container lifecycle management

deploy/k8s/dev/kustomization.yaml

@@ -1,16 +1,20 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-namespace: default
+# Note: namespaces are defined in base; workloads go to dexorder-system
+namespace: dexorder-system
 
-# Base resources
+# Base resources (includes security policies)
 resources:
   - ../base
   - infrastructure.yaml
 
-# No patches needed currently
-patches: []
-  # ingress-dev.yaml - removed until we have services to expose
+# Dev-specific patches
+patches:
+  # Reduced resource quotas for minikube
+  - path: agent-quotas-patch.yaml
+  # Allow local registry images
+  - path: admission-policy-patch.yaml
 
 # ConfigMaps for service configs
 configMapGenerator: