# EN: Kubernetes Secrets Template for GoodGo Staging
# VI: Template Secrets Kubernetes cho GoodGo Staging
#
# DO NOT commit actual secrets to Git.
# Use this as a template to create secrets via kubectl.
#
# =============================================================================
# Option 1: Create secrets using kubectl (recommended for staging)
# =============================================================================
#
# kubectl create secret generic goodgo-secrets \
#   --from-literal=Jwt__Secret='your-staging-jwt-secret-min-32-chars' \
#   --from-literal=Jwt__RefreshSecret='your-staging-refresh-secret-min-32-chars' \
#   --from-literal=IdentityServer__IssuerUri='https://api.staging.goodgo.vn' \
#   --from-literal=IAM_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/iam_staging?sslmode=require' \
#   --from-literal=MERCHANT_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/merchant_staging?sslmode=require' \
#   --from-literal=ORDER_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/order_staging?sslmode=require' \
#   --from-literal=FNB_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/fnb_staging?sslmode=require' \
#   --from-literal=INVENTORY_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/inventory_staging?sslmode=require' \
#   --from-literal=WALLET_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/wallet_staging?sslmode=require' \
#   --from-literal=CATALOG_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/catalog_staging?sslmode=require' \
#   --from-literal=STORAGE_DATABASE_URL='postgresql://user:pass@ep-xxx.region.neon.tech/storage_staging?sslmode=require' \
#   --from-literal=Redis__Password='your-redis-password' \
#   --from-literal=ConnectionStrings__Redis='redis:6379,password=your-redis-password' \
#   --from-literal=Storage__MinIO__Endpoint='minio.staging.goodgo.vn' \
#   --from-literal=Storage__MinIO__AccessKey='your-minio-access-key' \
#   --from-literal=Storage__MinIO__SecretKey='your-minio-secret-key' \
#   --from-literal=RabbitMQ__Host='rabbitmq' \
#   --from-literal=RabbitMQ__Username='goodgo' \
#   --from-literal=RabbitMQ__Password='your-rabbitmq-password' \
#   -n staging
#
# =============================================================================
# Option 2: Use GitHub Secrets in CI/CD (for automated deployments)
# =============================================================================
#
# Required GitHub Secrets:
#   - KUBECONFIG_STAGING (base64 encoded kubeconfig)
#   - DOCKER_USERNAME / DOCKER_PASSWORD
#   - NEON_IAM_DATABASE_URL_STAGING
#   - NEON_MERCHANT_DATABASE_URL_STAGING
#   - NEON_ORDER_DATABASE_URL_STAGING
#   - NEON_FNB_DATABASE_URL_STAGING
#   - NEON_INVENTORY_DATABASE_URL_STAGING
#   - NEON_WALLET_DATABASE_URL_STAGING
#   - NEON_CATALOG_DATABASE_URL_STAGING
#   - NEON_STORAGE_DATABASE_URL_STAGING
#   - JWT_SECRET_STAGING
#   - JWT_REFRESH_SECRET_STAGING
#   - REDIS_PASSWORD_STAGING
#   - MINIO_ACCESS_KEY_STAGING
#   - MINIO_SECRET_KEY_STAGING
#
# =============================================================================
# Option 3: Use sealed-secrets or external-secrets operator (recommended for production)
# =============================================================================
