prole/deploy/opentofu/k3s/manifests/knoe/knoe-kdc-secrets.example.yaml
chrisfu fb7e8b7135 chore(k3s): rename prole-*.yaml manifests to knoe-* and align contents
Mirrors commit b355855 (auth-side rename). The kustomization at
deploy/opentofu/k3s/manifests/knoe/kustomization.yaml has been
referencing knoe-* names since the rebrand; kustomize was broken
on the k3s deploy mode until this lands.

Five git mv:
  prole-configmap.yaml           -> knoe-configmap.yaml
  prole-deployment.yaml          -> knoe-deployment.yaml
  prole-service.yaml             -> knoe-service.yaml
  prole-kdc-configmap.yaml       -> knoe-kdc-configmap.yaml
  prole-kdc-secrets.example.yaml -> knoe-kdc-secrets.example.yaml

Plus content sweep of knoe-kdc-configmap.yaml: replaced stale
PROLE.LOCAL/PROLE.ORG realm refs and PROLE_KDC_* env vars with
KNOE.DEV/KNOE_KDC_* to match the canonical GKE configmap.

Closes queue item #2 in docs/TODO.md (drift R5).

Co-authored-by: Junie <junie@jetbrains.com>
2026-05-02 02:58:03 -07:00

16 lines
574 B
YAML

apiVersion: v1
kind: Secret
metadata:
name: knoe-kdc-secrets
type: Opaque
stringData:
# Strong random values (do not commit real secrets)
master_password: "CHANGE_ME"
admin_password: "CHANGE_ME"
# Shared secret used for cross-realm trust with myrddin.knoe.org PROLE.ORG realm
trust_shared_password: "CHANGE_ME"
# myrddin.knoe.org Samba AD admin password (for reciprocal trust principal creation)
trust_password: "CHANGE_ME"
# Password for guest@PROLE.LOCAL read-only principal (auto-generated by init_knoe_users.sh if absent)
guest_password: "CHANGE_ME"