2026-07-16 14:28:19 -07:00
|
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
|
|
|
kind: Kustomization
|
2026-08-25 11:11:37 -07:00
|
|
|
# NOTE: no top-level `namespace:` transformer (see iam/kustomization.yaml for
|
|
|
|
|
# the same fix) - minio-provision-paperless-job.yaml's RoleBinding
|
|
|
|
|
# deliberately targets namespace paperless (least-privilege access for the
|
|
|
|
|
# provisioner ServiceAccount to write Secrets there); a namespace transformer
|
|
|
|
|
# would silently rewrite it back to storage, breaking the RBAC. Every resource
|
|
|
|
|
# here already sets its own explicit metadata.namespace.
|
2026-07-16 14:28:19 -07:00
|
|
|
resources:
|
|
|
|
|
- minio-tenant.yaml
|
2026-08-25 11:11:37 -07:00
|
|
|
- minio-provision-paperless-job.yaml
|
2026-08-18 15:08:02 -07:00
|
|
|
# The operator creates the minio S3/console/headless Services and the
|
|
|
|
|
# declarative bucket + user from the Tenant spec — no hand-rolled Service or
|
|
|
|
|
# Bucket/User CRs (those kinds don't exist in the operator CRD set).
|
