a7ae41ee08
Added to kustomization.yaml: - namespaces.yaml: Centralized namespace management - auth/: Keycloak authentication system - keycloak-config.yaml: Identity provider configuration - sealed-secrets.yaml: Secret encryption system Fixed namespace conflicts: - Removed duplicate pomerium-namespace from pomerium.yaml - Removed duplicate external-dns-namespace from external-dns.yaml - All namespaces now managed centrally via namespaces.yaml Now managing 72 Kubernetes resources via GitOps: ✅ Infrastructure: Crossplane providers, external-dns ✅ Certificates: cert-manager, Let's Encrypt, Gandi webhook ✅ Authentication: Keycloak, RBAC configs ✅ Applications: Forgejo, Pomerium, Vaultwarden ✅ Security: Sealed secrets, proper RBAC 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
31 lines
No EOL
604 B
YAML
31 lines
No EOL
604 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
# Core infrastructure
|
|
- providers.yaml
|
|
- provider-configs.yaml
|
|
- namespaces.yaml
|
|
- external-dns.yaml
|
|
|
|
# Certificate management
|
|
- cert-manager/
|
|
|
|
# Authentication system
|
|
- auth/
|
|
- keycloak-config.yaml
|
|
|
|
# Secret management
|
|
- sealed-secrets.yaml
|
|
|
|
# Applications
|
|
- forgejo-k8s.yaml
|
|
- pomerium.yaml
|
|
- vaultwarden.yaml
|
|
|
|
# Exclude problematic directories:
|
|
# - flux/ (managed by Flux itself)
|
|
# - pomerium/ (Helm chart)
|
|
# - gitea/ (legacy, replaced by forgejo)
|
|
# - bin/ (binaries)
|
|
# - cookies.txt, DEPLOYMENT.md (not Kubernetes manifests) |