Where each file goes in /srv/gitlab/cluster-config (NOT DONE: nothing here has been copied, committed or pushed)

deploy/k8s/base/*.yaml                                  -> clusters/centroid/apps/cognitive-fabric/base/
deploy/k8s/production/kustomization.yaml                -> clusters/centroid/apps/cognitive-fabric/production/kustomization.yaml
deploy/k8s/flux/app-cognitive-fabric.kustomization.yaml -> clusters/centroid/app-cognitive-fabric.kustomization.yaml
deploy/k8s/flux/cognitive-fabric-imagerepo.yaml         -> flux-image-automation/
deploy/k8s/flux/cognitive-fabric-imagepolicy.yaml       -> flux-image-automation/
deploy/k8s/flux/cognitive-fabric-imageupdate.yaml       -> flux-image-automation/

Two lines to add (the only edits to existing files):
  clusters/centroid/kustomization.yaml          + "  - app-cognitive-fabric.kustomization.yaml"   (before ../../flux-image-automation)
  flux-image-automation/kustomization.yaml      + "  - cognitive-fabric-imagerepo.yaml" / "-imagepolicy.yaml" / "-imageupdate.yaml"

Conventions copied from speechtest / standards: Namespace per app, NodePort Service, imagepolicy marker comment on the image
line, ImageRepository with certSecretRef centroid-ca, semver ">=0.0.1". NodePort 30060 was checked free on 2026-10-24
(`kubectl get svc -A`, read-only); re-check immediately before applying.
