apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: nvi

resources:
  - namespace.yaml
  - configmap.yaml
  - postgres.yaml
  - api.yaml
  - ui.yaml
  - docs.yaml
  - gateway.yaml

# Hash suffix disabled so the name stays static — lets Tilt group it under the
# 'infra' resource. Trade-off: editing the Caddyfile won't roll the gateway pod
# automatically; apply it with
#   kubectl --context kind-nvi -n nvi rollout restart deployment/gateway
configMapGenerator:
  - name: gateway-config
    files:
      - Caddyfile
    options:
      disableNameSuffixHash: true

# API key Secret built from .env at the repo root. .env is gitignored; only
# .env.example is committed. The path is relative to this kustomization.yaml
# (ctrl/k8s/base/) — `../../../.env` resolves to the repo root.
# disableNameSuffixHash keeps the Secret name stable so api.yaml's secretRef
# doesn't break on every rebuild.
secretGenerator:
  - name: nvi-secrets
    envs:
      - ../../../.env
    options:
      disableNameSuffixHash: true