d83cbdc7ca
ai-review: a commented-out resource line reads as GitOps debt. Replace the '# - auth-oidc-sealed.yaml' line with an explicit NOTE explaining it's a deliberate post-deploy step (needs the registrar-generated client-secret), not a disabled resource.
14 lines
523 B
YAML
14 lines
523 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- namespace.yaml
|
|
- forte-drop.yaml
|
|
- keycloak-client-forte-drop.yaml
|
|
- forte-drop-pdb.yaml
|
|
- forte-drop-secrets-sealed.yaml
|
|
|
|
# NOTE: the web sidecar's auth-oidc SealedSecret is added in a follow-up commit,
|
|
# once the Keycloak registrar has created forte-drop-oidc-credentials post-deploy
|
|
# (see PR description for the one-time seal step). It is intentionally NOT a
|
|
# resource here yet — sealing it requires the registrar-generated client-secret.
|