apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - externalsecret.yaml
  - samba-bridge-externalsecret.yaml
  - blueprints-configmap.yaml
  - helmrelease.yaml
  - gate-sync.yaml
  - ldap-outpost-cert.yaml
  - ldap-outpost-lb.yaml
  - ldap-outpost-cnp.yaml
  # ak-pg CNPG Postgres backend (moved here from the retired seed-authentik KS;
  # each carries prune: disabled so ownership transferred without a teardown).
  # authentik has no data PVCs — all state lives in ak-pg. This KS depends on
  # cnpg-object-stores and health-checks the CNPG Cluster (see
  # clusters/homelab/authentik.yaml).
  - cluster.yaml
  - scheduled-backup.yaml
  - hetzner-creds-externalsecret.yaml