apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: rdev

resources:
  - namespace.yaml

  # Storage classes (must be applied before PVCs)
  - storageclass-rwx.yaml

  # Shared worker claudebox (runs all project builds)
  - pvc.yaml
  - claudebox.yaml
  - configmaps.yaml

  # Playwright pod for visual verification
  - playwright-pod.yaml
  - playwright-scripts-configmap.yaml

  # NOTE: secrets.yaml and credentials.yaml contain real keys and are gitignored.
  # Copy from *.example files and fill in real values before deploying.
  - secrets.yaml       # from secrets.yaml.example
  - credentials.yaml   # from credentials.yaml.example

  # v0.4+ - API Server (RBAC now included in rdev-api.yaml)
  - rdev-api.yaml

  # Woodpecker CI RBAC - allows deploy steps to update deployments in projects namespace
  - woodpecker-deployer-rbac.yaml

  # v0.8+ - Production hardening
  - pdb.yaml
  - network-policy.yaml

  # Wildcard TLS for session preview URLs
  - preview-cert.yaml

  # Citadel log agent (ships container logs to partner-hosted Citadel)
  - citadel-agent/