# Template for the State Hub runtime Secret in the state-hub namespace.
# DO NOT commit this file with real credentials.
# Encrypt with: sops -e -i state-hub-env.sops.yaml
# Apply with:   kubectl apply -f <(sops -d state-hub-env.sops.yaml)
---
apiVersion: v1
kind: Secret
metadata:
  name: state-hub-env
  namespace: state-hub
  labels:
    app.kubernetes.io/name: state-hub
    app.kubernetes.io/component: runtime-env
    app.kubernetes.io/managed-by: manual
    railiance.io/layer: s5-app
type: Opaque
stringData:
  DATABASE_URL: postgresql+asyncpg://state_hub:REPLACE_WITH_URL_ENCODED_PASSWORD@state-hub-db-rw.databases.svc.cluster.local:5432/state_hub