apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: ci-cd resources: - forgejo-redis.yaml # Helm charts (forgejo, forgejo-runner) deployed via standalone ArgoCD # Applications with Helm sources (k8s/argocd/apps/forgejo.yaml) — not through # this kustomization, since layer-4-security syncs from Forgejo's own repo # (chicken-egg: Forgejo can't be the source of truth for deploying itself).