container lifecycle management

deploy/k8s/prod/kustomization.yaml

@@ -1,9 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-namespace: default
+# Note: namespaces are defined in base; workloads go to dexorder-system
+namespace: dexorder-system
 
-# Base resources (backend, web, ingress, init/gVisor)
+# Base resources (includes all security policies)
 resources:
   - ../base
 
@@ -38,3 +39,10 @@ images:
     newTag: latest
   - name: dexorder/ai-web
     newTag: latest
+  - name: ghcr.io/dexorder/gateway
+    newTag: latest
+  - name: lifecycle-sidecar
+    newName: ghcr.io/dexorder/lifecycle-sidecar
+    newTag: latest
+  - name: ghcr.io/dexorder/agent
+    newTag: latest