apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - canonical-cilium-cidrs.yaml
  - require-app-labels.yaml
  - quay-job-labels.yaml
  - deny-latest-tag.yaml
  - cilium-networkpolicy-coverage.yaml
  - deny-privileged.yaml
  - require-drop-all-capabilities.yaml
  - require-allow-privilege-escalation-false.yaml
  - require-resource-requests.yaml
  - min-replicas.yaml
  - require-public-runtime-gvisor.yaml
  # Track C Gateway (Audit)
  - require-gateway-route-selectors.yaml
  - restrict-route-parentrefs.yaml
  - restrict-route-backends.yaml
  - restrict-referencegrants.yaml
  - protect-shared-gateways.yaml
  - audit-gateway-api-rbac.yaml
  - restrict-gateway-client-label.yaml
  # 2b expanded Audit
  - restrict-image-registries.yaml
  - restrict-zot-image-pulls.yaml
  - restrict-pod-host-access.yaml
  - require-vso-secret-labels.yaml
  - tls-activation.yaml
  - tls-rollout.yaml