apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

# secret.example.yaml is deliberately NOT listed. Apply your filled-in copy
# out-of-band so real passwords never pass through a file in this repo.
resources:
  - namespace.yaml
  - mariadb.yaml
  - ejbca.yaml
  - ingress.yaml
  - networkpolicy.yaml

# Order matters on a cold cluster: the namespace and the secret must exist before
# the workloads. kustomize sorts by kind and handles the namespace; the secret is
# on you. See README.md § Install.