apiVersion: v1
kind: Secret
metadata:
  name: knoe-kdc-secrets
type: Opaque
stringData:
  # Strong random values (do not commit real secrets)
  master_password: "CHANGE_ME"
  admin_password: "CHANGE_ME"
  # Shared secret used for cross-realm trust with myrddin.knoe.org PROLE.ORG realm
  trust_shared_password: "CHANGE_ME"
  # myrddin.knoe.org Samba AD admin password (for reciprocal trust principal creation)
  trust_password: "CHANGE_ME"
  # Password for guest@PROLE.LOCAL read-only principal (auto-generated by init_knoe_users.sh if absent)
  guest_password: "CHANGE_ME"