# Example Secret for oauth2-proxy on the prole.org k3s cluster.
#
# DO NOT apply this file directly — it contains placeholder values only.
#
# Where to obtain the real values:
#   client-id / client-secret:
#     Google Cloud Console → APIs & Services → Credentials
#     Project: prole.org
#     OAuth 2.0 Client ID: "Supabase Studio (db.prole.org)"
#     Authorized redirect URI: https://db.prole.org/oauth2/callback
#
#   cookie-secret:
#     Generate a random 32-byte base64url string:
#       openssl rand -base64 32 | tr -- '+/' '-_'
#
# To create the live secret:
#   kubectl create secret generic oauth2-proxy-prole-secret \
#     --namespace supabase \
#     --from-literal=client-id="<PASTE_FROM_GOOGLE_CONSOLE>" \
#     --from-literal=client-secret="<PASTE_FROM_GOOGLE_CONSOLE>" \
#     --from-literal=cookie-secret="$(openssl rand -base64 32 | tr -- '+/' '-_')"
#
apiVersion: v1
kind: Secret
metadata:
  name: oauth2-proxy-prole-secret
  namespace: supabase
  labels:
    app.kubernetes.io/managed-by: knoe-installer
type: Opaque
data:
  # base64("<placeholder>") — replace with real values before applying
  client-id: PHBsYWNlaG9sZGVyPg==
  client-secret: PHBsYWNlaG9sZGVyPg==
  cookie-secret: PHBsYWNlaG9sZGVyPg==