apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

namespace: nvi

resources:
  - namespace.yaml
  - configmap.yaml
  - postgres.yaml
  - api.yaml
  - ui.yaml
  - docs.yaml
  - gateway.yaml

# Hash suffix disabled so the name stays static — lets Tilt group it under the
# 'infra' resource. Pod doesn't auto-restart on Caddyfile edit; the Tiltfile's
# 'gateway-reload' local_resource closes that loop.
configMapGenerator:
  - name: gateway-config
    files:
      - Caddyfile
    options:
      disableNameSuffixHash: true

# API key Secret built from .env at the repo root. .env is gitignored; only
# .env.example is committed. The path is relative to this kustomization.yaml
# (ctrl/k8s/base/) — `../../../.env` resolves to the repo root.
# disableNameSuffixHash keeps the Secret name stable so api.yaml's secretRef
# doesn't break on every rebuild.
secretGenerator:
  - name: nvi-secrets
    envs:
      - ../../../.env
    options:
      disableNameSuffixHash: true