apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization # No top-level `namespace:` override - every resource below (including # ingress-unified.yaml, which spans alaska and nearle) already sets its own # metadata.namespace explicitly. A blanket override here would silently # force cross-namespace resources into "core" and break their backend refs. resources: - core-namespace.yaml - core-secrets.yaml - core-config.yaml - worker-script.yaml - workers.yaml - worker-notifications.yaml - worker-pdb.yaml - ingress-unified.yaml # traefik-middlewares.yaml intentionally excluded - this cluster's # Traefik has no Middleware CRD installed under any API group, so this # can never apply. The router.middlewares annotation referencing it on # the Ingress has been a pre-existing no-op; actual CORS handling comes # from nginx-queue-proxy.conf and the apps' own CORS middleware.