apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
# Seal each secret with the htwg-1 cluster key before uncommenting:
#   kubectl -n nowchess create secret generic <name> ... --dry-run=client -o yaml \
#     | kubeseal --controller-namespace kube-system -o yaml > secrets/nowchess/htwg-1-prod/<name>.yaml
resources:
  - ../nowchess/htwg-1-prod/ghcr-pull-secret.yaml
  - ../nowchess/htwg-1-prod/ncs-jwt-keys.yaml
  - ../nowchess/htwg-1-prod/ncs-db-secrets.yaml
  - ../nowchess/htwg-1-prod/ncs-internal-secret.yaml
  - ../nowchess/htwg-1-prod/remotek6-certs.yaml
  - ../postgres-tunnel/secret.yaml