deployment"})
#@ ds = overlay.subset({"kind": "DaemonSet"})
#@overlay/match by=overlay.or_op(overlay.subset({"kind": "Deployment"}), overlay.subset({"kind": "DaemonSet"})), expects="1+"
---
spec:
  template:
    spec:
      #@overlay/match missing_ok=True
      imagePullSecrets:
        #@overlay/match missing_ok=True, by="name"
        - name: myregistry