k8s/security/iam/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: iam
resources:
  - key-rotation-cronjob.yaml
# authentik-migrations-job.yaml removed — redundant + broken. The authentik
# `server` entrypoint runs migrations itself; this standalone job lacked the
# authentik-secrets envFrom (Secret key missing) and always failed.
# SOPS secrets (*.enc.yaml) handled by ArgoCD SOPS plugin at sync time
# authentik/vault deployed via ArgoCD Helm source
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
			`namespace: iam`
			`resources:`
			`- key-rotation-cronjob.yaml`
fix(loki,vault,iam): loki minio endpoint :80 not :9000, emit vault-minio-creds via CMP, drop redundant broken authentik-migrations job 2026-07-21 09:24:52 -07:00			`# authentik-migrations-job.yaml removed — redundant + broken. The authentik`
			# `server` entrypoint runs migrations itself; this standalone job lacked the
			`# authentik-secrets envFrom (Secret key missing) and always failed.`
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`# SOPS secrets (*.enc.yaml) handled by ArgoCD SOPS plugin at sync time`
			`# authentik/vault deployed via ArgoCD Helm source`