# ============================================================
# ConfigMap 模板 — violin-auth 生产环境（非敏感配置）
# ============================================================
# 使用方式：
#   kubectl apply -f example/configmap-template.yaml
#
# 说明：
#   - 非敏感参数放这里，可 commit 进 Git
#   - 敏感凭据（密码 / secret）走 secret-template.yaml，绝不 commit 真实值
#   - KubeSphere UI 可直接导入此文件
# ============================================================

apiVersion: v1
kind: ConfigMap
metadata:
  name: violin-auth-config
  namespace: violin-prod
  labels:
    app.kubernetes.io/name: violin-auth
    app.kubernetes.io/component: config
    environment: production
data:
  SPRING_PROFILES_ACTIVE: "prod"

  DB_HOST: "violin-postgres"
  DB_PORT: "5432"
  DB_NAME: "violin"
  DB_USER: "postgres"

  AUTHENTIK_ISSUER: "https://auth.violin-work.online"
  AUTHENTIK_REDIRECT_URI: "https://www.violin-home.cn/auth/callback"
  AUTHENTIK_SCOPE: "openid profile email"

  VIOLIN_CORS_ALLOWED_ORIGINS: "https://www.violin-home.cn,https://*.violin-work.online"

  VIOLIN_SNOWFLAKE_WORKER_ID: "1"