f4097c6e59
Reconciles the services layout migration with ~991 upstream commits: - Remote content wins for cassandra/cassandra-auth, monitoring dashboards, vmalert availability rules, veles, vault auth script, dashboard render script and tests (request-v4 availability definition) - Layout paths win for structure: keycloak/bstein-dev-home job dirs use bootstrap-jobs/validation-jobs; cassandra realm jobs live in cassandra-auth (removed keycloak duplicates) - Union: applications CR list gains hermes-chat and cassandra image-automation - Fixed post-migration paths in dashboard test module loader and hermes-access job header Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
65 lines
2.7 KiB
YAML
65 lines
2.7 KiB
YAML
# services/keycloak/kustomization.yaml
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: sso
|
|
resources:
|
|
- namespace.yaml
|
|
- pvc.yaml
|
|
- serviceaccount.yaml
|
|
- vault-serviceaccount.yaml
|
|
- secretproviderclass.yaml
|
|
- vault-sync-deployment.yaml
|
|
- deployment.yaml
|
|
- bootstrap-jobs/realm-settings-job.yaml
|
|
- bootstrap-jobs/portal-admin-client-secret-ensure-job.yaml
|
|
- bootstrap-jobs/portal-groups-scope-ensure-job.yaml
|
|
- validation-jobs/portal-e2e-client-job.yaml
|
|
- validation-jobs/portal-e2e-target-client-job.yaml
|
|
- validation-jobs/portal-e2e-token-exchange-permissions-job.yaml
|
|
- validation-jobs/portal-e2e-token-exchange-test-job.yaml
|
|
- validation-jobs/portal-e2e-execute-actions-email-test-job.yaml
|
|
- bootstrap-jobs/ldap-federation-job.yaml
|
|
- bootstrap-jobs/user-overrides-job.yaml
|
|
- bootstrap-jobs/mas-secrets-ensure-job.yaml
|
|
- bootstrap-jobs/synapse-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/logs-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/metis-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/soteria-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/quality-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/hermes-dashboard-oidc-client-job.yaml
|
|
- bootstrap-jobs/hermes-access-oidc-client-job.yaml
|
|
- bootstrap-jobs/veles-realm-ensure-job.yaml
|
|
- bootstrap-jobs/veles-gitea-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml
|
|
- bootstrap-jobs/metis-node-passwords-secret-ensure-job.yaml
|
|
- bootstrap-jobs/harbor-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/vault-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/actual-oidc-secret-ensure-job.yaml
|
|
- service.yaml
|
|
- ingress.yaml
|
|
generatorOptions:
|
|
disableNameSuffixHash: true
|
|
configMapGenerator:
|
|
- name: portal-e2e-tests
|
|
files:
|
|
- test_portal_token_exchange.py=scripts/tests/test_portal_token_exchange.py
|
|
- test_keycloak_execute_actions_email.py=scripts/tests/test_keycloak_execute_actions_email.py
|
|
- name: harbor-oidc-secret-ensure-script
|
|
files:
|
|
- harbor_oidc_secret_ensure.sh=scripts/harbor_oidc_secret_ensure.sh
|
|
- name: vault-oidc-secret-ensure-script
|
|
files:
|
|
- vault_oidc_secret_ensure.sh=scripts/vault_oidc_secret_ensure.sh
|
|
- name: actual-oidc-secret-ensure-script
|
|
files:
|
|
- actual_oidc_secret_ensure.sh=scripts/actual_oidc_secret_ensure.sh
|
|
- name: hermes-dashboard-oidc-client-script
|
|
files:
|
|
- hermes_dashboard_oidc_client_ensure.sh=scripts/hermes_dashboard_oidc_client_ensure.sh
|
|
- name: hermes-access-oidc-script
|
|
files:
|
|
- hermes_access_oidc_ensure.sh=scripts/hermes_access_oidc_ensure.sh
|
|
- name: veles-gitea-oidc-secret-ensure-script
|
|
files:
|
|
- veles_gitea_oidc_secret_ensure.sh=scripts/veles_gitea_oidc_secret_ensure.sh
|