apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

sortOptions:
  order: legacy
  legacySortOptions:
    orderFirst:
    - Namespace
    - ResourceQuota
    - StorageClass
    - CustomResourceDefinition
    - MutatingWebhookConfiguration
    - ServiceAccount
    - PodSecurityPolicy
    - NetworkPolicy
    - Role
    - ClusterRole
    - RoleBinding
    - ClusterRoleBinding
    - ConfigMap
    - Secret
    - Endpoints
    - Service
    - LimitRange
    - PriorityClass
    - PersistentVolume
    - PersistentVolumeClaim
    - Deployment
    - StatefulSet
    - CronJob
    - PodDisruptionBudget
    - Ingress
    orderLast:
    - ValidatingWebhookConfiguration

resources:
# Cert-Manager
#- common/cert-manager/cert-manager/base
- common/cert-manager/kubeflow-issuer/base
# Istio
- common/istio-1-22/istio-crds/base
- common/istio-1-22/istio-namespace/base
- common/istio-1-22/istio-install/overlays/oauth2-proxy
# oauth2-proxy
- common/oidc-client/oauth2-proxy/overlays/m2m-self-signed
# KNative
- common/knative/knative-serving/overlays/gateways
- common/knative/knative-eventing/base
- common/istio-1-22/cluster-local-gateway/base
# Kubeflow namespace
- common/kubeflow-namespace/base
# NetworkPolicies
- common/networkpolicies/base
# Kubeflow Roles
- common/kubeflow-roles/base
# Kubeflow Istio Resources
- common/istio-1-22/kubeflow-istio-resources/base


# Kubeflow Pipelines
- apps/pipeline/upstream/env/cert-manager/platform-agnostic-multi-user
# Katib
- apps/katib/upstream/installs/katib-with-kubeflow
# Central Dashboard
- apps/centraldashboard/upstream/overlays/oauth2-proxy
# Admission Webhook
- apps/admission-webhook/upstream/overlays/cert-manager
# Jupyter Web App
- apps/jupyter/jupyter-web-app/upstream/overlays/istio
# Notebook Controller
- apps/jupyter/notebook-controller/upstream/overlays/kubeflow
# Profiles + KFAM
- apps/profiles/upstream/overlays/kubeflow
# PVC Viewer
- apps/pvcviewer-controller/upstream/base
# Volumes Web App
- apps/volumes-web-app/upstream/overlays/istio
# Tensorboards Controller
- apps/tensorboard/tensorboard-controller/upstream/overlays/kubeflow
# Tensorboard Web App
- apps/tensorboard/tensorboards-web-app/upstream/overlays/istio
# Training Operator
- apps/training-operator/upstream/overlays/kubeflow
# User namespace
- common/user-namespace/base

# KServe
- contrib/kserve/kserve
- contrib/kserve/models-web-app/overlays/kubeflow
  #- common/knative/knative-serving/base
  #- common/knative/knative-eventing/base

# Ingress
- ingress.yaml

# dip
- dip/cluster-policy.yaml
- dip/cluster-role.yaml
- dip/cluster-rolebinding.yaml

# Pod Security Standards
# https://kubernetes.io/docs/concepts/security/pod-security-standards/
# Uncomment to enable baseline level standards
# - ../contrib/security/PSS/static/baseline
# Uncomment to enable restricted level standards
# - ../contrib/security/PSS/static/restricted