apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# secret.yaml is applied out-of-band and is git-ignored (contains plaintext
# credentials). Flux reconciles deployment.yaml etc. but does NOT manage the
# secret. Rotate secrets by applying secret.yaml with kubectl directly.
resources:
  - namespace.yaml
  - rbac.yaml
  - deployment.yaml
  - deployment-backfill.yaml
  - deployment-grid-rs.yaml
  - deployment-hrrr-point-rs.yaml
  - service.yaml
  - metrics-service.yaml
  - hpa.yaml