k8s/infra/iam/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  # Removed: rbac-dashboard-rolebinding.yaml (authentik-provisioner SA and
  # RoleBinding). Authentik is retired, so the file is gone; keep this list in
  # step with the directory or kustomize fails the whole app.
  - smtp-gotify.yaml

# IAM provisioning is manual-only (security-sensitive).
# Script: scripts/iam/zitadel-provision.py
# Run:
#   scripts/iam/zitadel-provision.py all
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
iam: move provisioning script to scripts/iam, remove k8s job 2026-09-03 19:03:58 -07:00
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`resources:`
fix(iam): give the IAM support manifests an ArgoCD app again 2026-10-26 23:24:55 -07:00			`# Removed: rbac-dashboard-rolebinding.yaml (authentik-provisioner SA and`
			`# RoleBinding). Authentik is retired, so the file is gone; keep this list in`
			`# step with the directory or kustomize fails the whole app.`
feat(iam): deliver ZITADEL notifications through Gotify 2026-10-26 23:24:33 -07:00			`- smtp-gotify.yaml`
fix(iam): Authentik OAuth2 provisioning — grant_types/groups claim, idempotent script, skip PATCH on existing apps 2026-08-18 15:08:03 -07:00
iam: move provisioning script to scripts/iam, remove k8s job 2026-09-03 19:03:58 -07:00			`# IAM provisioning is manual-only (security-sensitive).`
chore(iam): retire Authentik 2026-10-26 03:32:18 -07:00			`# Script: scripts/iam/zitadel-provision.py`
iam: move provisioning script to scripts/iam, remove k8s job 2026-09-03 19:03:58 -07:00			`# Run:`
chore(iam): retire Authentik 2026-10-26 03:32:18 -07:00			`# scripts/iam/zitadel-provision.py all`