15 lines
735 B
YAML
15 lines
735 B
YAML
# Secrets for native ZAP replication — mainnet. DO NOT commit real values; fill from KMS
|
|
# (lux.id KMS: lux-infra, env mainnet, path /replicate).
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata: { name: replicate-s3-creds, namespace: lux-mainnet, labels: { app.kubernetes.io/part-of: lux-network, lux.network/network: mainnet } }
|
|
type: Opaque
|
|
stringData: { REPLICATE_S3_ACCESS_KEY: "REPLACE_FROM_KMS", REPLICATE_S3_SECRET_KEY: "REPLACE_FROM_KMS" }
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata: { name: replicate-age, namespace: lux-mainnet, labels: { app.kubernetes.io/part-of: lux-network, lux.network/network: mainnet } }
|
|
type: Opaque
|
|
stringData: { REPLICATE_AGE_IDENTITY: "REPLACE_FROM_KMS" } # PQ hybrid (ML-KEM-768+X25519), restore-only
|