apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization namespace: graphrag-prod namePrefix: prod- resources: - ../../base - namespace.yaml configMapGenerator: - name: graphrag-config behavior: replace literals: - DEEPSEEK_BASE_URL=https://api.deepseek.com - MINERU_PIPELINE=/app/mineru_mvp/pipeline.py - MINERU_PYTHON=/opt/venv/bin/python - KEYCLOAK_SERVER_URL=https://keycloak.plfai.cn - KEYCLOAK_REALM=plfai - KEYCLOAK_CLIENT_ID=graphrag-backend - KEYCLOAK_AUDIENCE=account secretGenerator: - name: graphrag-secrets behavior: replace literals: - DEEPSEEK_API_KEY=sk-prod-placeholder - MINERU_API_TOKEN=prod-placeholder - KEYCLOAK_CLIENT_SECRET=prod-placeholder patches: - path: ingress.yaml - path: replicas-patch.yaml