apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  # Removed: rbac-dashboard-rolebinding.yaml (authentik-provisioner SA and
  # RoleBinding). Authentik is retired, so the file is gone; keep this list in
  # step with the directory or kustomize fails the whole app.
  - smtp-gotify.yaml

# IAM provisioning is manual-only (security-sensitive).
# Script: scripts/iam/zitadel-provision.py
# Run:
#   scripts/iam/zitadel-provision.py all