# Example only (do not commit real secrets).
#
# knoe-db-user — CNPG bootstrap secret for the knoe database owner.
# Referenced by spec.bootstrap.initdb.secret in knoe-db.yaml.
#
# IMPORTANT: username MUST match spec.bootstrap.initdb.owner (knoe).
# CNPG sets the password on the role named here; if this says "root"
# the knoe role gets no password and all knoe-auth DB connections fail.
#
# Create with knoe-db-passwwd.sh, which defaults DB_USER=knoe.
# If creating manually:
#   kubectl create secret generic knoe-db-user -n knoe-db \
#     --from-literal=username=knoe \
#     --from-literal=password=<strong-random-password>
apiVersion: v1
kind: Secret
metadata:
  name: knoe-db-user
  namespace: knoe-db
type: Opaque
stringData:
  username: knoe
  password: "CHANGE_ME"