Found by rebuild rehearsals; each stopped a cold start outright and none changes behaviour on a running cluster. infrastructure-ceph-cluster no longer dependsOn infrastructure. That edge closed a cycle no new cluster could escape: infrastructure is Ready only once its openbao healthCheck passes, openbao-0 runs only once its PVC binds, and the PVC wants the ceph-block StorageClass defined in this very Kustomization. infrastructure runs wait: false, so everything this path needs is applied long before readiness; on an empty API server it self-heals on retryInterval like post-crds already does. home-assistant gains dependsOn infrastructure-cnpg-barman: its ObjectStore kind arrives with the Barman plugin, and one unknown kind fails the server-side dry-run for the whole apply set — taking speech-to-phrase, zone-configurator and matter-server down with it. Every other ObjectStore user already declares the edge. woodpecker-ci namespace moves to infrastructure/namespaces: its CiliumNetworkPolicies ship with infrastructure-crds, which runs before every app KS, so declaring the namespace in the workload KS inverted the order and held infrastructure-crds — and the twenty app Kustomizations behind it — on "namespaces woodpecker-ci not found". Same reasoning as its sibling namespace, previously not carried across. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>