k8s/infra/iam/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - rbac-dashboard-rolebinding.yaml

# IAM provisioning is manual-only (security-sensitive).
# Script: scripts/iam/authentik-provision.py
# Run:
#   export AUTHENTIK_BOOTSTRAP_TOKEN=$(kubectl -n iam get secret authentik-secrets \
#     -o jsonpath='{.data.AUTHENTIK_BOOTSTRAP_TOKEN}' | base64 -d)
#   python3 scripts/iam/authentik-provision.py
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
iam: move provisioning script to scripts/iam, remove k8s job 2026-09-03 19:03:58 -07:00
refactor(k8s): Reorganize into 5-layer structure with production kustomizations 2026-07-16 14:28:19 -07:00			`resources:`
feat(homarr): complete wiring for landing page deployment 2026-07-22 09:04:27 -07:00			`- rbac-dashboard-rolebinding.yaml`
fix(iam): Authentik OAuth2 provisioning — grant_types/groups claim, idempotent script, skip PATCH on existing apps 2026-08-18 15:08:03 -07:00
iam: move provisioning script to scripts/iam, remove k8s job 2026-09-03 19:03:58 -07:00			`# IAM provisioning is manual-only (security-sensitive).`
			`# Script: scripts/iam/authentik-provision.py`
			`# Run:`
			`# export AUTHENTIK_BOOTSTRAP_TOKEN=$(kubectl -n iam get secret authentik-secrets \`
			`# -o jsonpath='{.data.AUTHENTIK_BOOTSTRAP_TOKEN}' \| base64 -d)`
			`# python3 scripts/iam/authentik-provision.py`