# Example only (do not commit real secrets).
apiVersion: v1
kind: Secret
metadata:
  name: knoe-auth-secrets
type: Opaque
stringData:
  # Strong random value (e.g. 32+ bytes). Used to HMAC-sign session cookies.
  sessionSecret: "CHANGE_ME"