# Copy to secret.yaml and fill in real values, then:
#   kubectl apply -f k8s/secret.yaml
#
# NEVER commit the real secret.yaml to git.
apiVersion: v1
kind: Secret
metadata:
  name: orchestrator-secrets
  namespace: sdlc-orchestrator
type: Opaque
stringData:
  CODER_URL: "https://coder.samson.media"
  CODER_TOKEN: "<coder-session-token>"
  CODER_TEMPLATE_ID: "<coder-template-id>"
  GITEA_DEV_TOKEN: "<gitea-claude-dev-token>"
  GITEA_REVIEW_TOKEN: "<gitea-claude-review-token>"
  ANTHROPIC_API_KEY: "<anthropic-api-key>"
  GITEA_URL: "https://gitea.samson.media"
  BOT_DEV_USERNAME: "claude-dev"
  BOT_REVIEW_USERNAME: "claude-review"
  # Comma-separated: org/repo=clone_url
  MAINTENANCE_REPOS: "claude/babble=https://gitea.samson.media/claude/babble.git"