39 lines
1.8 KiB
YAML
39 lines
1.8 KiB
YAML
|
# ⚠️ UNSEALED SECRET - Will be sealed before committing
|
||
|
|
# Run: kubeseal --cert /tmp/sealed-secrets-cert.pem -f opencloud-config-secrets-complete.yaml -o yaml > opencloud-config-sealed.yaml
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Secret
|
||
|
|
metadata:
|
||
|
|
name: opencloud-config-secrets
|
||
|
|
namespace: opencloud
|
||
|
|
type: Opaque
|
||
|
|
stringData:
|
||
|
|
# Core secrets (already generated earlier)
|
||
|
|
machine-auth-api-key: "Rtr1OAZLhVOUDcii2B49C6xGQxS818zlRQwBwnVQ3eY="
|
||
|
|
system-user-api-key: "g3oHbUxvyAzbwdilZ8L8B7V6f+DrbCHMSBMb7Q3xfgU="
|
||
|
|
transfer-secret: "ThrfId0MRh0AsoVgFbQZ/B9XKGp600i58OoQz4FBmQQ="
|
||
|
|
url-signing-secret: "0EDC13bX3fYeUPbxy0fVKkNsXAt2qm2ZqMOH4XN6zXg="
|
||
|
|
system-user-id: "fbc38326-7012-4836-a837-611de2dff84a"
|
||
|
|
admin-user-id: "13374356-5c63-4c8c-a90c-2a1f0b62f0dc"
|
||
|
|
|
||
|
|
# Additional required secrets for complete configuration
|
||
|
|
service-account-id: "0db2c7f5-fa39-49fe-8205-a5be8203111f"
|
||
|
|
service-account-secret: "Bzrb5lLOsj7L0zBE2tbYYhM13mCN43ZrswK1LgMLJ+A="
|
||
|
|
storage-mount-id: "db2311e4-927b-4722-b917-2bf08459d60d"
|
||
|
|
graph-application-id: "025a50d1-5f8d-4309-a201-dd938e7b0b2f"
|
||
|
|
|
||
|
|
# LDAP bind passwords
|
||
|
|
graph-ldap-bind-password: "IfANmCcYcTBsNCZaBlwbyrHOjwgM286giqaWXm+pqhU="
|
||
|
|
idp-ldap-bind-password: "SSkdZxInHyv5LeuWlFq72isVOaNav3FYwEzNqfdUVAA="
|
||
|
|
ldap-bind-password: "NHNmxxTb5JhGEQ08Hk/1cxjMNBGZA9mxrmjJ9sIWb/E="
|
||
|
|
|
||
|
|
# IDM service user passwords
|
||
|
|
idm-admin-password: "uOqmiWmbl9DwJ4+z42p9aJXmJAWduhOMEzGDeaI6oaw="
|
||
|
|
idm-idm-password: "YopBp2q0b6a4/f79Oy4dB1t61ooN6lQtEzatSRt3U1I="
|
||
|
|
idm-reva-password: "G+hWxiAMxzmlS4h6Gaon2ZO64BGcPcKTJlCEqce7Mk0="
|
||
|
|
idm-idp-password: "RX1ucEvGGcxja5InYUVWtKm8TBBS90PhiDVk/UAOR7c="
|
||
|
|
|
||
|
|
# Other service secrets
|
||
|
|
collaboration-wopi-secret: "cq4+weOv2RSHLse6Xzl+pvDEx6pPrOcewP0itA2OksA="
|
||
|
|
thumbnails-transfer-secret: "0C/VCpeDABHXWBXT4clxqFMLocAyDUM69lIbC2t7Sls="
|