k8s/security/ci-cd/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: ci-cd
resources:
  - forgejo-redis.yaml
# Helm charts (forgejo, forgejo-runner) deployed via standalone ArgoCD
# Applications with Helm sources (k8s/argocd/apps/forgejo.yaml) — not through
# this kustomization, since layer-4-security syncs from Forgejo's own repo
# (chicken-egg: Forgejo can't be the source of truth for deploying itself).
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
			`namespace: ci-cd`
feat(gitops): migrate domain to riotpiao.com, add CNPG + Forgejo HA on Redis/Postgres, wire ArgoCD apps — enables cluster rebuild after etcd wipe and unblocks the git-source chicken-egg via standalone Helm-source Applications 2026-07-19 09:29:17 -07:00			`resources:`
			`- forgejo-redis.yaml`
			`# Helm charts (forgejo, forgejo-runner) deployed via standalone ArgoCD`
			`# Applications with Helm sources (k8s/argocd/apps/forgejo.yaml) — not through`
			`# this kustomization, since layer-4-security syncs from Forgejo's own repo`
			`# (chicken-egg: Forgejo can't be the source of truth for deploying itself).`