# ============================================================
# Secret 模板 — violin-auth dev 环境（K8s 测试）
# ============================================================
# ⚠️ 真实凭据通过 KubeSphere UI 或 CI/CD 注入，不要 commit 真实值
# dev 环境凭据可以和 prod 区分开（推荐），也可以共用（不推荐）
# ============================================================

apiVersion: v1
kind: Secret
metadata:
  name: violin-auth-secret
  namespace: violin-dev
  labels:
    app.kubernetes.io/name: violin-auth
    app.kubernetes.io/component: secret
    environment: dev
type: Opaque
stringData:
  # ---- 数据库 ----
  DB_PASSWORD: "CHANGE_ME_DEV_POSTGRES_PASSWORD"

  # ---- JWT ----
  VIOLIN_JWT_SECRET: "CHANGE_ME_DEV_JWT_SECRET_MIN_32_BYTES"

  # ---- Authentik OIDC（dev application）----
  AUTHENTIK_CLIENT_ID: "CHANGE_ME_DEV_AUTHENTIK_CLIENT_ID"
  AUTHENTIK_CLIENT_SECRET: "CHANGE_ME_DEV_AUTHENTIK_CLIENT_SECRET"