# Ansible bootstrap: plain Kustomize (namespaces + extra YAML). Helm installs are driven by
# **ansible/playbooks/noble.yml** (role **noble_platform**) — avoids **kustomize --enable-helm** in-repo.
# Optional GitOps workloads live under **../apps/** (Argo **noble-root**).
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - kube-prometheus-stack/namespace.yaml
  - loki/namespace.yaml
  - fluent-bit/namespace.yaml
  - sealed-secrets/namespace.yaml
  - external-secrets/namespace.yaml
  - vault/namespace.yaml
  - kyverno/namespace.yaml
  - velero/namespace.yaml
  - headlamp/namespace.yaml
  - grafana-loki-datasource/loki-datasource.yaml
  - vault/unseal-cronjob.yaml
  - vault/cilium-network-policy.yaml