19 lines
775 B
YAML
19 lines
775 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
# Removed: rbac-dashboard-rolebinding.yaml (authentik-provisioner SA and
|
|
# RoleBinding). Authentik is retired, so the file is gone; keep this list in
|
|
# step with the directory or kustomize fails the whole app.
|
|
- smtp-gotify.yaml
|
|
# Repairs the ZITADEL subject stored inside the Forgejo, Paperless and Immich
|
|
# databases. Those links are not Kubernetes objects, so without this Job a
|
|
# fresh cluster (or a provider change) leaves every one of them pointing at
|
|
# the old subject and SSO cannot complete.
|
|
- identity-link-repair-job.yaml
|
|
|
|
# IAM provisioning is manual-only (security-sensitive).
|
|
# Script: scripts/iam/zitadel-provision.py
|
|
# Run:
|
|
# scripts/iam/zitadel-provision.py all
|