apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# Seal each secret with the htwg-1 cluster key before use:
#   kubectl -n <namespace> create secret generic <name> ... --dry-run=client -o yaml \
#     | kubeseal --controller-name sealed-secrets --controller-namespace kube-system -o yaml > <file>
resources:
  - ghcr-pull-secret.yaml
  - ncs-jwt-keys.yaml
  - ncs-db-secrets.yaml
  - ncs-internal-secret.yaml
  - remotek6-certs.yaml
  - postgres-credentials.yaml
