8f45f47e60
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/, repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/) - Retire oneoffs/ directories across services - Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding - Reorganize scripts/ into ops/, render/, sync/, manual-tests/ - Add Makefile with render/validate/test/flux targets and repo-structure tests - Update flux-system application CRs to the new paths - Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror) - Refresh knowledge catalogs, dashboards, vmalert rules, quality contract Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
66 lines
2.8 KiB
YAML
66 lines
2.8 KiB
YAML
# services/keycloak/kustomization.yaml
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: sso
|
|
resources:
|
|
- namespace.yaml
|
|
- pvc.yaml
|
|
- serviceaccount.yaml
|
|
- vault-serviceaccount.yaml
|
|
- secretproviderclass.yaml
|
|
- vault-sync-deployment.yaml
|
|
- deployment.yaml
|
|
- bootstrap-jobs/realm-settings-job.yaml
|
|
- bootstrap-jobs/portal-admin-client-secret-ensure-job.yaml
|
|
- bootstrap-jobs/portal-groups-scope-ensure-job.yaml
|
|
- validation-jobs/portal-e2e-client-job.yaml
|
|
- validation-jobs/portal-e2e-target-client-job.yaml
|
|
- validation-jobs/portal-e2e-token-exchange-permissions-job.yaml
|
|
- validation-jobs/portal-e2e-token-exchange-test-job.yaml
|
|
- validation-jobs/portal-e2e-execute-actions-email-test-job.yaml
|
|
- bootstrap-jobs/ldap-federation-job.yaml
|
|
- bootstrap-jobs/user-overrides-job.yaml
|
|
- bootstrap-jobs/mas-secrets-ensure-job.yaml
|
|
- bootstrap-jobs/synapse-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/logs-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/metis-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/soteria-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/quality-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/hermes-dashboard-oidc-client-job.yaml
|
|
- bootstrap-jobs/cassandra-realm-ensure-job.yaml
|
|
- bootstrap-jobs/cassandra-gitea-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/veles-realm-ensure-job.yaml
|
|
- bootstrap-jobs/veles-gitea-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/metis-ssh-keys-secret-ensure-job.yaml
|
|
- bootstrap-jobs/metis-node-passwords-secret-ensure-job.yaml
|
|
- bootstrap-jobs/harbor-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/vault-oidc-secret-ensure-job.yaml
|
|
- bootstrap-jobs/actual-oidc-secret-ensure-job.yaml
|
|
- service.yaml
|
|
- ingress.yaml
|
|
generatorOptions:
|
|
disableNameSuffixHash: true
|
|
configMapGenerator:
|
|
- name: portal-e2e-tests
|
|
files:
|
|
- test_portal_token_exchange.py=scripts/tests/test_portal_token_exchange.py
|
|
- test_keycloak_execute_actions_email.py=scripts/tests/test_keycloak_execute_actions_email.py
|
|
- name: harbor-oidc-secret-ensure-script
|
|
files:
|
|
- harbor_oidc_secret_ensure.sh=scripts/harbor_oidc_secret_ensure.sh
|
|
- name: vault-oidc-secret-ensure-script
|
|
files:
|
|
- vault_oidc_secret_ensure.sh=scripts/vault_oidc_secret_ensure.sh
|
|
- name: actual-oidc-secret-ensure-script
|
|
files:
|
|
- actual_oidc_secret_ensure.sh=scripts/actual_oidc_secret_ensure.sh
|
|
- name: hermes-dashboard-oidc-client-script
|
|
files:
|
|
- hermes_dashboard_oidc_client_ensure.sh=scripts/hermes_dashboard_oidc_client_ensure.sh
|
|
- name: cassandra-gitea-oidc-secret-ensure-script
|
|
files:
|
|
- cassandra_gitea_oidc_secret_ensure.sh=scripts/cassandra_gitea_oidc_secret_ensure.sh
|
|
- name: veles-gitea-oidc-secret-ensure-script
|
|
files:
|
|
- veles_gitea_oidc_secret_ensure.sh=scripts/veles_gitea_oidc_secret_ensure.sh
|