apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- forte-drop.yaml
- keycloak-client-forte-drop.yaml
- forte-drop-pdb.yaml
- forte-drop-secrets-sealed.yaml

# NOTE: the web sidecar's auth-oidc SealedSecret is added in a follow-up commit,
# once the Keycloak registrar has created forte-drop-oidc-credentials post-deploy
# (see PR description for the one-time seal step). It is intentionally NOT a
# resource here yet — sealing it requires the registrar-generated client-secret.