# Agent access to the mg4 namespace, applied separately from k8s/: `kubectl apply -k k8s/agent-access/`.
# Read-only by default; add role-deploy.yaml below to let the agent apply changes too.
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - serviceaccount.yaml
  - role-read.yaml
  # - role-deploy.yaml