# Sensitive configuration — JWT_SECRET is replaced by setup-k8s.sh at deploy time.
# Cosmos and Azurite keys are well-known emulator keys (public, safe to commit).
apiVersion: v1
kind: Secret
metadata:
  name: bytelyst-secrets
  namespace: bytelyst-platform
  labels:
    app.kubernetes.io/part-of: bytelyst
type: Opaque
stringData:
  JWT_SECRET: "REPLACE_ME_AT_DEPLOY_TIME"
  AZURE_BLOB_ACCOUNT_KEY: "REPLACE_ME_AT_DEPLOY_TIME"
  AZURE_BLOB_CONNECTION_STRING: "REPLACE_ME_AT_DEPLOY_TIME"
