# ⚠️  UNSEALED SECRET - Will be sealed before committing
# Run: kubeseal --cert /tmp/sealed-secrets-cert.pem -f opencloud-config-secrets-complete.yaml -o yaml > opencloud-config-sealed.yaml
---
apiVersion: v1
kind: Secret
metadata:
  name: opencloud-config-secrets
  namespace: opencloud
type: Opaque
stringData:
  # Core secrets (already generated earlier)
  machine-auth-api-key: "Rtr1OAZLhVOUDcii2B49C6xGQxS818zlRQwBwnVQ3eY="
  system-user-api-key: "g3oHbUxvyAzbwdilZ8L8B7V6f+DrbCHMSBMb7Q3xfgU="
  transfer-secret: "ThrfId0MRh0AsoVgFbQZ/B9XKGp600i58OoQz4FBmQQ="
  url-signing-secret: "0EDC13bX3fYeUPbxy0fVKkNsXAt2qm2ZqMOH4XN6zXg="
  system-user-id: "fbc38326-7012-4836-a837-611de2dff84a"
  admin-user-id: "13374356-5c63-4c8c-a90c-2a1f0b62f0dc"

  # Additional required secrets for complete configuration
  service-account-id: "0db2c7f5-fa39-49fe-8205-a5be8203111f"
  service-account-secret: "Bzrb5lLOsj7L0zBE2tbYYhM13mCN43ZrswK1LgMLJ+A="
  storage-mount-id: "db2311e4-927b-4722-b917-2bf08459d60d"
  graph-application-id: "025a50d1-5f8d-4309-a201-dd938e7b0b2f"

  # LDAP bind passwords
  graph-ldap-bind-password: "IfANmCcYcTBsNCZaBlwbyrHOjwgM286giqaWXm+pqhU="
  idp-ldap-bind-password: "SSkdZxInHyv5LeuWlFq72isVOaNav3FYwEzNqfdUVAA="
  ldap-bind-password: "NHNmxxTb5JhGEQ08Hk/1cxjMNBGZA9mxrmjJ9sIWb/E="

  # IDM service user passwords
  idm-admin-password: "uOqmiWmbl9DwJ4+z42p9aJXmJAWduhOMEzGDeaI6oaw="
  idm-idm-password: "YopBp2q0b6a4/f79Oy4dB1t61ooN6lQtEzatSRt3U1I="
  idm-reva-password: "G+hWxiAMxzmlS4h6Gaon2ZO64BGcPcKTJlCEqce7Mk0="
  idm-idp-password: "RX1ucEvGGcxja5InYUVWtKm8TBBS90PhiDVk/UAOR7c="

  # Other service secrets
  collaboration-wopi-secret: "cq4+weOv2RSHLse6Xzl+pvDEx6pPrOcewP0itA2OksA="
  thumbnails-transfer-secret: "0C/VCpeDABHXWBXT4clxqFMLocAyDUM69lIbC2t7Sls="