apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization # Issuers + CA trust-bundle ConfigMaps for the cert-manager-issuers Application. # Each resource sets its own metadata.namespace (the ConfigMaps target iam/cicd/ # monitoring/sqs; ClusterIssuers are cluster-scoped) — so NO namespace transformer # here (that would rewrite them all into one namespace). cert-manager itself is a # separate Helm Application; cert-manager-values.yaml here is only its $values ref. resources: - letsencrypt-issuer.yaml - homelab-ca-issuer.yaml - homelab-ca-configmap.yaml