# services/keycloak/kustomization.yaml
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
namespace: sso
resources:
  - namespace.yaml
  - pvc.yaml
  - serviceaccount.yaml
  - vault-serviceaccount.yaml
  - secretproviderclass.yaml
  - vault-sync-deployment.yaml
  - deployment.yaml
  - oneoffs/realm-settings-job.yaml
  - oneoffs/portal-admin-client-secret-ensure-job.yaml
  - oneoffs/portal-groups-scope-ensure-job.yaml
  - oneoffs/portal-e2e-client-job.yaml
  - oneoffs/portal-e2e-target-client-job.yaml
  - oneoffs/portal-e2e-token-exchange-permissions-job.yaml
  - oneoffs/portal-e2e-token-exchange-test-job.yaml
  - oneoffs/portal-e2e-execute-actions-email-test-job.yaml
  - oneoffs/ldap-federation-job.yaml
  - oneoffs/user-overrides-job.yaml
  - oneoffs/mas-secrets-ensure-job.yaml
  - oneoffs/synapse-oidc-secret-ensure-job.yaml
  - oneoffs/logs-oidc-secret-ensure-job.yaml
  - oneoffs/metis-oidc-secret-ensure-job.yaml
  - oneoffs/soteria-oidc-secret-ensure-job.yaml
  - oneoffs/quality-oidc-secret-ensure-job.yaml
  - oneoffs/agent-oidc-secret-ensure-job.yaml
  - oneoffs/veles-realm-ensure-job.yaml
  - oneoffs/veles-gitea-oidc-secret-ensure-job.yaml
  - oneoffs/metis-ssh-keys-secret-ensure-job.yaml
  - oneoffs/metis-node-passwords-secret-ensure-job.yaml
  - oneoffs/harbor-oidc-secret-ensure-job.yaml
  - oneoffs/vault-oidc-secret-ensure-job.yaml
  - oneoffs/actual-oidc-secret-ensure-job.yaml
  - service.yaml
  - ingress.yaml
generatorOptions:
  disableNameSuffixHash: true
configMapGenerator:
  - name: portal-e2e-tests
    files:
      - test_portal_token_exchange.py=scripts/tests/test_portal_token_exchange.py
      - test_keycloak_execute_actions_email.py=scripts/tests/test_keycloak_execute_actions_email.py
  - name: harbor-oidc-secret-ensure-script
    files:
      - harbor_oidc_secret_ensure.sh=scripts/harbor_oidc_secret_ensure.sh
  - name: vault-oidc-secret-ensure-script
    files:
      - vault_oidc_secret_ensure.sh=scripts/vault_oidc_secret_ensure.sh
  - name: actual-oidc-secret-ensure-script
    files:
      - actual_oidc_secret_ensure.sh=scripts/actual_oidc_secret_ensure.sh
  - name: agent-oidc-secret-ensure-script
    files:
      - agent_oidc_secret_ensure.sh=scripts/agent_oidc_secret_ensure.sh
  - name: veles-gitea-oidc-secret-ensure-script
    files:
      - veles_gitea_oidc_secret_ensure.sh=scripts/veles_gitea_oidc_secret_ensure.sh
