# =========================================================================
# API 認証情報 / 汎用 Secret の設定例
# -------------------------------------------------------------------------
#   helm upgrade --install secrets ./secret-manager -n secret-manager \
#     -f examples/api-and-generic.values.yaml \
#     --set api.credentials.stripe.data.STRIPE_SECRET_KEY="$STRIPE_SECRET_KEY"
# =========================================================================

distribution:
  namespaces:
    - default
    - web
  includeReleaseNamespace: true

api:
  credentials:

    stripe:
      enabled: true
      data:
        STRIPE_SECRET_KEY: "REPLACE_VIA_--set"
        STRIPE_WEBHOOK_SECRET: "REPLACE_VIA_--set"

    openai:
      enabled: true
      data:
        OPENAI_API_KEY: "REPLACE_VIA_--set"
        OPENAI_ORG_ID: "org-xxxxxxxx"
      # このキーだけ AI ワークロード用ネームスペースに限定配布
      namespacesOverride:
        - ml
        - web

    slack:
      enabled: true
      data:
        SLACK_BOT_TOKEN: "REPLACE_VIA_--set"
        SLACK_SIGNING_SECRET: "REPLACE_VIA_--set"

generic:
  secrets:

    # プライベートコンテナレジストリの pull secret
    private-registry:
      enabled: true
      type: kubernetes.io/dockerconfigjson
      data:
        ".dockerconfigjson": "REPLACE_VIA_--set-file"

    # Basic 認証（Ingress の auth-secret などで参照）
    basic-auth:
      enabled: false
      type: kubernetes.io/basic-auth
      data:
        username: "admin"
        password: "REPLACE_VIA_--set"