mirror of
https://github.com/luxfi/mpc.git
synced 2026-09-24 00:26:24 +00:00
zeekay
ab1fec5d1f
MPC and KMS are protocols, not products. The Go module path github.com/luxfi/mpc remains canonical (location), but user-facing strings (--help, README, comments, banners) are brand-neutral. 'Lux MPC' → 'MPC', 'Lux KMS' → 'KMS', 'Hanzo MPC' → 'MPC'.
31 lines
801 B
YAML
31 lines
801 B
YAML
# MPC Secrets — sourced from KMS via KMSSecret CRD.
|
|
# NEVER store plaintext credentials in this file.
|
|
apiVersion: kms.hanzo.ai/v1alpha1
|
|
kind: KMSSecret
|
|
metadata:
|
|
name: mpc-secrets
|
|
namespace: lux-mpc
|
|
labels:
|
|
app.kubernetes.io/part-of: lux-mpc
|
|
spec:
|
|
kmsProjectSlug: lux-mpc
|
|
kmsEnvironmentSlug: prod
|
|
secretPath: /mpc
|
|
targetSecretName: mpc-secrets
|
|
machineIdentityRef:
|
|
name: mpc-kms-credentials
|
|
namespace: lux-mpc
|
|
secretKeys:
|
|
- kmsKey: postgres-password
|
|
secretKey: postgres-password
|
|
- kmsKey: jwt-secret
|
|
secretKey: jwt-secret
|
|
- kmsKey: database-url
|
|
secretKey: DATABASE_URL
|
|
- kmsKey: kv-url
|
|
secretKey: KV_URL
|
|
- kmsKey: zapdb-password
|
|
secretKey: ZAPDB_PASSWORD
|
|
- kmsKey: internal-api-key
|
|
secretKey: internal-api-key
|