# ---------------------------------------------------------------------------
# Registry pull secret used by the nginx Deployment (imagePullSecrets).
# Replace the credentials with the real registry values, or regenerate with:
#   kubectl create secret docker-registry harbor-secret \
#     --docker-server=imageregistry.gen-itech.com \
#     --docker-username=demo --docker-password=demo123 \
#     -n prod --dry-run=client -o yaml
# ---------------------------------------------------------------------------
apiVersion: v1
kind: Secret
metadata:
  name: harbor-secret
  namespace: prod
type: kubernetes.io/dockerconfigjson
stringData:
  .dockerconfigjson: |
    {"auths":{"imageregistry.gen-itech.com":{"username":"demo","password":"demo123","auth":"ZGVtbzpkZW1vMTIz"}}}

---
# ---------------------------------------------------------------------------
# Application secret for the nginx container (loaded via envFrom).
# ---------------------------------------------------------------------------
apiVersion: v1
kind: Secret
metadata:
  name: nginx-secret-prod
  namespace: prod
type: Opaque
stringData:
  APP_ENV: prod
  APP_SECRET: change-me-prod