simple321vip
30 lines
1.1 KiB
YAML
30 lines
1.1 KiB
YAML
# ============================================================
|
|
# Secret 模板 — violin-auth 生产环境（敏感凭据）
|
|
# ============================================================
|
|
# ⚠️ 重要：
|
|
# - 本文件是 TEMPLATE，真实凭据值必须通过以下方式注入：
|
|
# 1. KubeSphere 控制台 → 配置存储 → Secret → 创建（界面填写真实值）
|
|
# 2. 或 CI/CD 流水线中通过 Drone Secret / sealed-secrets 动态注入
|
|
# - 绝不要把 stringData 里的占位符替换成真实值后 commit
|
|
# ============================================================
|
|
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: violin-auth-secret
|
|
namespace: violin-prod
|
|
labels:
|
|
app.kubernetes.io/name: violin-auth
|
|
app.kubernetes.io/component: secret
|
|
environment: production
|
|
type: Opaque
|
|
stringData:
|
|
# ---- 数据库 ----
|
|
DB_PASSWORD: "CHANGE_ME_POSTGRES_PASSWORD"
|
|
|
|
# ---- JWT ----
|
|
VIOLIN_JWT_SECRET: "CHANGE_ME_JWT_SECRET_MIN_32_BYTES"
|
|
|
|
# ---- Authentik OIDC ----
|
|
AUTHENTIK_CLIENT_ID: "CHANGE_ME_AUTHENTIK_CLIENT_ID"
|
|
AUTHENTIK_CLIENT_SECRET: "CHANGE_ME_AUTHENTIK_CLIENT_SECRET" |