nameReference:
  # Tie target Service metadata.name to other ingressroute fields
  - kind: Service
    fieldSpecs:
      # rewrite the backend service name
      - kind: IngressRoute
        group: traefik.io
        version: v1alpha1
        path: spec/routes/services/name

      # adapt the ingress url
      # DOES NOT WORK
      - kind: IngressRoute
        group: traefik.io
        version: v1alpha1
        path: /spec/routes/match
        create: false

      # adapt any middleware names
      - kind: IngressRoute
        group: traefik.io
        version: v1alpha1
        path: spec/routes/middlewares/name

  # Update deployment volume mounts according to name changes in the sealedsecret
  - kind: SealedSecret
    fieldSpecs:
      # volume mounts:
      - kind: Deployment
        group: apps
        version: v1
        path: spec/template/spec/volumes/secret/secretName