# services/maintenance/kustomization.yaml
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - namespace.yaml
  - image.yaml
  - secretproviderclass.yaml
  - metis-configmap.yaml
  - metis-data-pvc.yaml
  - soteria-configmap.yaml
  - vault-serviceaccount.yaml
  - vault-sync-deployment.yaml
  - ariadne-serviceaccount.yaml
  - soteria-serviceaccount.yaml
  - ariadne-rbac.yaml
  - soteria-rbac.yaml
  - disable-k3s-traefik-serviceaccount.yaml
  - disable-k3s-traefik-rbac.yaml
  - k3s-traefik-cleanup-rbac.yaml
  - metis-serviceaccount.yaml
  - metis-rbac.yaml
  - metis-token-sync-serviceaccount.yaml
  - node-nofile-serviceaccount.yaml
  - titan-24-docker-serviceaccount.yaml
  - pod-cleaner-rbac.yaml
  - ariadne-deployment.yaml
  - metis-deployment.yaml
  - soteria-deployment.yaml
  - oneoffs/ariadne-migrate-job.yaml
  - oneoffs/titan-24-rootfs-sweep-job.yaml
  - ariadne-service.yaml
  - soteria-service.yaml
  - disable-k3s-traefik-daemonset.yaml
  - oneoffs/k3s-traefik-cleanup-job.yaml
  - node-nofile-daemonset.yaml
  - rpi-resource-reservation-daemonset.yaml
  - metis-sentinel-amd64-daemonset.yaml
  - metis-sentinel-arm64-daemonset.yaml
  - k3s-agent-restart-daemonset.yaml
  - titan-24-docker-daemonset.yaml
  - titan-22-link-keeper-daemonset.yaml
  - node-image-sweeper-serviceaccount.yaml
  - node-image-sweeper-daemonset.yaml
  - metis-service.yaml
  - soteria-networkpolicy.yaml
  - oauth2-proxy-soteria-networkpolicy.yaml
  - soteria-ingress.yaml
  - soteria-certificate.yaml
  - oauth2-proxy-soteria.yaml
  - oauth2-proxy-metis.yaml
  - metis-certificate.yaml
  - metis-ingress.yaml
images:
  - name: registry.bstein.dev/bstein/ariadne
    newTag: 0.1.0-379 # {"$imagepolicy": "maintenance:ariadne:tag"}
  - name: registry.bstein.dev/bstein/metis
    newTag: 0.1.0-264-arm64 # {"$imagepolicy": "maintenance:metis-arm64:tag"}
  - name: registry.bstein.dev/bstein/soteria
    newTag: 0.1.0-120 # {"$imagepolicy": "maintenance:soteria:tag"}
configMapGenerator:
  - name: metis-inventory
    namespace: maintenance
    files:
      - inventory.yaml=metis-inventory.yaml
    options:
      disableNameSuffixHash: true
  - name: disable-k3s-traefik-script
    namespace: maintenance
    files:
      - disable_k3s_traefik.sh=scripts/disable_k3s_traefik.sh
    options:
      disableNameSuffixHash: true
  - name: k3s-traefik-cleanup-script
    namespace: maintenance
    files:
      - k3s_traefik_cleanup.sh=scripts/k3s_traefik_cleanup.sh
    options:
      disableNameSuffixHash: true
  - name: node-nofile-script
    namespace: maintenance
    files:
      - node_nofile.sh=scripts/node_nofile.sh
    options:
      disableNameSuffixHash: true
  - name: node-image-sweeper-script
    namespace: maintenance
    files:
      - node_image_sweeper.sh=scripts/node_image_sweeper.sh
    options:
      disableNameSuffixHash: true
  - name: titan-24-docker-script
    namespace: maintenance
    files:
      - titan_24_docker.sh=scripts/titan_24_docker.sh
    options:
      disableNameSuffixHash: true
  - name: rpi-resource-reservation-script
    namespace: maintenance
    files:
      - rpi_resource_reservation.sh=scripts/rpi_resource_reservation.sh
    options:
      disableNameSuffixHash: true
