15 lines
731 B
YAML
15 lines
731 B
YAML
# Secrets for native ZAP replication — devnet. DO NOT commit real values; fill from KMS
|
|
# (lux.id / KMS: lux-infra, env devnet, path /replicate).
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata: { name: replicate-s3-creds, namespace: lux-devnet, labels: { app.kubernetes.io/part-of: lux-network, lux.network/network: devnet } }
|
|
type: Opaque
|
|
stringData: { REPLICATE_S3_ACCESS_KEY: "REPLACE_FROM_KMS", REPLICATE_S3_SECRET_KEY: "REPLACE_FROM_KMS" }
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata: { name: replicate-age, namespace: lux-devnet, labels: { app.kubernetes.io/part-of: lux-network, lux.network/network: devnet } }
|
|
type: Opaque
|
|
stringData: { REPLICATE_AGE_IDENTITY: "REPLACE_FROM_KMS" } # PQ hybrid (ML-KEM-768+X25519), restore-only
|