# Example Secret for User Synchronization
#
# This secret contains the users.json file that will be used by the
# user-sync init container to create/update users in Barycenter.
#
# Usage:
#   1. Copy this file and customize the users list
#   2. Create the secret: kubectl apply -f user-sync-secret.yaml
#   3. Enable userSync in values.yaml:
#      userSync:
#        enabled: true
#        existingSecret: "barycenter-users"
#
# Security Notes:
#   - NEVER commit this file with real passwords to version control
#   - Consider using a secret management tool (Sealed Secrets, External Secrets, Vault, etc.)
#   - Passwords should be strong and unique per environment

apiVersion: v1
kind: Secret
metadata:
  name: barycenter-users
  namespace: default  # Change to your namespace
type: Opaque
stringData:
  users.json: |
    {
      "users": [
        {
          "username": "admin",
          "email": "admin@example.com",
          "password": "CHANGE-ME-IN-PRODUCTION",
          "enabled": true,
          "email_verified": true,
          "properties": {
            "role": "administrator",
            "display_name": "System Administrator"
          }
        },
        {
          "username": "alice",
          "email": "alice@example.com",
          "password": "alice-secure-password",
          "enabled": true,
          "email_verified": false,
          "properties": {
            "department": "Engineering",
            "role": "developer",
            "display_name": "Alice Johnson",
            "team": "Platform"
          }
        },
        {
          "username": "service-account",
          "email": "service@example.com",
          "password": "service-account-password",
          "enabled": true,
          "email_verified": true,
          "properties": {
            "role": "service_account",
            "display_name": "Application Service Account"
          }
        }
      ]
    }
