- op: replace
  path: /metadata/labels/app.kubernetes.io~1instance
  value: quay-op
- op: replace
  path: /spec/podMetadata/labels/delivery.quorate.dev~1project
  value: quay-op
- op: replace
  path: /spec/templates/5/metadata/labels/delivery.quorate.dev~1stage
  value: quay-op-toolchain
- op: replace
  path: /spec/templates/7/metadata/labels/delivery.quorate.dev~1stage
  value: quay-op-publish
- op: replace
  path: /spec/templates/1/volumes/0
  value: &orchestration
    name: orchestration
    projected:
      defaultMode: 0444
      sources:
        - configMap:
            name: go-oci-orch
            items:
              - {key: contract.fsx, path: contract.fsx}
              - {key: initialize.fsx, path: go-init.fsx}
              - {key: image.fsx, path: image.fsx}
        - configMap:
            name: quay-op-project
- op: replace
  path: /spec/templates/3/volumes/0
  value: *orchestration
- op: replace
  path: /spec/templates/4/volumes/0
  value: *orchestration
- op: replace
  path: /spec/templates/5/volumes/0
  value: *orchestration
- op: replace
  path: /spec/templates/6/volumes/0
  value: *orchestration
- op: replace
  path: /spec/templates/7/volumes/0
  value: *orchestration
- op: replace
  path: /spec/templates/7/volumes/1/secret/secretName
  value: quay-op-writer
- op: replace
  path: /spec/templates/8/volumes/0
  value: *orchestration
- op: add
  path: /spec/templates/6/container/volumeMounts/-
  value:
    name: workflow-workspace
    mountPath: /workspace
    subPath: output/workspace
- op: replace
  path: /spec/templates/4/container/volumeMounts
  value:
    - {name: orchestration, mountPath: /orchestration, readOnly: true}
    - {name: cache-auth, mountPath: /cache-auth, readOnly: true}
    - {name: cache-ca, mountPath: /cache-ca, readOnly: true}
    - {name: workflow-workspace, mountPath: /cache, subPath: cache}
    - {name: workflow-workspace, mountPath: /tmp, subPath: state/cache-tmp}
- op: replace
  path: /spec/templates/5/container/volumeMounts
  value:
    - {name: orchestration, mountPath: /orchestration, readOnly: true}
    - {name: workflow-workspace, mountPath: /toolchain, subPath: toolchain}
    - {name: workflow-workspace, mountPath: /tmp, subPath: state/toolchain-tmp}
- op: add
  path: /spec/templates/6/container/volumeMounts/5/readOnly
  value: true
- op: replace
  path: /spec/templates/8/container/volumeMounts
  value:
    - {name: orchestration, mountPath: /orchestration, readOnly: true}
    - {name: cache-auth, mountPath: /cache-auth, readOnly: true}
    - {name: cache-ca, mountPath: /cache-ca, readOnly: true}
    - {name: workflow-workspace, mountPath: /source, subPath: source, readOnly: true}
    - {name: workflow-workspace, mountPath: /build-cache, subPath: output/go-cache, readOnly: true}
    - {name: workflow-workspace, mountPath: /tmp, subPath: output/cache-tmp}